Skip to content

Extremism, Radicalisation and Lone-Actor Violence

The forensic-psychology of ideologically-motivated violence: the TRAP-18 (Terrorist Radicalization Assessment Protocol, Reid Meloy + Hoffmann + Roshdi + Guldimann 2014, 8 proximal warning + 10 distal characteristics validated against jihadist + far-right + incel lone-actor cases); VERA-2R (Violent Extremism Risk Assessment, Pressman + Flockton 2010); the McCauley + Moskalenko two-pyramid model (opinion vs action pyramids); the Indian National Investigation Agency (NIA) deradicalisation programme; the UK Channel programme under Prevent; the contested status of psychological screening at airport security checkpoints (the SPOT programme critique).

Last updated:

Share

Radicalisation toward lone-actor violence follows identifiable behavioural pathways that forensic psychology has formalised into structured assessment instruments. The TRAP-18 (Terrorist Radicalisation Assessment Protocol, Meloy et al. 2014) distinguishes eight proximal warning behaviours, including leakage, pathway, and fixation, from ten distal background characteristics, and has been validated retrospectively against jihadist, far-right, and incel lone-actor cases. VERA-2R (Violent Extremism Risk Assessment, Pressman and Flockton 2010) provides a complementary structured professional judgement framework for individuals already in contact with the justice or security system. Mental disorder is present at elevated rates in perpetrator samples but is neither necessary nor sufficient: ideological motivation, grievance narrative, and action-pyramid escalation remain the central forensic variables.

Lone actors who carry out mass-casualty attacks typically operate without a cell structure, do not share plans with co-conspirators, and may leave only fragmentary traces before acting. Forensic psychology research since the early 2000s has identified a consistent pattern of observable warning behaviours that precede most such attacks. The problem is not that these individuals leave no trail: it is that the trail is rarely assembled into a coherent picture until after the event.

Key takeaways

  • TRAP-18 distinguishes eight proximal warning behaviours (including leakage, pathway, and fixation) from ten distal characteristics; leakage and pathway are documented in the majority of retrospective lone-actor case analyses.
  • McCauley and Moskalenko's two-pyramid model shows that the opinion pyramid (extreme views) and the action pyramid (extremist behaviour) are partially independent; targeting extreme views alone does not reliably reduce violence.
  • Gill, Horgan, and Deckert's (2014) analysis of 119 lone-actor terrorists found approximately 32% had a documented mental disorder, elevated but not a majority; mental illness is neither necessary nor sufficient.
  • VERA-2R is designed for known extremists already in contact with the justice or security system; TRAP-18 is used earlier, for initial warning-behaviour detection before any offence is charged.
  • India's UAPA 1967 (as amended 2019) remains the primary terrorism prosecution statute; the 2019 amendment introduced individual designation, allowing the Ministry of Home Affairs to designate specific persons as terrorists without organisational linkage.

A meaningful proportion of lone-actor attackers show personality features with clinical forensic relevance: elevated grievance, narcissistic injury, identity fusion with an ideological cause, and in some cases, diagnosable mental disorder. The material is deliberately multi-jurisdictional: the Pittsburgh Synagogue attack (US, 2018), the Christchurch mosque attacks (New Zealand, 2019), the Pulwama car-bombing (India, 2019), and the Utøya island attack (Norway, 2011) represent different ideological motivations, different geopolitical contexts, and substantially different perpetrator profiles. The shared threads across these cases, and what the assessment instruments do with them, are the central concern here. The TRAP-18 instrument's structure and operational workflow for targeted-violence settings is covered in depth in threat assessment for mass violence and active-shooter incidents, while the psychopathy and PCL-R topic addresses the personality features that appear in a subset of lone actors.

A trauma-informed orientation applies throughout. These cases are cited as clinical-forensic data, not as spectacle.

By the end of this topic you will be able to:

  • Distinguish TRAP-18's eight proximal warning behaviours from its ten distal characteristics, and explain when each instrument is applied relative to VERA-2R.
  • Apply the McCauley-Moskalenko two-pyramid model to explain why monitoring extreme views does not reliably predict lone-actor violence.
  • Analyse the Pittsburgh, Christchurch, Pulwama, and Utøya cases using TRAP-18 warning-behaviour categories.
  • Evaluate the evidentiary and clinical role of mental disorder in terrorism proceedings, using Gill, Horgan, and Deckert's (2014) findings as the baseline.
  • Compare the UK Channel programme, Germany's EXIT programme, and India's NIA framework on the disengagement-versus-deradicalisation distinction.

