Encrypted Chats, Seized Phones & A Coup Investigation: Reconstructing The Digital Trail Behind The Alleged Plot

By NJORIGE LYNUS
Inside the Digital Trail of Nigeria’s Alleged Coup Plot: How WhatsApp, Zangi Became Investigative Leads
The Communications Trail Behind the Alleged Plot
IN investigations involving an alleged attempt to overthrow a government, communication can become as important as the physical meetings, movements and financial transactions of the people under investigation.
That appears to have been the case in the Nigerian military’s investigation into an alleged coup plot that authorities said was uncovered in September last year.
According to investigation records cited in the case, some of the individuals whose names surfaced in the inquiry allegedly communicated through WhatsApp, while others also used Zangi, a less familiar messaging platform whose principal selling point is privacy-focused communication.
The use of the two platforms has assumed significance because investigators have sought to reconstruct relationships among the suspects, establish the nature of their interactions and determine what roles individual persons allegedly played in the purported plot.
But the existence of encrypted or private communications does not, by itself, establish criminal conduct.
The defendants have denied wrongdoing, while several have challenged the admissibility of statements obtained during the investigation. The allegations remain matters for determination by the courts.
Why Zangi Became Important
One of the clearest accounts of how Zangi allegedly entered the investigation came from retired Navy Captain Erasmus Victor, who is facing charges alongside five other persons.
Victor’s account was contained in an extrajudicial statement he reportedly made during interrogation by military investigators.
According to the statement, Mohammed Ma’aji, a Nigerian Army colonel whom investigators identified as a suspected mastermind, introduced him to Zangi because it was considered more secure than conventional telephone communication.
Victor said he subsequently downloaded the application to communicate with Ma’aji and Lieutenant Colonel Shamsuddeen Bappah, a serving Nigerian Army Signals Corps officer whose name later became prominent in the investigation.
The account is significant because it suggests that, at least in the circumstances described by Victor, the application was not selected merely because it was a popular messaging platform. It was allegedly introduced specifically for communication among individuals investigators considered relevant to the suspected plot.
From Ordinary Calls to Privacy-Focused Communication
WhatsApp is among the world’s most widely used messaging applications and has become a routine communication tool for individuals, businesses and organisations.
Zangi occupies a different position in the messaging market.
Its developers promote privacy as a central feature of the application. The company says it does not store users’ communication histories on its servers and that communications are protected with end-to-end encryption.
The distinction became relevant to the investigation because investigators were not merely looking for evidence of communication; they were attempting to understand how people allegedly connected with one another and what conversations might reveal about the suspected plan.
The platform therefore became part of the broader evidentiary trail.
What the Investigation Records Reveal
Victor’s account placed him at the intersection of the alleged political and financial dimensions of the purported plot.
He told investigators that he had allegedly been asked to help identify financiers who could support the plan.
Among the people he said he was expected to approach was Nyesom Wike, the former governor of Rivers State and incumbent Minister of the Federal Capital Territory.
Victor said he did not contact the individuals he was allegedly expected to approach and maintained that he did not take the alleged coup proposal seriously.
He nevertheless told investigators that he regretted not reporting what he had allegedly heard to the authorities.
These claims are contained in investigation materials and remain allegations rather than established facts.
The Phone May Matter More Than the Server
The Zangi episode also illustrates a wider issue in digital investigations.
A messaging service can be designed to minimise the amount of communication data retained on its central infrastructure. That does not necessarily mean that communications leave no evidence.
Where communication records are stored locally on users’ devices, the devices themselves can become important sources of evidence.
Investigators may therefore examine phones, computers and other electronic devices recovered from suspects rather than relying solely on a messaging company’s servers.
The relevance of a particular device can increase when investigators can associate its contents with other evidence, including contacts, photographs, files, call records, financial transactions, location information and communications with other people under investigation.
Encryption Does Not Mean Evidence-Free Communication
The word “encrypted” can create the impression that a communication is beyond the reach of investigators.
That is an oversimplification.
End-to-end encryption is designed primarily to prevent unauthorised parties from accessing the content of communications while they are transmitted between users.
It does not necessarily remove evidence already present on the devices of the people communicating.
Nor does encryption automatically eliminate the broader circumstances surrounding a communication.
Investigators attempting to reconstruct a suspected conspiracy may therefore be interested not only in the precise words exchanged but also in patterns of communication: who contacted whom, when communications occurred, what documents were exchanged, whether meetings subsequently took place and whether financial or logistical activity followed.
The Evidence Is Larger Than the Messages
The proof of evidence filed by the prosecution in proceedings before the court martial and the Federal High Court in Abuja reportedly contains substantial quantities of printed messages allegedly exchanged among suspects.
Such messages could potentially be important to the prosecution’s attempt to establish relationships and reconstruct events.
But electronic messages rarely exist in isolation in a serious investigation.
A conversation can acquire greater evidentiary significance when it corresponds with other independently obtained information.
For example, investigators could attempt to compare communications with movement records, financial transactions, meetings, witness testimony, documents or other electronic evidence.
Conversely, an apparently suspicious message could be interpreted differently when considered in its complete context.
That is why the evidentiary value of a communication ultimately depends not merely on its existence but on authenticity, context, relevance and admissibility.
The Legal Battle Over the Investigation
Victor and the other defendants have denied wrongdoing.
They have also challenged the admissibility of statements allegedly obtained during the investigation, arguing that the statements were improperly obtained.
The prosecution has rejected those allegations and urged the court to admit the statements as exhibits.
The dispute is important because investigation records do not automatically become proof of guilt simply because they have been compiled by investigators.
The prosecution must establish the reliability and admissibility of its evidence, while the defendants retain the right to challenge the evidence presented against them.
Reconstructing a Suspected Conspiracy
The central question facing investigators is therefore broader than which messaging application was used.
It is whether the collection of communications, statements, documents and other evidence can establish that the alleged participants were involved in a coordinated plan to unlawfully overthrow the government.
In conspiracy investigations, relationships can be as important as individual actions.
Investigators may seek to determine who communicated with whom, who allegedly proposed particular actions, who allegedly sought money or logistical support and whether those communications were followed by concrete steps.
That is where digital evidence becomes potentially significant.
A New Dimension of Counter-Coup Investigations
The alleged coup investigation demonstrates how modern security investigations increasingly extend into the digital sphere.
The telephone is no longer merely a device for making calls. It can contain a person’s communications, contacts, photographs, documents, financial information and digital history.
For investigators, that creates opportunities as well as challenges.
For suspects, the same reality raises questions about privacy, due process and the limits of state access to personal electronic information.
The balance between national security and individual rights becomes particularly important when allegations involve treason or attempts to overthrow a government.
Evidence, Not Encryption, Will Determine the Case
The choice of WhatsApp or Zangi may provide investigators with useful leads, but the use of a privacy-oriented platform cannot itself establish participation in a coup.
Nor does the presence of a message automatically prove that its sender or recipient committed the offence alleged by prosecutors.
Ultimately, the courts will have to determine the evidentiary value of the communications, statements and other materials placed before them.
Until then, the digital trail remains precisely that: a trail that investigators say helped them reconstruct an alleged conspiracy, but whose ultimate meaning must be tested through evidence and due process.
The significance of the case may extend beyond the individuals charged. It offers a revealing window into how Nigeria’s security agencies are increasingly investigating alleged conspiracies in an era where encrypted applications, personal devices and digital communication networks can become central components of a national-security investigation.
-CLICK HERE TO READ THE PREVIOUSLY 14TH PART OF THIS SERIES





