ABHAY AI and the Emergence of Preventative Cyber Vigilance in India
Introduction
Digital arrest scams operate by fraudsters convincing individuals that they are under official scrutiny, often through fabricated notices, video calls, and staged procedures. The harm is not just technical, it is psychological. It works because it feels real.
It is in this context that the Central Bureau of Investigation has introduced ABHAY, an AI based chatbot intended to help individuals verify whether a notice issued in the name of the agency is genuine or not. At one level, this is a simple verification tool. But on closer inspection, it reflects a deeper shift in how cyber threats are being understood and dealt with.
Understanding ABHAY as a Public Interface
ABHAY is designed as a citizen facing mechanism. A person who receives a suspicious communication can use the tool to check its authenticity. This becomes particularly relevant in situations where individuals are pressured into immediate compliance.
What stands out here is the timing. Traditional responses to cybercrime begin after harm has occurred. Complaints are filed, investigations begin, and then some form of remedy follows. ABHAY, however, operates before that stage. It intervenes at the point where a person is still deciding whether to believe what they have received.
“The AI-powered notice verification chatbot, ABHAY, will allow the public to verify the genuineness of a notice purportedly issued by the CBI. In the context of digital arrest frauds, this provides a much required tool for the citizens,” a CBI spokesperson said.
While this may seem like a small shift, but it changes the logic of response. It introduces verification as a first step, rather than enforcement as a later one. Verification tools aim to interrupt that process at a preventive stage. At the same time, their effectiveness depends on awareness along with the precision and functionality of the ABHAY AI. A tool cannot assist if it is not known or trusted. This places some responsibility on institutions to ensure that such initiatives are communicated clearly and remain accessible.
Digital Arrest Scams and the Problem of Legitimacy
Digital arrest scams depend on imitation and make-believe; all tied up with instilling fear through social engineering. Fraudsters replicate the form and language of legal authority. They even use official looking documents, adopt institutional identities, and often create a controlled environment where the victim feels watched and isolated.
The law usually assumes that a reasonable person can distinguish between genuine and fake communication. But in these cases, that assumption begins to weaken. The more convincing the imitation, the harder it becomes to question it.
ABHAY attempts to address this very gap. It does not investigate or punish, it simply verifies. In doing so, it restores a basic distinction that has become blurred. The distinction between lawful authority and its digital imitation.
Legal Context and Emerging Questions
From a legal perspective, this development sits slightly outside conventional frameworks. Under the Information Technology Act, 2000, offences such as cheating by personation and identity misuse are recognized, but the emphasis is on post facto liability. Similarly, consumer protection law addresses misleading conduct after it has affected consumers.
ABHAY operates at an earlier stage. It functions in what may be called a pre liability space.
This raises certain questions, even if they are not immediately visible. When a state agency provides an AI based verification tool, what is the nature of reliance that can be placed on it. If an individual acts based on its output, does that create any expectation of accuracy or responsibility. These are not yet settled issues, but they are likely to become relevant as such tools become more common.
Conclusion
ABHAY reflects a subtle but important shift in approach. By allowing individuals to verify authenticity at the moment of interaction, it introduces a form of prevention and protection that is immediate and practical. At the same time, it opens up questions around reliability, accountability, and long-term integration of such tools into legal frameworks. These questions will need attention as similar technologies are adopted more widely.
For now, ABHAY represents an early attempt to respond to a changing problem. One where trust itself has become a site of vulnerability.
References
Related Blogs
Introduction
The banking and finance sector worldwide is among the most vulnerable to cybersecurity attacks. Moreover, traditional threats such as DDoS attacks, ransomware, supply chain attacks, phishing, and Advanced Persistent Threats (APTs) are becoming increasingly potent with the growing adoption of AI. It is crucial for banking and financial institutions to stay ahead of the curve when it comes to their cybersecurity posture, something that is possible only through a systematic approach to security. In this context, the Reserve Bank of India’s latest Financial Stability Report (June 2025) acknowledges that cybersecurity risks are systemic to the sector, particularly the securities market, and have to be treated as such.