Radicalisation Pathways: The Two-Pyramid Model and the 3N Framework

Clark McCauley and Sophia Moskalenko's two-pyramid model, developed in Friction: How Radicalization Happens to Them and Us (2011), is the dominant conceptual framework in the current radicalisation literature.

The opinion pyramid traces the distribution of extreme views across a population. At the base, a large proportion holds some sympathy for extreme grievances. At the middle, a smaller proportion endorses political violence in principle. At the apex, a very small fraction believes violence is the correct action now. Movement up this pyramid is shaped by social identity processes, group polarisation, and narrative exposure.

The action pyramid runs parallel: at the base, legal activism and political expression; in the middle, confrontational and illegal support acts; at the apex, mass-casualty violence. The two pyramids are partially independent. Someone can reach the top of the opinion pyramid without ever approaching violence. Someone can commit violence without being near the top of the opinion pyramid.

This independence has a direct policy implication: counter-terrorism strategies focused exclusively on monitoring or changing extreme views may intrude on large numbers of people who will never act while missing individuals in less-monitored communities who are moving up the action pyramid. For forensic risk assessment, the action pyramid, operationalised in TRAP-18 warning behaviours, is the more relevant domain than ideological content.

Arie Kruglanski's complementary 3N model (Needs, Narrative, Network) proposes that radicalisation requires a personal significance quest (need), an ideology framing violence as significance-restoration (narrative), and a social network validating that framing (network).

Base: sympathy for extremegrievances (large population)Middle: endorsespolitical violence inprincipleApex:violenceis correctnowBase: legal activism and politicalexpressionMiddle:confrontational orillegal support actsApex:mass-casualtyviolenceOpinion PyramidAction Pyramidpartiallyindependent(not the same)Monitoring views alone misses actors rising through the action pyramid
McCauley-Moskalenko two-pyramid model: opinion pyramid and action pyramid are partially independent; apex of one does not reliably predict apex of the other.

TRAP-18: Terrorist Radicalisation Assessment Protocol

TRAP-18 was developed by Reid Meloy, Jill Morin Roshdi, Steffen Guldimann, and Bram Hoffmann (published 2014 in Journal of Threat Assessment and Management). It distinguishes eight proximal warning behaviours, dynamic, observable, changing in the period immediately preceding an attack, from ten distal characteristics, background factors that amplify risk when proximal behaviours are escalating.

The eight proximal warning behaviours:

  1. Pathway, research, planning, preparation, or probing of a target; moving from ideology to execution.
  2. Fixation, increasing exclusive focus on a cause or person, crowding out other life domains.
  3. Identification, desire to be a warrior, soldier, or martyr; adoption of ideological identity as primary self-concept.
  4. Novel aggression, unrelated violence serving as a test or expressing emerging propensity.
  5. Energy burst, dramatic activity increase in attack-related domains (materials, communication, final arrangements).
  6. Leakage, intentional or unintentional communication of violent intent to a third party.
  7. Last resort, evidence of a final-push mentality; the actor has internally crossed a threshold.
  8. Direct threat, explicit communication of intent to use violence against a specific target.

Selected distal characteristics include: personal grievance and moral outrage, framing ideology, failure to affiliate with an extremist group (lone-actor signal), virtual-community dependence, thwarted occupational goals, relevant mental disorder, and access to weapons.

Meloy and colleagues validated TRAP-18 retrospectively against 73 lone actors across ideological categories, jihadist, far-right, far-left, incel, showing that leakage, pathway, and fixation were present in the majority of cases. Independent validation in UK MAPPA caseloads (James and colleagues) and EU samples (Pressman and colleagues in the Netherlands) supports face validity and case-structuring utility, while noting that retrospective case-file validation does not directly establish prospective sensitivity and specificity. General violence risk instruments such as the HCR-20 V3 and sex-offender risk tools such as the Static-99R serve distinct populations; TRAP-18 is the specific lone-actor protocol.

VERA-2R: Violent Extremism Risk Assessment

VERA-2R was developed by Elaine Pressman and John Flockton (original VERA, 2010; revised to VERA-2R thereafter). It is a structured professional judgement (SPJ) instrument for known extremists already in contact with the justice or security system, not for initial threat-identification screening. Five assessment domains:

  1. Beliefs and attitudes, violent ideological commitment, dehumanising outgroup narratives, perceived obligation to act.
  2. Context and intent, proximity to operational milieu, expressed intent, preparation behaviours.
  3. History and action, prior violent extremist action, criminal history, network affiliations.
  4. Commitment and motivation, dedication to cause, personal significance invested in ideology, in-group status from commitment.
  5. Protective factors, family deterrents, employment stability, cognitive flexibility, institutional attachments.

