Alleged White House shooter worked with U.S. forces and CIA in Afghanistan, prompting questions about asylum vetting
Rahmanullah Lakanwal, 29, an Afghan national who reportedly worked with U.S. Special Forces and the CIA in Afghanistan, is accused of shooting two National Guard members near the White House on Nov. 26, 2025, prompting an FBI terrorism probe.
Key takeaways
- Suspect identity: Rahmanullah Lakanwal, 29, born in Kabul in 1996, is the person of interest in the Nov. 26 shooting.
- Alleged U.S. ties: Reports say he worked with U.S. Special Forces and the CIA-backed Kandahar Strike Force.
- Asylum approved: Lakanwal arrived in 2021, applied for asylum in Dec. 2024 and was approved by USCIS newsroom in April 2025 after interagency vetting.
- Investigation: The FBI is treating the case as a potential act of international terrorism while reviewing vetting and possible extremist contacts.
Suspect’s background and alleged U.S. government ties
According to law enforcement sources and public comments by CIA leadership, Rahmanullah Lakanwal served as a logistics coordinator for a U.S. contractor during the final years of U.S. operations in Afghanistan. Sources say he assisted American special operations units on supply runs in Helmand Province and later served with the CIA-backed Kandahar Strike Force, operating out of what was known as Firebase GECKO alongside U.S. special forces.
For general agency information see the CIA press center. Investigators cite multiple law enforcement officials briefed on the inquiry as sources for these claims.
Employment history and humanitarian work
Lakanwal’s now-deleted LinkedIn profile listed humanitarian roles, including a position as Field Coordinator for the International Rescue Committee in Khost Province. The IRC has told investigators it is cooperating with a background review. Contract affiliations and the profile entries are central to questions about how an Afghan national with such ties moved through U.S. immigration channels.
Immigration timeline and the Afghan asylum process
Lakanwal arrived in the United States during the 2021 Afghan evacuations. He filed for asylum in December 2024, citing fear of Taliban reprisals because of his work with U.S. forces and contractors. U.S. Citizenship and Immigration Services approved his claim in April 2025 after biometric checks, interviews and interagency reviews as part of the established vetting process.
Officials emphasize layered screening — including biometrics and interagency review — yet critics say the speed and scale of the evacuations strained vetting resources. Federal partners are reviewing whether any steps were missed or whether new indicators should change procedures. See the USCIS asylum information for context and the FBI news for related federal statements.
Behavior, social media and local reports
Neighbors in Alexandria, Virginia, described Lakanwal as increasingly withdrawn in months before the shooting. Authorities say he had no prior U.S. criminal record. Investigators recovered traces from a deleted X (formerly Twitter) account with anti-Western posts and shares of Taliban-related material. Officials stress that social-media posts alone do not prove operational ties but use them as starting points to trace contacts and motive.
The FBI has urged anyone with information about Lakanwal’s online activity or travel to come forward.
Investigation and official responses
The FBI is leading the probe and is treating the Nov. 26 shooting as a potential act of international terrorism. FBI Director Kash Patel and D.C. Metropolitan Police officials confirmed a person of interest is in custody and that agents are coordinating with the CIA, Department of Homeland Security and other partners. The bureau is reviewing travel history, contractor employment records and communications that could indicate international direction or inspiration.
“A heinous assault — an act of evil and an act of hatred and an act of terror,” President Trump said, calling the shooting “a crime against our entire nation” and pledging a rapid review of security and immigration procedures. See the White House briefings for official statements.
Veteran and public reaction
Veterans and members of the public reacted sharply to revelations that the suspect reportedly had been “badged” and embedded with U.S. forces. Many demanded a full accounting of vetting decisions and suggested increased monitoring of allied nationals who enter the U.S. Conversely, civil liberties advocates urged patience and thorough investigation before assigning motive or fault to programs that assisted Afghan partners.
Local immigrant advocacy groups said they will monitor the investigation closely to ensure due process and to resist stigmatizing Afghans who worked with U.S. forces. For general asylum guidance, see USCIS newsroom.
What investigators are searching for now
Federal agents are pursuing three main lines of inquiry:
- Motive: Establishing why the attack occurred and whether it was individual or directed.
- Operational direction: Seeking any contacts or instructions from extremist groups abroad.
- Procedural review: Examining asylum interviews, interagency notes and vetting steps that led to the April 2025 approval.
Agents are combing employment records from U.S. contractors, interviewing former colleagues, and seeking travel and communications records that could indicate foreign extremist contacts.
Implications for San Diego, California
Economic impact: San Diego’s military population, defense contractors and Afghan evacuees mean local employers that hire former Afghan partners may face renewed scrutiny or delays while agencies update vetting guidance. See the San Diego Office of Defense Liaison.
Political consequences: The case is likely to fuel national debates in San Diego over readiness, border and immigration policy. Local officials will need to balance security concerns and commitments to resettle vulnerable refugees.
Social effects: San Diego’s Afghan community may face increased scrutiny and anxiety. Nonprofits and community organizations should prepare for higher demand for legal aid, counseling and outreach. Residents can contact county services and resettlement partners for assistance — for county resources see San Diego County Health & Human Services.
Sources and where to follow updates
This report draws on federal statements, law enforcement sources, the White House and public records, along with reporting on the suspect’s social media and employment history. For official updates:
The investigation is ongoing and federal officials say they will release more details as they verify evidence and complete interviews with witnesses and associates.
