Ballito mall bomb: Teen’s manifesto reveals alleged plan behind failed attack

A teenager’s alleged Telegram manifesto has revealed chilling new details about a failed bomb attack at Ballito Junction Regional Mall, where an improvised explosive device emitted smoke instead of detonating.

The 15-year-old Zimbali resident, who cannot be identified as he is a minor, allegedly placed the device in the mall’s crowded food court on Sunday, March 29. The potentially deadly attack was averted only because the improvised device failed to explode, apparently due to a construction fault.

Shortly before the incident, the teenager allegedly shared a graphic manifesto on Telegram, obtained by the Courier. In it, he outlines an alleged plan to bomb the shopping mall, glorifies mass killers and describes how the legacy of the Columbine school shooters and the TikTok-based True Crime Community (TCC) inspired his violent quest for revenge.

In the manifesto, the teenager portrays himself as the product of years of trauma and isolation. He alleges he endured relentless bullying, online extortion and doxing, as well as abuse by his father and neglect by his mother.

He claims these experiences drew him into extremist online communities, whose members he describes as “the only people who have understood me.”

The document also alleges that he chased a fellow pupil with a knife in 2024 after repeated pleas to his mother to remove him from school were ignored, leading to his expulsion. He further claims that on March 4 he pepper-sprayed people at another Ballito shopping centre.

The Courier has chosen not to publish details describing the construction of the explosive device or the planned sequence of violence in the interests of public safety. The manifesto ends with the teenager expressing an intention to carry out a mass-casualty attack before taking his own life.

A source within the Justice, Crime Prevention and Security (JCPS) Cluster alleged that Umhlali police returned the failed explosive device to the teenager’s mother and initially refused to register a criminal case. According to the source, a case was only opened on April 2 after the Hawks intervened following an alert from the FBI.

Rather than being arrested at the scene, the 15-year-old was admitted to Town Hill Hospital, a specialised psychiatric facility in Pietermaritzburg.

Three months later, on July 1, the teenager was allegedly seen back at the mall. He was subsequently arrested on Friday, July 3, and was released on Monday from the KwaDukuza regional court, where the matter was not enrolled.

The Courier asked Saps when officers were first notified of the attempted bombing, when a criminal docket was opened, whether the device was entered into the SAP13 evidence register and examined by bomb disposal experts, whether the Hawks were notified, and whether investigators were considering charges under the Protection of Constitutional Democracy Against Terrorist and Related Activities (POCDATARA) Act.

iLembe district police spokesperson Priya Nunkumar responded: “Police attended the complaint immediately, and a case was opened, the alleged explosive device was seized by police at the scene. The case was investigated by Umhlali detectives, and the 15-year-old suspect was arrested.”

If successfully prosecuted under POCDATARA, the alleged conduct could amount to terrorism-related offences. Separately, the Criminal Law Amendment Act prescribes a minimum sentence of 15 years’ imprisonment in certain circumstances involving explosive devices.

The case also attracted international attention after an overseas member of the Telegram group allegedly alerted the FBI to the teenager’s planned attack. By the time the warning reached South African authorities, however, the attack attempt had already taken place.

Ballito Junction Mall management confirmed that security personnel noticed smoke coming from an unattended bag in the food court and immediately activated emergency procedures. The bag was moved to a place of safety and the teenager apprehended before Umhlali Saps took control of the scene.

Mall management said the safety of shoppers and staff remains its highest priority and that security measures are continually reviewed and strengthened in response to emerging threats and crime trends.
Repeated attempts by the Courier to obtain comment from the teenager’s mother were unsuccessful.