VERA-2R is used by security services and courts in the Netherlands, Belgium, Germany, and the UK, and by Australia's ASIO Behaviour Analytics Unit. The EU Internal Security Fund has funded research on its use in deradicalisation programmes.

A critical methodological constraint applies to both TRAP-18 and VERA-2R: the base rate of lone-actor attacks is very low even in the most affected countries. Even a highly sensitive instrument will produce many false positives for every true positive in a low-prevalence environment. Pressman and colleagues acknowledge this in their validation literature: the instruments' primary value is structuring case management and identifying modifiable risk factors, not predicting rare events from a population screen.

Case Comparisons: Pittsburgh, Christchurch, Pulwama and Utøya

Pittsburgh Tree of Life Synagogue, October 2018 (US). Robert Bowers killed 11 people during Saturday services. His Gab platform history documented an escalating antisemitic narrative over the weeks before the attack, with explicit linking of Jewish-led immigration organisations to what he framed as white genocide. Retrospective TRAP-18 analysis identifies multiple proximal warning behaviours: leakage (explicit online statements of intent), pathway (weapons acquisition and location reconnaissance), and fixation (increasingly exclusive ideological focus). A not-guilty-by-reason-of-insanity plea was entered and rejected; the defence neuropsychological evidence did not satisfy the MPC substantial-capacity standard.

Christchurch, March 2019 (New Zealand). Brenton Tarrant killed 51 people in two mosque attacks, published a 74-page manifesto beforehand, and livestreamed the attack. He had not come to the attention of New Zealand or Australian security services despite international travel and legal weapons acquisition. The Royal Commission (He Whenua Tōtū Nei, 2020) identified systemic failures to monitor online extremist activity on Facebook and 8chan. He pleaded guilty, receiving life without parole, New Zealand's first such sentence. Retrospective TRAP-18: pathway, fixation, identification, energy burst, and leakage all documented.

Pulwama, February 2019 (India). A car bomb killed 40 Central Reserve Police Force personnel. The perpetrator, Adil Ahmad Dar, was identified as a Jaish-e-Mohammed member, making this a cell-facilitated rather than purely lone-actor attack. This illustrates a significant limitation of lone-actor frameworks in the South Asian context: Indian-subcontinent extremist violence frequently involves cross-border facilitation from Pakistan-based organisations. The NIA undertook the primary investigation under the Unlawful Activities (Prevention) Act 1967 (as amended). BNS § 113 creates the general offence of terrorist act; the UAPA remains the primary prosecution statute for terrorism in India.

Utøya, July 2011 (Norway). Anders Breivik killed 77 people, 8 in an Oslo bomb attack, 69 on Utøya island, in the deadliest peacetime attack in Norwegian history. The initial psychiatric evaluation found paranoid schizophrenia; a second court-ordered evaluation found narcissistic personality disorder without psychosis and legal responsibility. The court accepted the second evaluation. Retrospective TRAP-18: all eight proximal warning behaviours are documented, making Utøya the most complete illustration of the instrument used in training. The case also shows how extensive the behavioural record can be, years of planning, an 1,500-page published manifesto, without triggering pre-attack intervention.

Pittsburgh 2018Christchurch 2019Pulwama 2019Utoya 2011 (all 8)Leakage: presentLeakage: manifestLeakage: limited(cell)Leakage: manifestPathway: presentPathway: presentPathway: presentPathway: presentFixation: presentFixation: presentFixation: partialFixation: present
TRAP-18 proximal warning behaviour presence across four cases; leakage and pathway are documented in all four; fixation and identification in three of four.

Counter-Extremism Programmes: UK Channel, Germany EXIT and India's NIA

United Kingdom: Channel and Prevent. Prevent is the UK's multi-agency counter-terrorism prevention strategy; Channel is its referral pathway. Any public-sector professional (teacher, social worker, healthcare professional, police officer) can refer an individual to a Channel panel. The panel assesses vulnerability and, where identified, creates a voluntary support plan, mentoring, educational support, mental health services, or ideological counter-narratives.

Channel has attracted substantial academic and civil-society criticism: disproportionate referral of Muslim young people relative to the actual distribution of terrorism risk, conflation of holding extreme religious or political views with violence vulnerability, and the absence of rigorous outcome evaluation for support plans. The government's independent Shawcross review (2023) concluded the programme had under-focused on Islamist extremism, calling for Prevent to be recalibrated toward the Islamist threat rather than continuing its existing focus. The 2023 Prevent statutory guidance issued under the Counter-Terrorism and Security Act 2015 updated referral thresholds in response.

