-
The FBI says Jonathan Hunter Kramer, 21, used the name “Hamza Al Rashid” on SimpleX while discussing an ISIS linked attack.
-
Court papers say investigators traced him through online records, surveillance, and an informant.
-
The case has sparked debate on X about encrypted chats and weaknesses in anonymous messaging.
The FBI says it tracked down a Pennsylvania man who hid behind a fake name on SimpleX. SimpleX is an encrypted chat app that keeps messages private. Court papers say he talked about an attack linked to the Islamic State, also called ISIS.
Agents reportedly used online records, in person surveillance, and help from an informant. Those clues led them to one man, according to the FBI. The case has now sparked a loud debate on X.
FBI Links Pennsylvania Man to SimpleX Alias
The US Federal Bureau of Investigation (FBI) says it identified Jonathan Hunter Kramer, 21, of Valencia, Pennsylvania. Agents found him after studying online activity tied to an alleged terror plot. According to the US Department of Justice (DOJ), Kramer used the name “Hamza Al Rashid” on SimpleX. The DOJ also says he showed support for ISIS.
Agents arrested Kramer on September 12. A federal grand jury then formally charged him on October 6, 2026. A grand jury is a group of citizens that decides if charges should be filed. The charge says he received a firearm and ammunition.
It says he knew, or had good reason to believe, they would be used in a felony. The felony could also be a federal terror crime. The DOJ shared the details in a public press release. Kramer has pleaded not guilty. Nobody has proven the claims in court.
The FBI affidavit explains how agents found him. An affidavit is a written statement filed in court. According to this document, investigators checked online accounts and records. They also watched Kramer in person. Surveillance simply means watching someone closely. In addition, they used an informant who chatted with the SimpleX account.
Reports say the search included records from Reddit and Amazon. Data from Discord also helped. It let investigators link accounts that shared the same internet address or browser cookies. Cookies are small files that websites save in a browser.
Weapons Found and Earlier FBI Contact
The affidavit describes talks about an alleged attack. The plans reportedly involved pepper spray and other weapons. Investigators also say Kramer had bought a semiautomatic rifle and ammunition.
Agents searched his hotel room and other places. According to the affidavit, they recovered the rifle, five magazines, and about 190 rounds of ammunition. They also found other items.
The DOJ says Kramer first came to the FBI’s attention during a 2023 investigation. He was later released from juvenile detention. Reports say an anonymous online tip in March 2026 warned authorities about worrying behaviour from him again.
X Users Argue Over SimpleX Safety and Careless Habits
The case has started a debate on X. Many users want to know if the arrest exposes a flaw in SimpleX. Others say the blame belongs to the person who used it.
According to @Moonkidofhate, SimpleX may not be at fault. The user said the suspect failed badly at keeping his chats apart from real life. The post suggests that a private chat should stay separate from any online activity that could identify you.
@Dawk_OShiel asked SimpleX to explain what happened in the arrest. The user wanted a clear answer from the company. The user argued that weak personal security, not a broken app, may have exposed the suspect. Operational security simply means the careful habits that help a person stay hidden. The post also compared the case with other people arrested after using different encrypted chat services.
@MurderousPear made a similar point. According to that user, an anonymous app cannot protect someone who makes mistakes outside it. Meanwhile, @dnsrelay asked whether the app’s servers could keep logs. That started a separate talk. Locking messages is one thing, while the wider systems behind a service are another.
Not everyone trusted the official account. @Lucasddev doubted the FBI’s explanation. The user suggested that agents may have received secret help from tech companies. However, the posts gave no proof that SimpleX or any tech company helped the FBI.
The court papers list many sources of evidence. These include online activity, account records, surveillance, and talks with an informant. They do not show that investigators broke SimpleX’s encryption.
That difference matters. Encryption scrambles a message so only the right people can read it. Encrypted chats protect messages in certain ways. They do not stop investigators from finding a user through other clues. Account links, purchase records, watched movements, and tips from other people can all help a case. None of these needs agents to read the messages.
Police investigations into online criminal activity can also extend to the dark web, as shown by a New Zealand operation that led to 11 arrests in an alleged drug syndicate case.
As of October 19, 2026, Kramer’s case is still a criminal case. The indictment holds the government’s claims, not a finding of guilt. The case raises questions about digital privacy and careful online habits. Still, nobody should treat it as proof that SimpleX’s encryption was broken.