What the Financial Stability Report June 2025 Says
The report notes that the increasing scale of digital financial services, cloud-based architecture, and interconnected systems has expanded the cyberattack surface across sectors. It calls for building cybersecurity resilience by improving Security Operations Center (SOC) efficacy, undertaking “risk-based supervision”, implementing “zero-trust approaches”, and “AI-aware defense strategies”. It also recommends the implementation of graded monitoring systems, employing behavioral analytics for threat detection, building adequate skill through hands-on training, engaging in continuous learning and simulation-based exercises like Continuous Assessment-Based Red Teaming (CART), conducting scenario-based resilience drills, and establishing consistent incident reporting frameworks. In addition, it suggests that organizations need to adopt quantifiable benchmarks like SOC Efficacy and Cyber Capability Index to guarantee efficient governance and readiness.
Implications
Firstly, even though the report doesn’t break new ground in identifying cyber risk, it does sharpen its urgency and lays the groundwork for giving more weight to cybersecurity in macroprudential supervision. In the face of emerging threats, it positions cyberattacks as a systemic financial risk that can affect India’s financial stability with the same seriousness as traditional threats like NPAs and capital inadequacy.
Secondly, by calling to “ensure cyber resilience”, it reflects the RBI’s dedication to values-based compliance to cybersecurity policies where effectiveness and adaptability matter more than box-ticking. This approach caters to an organisation’s/ sector’s unique nature, governance requirements, and updates to rising risks. It checks not only if certain measures were used, but also if they were effective, through constant self-assessment, scenario-based training, cyber drills, dynamic risk management, and value-driven audits. In the face of a rapidly expanding digital transactions ecosystem with integration of new technologies such as AI, this approach is imperative to building cyber resilience. The RBI’s report suggests exactly this need for banks and NBFCs to update its parameters for resilience.
Conclusion
While the RBI’s 2016 guidelines focus on core cybersecurity concerns and has issued guidelines on IT governance, outsourcing, and digital payment security, none explicitly codify “AI-aware,” “zero-trust,” or a full “risk-based supervision” mechanism. The more recent emphasis on these concepts comes from the 2025 Financial Stability Report, which uses them as forward-looking policy orientations. How the RBI chooses to operationalize these frameworks is yet to be seen. Further, RBI’s vision cannot operate in a silo. Cross-sector regulators like SEBI, IRDAI, and DoT must align on cyber standards and incident reporting protocols.
In the meanwhile, highly vulnerable sectors like education and healthcare, which have weaker cybersecurity capabilities, can take a leaf from RBI’s book by ensuring that cybersecurity is treated as a continuously evolving issue . Many institutions in these sectors are known to perform goals-based compliance through a simple checklist approach. Institutions that take the lead in implementing zero-trust, diversifying vendor dependencies, and investing in cyber resilience will not only meet regulatory expectations but build long-term competitive advantage.
References
- https://economictimes.indiatimes.com/news/economy/policy/adopt-risk-based-supervision-zero-trust-approach-to-curb-cyberfrauds-rbi/articleshow/122164631.cms?from=mdr-%20500
- https://paramountassure.com/blog/value-driven-cybersecurity/
- https://www.rbi.org.in/commonman/english/Scripts/Notification.aspx?Id=1721
- https://rbidocs.rbi.org.in/rdocs//PublicationReport/Pdfs/0FSRJUNE20253006258AE798B4484642AD861CC35BC2CB3D8E.PDF
Tech News overview
Recently, the TRAI has passed some recommendations that benefit the telecommunications industry in India. The suggestion is to lower the entry fees and bank guarantees on the 26th of July 20, 2022. Then wrote a few consulting papers, countering comments by the stakeholders of various companies.
In a significant move, TRAI (Telecom Regulatory Authority of India) has proposed spacious changes in terms of entry fees and bank guarantees in the telecom sector. These endorsements have been abeyant to escort the new era of competition, investment, and innovation, reshaping India’s telecommunication landscape.
Proposal Points by TRAI to telecom companies:
As we dive into considering the recommendations by TRAI into the crucial aspects of the telecom industry, deliberate about the significance of entry fees, the importance of banks, and the guarantees.
- Entry fees: Entry fees are the advance key point that upholds the charges that telecom companies pay to the government when they want to offer services to the civilians of the country. The amount they pay is quite hefty and usually non-refundable.
- Bank guarantee: An important factor that is also a type of security, the financial security that assures the telecom companies to fulfil their financial obligations and follow the regulations and policy conditions specified in their license agreement.
- TRAI roleplay: The Telecom Regulatory Authority of India is an authority responsible for supervising the telecom industry in the country. Making sure that the regulations and recommendations such as entry fees and bank guarantees are working in the proper way or not, a supervision of such things.
