#FactCheck: AI-Manipulated Video Falsely Shows Ravish Kumar Criticising CJP, AAP Leaders

Introduction

For two decades, cybercrime enforcement was built around a simple assumption: criminals hide behind screens, but they still operate mostly within reachable borders. That assumption has collapsed. Today's fraud economy runs through industrial-scale scam compounds in Myanmar and Cambodia, laundering networks spanning a dozen jurisdictions, and trafficked labour forced to defraud victims thousands of miles away. INTERPOL's own trend reporting has tracked victims from more than 60 countries pulled into scam operations that now stretch well beyond Southeast Asia into Africa, the Gulf, and Latin America. Global losses from this activity are estimated in the hundreds of billions of dollars annually, and the networks rebuild faster than any single government can dismantle them.

A Threat That Outran the Old Playbook

The mismatch is the real story behind a wave of policy moves in 2025 and 2026. The August 12, 2026 U.S. National Security Presidential Memorandum authorising vetted private companies to conduct government-supervised offensive cyber operations against transnational criminal organisations is one data point in that wave, not the whole story. Washington's move sits alongside a broader, still-unfinished experiment: can the international system build cooperative machinery fast enough to match a threat that treats borders as an inconvenience rather than a barrier?

Three Tracks of International Response

Three distinct but overlapping tracks have emerged.

The treaty: The most consequential recent development is the UN Convention against Cybercrime, adopted by the General Assembly in December 2024 and opened for signature in Hanoi in October 2025, where 71 states and the EU signed on. It is the first comprehensive global treaty addressing cybercrime and cross-border evidence sharing, building on the older Budapest Convention framework that has anchored cooperation since 2004. The Hanoi Convention needs 40 ratifications to enter into force; as of mid-2026, only three states (Qatar, Azerbaijan, and Vietnam) had ratified it, and human rights groups continue to warn that its broad scope could be used by authoritarian governments to justify surveillance and cross-border data requests dressed up as cybercrime cooperation. The treaty's fate will hinge on a Conference of States Parties process now being negotiated, where democracies are pushing for genuine multi-stakeholder oversight rather than a rubber stamp.

The operational track: While treaty diplomacy moves slowly, police-to-police cooperation has scaled up dramatically. INTERPOL's Operation First Light, now an annual standing initiative, illustrates the trajectory: its 2026 iteration spanned January to April, generated over 5,800 arrests and roughly $293 million in intercepted funds, and made heavy use of the Global Rapid Intervention of Payments mechanism to freeze illicit transfers before they disappeared into crypto wallets. A parallel operation led by Dubai Police with the FBI and Chinese authorities dismantled nine pig-butchering compounds across Myanmar, Indonesia, Cambodia, and Thailand, seizing more than $701 million. In Europe, Europol's EMPACT framework has entered a new 2026–2029 cycle, deepening ties with Frontex, Eurojust, and regional partners like Ameripol and the EL PACTTO programme in Latin America, effectively building a lattice of standing coordination bodies rather than one-off task forces. These operations demonstrate real capacity, but they also expose the "whack-a-mole" problem: raided compounds in Myanmar's Myawaddy region simply relocated, reconnected via satellite internet, and resumed operations within weeks, according to regional reporting.

The public-private track: This is where the U.S. memorandum fits into a genuinely global pattern rather than standing alone. The United Kingdom's 2026–2029 Fraud Strategy centres on a £31 million Online Crime Centre, opening in 2026, that fuses data from the National Crime Agency, the intelligence community, and private partners across banking, telecoms, and technology into a single coordination hub building on existing arrangements like Stop Scams UK, where telecom operators and banks already share suspicious SIM and account data in near real time. In the U.S., a June 2026 joint action involving the Justice Department, Meta, Microsoft, Google, Apple, and Coinbase froze $3.8 billion in cryptocurrency and disrupted 1.4 million fraud-linked accounts, showing that platform cooperation can move faster than formal treaty processes. Singapore has positioned itself as a hub for this model too, anchoring the Global Anti-Scam Alliance, which now includes ASEAN's own foundation as a member, bringing governments, banks, and tech platforms into shared intelligence loops. What distinguishes the U.S. memorandum is that it goes a step further than data-sharing: it authorises companies to take disruptive technical action, not just contribute intelligence, under a legal theory that folds them into the government's own authority under the Computer Fraud and Abuse Act's law-enforcement exception.

