#FactCheck - AI-Generated Video of Peacock ‘Rescue’ Falsely Shared as Real

Executive Summary

‍
A graphic featuring a photograph of Mojtaba Khamenei, the son of Iran’s Supreme Leader Ayatollah Ali Khamenei, is being widely circulated on social media. The graphic carries a statement attributed to him: “It is not appropriate for the Prime Minister of India to bow before Trump, and India was a matter of pride under Indira Gandhi.” The graphic claims that Mojtaba Khamenei made this statement. CyberPeace Research Wing’s research found that Mojtaba Khamenei did not make any such statement. The research revealed that there is no credible evidence, official statement, interview, or verified social media post supporting the claim. Had such a statement been made by him, it would have been reported by credible media outlets.

‍

Claim

‍

Sharing the graphic, an X user named Thakur Kuldeep Singh wrote:“Narendra Modi has tarnished India’s name across the entire world. Do we now have to hear all this from Iran too?”

https://x.com/Ramesh18498367/status/2066095602954649607?s=20

https://archive.ph/BsuCY

‍

‍

Fact Check

‍

As part of our fact-checking process, we conducted a keyword search on Google using terms such as “Mojtaba Khamenei criticized India’s Prime Minister for bowing before Trump” and “Mojtaba Khamenei praised India under Indira Gandhi.” However, we found no credible news reports, official statements, interviews, or verified social media posts supporting the claim that Mojtaba Khamenei made such remarks. During our research, we also found a report published by NDTV on March 12, 2026, which mentioned remarks made by a representative of Iran’s Supreme Leader regarding Iran-India relations.

https://www.ndtv.com/video/he-loves-india-iran-s-supreme-leader-mojtaba-khamenei-s-representative-to-ndtv-1071184

‍

‍

According to the report, the representative stated that Mojtaba Khamenei “loves India” and values the long-standing civilizational ties between the two countries. He further said that Iran’s leadership has historically admired India’s culture, philosophy, and history and has consistently supported stronger relations between the two nations.

‍

Conclusion

‍

Our research found that the claim attributing a statement to Mojtaba Khamenei criticizing India’s Prime Minister for bowing before Trump and praising India during Indira Gandhi’s tenure is false. There is no credible news report, official statement, interview, or verified social media post confirming that Mojtaba Khamenei made such a statement. The viral graphic is being circulated with a false attribution.

‍

Introduction

In an era where digital connectivity drives employment, investment, and communication, the most potent weapon of cybercriminals is ‘gaining trust’ with their sophisticated tactics. Prayagraj has been a recent battleground in India's cybercrime landscape. Within a one-year crackdown, over 10,400 SIM cards, 612 mobile device IMEIs, and 59 bank accounts were blocked, exposing a sprawling international fraud network. These activities primarily targeted unsuspecting individuals through Telegram job postings, fake investment tips, and mobile app scams, highlighting the darker side of convenience in cyberspace. With India now experiencing a wave of scams enabled by technology, this crackdown establishes a precedent for concerted cyber policing and awareness among citizens. 

Digital Deceit: How the Scams Operated

SIM cards that have been issued through fake or stolen identities are increasingly being used by cybercriminals in Prayagraj and elsewhere. These SIMs were the initial weapon in a highly organised fraud system, allowing criminals to conduct themselves anonymously while abusing messaging services like WhatsApp and Telegram. The gangs involved in these scams, some of which have been linked by reports to nations like Nepal, Pakistan, China, Dubai, and Myanmar, enticed their victims with rich-yielding stock market advice, remote employment offers, and weekend employment promises. After getting a target engaged, victims were slowly manipulated into sending money in the name of application fees, verification fees, or investment contributions.

API Abuse and OTP Interception

What's more alarming about these scams is their tech-savviness. From Prayagraj's cybercrime squad, several syndicates are reported to have employed API-based mobile applications to intercept OTPs (One-Time Passwords) sent to Indian numbers. Such apps, cleverly disguised as genuine services or work-from-home software, collected personal details like bank account credentials and payment card data, allowing wrongdoers to carry out unauthorised transactions in a matter of minutes. The pilfered funds were then quickly transferred through several mule accounts, rendering the money trail almost untraceable.

