#FactCheck-Old 2020 Lockdown Video of PM Modi Resurfaces as Recent

‍Introduction

Picture every paper trade document, such as bills of lading, certificates of origin, letters of credit, and packing lists, stacked one on top of another. By one industry estimate, the roughly four billion such documents in circulation each year would form a tower over 500 kilometres high, well past the edge of space. This absurd image reflects a simple truth, global trade has relied on paper for centuries, making transactions slow, expensive, and vulnerable to loss, forgery, and disputes.

Today, however, we complete many activities that once depended on paper through digital platforms. We open bank accounts through mobile applications, sign contracts electronically, file taxes online, and access government services through websites, all without handling a single physical document. Global trade is now undergoing a similar transformation. Yet, as trade moves online, the challenge is no longer managing stacks of paper, but protecting digital trade from cyber threats. The success of this transition will therefore depend as much on robust cybersecurity as on the adoption of digital technologies.

From Paper Trails to Platforms

For decades, an Indian exporter clearing a container needed physical stamps from customs, port authorities, banks, and multiple regulatory agencies, each on its own timeline. That has been changing under India's National Trade Facilitation Action Plan, now in its third iteration (NTFAP 3.0, 2024–27), which set out to close the remaining gaps in paperless trading systems. The shift shows up in international benchmarks: India's score on the UN's Global Survey on Digital and Sustainable Trade Facilitation has climbed sharply, with the institutional-cooperation component alone improving from under 67% to nearly 89% in recent rounds. A 2026 policy brief jointly released by ICRIER, RIS, and the Centre for WTO Studies concludes that India has achieved full implementation of domestic paperless trade measures, a rare distinction globally even as cross-border digitalisation continues to deepen.

The Building Blocks: ICEGATE to BharatTradeNet

This transformation rests on a stack of interlocking platforms. ICEGATE, the customs electronic data-interchange gateway, lets traders file declarations digitally rather than in person. SWIFT, the Single Window Interface for Facilitating Trade, connects multiple regulatory agencies so a trader deals with one portal instead of dozens. e-SANCHIT digitises supporting documents for customs clearance, cutting paperwork once attached to every consignment. Faceless assessment, rolled out under the CBIC's "Turant Customs" push, separates the assessing officer from the physical location of the goods, reducing scope for delay and discretion. The newest addition, BharatTradeNet, announced in the Union Budget 2025-26, is unified digital public infrastructure linking DGFT, GSTN, banks, shipping lines, and exporters on one platform for trade documentation and financing built to complement the Unified Logistics Interface Platform and align with international conventions.

None of this works without a legal backbone. India's proposed Trade Facilitation Bill aims to give electronic trade documents the same legal standing as paper ones, closing an interoperability gap that has long complicated cross-border recognition of digital records. Recent trade agreements have also begun embedding firmer commitments on paperless trade, a sign that digitalisation is no longer a back-office IT project but a live item in trade diplomacy.

What's at Stake Economically

The economic case is straightforward: paper costs money and time. Digitised customs and documentation shrink dwell times at ports, cut transaction costs, and reduce the discretion-driven delays that disproportionately hurt smaller firms. That matters for India's MSMEs, whose export contribution has grown from roughly ₹3.95 lakh crore to ₹12.39 lakh crore in recent years, aided by platforms such as the Government e-Marketplace and ONDC, which together have onboarded well over a million sellers. Electronics exports touched a record $47 billion in 2025, helped along by production-linked incentives and smoother compliance. With India's total merchandise exports crossing $714 billion in the first ten months of FY 2025-26, the efficiency gains from digitalisation compound across an ever-larger base and help Indian firms plug into global value chains that increasingly expect real-time, verifiable documentation rather than faxed certificates.

India's Regional Moment

Beyond its own backyard, India has regional aspirations. Following deliberations at the Asia-Pacific Trade Facilitation Forum and Paperless Trade Week 2026 in Bangkok last May, international experts were of the opinion that most of the necessary digital and regulatory infrastructure for India to join the UN Framework Agreement on Facilitation of Cross-Border Paperless Trade in Asia and the Pacific (CPTA – a treaty-based and intended to make paperless trade globally, not just internationally, interoperable) had been laid in place. Joining CPTA will also allow India to have a say on digital trade frameworks in the region and thus be a game-changer in integrating SAARC, ASEAN and global supply chains together while reducing costs of trade.

The Cybersecurity Imperative

The catch is that every portal, system and API that takes the place of a paper stamp has the potential to become an attack vector. The increase in overall ransomware activity reached more than 50% worldwide in 2025, and supply-chain attacks almost doubled. These types of attacks hit manufacturing, now a key part of India's export basket, hardest of all industrial ransomware attacks.

The notorious NotPetya attack in 2017, which effectively brought Maersk's worldwide shipping operations to a halt and shut down container movement at Mumbai's Jawaharlal Nehru Port, serves as a painful reminder that the compromise of even a single system can bring physical cargo movement within a network to a standstill.