Germany: EXIT. Founded by Bernd Wagner in 2000, EXIT focuses on former far-right extremists using motivational interviewing, social support, and practical assistance including employment, housing, and identity document changes. Published outcome data show substantial sustained disengagement rates among participants, though the absence of a randomised control group limits causal inference. EXIT is among the most extensively studied deradicalisation programmes available to researchers.

India: NIA and UAPA framework. The National Investigation Agency Act 2008 established the NIA after the 2008 Mumbai attacks. The UAPA 1967 (as amended 2019, with the individual-designation power) is the primary prosecution statute. The 2019 amendment, allowing the Ministry of Home Affairs to designate specific individuals as terrorists rather than only organisations, has been challenged in the courts on due-process grounds. India does not yet have a national institutionalised deradicalisation programme comparable to Channel or EXIT; individual state police forces run community engagement initiatives in high-tension contexts, but these lack national standardisation or outcome evaluation.

Disengagement vs deradicalisation is the conceptual distinction that determines programme design. Disengagement, ceasing to participate in extremist activity, is substantially more achievable than deradicalisation (changing underlying beliefs). Research by John Horgan (Georgia State) and Anne Speckhard (interviews with former IS fighters) consistently shows that programmes providing alternative social identity pathways and practical support achieve disengagement; programmes focused on direct ideological challenge rarely achieve deradicalisation and sometimes harden views.

Mental Disorder, Grievance and the Forensic Assessment Frame

Paul Gill, John Horgan, and Paige Deckert's systematic case study analysis of 119 lone-actor terrorists (Journal of Forensic Sciences, 2014) found approximately 32% had a documented mental disorder, compared with approximately 15% of the general population. Elevated rates are real but tell a nuanced story: the overwhelming majority of individuals with severe mental illness never commit violence, and the majority of lone-actor attacks are not attributable to psychotic motivation. The neurolaw and frontal lobe evidence topic covers brain-based mitigation arguments for violent offenders, including those arising from radicalisation-related cases.

Specific clinical configurations appearing at elevated rates: narcissistic personality features with a specific grievance narrative (the "aggrieved entitlement" pattern prevalent in incel-motivated attacks); paranoid ideation fused with ideological content without reaching full psychotic disorder; depression combined with ideological motivation for suicide-by-attack (the "lethal suicide" pattern, Joiner, Van Orden and Witte); and mixed affective-ideological presentations.

TRAP-18 Distal Characteristic 7 (relevant mental disorder) explicitly notes that mental disorder increases risk when it is intertwined with other distal characteristics and proximal warning behaviours, not when present in isolation. This is the framing forensic assessments must reproduce.

For court reports in terrorism-related cases, three questions structure the psychological contribution: (a) is there a diagnosable mental disorder, and does it engage BNS § 22 in India, the MPC substantial-capacity standard in the US, or the M'Naghten and partial-responsibility provisions in the UK; (b) does the mental state interact with ideological motivation in ways that increase or decrease future violence risk; and (c) are mental health treatment needs present that form a component of an effective management plan?

