#FactCheck- Old Kerala church raid video falsely shared with exaggerated ₹7000 crore cash seizure claim

Introduction

India is becoming more digital. People are using cards and phones to pay for things. This means there is a risk of people stealing card information and committing fraud. The Payment Card Industry Data Security Standard or PCI DSS is a set of rules that helps companies keep card information safe. It was created by the PCI Security Standards Council, which was started by Visa, Mastercard, American Express, Discover and JCB. The goal of PCI DSS is to reduce the risk of data breaches and card fraud by making sure companies have security controls in place. For India, where digital payments are becoming more popular, PCI DSS is becoming a thing to do.

Applicability in India

PCI DSS applies to all companies in India that store, process or transmit card information. This includes banks, payment companies like Razorpay, PayU and CCAvenue and online sellers. Even companies that use a hosted payment page are responsible for following the rules. Companies that have their payment forms and handle card information have to follow more rules.

Why PCI DSS Matters

Payment security is very important for customers to trust a company. If a company has a security breach it can expose a lot of card information. Damage the company's reputation. In India, where cybercrime's a big problem, PCI DSS helps companies keep card information safe. It has rules for firewalls, encryption, access controls and regular testing to prevent fraud.

Regulatory Landscape: The RBIs Role

PCI DSS is not a law in India. The Reserve Bank of India or RBI has made it a requirement. The RBI has rules that require companies to follow PCI DSS and have security audits. Non-bank companies have to get permission from the RBI and follow rules to store payment information in India. This makes PCI DSS a standard for keeping card information safe in India.

Key Requirements and the Compliance Process

The current version of PCI DSS has twelve requirements that companies have to follow. These requirements include building a network protecting card information and regular testing. Companies have to start by identifying what parts of their system handle card information. Then do a gap analysis to see what they need to do to comply. Smaller companies can usually do this in a week but bigger companies may take several months.

Common Challenges and Practical Solutions

Some problems companies face when trying to comply with PCI DSS include old computer systems that cannot handle modern encryption and unclear rules that make it hard to know what to do. Some solutions include separating the card information system from the rest of the network using tokens and encryption to keep card information safe and regularly checking for vulnerabilities.

Business and Regulatory Benefits

Following PCI DSS rules can help companies avoid penalties and have security breaches. It can also make it easier for companies to work with banks and card networks and build trust with customers. Regulators also look favorably on companies that follow the rules.

Recent Developments and Trends

The RBI has been making rules and requiring companies to follow PCI DSS more closely. As digital payments become more popular it is likely that the RBI will keep making rules to keep card information safe.

As India's digital economy grows, keeping payment information safe is becoming more important. PCI DSS is a set of rules that helps companies keep card information safe. The RBI has made it a requirement for companies to follow these rules. Companies that follow the rules can build trust with customers. Avoid security breaches.

Conclusion

As India's digital economy deepens, protecting payment data is no longer optional; it is the price of participating in the card ecosystem. PCI DSS gives banks, fintechs, gateways and merchants a common, internationally recognised language for security, while RBI's guidelines add local regulatory teeth. Organisations that treat compliance as a continuous discipline, rather than a once-a-year audit exercise, will find it easier to earn customer trust, avoid costly breaches, and scale with confidence. For every business touching cardholder data in India, the message is clear: PCI DSS compliance is now foundational to running a secure, trustworthy digital payments operation.

References

1.  https://www.pcisecuritystandards.org/document_library/
2. https://www.rbi.org.in/Scripts/BS_ViewMasDirections.aspx
3. https://www.rbi.org.in/Scripts/NotificationUser.aspx
4. https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=11822
5. https://www.incorpx.io/blog/pci-dss-compliance-ecommerce-fintech-india
6.  https://cyraacs.com/pci-dss-compliance-checklist
7. https://www.skydo.com/blog/pci-dss-compliance-guide
8. https://www.cybercrime.gov.in/

‍

Introduction

Deepfakes are artificial intelligence (AI) technology that employs deep learning to generate realistic-looking but phoney films or images. Algorithms use large volumes of data to analyse and discover patterns in order to provide compelling and realistic results. Deepfakes use this technology to modify movies or photos to make them appear as if they involve events or persons that never happened or existed.The procedure begins with gathering large volumes of visual and auditory data about the target individual, which is usually obtained from publicly accessible sources such as social media or public appearances. This data is then utilised for training a deep-learning model to resemble the target of deep fakes.