Where the System Still Breaks Down

Despite this activity, structural gaps, like jurisdiction, are the deepest ones. Scam compounds deliberately locate in special economic zones and border regions precisely because territorial control there is contested or weak, leaving no single government with clean authority to act. ASEAN's own policy work acknowledges that nearly every stage of the regional scam value chain crosses at least one border, which is why the bloc has shifted toward standing coordination bodies like its Working Group on Anti-Online Scams rather than relying on bilateral requests.

Attribution and accountability lag behind operational tempo. Financial intelligence and blockchain analytics have improved enforcement precision, but identifying the human traffickers and financiers sitting above front-line scam operators remains slow, uneven, and dependent on political will in host countries.

Governance of the newer public-private authorities is also unsettled. Human rights advocates flag that expanding both the Hanoi Convention's surveillance-adjacent powers and unilateral hack-back authorities like the U.S. memorandum could, without careful oversight, blur the line between fighting organised fraud and enabling broader digital overreach. The U.S. memorandum's own guardrails, which are a ban on operations causing serious injury or rising to a use of force, mandatory federal sign-off, and a $1 million forfeitable bond, reflect an awareness of that risk, but its implementing procedures remain classified, and comparable transparency gaps exist in several other national programs.

The Emerging Consensus

What's notable is not any single instrument but the convergence: nearly every serious national or regional response now combines the same three ingredients deeper platform and financial-sector data sharing, standing multilateral operational coordination, and a cautious expansion of what non-state actors are permitted to do. The countries and blocs making the fastest progress, from the UK's Online Crime Centre to INTERPOL's payment-interdiction tools to ASEAN's regional information-sharing arrangement, are the ones treating cyber-enabled transnational crime as a persistent infrastructure problem rather than a series of discrete crimes to be prosecuted after the fact. Whether that convergence produces durable results or simply better-coordinated whack-a-mole will depend on the unglamorous work still ahead: ratifying treaties, writing classified rulebooks, and building the cross-border trust that lets financial and technical data move as fast as the criminals do.

Conclusion 

Transnational cybercrime has outgrown fragmented national enforcement. The emerging combination of international treaties, operational cooperation, and public-private partnerships offers a stronger response, but serious gaps in jurisdiction, accountability, and oversight remain. Ultimately, success will depend on whether states can build cooperation and safeguards capable of matching criminals’ speed, adaptability, and global reach.

Sources

• Presidential Memorandum: Expanding Capabilities to Combat Transnational Cyber-Enabled Crime — The White House
• United Nations Convention against Cybercrime — UNODC
• The Promise and Peril of the U.N. Convention Against Cybercrime — Just Security
• Moving Forward with the United Nations Convention against Cybercrime — ICCLR
• Growing threat of transnational scam centres highlighted at INTERPOL General Assembly
• Over 5,800 arrests, USD 293 million intercepted in global fraud bust — INTERPOL
• Operation First Light 2026: 276 Arrested, $701M Seized — Breached.Company

‍

Introduction

In 2019 India got its bill on Data protection in the form of the Personal Data Protection Bill 2019. This bill focused on digital rights and duties pertaining to data privacy. However, the bill was scrapped by the Govt in mid-2022, and a new bill was drafted, Successor bill was introduced as the Digital Personal Data Protection Bill, 2022 on 18th November 2022, which was made open for public comments and consultations and now the bill is expected to be tabled at the parliament in the Monsoon session.

What is DPDP, 2022?

Digital Personal Data Protection Bill, is the lasted draft regulation for data privacy in India. The bill has been essentially focused towards data protection by companies and the keep aspect of Puttaswamy judgement of data privacy as a fundamental right has been upheld under the scope of the bill. The bill comes after nearly 150 recommendations which the parliamentary committee made when the PDP, 2019 was scrapped.

The bill highlights the following keen aspects-

• Data Fiduciary- The entity (an individual, company, firm, state, etc.) which decides the purpose and means of processing an individual’s personal data.
• Data Principle- The individual to whom personal data is related.
• Processing- The entire cycle of operations that can be carried out concerning personal data.
• Gender Neutrality- For the first time in India’s legislative history, “her” and “she” have been used to refer to individuals irrespective of gender.
• Right to Erase Data- Data principals will have the right to demand the erasure and correction of data collected by the data fiduciary.
• Cross-border data transfer- The bill allows cross-border data after an assessment of relevant factors by the Central Government.
• Children’s Rights- The bill guarantees the right to digital privacy under the protection of parents/guardians.
• Heavy Penalties- The bill enforces heavy penalties for non-compliance with the provisions, not exceeding Rs 500 crore.