Key terms
TRAP-18 (Terrorist Radicalisation Assessment Protocol)
18-indicator structured professional judgement instrument by Reid Meloy, Roshdi, Guldimann and Hoffmann (2014). Distinguishes 8 proximal warning behaviours (leakage, pathway, fixation, novel aggression, energy burst, identification, last resort, direct threat) from 10 distal characteristics. Validated retrospectively against 73 lone actors across ideological categories.
VERA-2R (Violent Extremism Risk Assessment)
Structured professional judgement instrument by Elaine Pressman and John Flockton (2010, revised) for known extremist individuals in contact with the justice or security system. Assesses five domains: beliefs and attitudes, context and intent, history and action, commitment and motivation, and protective factors.
McCauley-Moskalenko two-pyramid model
Conceptual framework (Friction, 2011) distinguishing the opinion pyramid (distribution of extreme views) from the action pyramid (distribution of extremist behaviour). The two are partially independent: movement up the opinion pyramid does not directly predict movement up the action pyramid.
Leakage
Intentional or unintentional communication of intent to commit violence to a third party. One of TRAP-18's eight proximal warning behaviours and the most consistently documented in retrospective lone-actor case analyses. Can occur online (manifestos, forum posts) or offline (verbal disclosures to acquaintances or clinicians).
Channel programme (UK)
The referral and multi-agency assessment pathway within UK Prevent. Any public-sector professional can refer an individual; a Channel panel assesses vulnerability and creates a voluntary support plan. Subject to ongoing debate about disproportionate referral patterns and the theoretical basis for vulnerability assessment.
BNS § 113 and UAPA
BNS 2023 § 113 creates the general criminal offence of terrorist act in India. The Unlawful Activities (Prevention) Act 1967 (as amended 2019, with individual-designation powers) remains the primary prosecution statute for terrorism offences and provides for enhanced investigation, detention, and trial provisions.
Disengagement vs deradicalisation
Disengagement: ceasing to participate in extremist activity without necessarily changing underlying beliefs. Deradicalisation: changing the beliefs and identity constructs that motivated extremism. Research (Horgan, Speckhard) consistently finds disengagement more achievable; effective programmes provide alternative identity pathways and practical support rather than direct ideological challenge.
What is the difference between TRAP-18 and VERA-2R?
TRAP-18 is oriented toward detecting warning behaviours in individuals who may be moving toward lone-actor violence, with particular attention to dynamic proximal indicators that change in the period before an attack. It is most useful in early threat-assessment consultations, when the question is whether an identified individual is progressing toward violence. VERA-2R is designed for known extremists already in contact with the justice or security system: detained suspects, individuals in deradicalisation programmes, those on supervision orders. A comprehensive terrorism risk assessment might use both: TRAP-18 for the warning behaviour trajectory, VERA-2R for the broader risk domain profile.
Does mental illness cause lone-actor terrorism?
No, and forensic assessors must resist this overgeneralisation. Gill, Horgan, and Deckert (2014) found approximately 32% of lone-actor terrorists had a documented mental disorder, elevated versus the general population, but the majority did not. The forensic psychologist's responsibility is to assess whether a diagnosable disorder is present, whether it engages criminal responsibility provisions, whether it interacts with ideological motivation in risk-relevant ways, and whether it requires treatment as part of the management plan. For how mental disorder intersects with violence risk and criminal responsibility more broadly, see the [neurolaw and frontal-lobe evidence topic](/topics/forensic-psychology/neurolaw-frontal-lobe-evidence-and-criminal-responsibility).
What is leakage in TRAP-18, and why does it matter for prevention?
Leakage is the intentional or unintentional communication of intent to commit violence to a third party before an attack. It is documented in the majority of retrospective lone-actor case analyses and represents the clearest indicator that an individual has moved from ideological engagement to active consideration of violence. Most missed-prevention cases involve leakage that was observed but not recognised or not escalated. Training public-sector professionals to recognise leakage, in clinical encounters, classroom settings, or online community moderation, is among the most evidence-based primary prevention approaches.
How does India's UAPA framework address terrorism prosecutions?
The primary statute is the UAPA 1967 (as amended 2019). The 2019 amendment introduced individual designation: the Ministry of Home Affairs can designate specific individuals as terrorists without organisational linkage. The NIA Act 2008 established the dedicated investigation agency. BNS § 113 provides the general criminal offence of terrorist act. The bail threshold under UAPA § 43D(5) is deliberately higher than in general criminal procedure; the Supreme Court has upheld constitutional rights to liberty and fair trial in UAPA cases while accepting the heightened bail threshold.
Why has the UK Prevent programme been criticised?
Principal criticisms: disproportionate Muslim referrals relative to actual terrorism risk distribution across ideological types; conflation of extreme religious or political views (not themselves indicators of violence risk) with violence vulnerability; the absence of rigorous outcome evaluation for Channel support plans; and chilling effects on legitimate expression. The forensic psychology implication is assessment validity: if the vulnerability framework measures ideological content rather than action-pyramid warning behaviours, it will systematically over-flag individuals who hold unconventional views without any pathway toward violence, while missing those who show genuine TRAP-18 escalation.
Practice
Question 1 of 5· 0 answered

A university mental health counsellor sees a 22-year-old student who has expressed admiration for a far-right extremist group, has become increasingly withdrawn, and says 'the system has failed people like me.' No explicit threats have been made. Which TRAP-18 proximal warning behaviour, if present, would most urgently require escalation to a threat assessment professional?

Test yourself on Forensic Psychology with free, timed mocks.

Practice Forensic Psychology questions

Found this useful? Pass it along.

Share

Spotted an error in this page? Report a correction or read our editorial standards.

Your journey to becoming a forensic professional starts here.

Practice with mock tests, learn from structured notes, and get your questions answered by a global forensic community, all in one place.