The Mall of America attack plot was disrupted Tuesday when federal agents arrested an 18-year-old Minnesota man in Richfield during a sting to purchase an assault rifle, according to a federal complaint unsealed Wednesday.
At a news conference, Minnesota U.S. Attorney Daniel Rosen and FBI Minneapolis Special Agent in Charge Christopher Dotson said the suspect, identified as Sheikhdoon Abdullahi Mohamud of the Twin Cities, is a U.S. citizen who allegedly discussed plans to carry out a mass-casualty attack later this month. Rosen credited agents for intervening before any violence could occur, noting the suspect had expressed an intent to kill dozens of people.
Mall of America attack plot detailed in complaint
Court filings say a confidential source exchanged hundreds of messages with Mohamud from December 2024 through this week on social media and encrypted apps. In those communications, Mohamud allegedly said he wanted to travel to Somalia to join al-Shabaab or, failing that, commit an attack in Minnesota.
Dotson said the messages described an embrace of ideologically motivated violence and a desire for martyrdom. According to the complaint, the FBI reached out to Mohamud’s parents in May 2025 about concerns over radicalization, but officials said the parents did not cooperate.
By July, Mohamud allegedly told the source he lacked money to travel overseas and would target the United States instead, adding he was motivated by religious ideology. Investigators say he named potential targets including the Mall of America in Bloomington and Valleyfair in Shakopee, and considered buying two pistols online first. He allegedly said he wanted to attack the mall because of antisemitic beliefs and cited last year’s deadly attack at Bondi Beach in Sydney as inspiration.
Prosecutors say he later proposed striking during the Hmong Arts Celebration on Oct. 24, believing it would draw large crowds. The affidavit adds that Mohamud watched video related to the 2016 Pulse nightclub attack in Orlando and wrote that he could carry out a similar assault, stating, “I just walk in and shoot,” according to the complaint. Investigators say he also sent a Discord video pledging allegiance to ISIS.
Arrest at Richfield park and firearms evidence
Rosen said Mohamud was taken into custody Tuesday in the parking lot of a Richfield park during a meeting arranged with the source. The affidavit states he had just exited an undercover vehicle carrying a Norinco AK-47-style Mac-90 Sporter rifle, four magazines and about 200 rounds of 7.62×39 ammunition when agents arrested him. A Richfield resident who was at a nearby dog park described a large group of agents rushing in to make the arrest.
Mohamud is charged with knowingly receiving a firearm and ammunition with reason to believe they would be used to commit a felony and a federal crime of terrorism, including providing or conspiring to provide material support to a designated foreign terrorist organization. He made his first court appearance Wednesday.
Security posture at Mall of America
Simon Osamoh, former head of counterterrorism for the Mall of America and now CEO of Kingswood Security Consulting, said the site has long been a target because of its size and location near transit and the airport. He noted strong ties with law enforcement and multiple security layers, including facial recognition, K9 units and undercover officers.
He said he was concerned but not surprised by the alleged plot, referencing prior Minnesota cases involving attempts to join foreign terror groups. The mall issued a statement thanking the FBI and partner agencies for their vigilance and investigative work, adding that safety and security for visitors and workers remain the highest priority.
Officials urged families to take warnings seriously if law enforcement raises concerns about possible radicalization. Rosen said parents should heed such alerts to help prevent violence, echoing broader debates over governments’ use of surveillance tools in public spaces.
The Mall of America remains open, and officials stressed there is no ongoing threat connected to this case.
