The Conspiratory
Case File No. 9149-X● Open File

Sri Lanka's 2019 Easter Sunday bombings were a 'grand plot' enabled or orchestrated by state intelligence to help Gotabaya Rajapaksa win the presidency

Where the evidence lands: Unproven
That the April 2019 Easter Sunday bombings were not simply an act of Islamist terrorism compounded by official negligence, but a 'grand political plot' in which elements of Sri Lanka's intelligence or security apparatus knowingly enabled, protected, or helped orchestrate the attackers, so that the resulting terror would deliver the November 2019 presidential election to Gotabaya Rajapaksa as a strongman 'national security' candidate.
First circulated
2019
Era
2010s
Sources
9

Believed by: Pressed publicly by Cardinal Malcolm Ranjith and Sri Lanka's Catholic Church; amplified worldwide by a 2023 UK Channel 4 documentary

The full story

An atrocity, and the question that outlived it

On the morning of Easter Sunday, 21 April 2019, worshippers filled St Anthony's Shrine in Colombo, St Sebastian's in Negombo, and Zion Church in Batticaloa. Within minutes, suicide bombers detonated inside all three, and inside three luxury hotels in the capital where guests were at breakfast. Roughly 269 people were killed, among them dozens of children and many foreign visitors, and hundreds more were wounded. It was the deadliest day of violence Sri Lanka had seen since the end of its civil war.

The immediate facts settled quickly and are not in dispute. The attackers belonged to a local extremist network, the National Thowheeth Jama'ath, led by a radical preacher named Zahran Hashim, who died in the bombing. The Islamic State claimed the attack and put Hashim in a video. And, most damningly, Sri Lanka's government had been warned. Indian intelligence had passed specific alerts weeks in advance, naming the group; the warnings travelled up the chain and were not acted upon.

Out of that record a second, larger question grew, and it has never gone away. Was the failure to stop the attack only negligence, or did some part of the state know and let it happen, even help it along, so that the terror would sweep a strongman into power? That is the rated claim here, and it is why this file is marked unproven rather than debunked or confirmed. The failure is documented. The plot is alleged.

The case for it

The documented record, and the case for a plot

Take the suspicion in its strongest form, because it is not built on nothing. Start with what official bodies have themselves found. A Presidential Commission of Inquiry, reporting in 2021, recommended that the attorney general consider criminal proceedings against the sitting president at the time, Maithripala Sirisena, and found the intelligence chief, Nilantha Jayawardena, criminally liable for failing to act on the warnings and for “diluting” their weight. A parliamentary committee had already faulted the same leadership. These are not fringe accusations; they are the conclusions of the state's own inquiries.

Layer the politics on top. Three days after the bombings, Gotabaya Rajapaksa, a former wartime defence secretary, declared his candidacy for the presidency and campaigned as the man who could keep the country safe. Seven months later he won. To critics, the attack manufactured precisely the fear his platform was built to answer, and a sequence that tidy is hard to wave away as coincidence.

Then came the testimony. In September 2023, Britain's Channel 4 aired a “Dispatches” documentary in which a whistleblower, Hanzeer Azad Maulana, said he had personally arranged a 2018 meeting between the attackers' network and a senior military-intelligence figure, to engineer insecurity that would benefit the Rajapaksas. Maulana, who fled the country, reportedly gave his account to European intelligence services and the United Nations. And the moral weight behind the demand for answers is unusual: Cardinal Malcolm Ranjith, the Archbishop of Colombo who buried his own parishioners, has for years called the bombing a “grand political plot,” pressed for an international inquiry, and been publicly backed by Pope Francis in asking Sri Lanka to reveal the truth. When the accusers include the country's senior Catholic churchman and a mainstream broadcaster, the claim cannot be dismissed as noise.

What the evidence shows

Why orchestration is not established

For all that, the leap from documented failure to deliberate orchestration is exactly that: a leap, and the evidence has not yet been made to carry it. Begin with the perpetrators. They were not hollow figures conjured by a spy agency; they were members of a real jihadist network with a radical preacher at its head, tied to the Islamic State, which claimed the attack independently. Officials have said the plot was in preparation from around 2017. A committed ideological cell that was plotting mass murder on its own account is not obviously anyone's puppet.