Recent Cases of Deepfakes-‍

‍
In an unusual turn of events, a man from northern China became the victim of a sophisticated deep fake technology. This incident has heightened concerns about using artificial intelligence (AI) tools to aid financial crimes, putting authorities and the general public on high alert.
During a video conversation, a scammer successfully impersonated the victim’s close friend using AI-powered face-swapping technology. The scammer duped the unwary victim into transferring 4.3 million yuan (nearly Rs 5 crore). The fraud occurred in Baotou, China.

AI ‘deep fakes’ of innocent images fuel spike in sextortion scams
Artificial intelligence-generated “deepfakes” are fuelling sextortion frauds like a dry brush in a raging wildfire. According to the FBI, the number of nationally reported sextortion instances came to 322% between February 2022 and February 2023, with a notable spike since April due to AI-doctored photographs. And as per the FBI, innocent photographs or videos posted on social media or sent in communications can be distorted into sexually explicit, AI-generated visuals that are “true-to-life” and practically hard to distinguish. According to the FBI, predators often located in other countries use doctored AI photographs against juveniles to compel money from them or their families or to obtain actual sexually graphic images.

Deepfake Applications

• Lensa AI.
• Deepfakes Web.
• Reface.
• MyHeritage.
• DeepFaceLab.
• Deep Art.
• Face Swap Live.
• FaceApp.

Deepfake examples

There are numerous high-profile Deepfake examples available. Deepfake films include one released by actor Jordan Peele, who used actual footage of Barack Obama and his own imitation of Obama to convey a warning about Deepfake videos.
A video shows Facebook CEO Mark Zuckerberg discussing how Facebook ‘controls the future’ with stolen user data, most notably on Instagram. The original video is from a speech he delivered on Russian election meddling; only 21 seconds of that address were used to create the new version. However, the vocal impersonation fell short of Jordan Peele’s Obama and revealed the truth.

The dark side of AI-Generated Misinformation

• Misinformation generated by AI-generated the truth, making it difficult to distinguish fact from fiction.
• People can unmask AI content by looking for discrepancies and lacking the human touch.
• AI content detection technologies can detect and neutralise disinformation, preventing it from spreading.

Safeguards against Deepfakes-

Technology is not the only way to guard against Deepfake videos. Good fundamental security methods are incredibly effective for combating Deepfake.For example, incorporating automatic checks into any mechanism for disbursing payments might have prevented numerous Deepfake and related frauds. You might also:

• Regular backups safeguard your data from ransomware and allow you to restore damaged data.
• Using different, strong passwords for different accounts ensures that just because one network or service has been compromised, it does not imply that others have been compromised as well. You do not want someone to be able to access your other accounts if they get into your Facebook account.
• To secure your home network, laptop, and smartphone against cyber dangers, use a good security package such as Kaspersky Total Security. This bundle includes anti-virus software, a VPN to prevent compromised Wi-Fi connections, and webcam security.

What is the future of Deepfake –

Deepfake is constantly growing. Deepfake films were easy to spot two years ago because of the clumsy movement and the fact that the simulated figure never looked to blink. However, the most recent generation of bogus videos has evolved and adapted.
There are currently approximately 15,000 Deepfake videos available online. Some are just for fun, while others attempt to sway your opinion. But now that it only takes a day or two to make a new Deepfake, that number could rise rapidly.

Conclusion-

The distinction between authentic and fake content will undoubtedly become more challenging to identify as technology advances. As a result, experts feel it should not be up to individuals to discover deep fakes in the wild. “The responsibility should be on the developers, toolmakers, and tech companies to create invisible watermarks and signal what the source of that image is,” they stated. Several startups are also working on approaches for detecting deep fakes.

Introduction

In the labyrinthine corridors of the digital age, where information zips across the globe with the ferocity of a tempest, the truth often finds itself ensnared in a web of deception. It is within this intricate tapestry of reality and falsehood that we find ourselves examining two distinct yet equally compelling cases of misinformation, each a testament to the pervasive challenges that beset our interconnected world.