The Human Impact: How Citizens Were Trapped

Victims tended to come from job-hunting groups, students, or housewives seeking to earn additional income. Often, the scammers persuaded users to join Telegram channels providing free investment advice or job-referral-based schemes, creating an illusion of authenticity. Once on board, victims were sometimes even paid small commissions initially, creating a false sense of success. This tactic, known as “advance-fee confidence building,” made victims more likely to invest larger sums later, ultimately leading to complete financial loss.

Digital Arrest Threats and Bitcoin Ransom Scams

Aside from investment and job scam complaints, the cybercrime cell also saw several "digital arrest" scams, where victims were forced to send money under the threat of engaging in criminal activities. Bitcoin extortion schemes were also used in some cases, with perpetrators threatening exposure of victims' personal information or browsing history on the internet unless they were paid in cryptocurrency.

Law Enforcement’s Cyber Shield: Local Action, Global Impact

Identifying the extent of the threat, Prayagraj authorities implemented strategic measures to enable local policing. Cyber Units have been formed in each of the 43 police stations in the district, each made up of a sub-inspector, head constable, constable, lady constable, and computer operator. This decentralised model enables response in real-time, improved victim support, and quicker forensic analysis of hacked devices. The nodal officer for cyber operations said that this multi-level action is not punitive but preventive, meant to break syndicates before more harm is caused.

CyberPeace Recommendations: Prevention is Power

As cybercrime gets advanced, citizens will also have to keep pace with it. Prayagraj's experience highlights the importance of public awareness, digital literacy, and instant response processes. To assist in preventing people from falling victim to such scams, CyberPeace advises the following:

• Don't click on dubious APK links sent on WhatsApp or Telegram.
• Do not share OTPs or confidential details, even if the source appears to be familiar.
• Never download unfamiliar apps that demand access to SMS or financial information.
• Block your SIM card, payment cards, and bank accounts at once if your phone is stolen.
• Report all cyber frauds to cybercrime.gov.in or your local Cyber Cell.
• Never join investment or job groups on social sites without verification.
• Refuse video calls from unknown numbers; some scammers use this method of recording or blackmailing victims.

Conclusion

Prayagraj crackdown uncovers both the magnitude and versatility of cybercrime in the present. From trans-border cartels to Telegram job scams, the cyber front is as intricate as ever. But this incident also illustrates what can be achieved when technology, law enforcement, and public awareness come together. To stay safe from cyber threats, a cyber-conscious citizenry is as important as an effective cyber cell for India. At CyberPeace, we know that defending cyberspace begins with cyber resilience, and the story of Prayagraj should encourage communities everywhere to take active digital precautions. 

References

• https://www.hindustantimes.com/cities/lucknow-news/over-10k-sims-blocked-as-job-investment-frauds-rise-in-prayagraj-101753715061234.html
• https://consumer.ftc.gov/articles/how-recognize-and-avoid-phishing-scams
• https://faq.whatsapp.com/2286952358121083
• https://education.vikaspedia.in/viewcontent/education/digital-litercy/information-security/preventing-online-scams-cert-in-advisory?lgn=en
• https://cybercrime.gov.in/Accept.aspx
• https://www.linkedin.com/pulse/perils-advance-fee-fraud-protecting-yourself-from-scammers-sharma/

‍

Introduction

Delhi is Delhi-ing these days — whether it's the protest, the monsoon weather, the ongoing Monsoon Session of Parliament, metro disruptions, or just the general chaos of it all. Amid everything else, it's been over 30 days, starting from late June 2026, since the large public march organised in part by the group known as the Cockroach Janta Party (CJP) converged near Parliament and on Jantar Mantar, and the city hasn't quite exhaled since. Like every large, fast-moving public event, it's come with a parallel flood online: photos, video clips, injury claims, and hot takes pouring in from participants, bystanders, and news outlets alike, all competing for your instagram scroll.

CyberPeace is a non-partisan digital trust and safety organisation, and what we do care about is the online information environment building up around the event — helping people spot misinformation and manipulated media, and encouraging a bit more caution before hitting "share" while rumours are moving faster than facts.

Delhi Police has already made a public appeal along similar lines, asking citizens against online spread of unverified rumours, noting that misinformation could make an already tense situation worse. This advisory builds on that, with some practical guidance for everyday citizens navigating the protest in light of social media.