The failure-to-act, meanwhile, has a mundane and heavily documented explanation that does not require malice. The president and prime minister of the day were locked in a bitter feud; the National Security Council had effectively stopped convening; the warnings were passed down but downgraded and mishandled by officials who did not treat the threat as urgent. Catastrophic dysfunction can produce the same outcome as a plot, an attack that should have been stopped and was not, without anyone having willed it. The commissions found that dysfunction; they did not find intent.

The strongest single piece of the plot case, the whistleblower's account of a meeting between intelligence and the bombers, remains one insider's testimony, uncorroborated in public by hard evidence, from a man with a contested paramilitary past and reasons of his own. The officer he named produced documents asserting he was abroad on the relevant dates. That some extremists had earlier come into contact with intelligence is real, but monitoring and running informants inside such groups is ordinary tradecraft; contact is what surveillance looks like, and it is not the same as facilitation. Crucially, no court has ruled that orchestration occurred. Even the 2026 arrest of a former intelligence chief rests on allegations, including failure to act, that he denies and that remain to be tested.

What genuinely remains unresolved

This is not a case where a skeptic can honestly say the questions have been answered. Several hard ones are still open, and they are the reason the file is not simply closed.

Why were warnings this specific ignored at every level? The feud and the dysfunction are documented, but they sit uneasily against the sheer precision of what was known in advance, and no inquiry has fully resolved whether inaction anywhere crossed from failure into something worse. Did the alleged pre-attack meeting between an intelligence figure and the bombers actually take place? The whole orchestration claim turns on it, and it is asserted by one witness and denied by the accused, with no adjudicated finding either way. What was the true character of the state's prior contact with the extremist milieu, ordinary surveillance, or something that shaded into enabling? And will the investigations reopened after the 2024 change of government, now reaching into the intelligence architecture itself, surface evidence of intent, or confirm only negligence?

Until those are answered by a process that reaches a conclusion, the gap between what is documented and what is alleged stays exactly where it is: wide, and unfilled.

Why people believe

Why the plot reading takes hold

It is worth naming why this particular suspicion is so durable, and why it is not the usual conspiracy reflex. The negligence is so complete that innocent explanation strains under it: when alerts this exact are waved through at every level, the mind reaches for intent, because pure incompetence can feel less plausible than design, even when the record documents the incompetence in detail. The timing sharpens the pull. A defence-chief candidate announced his run three days after the carnage, campaigned on safety, and won; a sequence that clean invites the reading that the fear was useful rather than incidental.

Two further things keep the theory alive where an ordinary rumour would fade. The messengers are credible and will not stop: a cardinal who buried the dead, a mainstream broadcaster, a pope. And the state has behaved in ways that feed distrust, with accusations of shielded officers, shelved reports, and stalled justice across successive governments, so that every delay reads to grieving families as proof of a cover-up. Set against a country with a real history of security-state impunity, “they let it happen for power” does not feel like a fantasy; it feels like a pattern. None of that makes the plot true. It explains why serious people refuse to let the question drop, and why they are right not to.

Where the evidence lands

On the rated claim, that elements of the Sri Lankan state deliberately enabled or orchestrated the Easter bombings for political gain, the verdict is unproven. That is not a polite way of saying false, and it is not a hedge. It is the honest description of a case in which one half of the story is documented and the other half is not. The attack was carried out by a real Islamist group. The warnings were real and were ignored. Official commissions have found grave negligence and named names. Those things are established.

The further step, that the failure was deliberate, that someone knew and let it run, or helped it along, to install a president, is a serious allegation raised by serious people and backed by testimony that has been treated as worth investigating. It has not been proven, and no court has ruled on it. It has also not been cleanly disproven; the questions it raises are real and remain open. We report it as what it is: a documented atrocity, a documented failure, and, laid over them, an unresolved and grave accusation that the people who lost the most are still, years on, demanding be answered.