Data Protection Board

The bill lays down provisions for setting up a Data Protection Board. This board will be an independent body acting solely on the factors of data privacy and protection of the data principles and maintaining compliance by data fiduciaries. The board will be headed by a chairperson of essential and relevant qualifications, and members and various other officials shall assist him/her under the board. The board will serve grievance redressal to the data principles and can conduct investigation, inquiry, proceeding, and pass orders equivalent to a Civil court. The proceeding will be undertaken on the principle of natural justice, and the aggrieved can file an appeal to the High Court of appropriate jurisdiction.

Global Comparison

Many countries have data protection laws that regulate the processing of personal data. Some of the notable examples include:

• European Union: The EU’s General Data Protection Regulation (GDPR) is one of the world’s most comprehensive data protection laws. It regulates public and private entities’ processing of personal data and gives individuals a wide range of rights over their personal data.
• United States: The US has several data protection laws that apply to specific sectors or types of data, such as health data (HIPAA) or financial data (Gramm-Leach-Bliley Act). However, there is no comprehensive federal data protection law in the US.
• Japan: Japan’s Personal Information Protection Act (PIPA) regulates the handling of personal data by private entities and gives individuals certain rights over their personal data.
• Australia: Australia’s Privacy Act 1988 regulates the handling of personal data by public and private entities and gives individuals certain rights over their personal data.
• Brazil: Brazil’s General Data Protection Law (LGPD) regulates the processing of personal data by public and private entities and gives individuals certain rights over their personal data. It also imposes heavy fines and penalties on entities that violate the provisions of the law.

Overall, while there are some similarities in data protection laws across countries, there are also significant differences in scope, applicability, and enforcement. It is important for organisations to understand the data protection laws that apply to their operations and take appropriate steps to comply with these laws.

Parliamentary Asscent

The case of violation of the privacy policy by WhatsApp at the Hon’ble Supreme Court resulted in a significant advocacy for Data privacy as a fundamental right, and it was held that, as suggested otherwise in the privacy policy, Whatsapp was sharing its user’s data with Meta. This massive breach of trust could have led to data mismanagement affecting thousands of Indian users. The Hon’ble Supreme Court has taken due consideration of data privacy and its challenges in India and asked the Govt to table the bill in Parliament. The bill will be tabled for discussion in the monsoon session. The Supreme Court has set up a constitutional bench to check the bill’s scope, extent and applications and provide its judicial oversight.  The constitution bench of Justices KM Joseph, Ajay Rastogi, Aniruddha Bose, Hrishikesh Roy and CT Ravikumar has fixed the matter for hearing in August in order to enforce the potential changes and amendments in the act post the parliamentary discussion.

Conclusion

India is the world’s largest democracy, so the crucial aspects of passing laws and amendments have always been followed by the government and kept under check by the judiciary. The discussion over bills is a crucial part of the democratic process, and bills as important as Digital Personal Data Protection need to be discussed and analysed thoroughly in both houses of Parliament to ensure the govt passes a sustainable and efficient law.

Introduction

In today's digital age protecting your personal information is of utmost importance. The bad actors are constantly on the lookout for ways to misuse your sensitive or personal data. The Aadhaar card is a crucial document that is utilised by all of us for various aspects. It is considered your official government-verified ID and is used for various purposes such as for verification purposes, KYC purposes, and even for financial transactions. Your Aadhaar card is used in so many ways such as flight tickets booked by travel agents, check-in in hotels, verification at educational institutions and more. The bad actors can target and lure the victims by unauthorized access to your Aadhaar data and commit cyber frauds such as identity theft, unauthorized access, and financial fraud. Hence it is significantly important to protect your personal information and Aadhaar card details and prevent the misuse of your personal information.

What is fingerprint cloning?

Cybercrooks have been exploiting the Aadhaar Enabled Payment System (AePS). These scams entail cloning individuals' Aadhaar-linked biometrics through silicon fingerprints and unauthorized biometric devices, subsequently siphoning money from their bank accounts. Fingerprint cloning also known as fingerprint spoofing is a technique or a method where an individual tries to replicate someone else's fingerprint for unauthorized use. This is done for various reasons, including gaining unauthorized access to data, unlocking data or committing identity theft. The process of fingerprint cloning includes collection and creation.

