In a decisive response to Pakistan’s persistent aggression, India launched “Operation Sindoor,” a strategic military operation targeting terrorist infrastructure and military installations across the border. This operation underscores India’s robust capability to penetrate deep into Pakistani territory, delivering a stern message to the terrorist state. Concurrently, Indian authorities have initiated a systematic nationwide crackdown to dismantle internal espionage networks operated by Pakistan’s Inter-Services Intelligence (ISI).
This crackdown has exposed a sophisticated network of ISI operatives and their collaborators within India, including seemingly innocuous figures such as social media influencers and local residents. The arrests, spanning multiple states, reflect the pervasive nature of the threat and the urgency of countering it.
This report details the arrests of 19 individuals, including social media influencers, YouTubers, and others, implicated in spying for Pakistani intelligence, highlighting the scale of the threat and the government’s proactive measures to safeguard national security.
Operation Sindoor
“Operation Sindoor” represents a bold assertion of India’s military prowess, targeting terrorist infrastructure and military installations in Pakistan. Executed with precision, the operation has disrupted Pakistan’s ability to orchestrate cross-border attacks, serving as a retaliatory measure for its continued support of terrorism. The success of this operation has not only humiliated Pakistan but also heightened the risk of desperate retaliatory actions, including the use of espionage to gather sensitive intelligence.
Nationwide Crackdown on Espionage
The Indian government’s response to the espionage threat has been swift and comprehensive, resulting in the arrest of 19 individuals across Uttar Pradesh, Punjab, Haryana, Gujarat, and Odisha. These arrests, conducted between May 4 and May 18, 2025, reveal a diverse network of ISI operatives engaged in activities ranging from smuggling and intelligence dissemination to facilitating subversive operations.
Below is a detailed account of the key cases:
• Shehzad Wahab (Uttar Pradesh)
On May 18, 2025, the Uttar Pradesh Anti-Terrorist Squad (ATS) arrested Shehzad Wahab, a resident of Tanda in Rampur district, for smuggling goods across the India-Pakistan border and spying for the ISI. Wahab, apprehended in Moradabad, had been travelling secretly to Pakistan for years, smuggling clothing, cosmetics, and spices while providing sensitive security-related information to ISI agents. He facilitated the recruitment and transport of individuals from Uttar Pradesh to Pakistan for ISI activities, arranged visas, and supplied Indian SIM cards for subversive communications. A case has been filed under sections 148 and 152 of the Bharatiya Nyaya Sanhita (BNS), and Wahab remains in police custody.
• Sukhpreet Singh and Karanbir Singh (Punjab)
On May 15, 2025, Punjab’s Gurdaspur police arrested Sukhpreet Singh and Karanbir Singh for sharing classified military intelligence related to “Operation Sindoor” with the ISI. The duo provided details on troop movements and strategic locations in Punjab, Himachal Pradesh, and Jammu and Kashmir. Forensic analysis of their mobile phones confirmed their communications with ISI handlers, and authorities recovered eight live .30 bore cartridges and three cell phones. A case under the Official Secrets Act has been registered at Dorangala police station.
• Mohammad Tarif (Haryana)
Mohammad Tarif, a resident of Kangarka village in Mewat district, was arrested on May 18, 2025, for transmitting sensitive information about Indian Army operations to Pakistan. Tarif, who maintained contact with Pakistani numbers via WhatsApp, shared chats, images, and videos of military activities with ISI operatives, including Asif Baloch and Jafar from the Pakistan High Commission in Delhi. His mobile phone revealed attempts to delete incriminating evidence. A case under the Indian Penal Code and Official Secrets Act has been filed at Taoru Sadar police station.
• Armaan (Haryana)
On May 16, 2025, Armaan, a 26-year-old Class XII dropout from Rajaka village in Nuh district, was arrested for sharing sensitive military information with a Pakistan High Commission staffer. Central investigative agencies tipped off the Nagina police, leading to his capture. His mobile phone contained incriminating conversations, photos, and videos shared with Pakistani numbers. Armaan remains under police remand as investigations continue.
• Jyoti Malhotra (Haryana)
On May 12, 2025, 33-year-old travel blogger Jyoti Malhotra was arrested in Hisar for providing critical information to Pakistani intelligence operatives. Malhotra, who ran the YouTube channel “Travel with Jo,” met ISI operatives during her 2023 visits to Pakistan, facilitated by Ehsan-ur-Rahim (Danish), a former Pakistan High Commission staffer. She communicated with operatives via encrypted platforms like WhatsApp, Telegram, and Snapchat, promoting a positive image of Pakistan while leaking sensitive information. Charged under section 152 of BNS and the Official Secrets Act, she is under police remand.