Why This Matters Right Now

30 plus days in, the story has layers: the original hunger strike, the march itself, police action, viral clips, and now a second wave of commentary reacting to the reactions. Old footage resurfaces relabelled as "live." Numbers get inflated or deflated depending on who's sharing them. Screenshots go around stripped of context. The longer a protest runs, the murkier the timeline gets for anyone just scrolling past — which is exactly when misinformation finds the most room to spread.

The internet access was also restricted in parts of the city during the march, which has itself become a point of attention.

Given how much unverified information is already circulating, it's worth treating any single account of "what actually happened". The full picture will likely take time to emerge through credible reporting and scrutiny. 

Why This Moment Is Especially Prone to Misinformation

A few things are working together here to make mis-information spread faster than usual: Emotions are running high. Clashes, injuries, and confrontations naturally provoke strong reactions, and content that makes people angry or afraid tends to get shared quickly, with far less scrutiny than a calm, verified report would get.

There are information gaps. Reports of internet restrictions in parts of the city leave holes that get filled with speculation  or worse, old footage recycled and passed off as live updates.

The event is politically charged, which means competing narratives are synthetically being pushed from multiple directions, sometimes deliberately, making it harder to find neutral ground.

There's simply a huge volume of content. Thousands of clips and photos are being posted from one event, which makes it easy for unrelated or out-of-context material to slip in alongside the real thing. And then there's satire. Part of this movement has roots in political satire, so parody posts and meme accounts can easily be mistaken for genuine news if they're shared without context.

Common Types of Misleading Content to Watch For

A few patterns tend to show up again and again during events like this:

1. Old footage getting relabelled -  Photos or videos from a completely different protest, city, or even country, re-shared with a caption claiming it's from this event.
2. Clips taken out of context - A short moment, like a scuffle, shown without what happened right before or after it, changing how it reads.
3. Doctored images - Photos edited to add, remove, or exaggerate people, banners, injuries, or crowd size.
4. Fake official statements - Screenshots or graphics designed to look like they came from Delhi Police or a government department, but never actually issued.
5. Made-up casualty numbers - Figures shared with no real source, often vaguely attributed to "eyewitnesses."
6. Impersonation accounts - Handles designed to look like an official police or organiser account, sometimes just one letter off from the real one.
7. AI-generated visuals - Fully or partly synthetic images and videos showing scenes or crowds that never actually happened.
8. Rumours about shutdowns - Unverified claims about internet blackouts, road closures, or metro shutdowns that may be old, exaggerated, or simply untrue.

What Citizens Should Do:

• Pause before you forward. If a clip or claim makes you feel an instant, strong reaction, that's often the moment to slow down, not speed up.
• Check the timestamp and source. A five-day-old protest generates a lot of recycled footage. Reverse image/video search before assuming something is "breaking."
• Cross-check with more than one outlet. If only one account or page is reporting something dramatic, wait for corroboration.
• Be wary of numbers without sources. Injury counts, crowd sizes, and arrest figures are easy to exaggerate in either direction.
• Don't share unverified visuals of injuries or violence. Beyond accuracy concerns, this can also cause real harm to the people shown.
• When in doubt, don't repost — verify first, or simply sit it out.

How to Check a Claim Before You Share It:

A checklist goes a long way here:

1. Pause for a second. Content built to provoke a strong reaction is often designed to get past your defenses before you think twice. Just slowing down is itself protective.
2. Ask where it actually came from. Is this from a named journalist or outlet you can verify, or an anonymous forward with no clear origin? Messages that have clearly been passed around many times deserve extra suspicion.
3. Look for more than one source. If something significant is genuinely true, you'll usually find several independent, reputable outlets reporting it not just one channel or account.
4. Check the date and place. A quick reverse image or video search can tell you if a photo or clip has shown up online before, and what it was originally about.
5. Wait for official confirmation. For anything involving police action, injuries, or arrests, check verified accounts like Delhi Police, PIB, established news wires before treating a claim as settled fact.
6. Be suspicious of absolute language. Words like "confirmed," "breaking," or "exposed," used without naming any actual source, are a classic misinformation tell.
7. Look at the account, not just the post. New accounts with no history, or ones that only ever post about this one topic, deserve a second look.
8. Notice when something feels too satisfying. If a claim perfectly confirms what you already believed, that's exactly when you should slow down and check it; it's the content you're least likely to question on your own.