Advertisement
Open questions

What's still unexplained

  • Why were repeated, specific foreign warnings not acted upon at any level of the security establishment? Dysfunction and a leadership feud are documented, but whether inaction anywhere shaded from failure into deliberate permission has never been resolved to a conclusion.
  • Did the alleged pre-attack meeting between an intelligence figure and the bombers' network actually happen? The whistleblower's account drives the orchestration claim; it is uncorroborated in public and directly disputed, and no adjudicated finding exists either way.
  • What was the true nature of any prior contact between Sri Lankan intelligence and figures in the extremist network? Monitoring and informant relationships are ordinary; whether any relationship here crossed into enabling is the crux the current prosecution is meant to test.
  • Will the investigations reopened after 2024, including the arrest of a former intelligence chief, produce evidence of orchestration, or confirm only negligence? Until a court rules, the gap between documented failure and alleged plot stays open.

Point by point

The claim: Specific warnings were ignored, which only makes sense if someone wanted the attack to happen.

What the record shows: The warnings were real and detailed: Indian intelligence flagged the threat weeks ahead, naming the group. But the official record offers a documented non-sinister explanation for the inaction. The Presidential Commission and a parliamentary committee described a state paralysed by a personal feud between President Sirisena and Prime Minister Ranil Wickremesinghe, a National Security Council that had effectively stopped meeting, and officials who downgraded the threat. Grave negligence and dysfunction are established; that intent lay behind the inaction is inferred, not shown.

The claim: Gotabaya Rajapaksa benefited from the attacks, which proves his camp engineered them.

What the record shows: He did benefit. He declared his candidacy three days later, ran as the security strongman, and won. But benefiting from an event is not the same as causing it, and 'who gained' is a lead to investigate, not a finding. Analysts note the Rajapaksa camp's political revival was already underway before Easter. The cui bono logic is genuinely suggestive and is why serious people keep asking questions; on its own it does not establish that anyone in his orbit facilitated the bombing.

The claim: A whistleblower says a state intelligence officer met the bombers in advance to hatch the plot.

What the record shows: In the 2023 Channel 4 film, Hanzeer Azad Maulana, a former paramilitary media and finance operative who fled Sri Lanka, says he brokered a 2018 meeting between the attackers' network and a senior military-intelligence figure. He reportedly gave testimony to European intelligence services and the UN. The account is serious enough to have triggered official probes, but it is a single insider's testimony, uncorroborated in public by hard evidence, from a witness with his own contested history. The officer he named produced documents asserting he was out of the country on the relevant dates.

The claim: The attackers had prior contact with the intelligence services, so the state was steering them.

What the record shows: Some figures in the local extremist milieu had indeed come to the attention of, or had contact with, Sri Lankan intelligence before 2019, which is part of why the failure-to-act is so damning. But intelligence agencies routinely monitor, penetrate, and cultivate informants inside extremist groups; contact is what surveillance looks like. Whether any such relationship crossed from watching into enabling is precisely the open question the current investigation is meant to resolve, and has not.

The claim: This was a real Islamist suicide attack by committed jihadists, which argues against a state plot.

What the record shows: The perpetrators were members of a genuine local jihadist network, the National Thowheeth Jama'ath, led by the radical preacher Zahran Hashim, who died in the attack; the Islamic State claimed it and featured him in a video. Officials have said the plot was in preparation since around 2017. A committed, ideologically driven cell with international jihadist ties is not obviously a state creation. The plot theory does not require the bombers to be fake, only that some official knew and let it run, which is harder to prove and remains unproven.

