Case file - Political interference

The alleged Khan-Malema-Sayed political protection network

A crime intelligence general, a cigarette businessman, and a political leader - the Nyatlo affidavit traces an alleged network of mutual protection spanning police contracts, parliamentary questions, and a private complainant's home address.

17names in Annexure C linked to Khan
R280malleged IT transversal tender with kickbacks
650Kalleged Conalinks donation to the EFF
1 Jul 26Khan's scheduled testimony date

What happened

On 9 June 2026 the Madlanga Commission publicly released an affidavit by investigator Tshepo Nyatlo (page 009124 of the court record) that sets out nine categories of alleged wrongdoing extracted from electronic devices seized from suspended Crime Intelligence deputy head Maj-Gen Feroz Khan. The affidavit alleges a three-way network: Khan supplied police intelligence and facilitated government contracts; Johannesburg businessman Mohammed Sayed - linked to cigarette manufacturer Carnilinx and its associated entity Conalinks - directed procurement targets and provided a conduit to political leadership; and EFF leader Julius Malema allegedly provided political cover. The affidavit describes messages relaying Malema's alleged instruction that Khan 'will not ever resign, no matter what', ghost-written EFF parliamentary questions targeting Inspector General Dr Setlhomamaru Dintwe, and the alleged provision of a VBS Mutual Bank complainant's home address to Malema. Adriano Mazotti - a Carnilinx backer described as Malema's landlord - is among 17 names in Annexure C. These are untested allegations; Khan testifies from 1 July 2026.

Feroz KhanJulius MalemaMohammed SayedAdriano MazottiCarnilinxConalinksAnnexure CMadlanga Commissionpolitical interferencecrime intelligenceWhatsApp evidenceTshepo NyatloDintweEFFSAPS procurement

Chain of command

Who’s involved

Summoned - testifies 1 July 2026

Maj-Gen Feroz Khan

Deputy Head, Crime Intelligence, SAPS

Suspended senior officer at the centre of the commission's investigation. His seized devices yielded the WhatsApp exchanges underpinning the Nyatlo affidavit. He withdrew his court challenge to device access and is summoned to testify from 1 July 2026.

View full profile →
Named in affidavit - not summoned

Mohammed Sayed

Businessman - Carnilinx / Conalinks

Alleged conduit between Khan and political leadership. The affidavit places Sayed at the centre of procurement targeting, intelligence misuse, and the message chain linking Khan to Malema. Not a commission witness; these are untested allegations.

View full profile →
Named in Annexure C - not summoned

Julius Sello Malema

Leader, Economic Freedom Fighters (EFF)

Named in Annexure C. The affidavit alleges he relayed political protection to Khan via Sayed, received ghost-written parliamentary questions designed to engineer the removal of Inspector General Dintwe, and was given the identity and home address of a VBS Mutual Bank complainant. He has not been summoned as a commission witness. These are untested allegations; Malema is presumed innocent.

Named in Annexure C - not summoned

Adriano Mazotti

Businessman - Carnilinx

Tobacco industry figure and Carnilinx associate named in Annexure C. Described as linked to Malema as a landlord. Not a commission witness; these are untested allegations.

Referenced in affidavit - alleged target

Dr Setlhomamaru Dintwe

Former Inspector General of Intelligence

Alleged target of the parliamentary-question scheme. The affidavit describes an attempt to trap Dintwe in a false statement that could justify his removal. He has not been implicated in wrongdoing and has not been summoned.

Commission investigator

Tshepo Nyatlo

Investigator, Madlanga Commission

Author of the affidavit (page 009124) filed in opposition to Khan's device-access challenge. His analysis of the seized devices forms the evidentiary backbone of this strand of the commission's investigation.

Timeline

How the case unfolded

Jun 2021

Parliamentary questions drafted

The affidavit alleges Khan sent Sayed a set of questions for the EFF to pose to former minister of police Bheki Cele; Sayed forwarded them to Malema. Around the same time, Sayed reportedly identified Proto-Tobacco in East London as a competitor to be 'removed', and Khan allegedly replied 'okay, bro.'

Jun 2021

Dintwe removal plot alleged

The affidavit alleges Khan sent Sayed prepared parliamentary questions designed to trap Inspector General Dintwe in a false statement. Sayed allegedly forwarded them to Malema with the message 'Juju sent me now', intending the questions to be raised in Parliament as grounds for Dintwe's removal.

Aug 2021

EFF fleet-management bid forwarded to Khan

Sayed allegedly forwarded to Khan a bid document from Bertobrite, a company that had previously secured government tenders. The affidavit alleges this was an attempt to steer SAPS procurement for shared benefit.

May 2026

Khan's Houghton home raided, devices seized

SAPS and the Madlanga Commission task team raided Maj-Gen Khan's Houghton residence and seized electronic devices including his phone. Khan launched urgent court applications to block the commission from analysing the devices.

Jun 2026

Khan drops legal challenge

Khan withdrew all court applications against the commission accessing his devices. The commission immediately published the Nyatlo affidavit, placing the WhatsApp evidence in the public domain.

9 Jun 2026

Annexure C made public - 17 names

The commission's publicly released affidavit names 17 individuals in Annexure C linked to Khan, including Julius Malema, Adriano Mazotti, Matipandle Sotheni, and Ze Nxumalo. All persons named are presumed innocent.

1 Jul 2026

Khan testifies (scheduled)

The commission has reserved several days for Khan's testimony. Evidence leaders are expected to put the WhatsApp exchanges and the full device extraction to him directly.

From the record

In their own words

Malema's alleged message of support for Khan

Ju called me, said that you will not ever resign, no matter what, this is a fight and we will emerge victorious.
The Nyatlo affidavit describes a message Sayed forwarded to Khan, relayed from Malema, at a point when Khan faced disciplinary pressure:

Sayed's alleged instruction to use SAPS against a competitor

SayedProto-Tobacco, East London. They need to be removed.

KhanOkay, bro.

On 11 June 2021, the affidavit alleges, Sayed sent the following to Khan regarding a rival cigarette manufacturer:

Commission investigator Nyatlo on the parliamentary question scheme

The intended purpose was to trap Dintwe into lying, which would then be used as grounds to demand his removal from office.
From the affidavit, describing the alleged Dintwe removal plot:

Sources & updates

Where this comes from

This case file summarises allegations contained in a publicly released commission affidavit (page 009124 of the Madlanga Commission court record). It does not constitute a finding of guilt, liability, or wrongdoing by any person named. All persons referenced are presumed innocent. Julius Malema has not been summoned as a commission witness and has not had an opportunity to respond under oath to the specific allegations. Feroz Khan testifies from 1 July 2026.