- Expected outcomes: TRAI focuses on reducing the entry fees for various types of licenses in the other telecom sector. This step encourages other new telecom operators to enter the market and increase the fair price and investment, which leads to enhancing the competition.
- Consolidating Bank guarantees: TRAI also proposed an amalgamation of bank guarantees, which means telecom companies are required to maintain separate guarantees for different business licenses, which makes business doing sectors an easy environment.
- No entry fee at the time of License Renewal: Recommendations by TRAI by not charging any entry fees when telecom operators renew their licenses. This step can reduce the financial burden on both existing and new entrants,, specifically for UL(VNO)license shareholders.
Reshaping the telecom panorama:
Recommendation by TRAI that can potentially help in reshaping the Telecoms landscape in India in various aspects:
- Increment in healthy Competition: By reducing the entry fees, TRAI would be creating a platform profitable and affordable for new market players in India.
- Market enlargement: Lowering the entry fees might lead to the participation of new entrants, including regional and smaller players,, to get involved in the telecom industry.
- Due to the market expansion, the outcomes can potentially lead to improved access to telecom services in underdeveloped areas and regions and contribute to digital inclusion.
- Job Recruitment: The evolution in the telecom industry due to new operators and increased investment can lead to job uplift in both telecom and industries related to technological infrastructure.
- Choice of preference: As there is a rise in competition, consumers are likely to have many choices when it comes to telecom service providers. The consumers get to select from a wider range of services, leading to better value for money and quality of service.
- Quality of service: With increased competition and a hefty amount of investment, telecom operators have a spur to enhance the quality of service.
Conclusion:
In conclusion, TRAIs proposal on lowering the entry fees and bank guarantee for financial services marks a significant milestone in India’s telecom industry. These essential changes hold the promise of fostering competition, investment, a platform for new entrants, quality of service, wider range of platforms for selection. As these advance suggestions take place, in telecom industry in India is on a new threshold of an existing transformation that could reevaluate the way we communicate and connect.
Reference:
Introduction
We consume news from various sources such as news channels, social media platforms and the Internet etc. In the age of the Internet and social media, the concern of misinformation has become a common issue as there is widespread misinformation or fake news on the Internet and social media platforms.
Misinformation on social media platforms
The wide availability of user-provided content on online social media platforms facilitates the spread of misinformation. With the vast population on social media platforms, the information gets viral and spreads all over the internet. It has become a serious concern as such misinformation, including rumours, morphed images, unverified information, fake news, and planted stories, spread easily on the internet, leading to severe consequences such as public riots, lynching, communal tensions, misconception about facts, defamation etc.
Platform-centric measures to mitigate the spread of misinformation
- Google introduced the ‘About this result’ feature’. This allows the users to help with better understand the search results and websites at a glance.
- During the covid-19 pandemic, there were huge cases of misinformation being shared. Google, in April 2020, invested $6.5 million in funding to fact-checkers and non-profits fighting misinformation around the world, including a check on information related to coronavirus or on issues related to the treatment, prevention, and transmission of Covid-19.
- YouTube also have its Medical Misinformation Policy which prevents the spread of information or content which is in contravention of the World Health Organization (WHO) or local health authorities.
- At the time of the Covid-19 pandemic, major social media platforms such as Facebook and Instagram have started showing awareness pop-ups which connected people to information directly from the WHO and regional authorities.
- WhatsApp has a limit on the number of times a WhatsApp message can be forwarded to prevent the spread of fake news. And also shows on top of the message that it is forwarded many times. WhatsApp has also partnered with fact-checking organisations to make sure to have access to accurate information.
- On Instagram as well, when content has been rated as false or partly false, Instagram either removes it or reduces its distribution by reducing its visibility in Feeds.
Fight Against Misinformation
Misinformation is rampant all across the world, and the same needs to be addressed at the earliest. Multiple developed nations have synergised with tech bases companies to address this issue, and with the increasing penetration of social media and the internet, this remains a global issue. Big tech companies such as Meta and Google have undertaken various initiatives globally to address this issue. Google has taken up the initiative to address this issue in India and, in collaboration with Civil Society Organisations, multiple avenues for mass-scale awareness and upskilling campaigns have been piloted to make an impact on the ground.
How to prevent the spread of misinformation?
Conclusion
In the digital media space, there is a widespread of misinformative content and information. Platforms like Google and other social media platforms have taken proactive steps to prevent the spread of misinformation. Users should also act responsibly while sharing any information. Hence creating a safe digital environment for everyone.