Case 1: The Deceptive Video: Originating in Malaysia, Misattributed to Indian Railway Development

A misleading video claiming to showcase Indian railway construction has been debunked as footage from Malaysia's East Coast Rail Link (ECRL). Fact-checking efforts by India TV traced the video's origin to Malaysia, revealing deceptive captions in Tamil and Hindi. The video was initially posted on Twitter on January 9, 2024, announcing the commencement of track-laying for Malaysia's East Coast Railway. Further investigation reveals the ECRL as a joint venture between Malaysia and China, involving the laying of tracks along the east coast, challenging assertions of Indian railway development. The ECRL's track-laying initiative, initiated in December 2023, is part of China's Belt and Road initiative, covering 665 kilometers across states like Kelantan, Terengganu, Pahang, and Selangor, with a completion target set for 2025.

The video in question, a digital chameleon, had its origins not in the bustling landscapes of India but within the verdant bounds of Malaysia. Specifically, it was a scene captured from the East Coast Rail Link (ECRL) project, a monumental joint venture between Malaysia and China, unfurling across 665 kilometers of Malaysian terrain. This ambitious endeavor, part of the grand Belt and Road initiative, is a testament to the collaborative spirit that defines our era, with tracks stretching from Kelantan to Selangor, and a completion horizon set for the year 2025.

The unveiling of this grand project was graced by none other than Malaysia’s King Sultan Abdullah Sultan Ahmad Shah, in Pahang, underscoring the strategic alliance with China and the infrastructural significance of the ECRL. Yet, despite the clarity of its origins, the video found itself cloaked in a narrative of Indian development, a falsehood that spread like wildfire across the digital savannah.

Through the meticulous application of keyframe analysis and reverse image searches, the truth was laid bare. Reports from reputable sources such as the Associated Press and the Global Times, featuring the very same machinery, corroborated the video's true lineage. This revelation not only highlighted the ECRL's geopolitical import but also served as a clarion call for the critical role of fact-checking in an era where misinformation proliferates with reckless abandon.

Case 2: Kerala's Incident: Investigating Fake Narratives

Kerala Chief Minister Pinarayi Vijayan has registered 53 cases related to spreading fake narratives on social media to incite communal sentiments following the blasts at a Christian religious gathering in October 2023. Vijayan said cases have been registered against online news portals, editors, and Malayalam television channels. The state police chief has issued directions to monitor social media to stop fake news spread and take appropriate actions.

In a different corner of the world, the serene backdrop of Kerala was shattered by an event that would ripple through the fabric of its society. The Kalamassery blast, a tragic occurrence at a Christian religious gathering, claimed the lives of eight individuals and left over fifty wounded. In the wake of this calamity, a man named Dominic Martin surrendered, claiming responsibility for the heinous act.

Yet, as the investigation unfolded, a different kind of violence emerged—one that was waged not with explosives but with words. A barrage of fake narratives began to circulate through social media, igniting communal tensions and distorting the narrative of the incident. The Kerala Chief Minister, Pinarayi Vijayan, informed the Assembly that 53 cases had been registered across the state, targeting individuals and entities that had fanned the flames of discord through their digital utterances.

The Kerala police, vigilant guardians of truth, embarked on a digital crusade to quell the spread of these communally instigative messages. With a particular concentration of cases in Malappuram district, the authorities worked tirelessly to dismantle the network of fake profiles that propagated religious hatred. Social media platforms were directed to assist in this endeavor, revealing the IP addresses of the culprits and enabling the cyber cell divisions to take decisive action.

In the aftermath of the blasts, the Chief Minister and the state police chief ordered special instructions to monitor social media platforms for content that could spark communal uproar. Cyber patrolling became the order of the day, as a 20-member probe team was constituted to  deeply investigate the incident. 

Conclusion

These two cases, disparate in their nature and geography, converge on a singular point: the fragility of truth in the digital age. They highlight the imperative for vigilance and the pursuit of accuracy in a world where misinformation can spread like wildfire. As we navigate this intricate cyberscape, it is imperative to be mindful of the power of fact-checking and the importance of media literacy, for they are the light that guides us through the fog of falsehoods to the shores of veracity. 

These narratives are not merely stories of deception thwarted; they are a call to action, a reminder of our collective responsibility to safeguard the integrity of our shared reality. Let us, therefore, remain steadfast in our quest for the truth, for it is only through such diligence that we can hope to preserve the sanctity of our discourse and the cohesion of our societies.

References:

1. https://www.indiatvnews.com/fact-check/fact-check-misleading-video-claims-malaysian-rail-project-indian-truth-ecrl-india-railway-development-pm-modi-2024-01-29-914282
2. https://sahilonline.org/kalamasserry-blast-53-cases-registered-across-kerala-for-spreading-fake-news

‍