Reliable Fact-Checking Platforms and AI Detection Tools:

These resources can help you check specific claims, images, or videos:

1. For fact-checking: PIB Fact Check (factcheck.pib.gov.in) for anything involving government statements or orders; Alt News (altnews.in) and BOOM Live (boomlive.in), two independent Indian outlets that regularly cover protest- and politics-related claims.
2. For reverse image and video searches: Google Images, Google Lens, and TinEye can show you where a photo first appeared and in what context. InVID-WeVerify is a free browser plugin built for journalists that breaks videos into keyframes and lets you reverse-search individual frames.
3. For AI and synthetic media detection: Hive Moderation and Sensity AI offer public tools for checking images and video. Deepware Scanner focuses specifically on deepfake video. And most major platforms like Meta, YouTube, X are now labeling some AI-generated content automatically, though the absence of a label doesn't mean something's real.
4. A few terms worth knowing: A cheapfake is misleading media made with simple editing, cropping, slowing down, re-captioning rather than AI. These are still far more common than actual AI deepfakes. A deepfake is synthetic audio, video, or image content made with AI to convincingly show someone saying or doing something they didn't. Synthetic media is the broader umbrella term for any AI-generated content, whether or not it's being used to deceive.

Reporting Mechanism ~ If You Come Across Suspected Misinformation

Don't share it further, even to mock or correct it  any engagement can boost its reach. Check it against the fact-checking tools above before deciding what you think is true. Report it directly on the platform. If it falls  under the category of ‘Unlawful Content’ as per IT Rules, you can reach out to the grievance officer of the platform for removal of such content.

If it involves a government statement or order, send it to PIB Fact Check. If it looks like incitement, impersonation, extortion, or another cybercrime, report it to the National Cyber Crime Reporting Portal (cybercrime.gov.in) or call 1930. 

Further Steps & helplines

1. To file a cybercrime complaint: National Cyber Crime Reporting Portal - 1930 or cybercrime.gov.in 
2. To flag a fake government-related claim: PIB Fact Check - factcheck.pib.gov.in
3. For an on-ground emergency: dial 100 / 112 
4. CyberPeace Helpline: +91 9570000066 or helpline@cyberpeace.net
5. For fact check and debunking of any suspicious viral information, you can reach out to cyberpeace at helpline@cyberpeace.net
6. If this advisory feels useful, consider sharing it in family WhatsApp groups, community networks, or student and youth organisations as it helps slow the spread of unverified content when more people are thinking about it.

CyberPeace's Message to Citizens

Being first to share something isn't the same as being right. In moments like this, the most useful thing any of us can do is slow down, verify before sharing, be a little suspicious of content that confirms exactly what we already believed, and trust named, accountable sources over anonymous forwards. Misinformation during civic unrest doesn't just mislead people; it can raise tensions, put individuals at risk, and chip away at trust in both the media and the institutions meant to maintain public order.Our goal is simply to help people navigate the information around it a little more safely and critically.

Conclusion

Protests and public unrest always generate a flood of information, and not all of it will be accurate. What keeps that information environment healthy isn't any single authority or platform, it's the everyday habits of the people deciding, one post at a time, whether to check something or just pass it along.  Delhi's news cycle will keep moving, and this advisory isn't asking anyone to disengage from it. It's just a nudge to stay a little more careful with what you believe and what you pass on in this social media age. Pause. Verify. Scroll healthy. Stay CyberPeaceful.

References

1. https://rajkaran.in/delhi-police-urges-calm-amid-cjp-protest-warns-against-rumours-as-clashes-erupt-during-chalo-sansad-march
2. https://www.youtube.com/shorts/0kkSCYrjRGc
3. https://factcheck.pib.gov.in/
4. https://www.altnews.in/
5. https://www.boomlive.in/
6. https://www.vishvasnews.com/
7. https://www.factcrescendo.com/
8. https://cybercrime.gov.in/

Contributors

1. Neeraj Soni, Sr. Research Analyst, Policy & Advocacy, CyberPeace
2. Ritika Goswami, Intern - Policy & Advocacy, CyberPeace

‍