Toronto police have arrested two people in connection with last month’s US Consulate shooting, describing the suspects as criminals for hire recruited through an encrypted messaging app and paid to open fire on the diplomatic mission.

The arrests, announced Thursday, involve a 19-year-old man and a 15-year-old boy. It was the second shooting at the consulate in five months.

Two Shootings, Similar Patterns

The July incident followed a March 10 attack on the same building, also carried out before dawn. Police arrested two people in that case in June.

No one was injured in either shooting. Both were nonetheless classified as national security incidents.

The March attack prompted enhanced protection for American and Israeli diplomatic facilities across multiple Canadian cities as conflict spread through the Middle East. The Royal Canadian Mounted Police opened a parallel national security investigation.

What Happened in July

Police said a white Honda Accord pulled alongside the consulate at approximately 4:46 a.m. local time. A single shot was fired, striking the front of the building.

A brief police pursuit followed but was called off when the driver reached excessive speed.

Notably, the shooting occurred despite a marked police cruiser stationed nearby. Officers have maintained a visible presence outside the consulate since the first attack.

The Charges

Police identified the adult suspect as 19-year-old Xen-Ul-Abdeen Syed. He faces multiple firearm charges along with arson and stolen property counts, plus a charge of attacking the premises of an internationally protected person.

That last charge reflects the diplomatic status of the target and carries distinct legal weight under international protection statutes.

The 15-year-old was also charged but cannot be named under Canadian law.

Police additionally allege both suspects were involved in setting fire to a vehicle in a community outside Toronto three days before the consulate shooting.

The Recruitment Model

The most significant revelation was not about the shooting itself but about how it was arranged.

Toronto Police Chief Superintendent Joe Matthews of Detective Operations said investigators believe shootings, homicides and arsons are increasingly being commissioned through online applications, with individuals offered varying sums depending on the crime.

The arrangement involves hiring people to shoot at designated targets and record the act as proof for payment.

The targets police described extend well beyond the consulate. They include synagogues, Jewish schools and a waste management company.

Matthews added a detail that complicates the transactional framing: in many cases, the people recruited never actually receive payment.

Why That Matters

The model described here is meaningfully different from conventional organized crime.

Whoever is commissioning these acts appears to be operating at a remove, using encrypted platforms to recruit people with no prior connection to the target or, apparently, to the organizer. The requirement to film the act substitutes for the trust that would normally exist between principals in criminal arrangements.

The demographic pattern is also notable. A 15-year-old and a 19-year-old carried out the July shooting. Two men aged 18 and 19 were arrested for the March incident. Younger recruits are cheaper, easier to persuade, and face lighter consequences if caught.

That the recruits are often not paid suggests the organizers face little accountability, and that participants have limited leverage to complain.

The Unanswered Question

Police Chief Myron Demkiw acknowledged directly what the public wants to know.

He said there has been significant public interest and speculation about who is behind the crimes, and confirmed that identifying those responsible remains a key focus of the investigation.

That framing is important. The people arrested are, by the police department’s own description, hired hands. The arrests resolve the immediate incidents without resolving who ordered them or why.

The target list offers some indication of intent. Synagogues, Jewish schools and the US Consulate share a common thread that a waste management company does not, which suggests either multiple clients using the same recruitment network, or a deliberate mix intended to obscure motive.

What Investigators Face

Cases built on encrypted app recruitment present specific difficulties.

The people who can testify about the arrangement typically know only a username and a payment promise. The organizer may never have operated within Canadian jurisdiction. And the platform itself may be structurally unable to provide the message content investigators would need.

That is likely why police have arrested four people across two incidents while publicly acknowledging that the central question remains open.

For now, the practical result is that the shootings have stopped producing casualties, security around diplomatic facilities has been strengthened, and investigators have four people who may know something about how the network operates, even if none of them knows who runs it.