Timeline

  1. 2019-04-04Indian intelligence passes Sri Lanka a specific warning of imminent attacks on churches, naming the local group and its leader. Further alerts follow in the days before Easter. The warnings are documented but not acted upon at the top of the security establishment.
  2. 2019-04-21On Easter Sunday, near-simultaneous suicide bombings tear through three churches and three luxury hotels, killing roughly 269 people, among them dozens of children and foreign nationals, and wounding hundreds more. The Islamic State claims the attack; investigators tie it to the local National Thowheeth Jama'ath and its leader, Zahran Hashim.
  3. 2019-04-24Three days after the bombings, Gotabaya Rajapaksa, a former wartime defence secretary, announces he will seek the presidency, campaigning heavily on national security.
  4. 2019-10A parliamentary select committee faults President Maithripala Sirisena, the intelligence chief, and other officials for the failure to act on the warnings, describing a security apparatus paralysed by a feud between the president and prime minister.
  5. 2019-11Gotabaya Rajapaksa wins the presidential election, campaigning as the candidate who can keep the country safe. Critics later argue the attacks manufactured exactly the fear his platform answered.
  6. 2021-02The Presidential Commission of Inquiry reports, recommending the attorney general consider criminal proceedings against former president Sirisena and finding intelligence chief Nilantha Jayawardena criminally liable for failing to act on and 'diluting' the warnings. The commission documents grave negligence; it does not establish a deliberate plot.
  7. 2022Cardinal Malcolm Ranjith, Archbishop of Colombo, escalates his public demand for the full truth, calls the attack a 'grand political plot,' and seeks an international or UN-backed inquiry. Pope Francis publicly urges Sri Lanka to reveal who was behind it.
  8. 2023-09Britain's Channel 4 airs a 'Dispatches' documentary in which a whistleblower alleges he arranged a 2018 meeting between the bombers' network and a senior military-intelligence figure to engineer insecurity and boost Rajapaksa. The government opens a new committee to examine the claims; Rajapaksa calls them a 'tissue of lies.'
  9. 2024–2026A new government under President Anura Kumara Dissanayake reinvigorates the investigation. The former intelligence chief Suresh Salley is dismissed, then arrested in early 2026 on conspiracy and aiding-and-abetting allegations he denies; Rajapaksa is treated as a person of interest. No orchestration verdict has been reached.
Where the evidence lands

Unproven. The attack itself was carried out by a real local Islamist group, and the intelligence failures around it are documented by an official commission. But the further claim, that elements of the state deliberately enabled or orchestrated the bombings for political gain, is a serious, still-open allegation raised by credible figures including the Archbishop of Colombo. No investigation has established it as fact, and no court has ruled on it, so it sits as unproven, neither confirmed nor cleanly ruled out.

Reviewed by The Conspiratory Editors · Last reviewed July 24, 2026 · How we rate

Sources

  1. 1.Sri Lanka to probe allegation of intelligence complicity in 2019 bombings, Al Jazeera (2023)
  2. 2.Channel 4 Documentary Reveals Sri Lanka's Political Divisions, The Diplomat (2023)
  3. 3.Sri Lanka's Easter Blasts Probe Enters the Intelligence Architecture, The Diplomat (2026)
  4. 4.Probe finds Sri Lanka ex-president should face charges, Al Jazeera (2021)
  5. 5.Sri Lanka spy chief, president blamed for Easter attack lapses, Al Jazeera (2019)
  6. 6.Sri Lanka cardinal seeks UN probe into 2019 Easter bombings, Al Jazeera (2022)
  7. 7.Sri Lanka's former intelligence chief arrested over 2019 Easter attacks, Al Jazeera (2026)
  8. 8.Islamic State's Easter Sunday Attacks in Sri Lanka: Assessing the Government's Response Two Years On, The Jamestown Foundation (2021)
  9. 9.Sri Lanka's president will appoint a committee to probe claims of complicity in 2019 Easter Sunday bombings, Associated Press (via PBS NewsHour) (2023)

Help us investigate

This is a living case file. If you spot an error or know evidence we missed, tell us, and weigh in on where you land.

Where do you land?

Cast your read on this one.

What did we miss?

Spotted an error or know a source worth chasing? Every note is read by a human.

Comments

Add your take. Comments are read and approved by a human before they appear, so keep it on topic and civil. Please do not accuse named, living people of crimes.

Saved on this device so you keep the same name next time. No account needed.

Related case files

Advertisement
Written by The Conspiratory Editors · Published July 24, 2026. The Conspiratory lays out the claim, the case on every side, and the sources, so you can weigh it yourself. Spotted a stronger source? Corrections are welcome.