Yusuf Shah, an 18-year-old from Ilford in east London, has been jailed for four years and two months for five terrorism offences, including advising Al-Qaeda supporters on hard-to-trace cryptocurrency donations and writing a cybersecurity guide for the banned Tehreek-e-Taliban Pakistan (TTP). Kingston Crown Court passed the sentence on October 20 and also imposed a 10-year terrorism notification order.
Shah was just 16 at the time of the offences. The Metropolitan Police confirmed the outcome in a statement on October 21, saying the case had been investigated by Counter Terrorism Policing London. Court records show he was sentenced by Judge Lodder KC, and that his youth and immaturity were treated as mitigating factors.
An investigation that began at Heathrow
The investigation began in January 2024, when Shah, then 16, was stopped at Heathrow Airport under Schedule 7 of the Terrorism Act 2000. Officers examined his mobile phone, and in April 2024 they searched his home and seized a computer and USB devices for forensic analysis.
According to sources, investigators found that Shah had been active in online discussions since 2021, when he was about 13, and by late 2022 had begun voicing support for Al-Qaeda and TTP-linked activities. Police said analysis of his phone and computer showed he had backed these groups on social media and, despite his age, offered them technical advice on cybersecurity and on avoiding detection when making cryptocurrency payments.
Police said data from his phone also showed he had accessed an online Al-Qaeda magazine containing practical information on carrying out various acts of terrorism. He had downloaded documents with instructions on making explosives and explosive devices, as well as material on using different types of weapons.
Telegram groups, crypto donations and a 'guide'
Investigators said Shah took part in Telegram chat groups that supported terrorist organisations and drew members from around the world. According to police, he presented himself as someone who shared their violent ideology and could help them with technical computer knowledge.
Police said he advised group members to use a specific, untraceable cryptocurrency to donate to Al-Qaeda. In April 2024, a donation of $1,376.51 was made to a QR code using the security methods he had recommended. Police said it was the only donation ever made through that QR code.
The second strand of the case concerned the TTP. In late March 2024, a person contacted Shah on Telegram, saying a senior TTP official had asked him to get a cybersecurity guide produced for the group. Police said Shah quickly wrote a document titled "A Guide on Cybersecurity", with detailed information and instructions on cybersecurity and the use of cryptocurrency, and sent it so the group could conduct its activities in secret. The police statement does not establish who the alleged senior official was or how widely the document was used.
Five convictions and a warning to parents
After a five-week trial at Kingston Crown Court, Shah was convicted of five offences under the Terrorism Act 2000. Under Section 17, he was found guilty of becoming concerned in an arrangement, between March 26 and April 5, 2024, through which money or property was or would be made available for terrorism. Under Section 6, he was convicted of providing instruction or training between March 30 and April 4, 2024, knowing it was intended for use in preparing or assisting acts of terrorism. He was also convicted of three counts of collecting terrorist material under Section 58.
Commander Helen Flanagan, head of Counter Terrorism Policing London, said the case should act as another warning to parents and carers to be aware of what their children are doing online. She said the investigation showed Shah was being drawn into extremist and terrorist material and ideologies when he was only 13 or 14, reflecting a growing trend of young people being radicalised online.
"Even at the age of just 16, Shah had enough knowledge of the online world to be able to provide practical advice to terrorist groups on how to make anonymous cryptocurrency payments," she said. She urged parents to talk to their children, to be inquisitive about what they do online and to seek the help available if they have concerns.
Shah's offences centred on online communication, financial arrangements and technical help rather than direct involvement in attacks. According to sources, the case shows how people far from conflict zones can give remote support to groups operating in other countries, raising questions for security agencies about online recruitment, youth radicalisation and the misuse of digital finance. Shah will now serve his sentence of four years and two months, and the 10-year notification order will also apply to him.