The recent case of Aadhaar Card fingerprint cloning in Nawada

Nawada Cyber Police unit has arrested two perpetrators who were engaged in fingerprint cloning fraud.  The criminals are accused of duping consumers of money from their bank accounts by cloning their fingerprints. Among the two perpetrators, one of them runs the Common Service Centre (CSC) whereas the second is a sweeper at the DBGB branch bank. The criminals are accused of duping consumers of money from their bank accounts by cloning their fingerprints. According to the police, an organized gang of cyber criminals had been defrauding the consumers for the last two years with the help of a CSC operator and were embezzling money from the accounts of consumers by cloning their fingerprints and taking Aadhaar numbers. The operator used to collect the Aadhaar number from the consumers by putting their thumb impression on a register. Among these two perpetrators, one was accused of withdrawing more money from the consumer's account and making less payment and sometimes not making the payment after withdrawing the money. Whereas the second perpetrator stole the data of consumers from the DBGB branch bank and prepared their fingerprint clone. During the investigation of a case related to fraud, the Special Investigation Team (SIT) of Cyber ​​Police conducted raids in Govindpur and Roh police station areas on the basis of technical surveillance and available evidence and arrested them. 

Safety measures for the security of your Aadhaar Card data

• Locking your biometrics: One way to save your Aadhaar card and prevent unauthorized access is by locking your biometrics. To lock & unlock your Aadhaar biometrics you can visit the official website of UIDAI or its official portal. So go to UIDAI’s and select the “Lock/Unlock Biometrics” from the Aadhar service section. Then enter the 12-digit Aadhaar number and security code and click on the OTP option.  An OTP will be sent to your registered mobile number with Aadhaar.  Once the OTP is received enter the OTP and click on the login button that will allow you to lock your biometrics.  Enter the 4-digit security code mentioned on the screen and click on the “Enable” button. Your biometrics will be locked and you will have to unblock them in case you want to access them again. The official website of UIDAI is “https://uidai.gov.in/” and there is a dedicated Aadhar helpline 1947. 
• Use masked Aadhaar Card: A masked Aadhaar card is a different rendition of an Aadhaar card that is designed to amplify the privacy and security of an individual Aadhaar number.  In a masked Aadhaar card, the first eight digits of the twelve digits Aadhaar number are replaced by XXXX- XXXX and only the last four digits are visible.  This adds an additional layer of protection to an individual Aadhaar’s number. To download a masked Aadhaar card you visit the government website of UIDAI and on the UIDAI homepage, you will see a "Download Aadhaar" option. Click on it.  In the next step, you will be required to enter your 12-digit Aadhaar number along with the security code displayed on the screen.  After entering your Aadhaar number, click on the Send OTP. You will receive an OTP on your registered phone number. Enter the OTP received in the provided field and click on the “Submit” button.  You will be asked to select the format of your Aadhaar card, You can choose the masked Aadhaar card option. This will replace the first eight digits of your Aadhaar number with "XXXX-XXXX" on the downloaded Aadhaar card. Once the format is selected, click on the “Download Aadhaar” button and your masked Aadhaar card will be downloaded. So if any organisation requires your Aadhaar for verification you can share your masked Aadhar card which only shows the last 4 digits of your Aadhaar card number. Just the way you keep your bank details safe you should also keep your Aadhaar number secure otherwise people can misuse your identity and use it for fraud. 
• Monitoring your bank account transactions: Regularly monitor your bank account statements for any suspicious activity and you can also configure transaction alerts with your bank account transactions.

Conclusion: 

It is important to secure your Aadhaar card data effectively. The valuable security measure option of locking biometrics provides an additional layer of security. It safeguards your identity from potential scammers. By locking your biometrics you can secure your biometric data and other personal information preventing unauthorized access and any misuse of your Aadhaar card data. In today's evolving digital landscape protecting your personal information is of utmost importance. The cyber hygiene practices, safety and security measures must be adopted by all of us hence establishing cyber peace and harmonizing cyberspace. 

References:

• https://www.livehindustan.com/bihar/story-cyber-crime-csc-operator-and-bank-sweeper-arrested-in-nawada-cheating-by-cloning-finger-prints-8913667.html
• https://www.indiatoday.in/news-analysis/story/cloning-fingerprints-fake-shell-entities-is-your-aadhaar-as-safe-as-you-may-think-2398596-2023-06-27

‍

‍