• Devendra Singh Dhillon (Haryana)
Devendra Singh Dhillon, a 26-year-old postgraduate student, was arrested on May 12, 2025, in Kaithal for sharing sensitive intelligence with the ISI. Dhillon, who visited Pakistan via the Kartarpur Corridor in November 2024, exchanged photos of Patiala’s military cantonment with ISI officers. His Facebook activity, featuring images of illegal weapons, triggered the investigation. Forensic analysis of his bank and phone records is ongoing.
• Nauman Ilahi (Haryana)
On May 10, 2025, Panipat police arrested Nauman Ilahi, a 24-year-old security guard, for disclosing sensitive information to a Pakistan-based handler. Ilahi, employed at an industrial facility in Kairana, shared pictures, videos, and maps of train stops for Rs 4,000–5,000 per image. His connections to relatives in Pakistan and attempts to obtain a Pakistani passport are under scrutiny.
• Raqeeb Khan (Punjab)
Raqeeb Khan, a 32-year-old tailor at the Bathinda army base, was arrested on May 10, 2025, for espionage. His mobile phone contained sensitive photos and cantonment-related information shared with Pakistan-based numbers. Khan, a native of Roorkee, is under forensic examination and police remand.
• Guzala and Yameen Mohamad (Punjab)
On May 10, 2025, Punjab police arrested Guzala and Yameen Mohamad in Malerkotla for supplying military intelligence to a Pakistan-based handler. The duo, involved in arms smuggling, received Rs 30,000 via UPI for their activities. Two cell phones were confiscated, and a case under the Official Secrets Act and BNS provisions has been filed.
• Palak Sher Masih and Suraj Masih (Punjab)
On May 4, 2025, Punjab police arrested Palak Sher Masih and Suraj Masih for sharing images of Army cantonments and Amritsar Air Bases with ISI operatives. Directed by Harpreet Singh, a jailed accomplice, the duo compromised national security. A case has been registered, and Harpreet Singh is set to be questioned.
• Mohammad Murtaza Ali (Gujarat)
Mohammad Murtaza Ali was arrested in Jalandhar during a raid in Bhargav Camp for spying for the ISI. He used a mobile app to share updates from Indian news channels with Pakistani operatives, charging significant sums for access. His bank account showed transactions of Rs 40 lakh in a month, and he was constructing a Rs 1.5 crore residence. Ali has been transported to Gujarat for further questioning.
• Odisha YouTuber (Under Investigation)
A 21-year-old YouTuber from Odisha is under investigation for her association with Jyoti Malhotra. She visited the Kartarpur Corridor without a visa and met Malhotra in Puri in September 2024. While her father denies her involvement in espionage, authorities are examining her activities and contacts.
Analysis of the Espionage Network
The arrested individuals represent a cross-section of society, including social media influencers, students, security guards, and tailors, indicating the ISI’s strategy of exploiting diverse operatives. Key patterns include:
• Use of Technology: Operatives leveraged encrypted platforms like WhatsApp, Telegram, and Snapchat to communicate with ISI handlers, sharing photos, videos, and documents.
• Financial Incentives: Many were lured with monetary rewards, ranging from Rs 4,000 per image to lakhs of rupees for sustained espionage.
• Cross-Border Facilitation: The ISI facilitated visas and travel to Pakistan, as seen in cases like Shehzad Wahab and Mohammad Tarif.
• Exploitation of Diplomatic Channels: Pakistan High Commission staff in Delhi played a central role in recruiting and coordinating operatives, as evidenced by interactions with Asif Baloch, Jafar, and Ehsan-ur-Rahim.
The network’s activities—smuggling, intelligence dissemination, and recruitment—pose a significant threat to India’s sovereignty, particularly amid heightened tensions post-Pahalgam and Operation Sindoor.
The arrested individuals face charges under various laws, including sections of the Bharatiya Nyaya Sanhita, Indian Penal Code, and Official Secrets Act. Forensic analysis of mobile phones and bank records is ongoing to trace communication trails and financial transactions. The involvement of Pakistan High Commission staff has prompted diplomatic actions, including the expulsion of Ehsan-ur-Rahim.
Implications for National Security
The exposure of this espionage network underscores the multifaceted nature of Pakistan’s hybrid warfare against India. By recruiting influencers like Jyoti Malhotra, the ISI seeks to manipulate narratives and gather intelligence simultaneously. The timing of these activities, coinciding with Operation Sindoor and the Pahalgam attack, suggests a desperate attempt by Pakistan to regain strategic leverage. The information shared by these operatives could facilitate future attacks, making the crackdown a critical component of India’s security strategy.
India’s dual approach of military action through Operation Sindoor and internal vigilance through the nationwide crackdown has significantly disrupted Pakistan’s terrorist and espionage operations. The arrest of 19 individuals, ranging from smugglers to social media influencers, highlights the depth of the ISI’s infiltration and the urgency of countering it. As investigations continue, more names are likely to emerge, necessitating sustained efforts to dismantle the Pakistani spy network. This initiative is not only a response to immediate threats but also a proactive measure to safeguard India’s sovereignty, unity, and integrity in the face of a persistent adversary.
