After roughly two months ranging through southern Cabo Delgado, the militants of Islamic State Mozambique (ISM) have started moving back toward their bases around Macomia. According to ACLED's 14 June conflict monitor, they return "a little richer," having passed through four informal mine sites on the way. The group spent the period since mid-April in the Ancuabe and Chiúre districts, visiting artisanal gold and ruby workings and moving, for the most part, undisturbed by either Mozambican or Rwandan forces. For an insurgency often described as contained, that freedom of movement through Mozambique's mineral belt is the detail security teams should sit up for.
A self-funding insurgency moving through the mineral belt
The southern excursion was not random. At N'naua, an informal gold mine east of the ruby site at Mpene, fighters kidnapped an unknown number of people; one source told ACLED the captives were miners released for a ransom of 10,000 meticais each. Across the wider campaign, ISM threatened at least two large-scale commercial mining sites and uprooted more than 21,000 people, who now sit in displacement centers across the Ancuabe, Chiúre and Montepuez districts. ACLED logged at least eleven political violence events and eight reported fatalities in Cabo Delgado in the first two weeks of June alone. The pattern points to a group treating the region's informal mining economy as a revenue stream — through ransom, looting and the slow assertion of control over diggings that the state struggles to police.
Why the timing matters for energy and extractives
This is happening as the province's marquee asset comes back online. TotalEnergies lifted the force majeure on the roughly $20 billion Mozambique LNG project in November 2025 and announced a full restart of onshore and offshore work at Afungi early this year, with the development now around 40 percent complete and more than 4,000 workers mobilized; first cargoes are not expected until 2029. The restart is a multi-year construction surge in the same province where ISM continues to operate. It was an insurgent assault on Palma in 2021 that triggered the original shutdown, so the security baseline around Afungi is not an abstraction for the operators, contractors and service firms now ramping back up — it is the precondition for the whole timetable.
How it lands on a security leader's desk
For a Head of HSSE or site-security lead at a mining or energy operator in northern Mozambique, the threat picture is no longer a fixed perimeter problem. ISM's mobility means the risk travels: a group that can spend two months drifting through artisanal sites 150 kilometers from its core area can appear near commercial concessions, access roads or contractor convoys with little warning. The static defenses that matter — IEDs being the clearest example, with ACLED recording 45 such incidents involving ISM since 2021, the bulk in Macomia and Mocímboa da Praia — constrain the security forces meant to protect those operations, not just the militants' rivals. Add the friction of informal mining itself, underscored this month by a deadly clash between artisanal miners and police at the Namanhumbir ruby fields, and the result is an operating environment where journey management, route risk and worker movement need continuous reassessment rather than quarterly review.
What to watch
Three signals will shape the next several weeks. First, whether ISM consolidates around Macomia or launches another southern sojourn toward the mining districts, which would extend the threat envelope back toward commercial sites and displacement zones. Second, the responsiveness of the Rwandan and Mozambican contingents, whose repeated failure to intercept ISM's movements is what made the latest campaign possible. Third, the commercial backdrop: a souring cost dispute between TotalEnergies and the Mozambican government — a $4.5 billion overrun claim that a state-commissioned audit has partly rejected — could shape the pace and posture of the very project that anchors the region's security investment. For teams tracking all of this, near-real-time conflict and area-of-interest monitoring that flags an incident or a shift toward a concession as it happens is what turns a deteriorating map into an actionable one. GeoBit's AOI monitoring and early-warning alerting are built for exactly that kind of standing watch over remote, fast-moving sites. If you have exposure in Cabo Delgado or the wider region, book a 30-minute walkthrough.
This article references publicly reported events for context and is not a risk advisory.
Sources
See GeoBit on your area of operations
Try the Free Version now, or bring a question about a site, route, or region — we map it live on the call.
Request a Demo → Open the Free Version →