For a trade ecosystem running on digital trust, the nature of risks include: ransomware that immobilizes ports and customs systems, supply-chain attacks that leverage a single trusted service provider to get access to dozens of downstream clients, data theft revealing shipment and financial data, impostor fraud to trick people into assuming the identity of a banks or exporter, modification of digital bills of lading, certificates of origin or other essential trade documents. When an original physical document is misplaced, it has no effect on anyone but its keeper. A corrupted digital file, on the other hand, can be stealthily changed and propagate across every system it touches instantly.

Building Trust by Design

It is a prerequisite to digital commerce to have these systems so they can even be trusted. This means a zero-trust architecture where all users and devices are authenticated rather than just assumed to be safe once you cross an organisational boundary; transport-level encryption; digital signatures & PKI for crypto-validating shipping documents; identity & access controls ensuring access to shipment data is limited to authorised persons; and anomaly detection to alert on intrusions before the problems can snowball. India's legal & policy framework for cybersecurity is indeed evolving, with the Digital Personal Data Protection Act, 2023 (and its rules finalised Jan 2025) obligating data fiduciaries & stipulating breaches must be reported within 6 hours to CERT-In; the National Cyber Security Reference Framework provides a foundational blueprint for digital public infrastructure, all under the stewardship of the National Critical Information Infrastructure Protection Centre, which monitors systems vital for the functioning of commerce.

Conclusion

India's digitised trade infrastructure from ICEGATE and SWIFT to e-SANCHIT, BharatTradeNet, and faceless customs has effectively brought it into the running for the title of regional digital trade leader. However, the success of this transformation will ultimately be measured not by the number of digital platforms it deploys, but by the trust, security, and resilience of the ecosystem that supports them. As trade becomes increasingly digital, robust cybersecurity will remain the foundation for protecting commercial data, maintaining confidence among trading partners, and ensuring that India's digital trade ambitions translate into sustainable economic growth.

Sources

1. Cyble — Ransomware Attacks and Supply Chain Threats in 2025
2. Chambers and Partners — Cybersecurity 2026: India
3. Drishti IAS — Key Cyberthreats India is Facing and Key Measures India has Adopted to Strengthen Cybersecurity
4. Protium — MSME Export Contribution Has Grown from ₹3.95 Lakh Crore to ₹12.39 Lakh Crore
5. IBEF — India's E-commerce Boom: Growth, Trends & Future Prospects
6. News on Air — India Achieves Record Electronics Exports of $47 Billion in 2025

‍

Introduction:

This report examines ongoing phishing scams targeting "State Bank of India (SBI)" customers, India's biggest public bank using fake SelfKYC APKs to trick people. The image plays a part in a phishing plan to get users to download bogus APK files by claiming they need to update or confirm their "Know Your Customer (KYC)" info.

Fake Claim:

A picture making the rounds on social media comes with an APK file. It shows a phishing message that says the user's SBI YONO account will stop working because of their "Old PAN card." It then tells the user to install the "WBI APK" APK (Android Application Package) to check documents and keep their account open. This message is fake and aims to get people to download a harmful app.

Key Characteristics of the Scam:

• The messages "URGENTLY REQUIRED" and "Your account will be blocked today" show how scammers try to scare people into acting fast without thinking.
• PAN Card Reference: Crooks often use PAN card verification and KYC updates as a trick because these are normal for Indian bank customers.
• Risky APK Downloads: The message pushes people to get APK files, which can be dangerous. APKs from places other than the Google Play Store often have harmful software.
• Copying the Brand: The message looks a lot like SBI's real words and logos to seem legit.
• Shady Source: You can't find the APK they mention on Google Play or SBI's website, which means you should ignore the app right away.

Modus Operandi:

• Delivery Mechanism: Typically, users of messaging services like "WhatsApp," "SMS," or "email" receive identical messages with an APK link, which is how the scam is distributed.
• APK Installation: The phony APK frequently asks for a lot of rights once it is  installed, including access to "SMS," "contacts," "calls," and "banking apps."
• Data Theft: Once installed, the program may have the ability to steal card numbers, personal information, OTPs, and banking credentials.
• Remote Access: These APKs may occasionally allow cybercriminals to remotely take control of the victim's device in order to carry out fraudulent financial activities.

While the user installs the application on their device the following interface opens: 

‍

‍

It asks the user to allow the following:

• SMS is used to send and receive info from the bank.
• User details such as Username, Password, Mobile Number, and Captcha. 

Technical Findings of the Application:

Static Analysis:

• File Name: SBI SELF KYC_015850.apk
• Package Name: com.mark.dot.comsbione.krishn
• Scan Date: Sept. 25, 2024, 6:45 a.m.
• App Security Score: 52/100 (MEDIUM RISK)
• Grade: B

File Information:

• File Name: SBI SELF KYC_015850.apk
• Size: 2.88MB
• MD5: 55fdb5ff999656ddbfa0284d0707d9ef
• SHA1: 8821ee6475576beb86d271bc15882247f1e83630
• SHA256: 54bab6a7a0b111763c726e161aa8a6eb43d10b76bb1c19728ace50e5afa40448

App Information:

• App Name: SBl Bank
• Package Name:: com.mark.dot.comsbione.krishn
• Main Activity: com.mark.dot.comsbione.krishn.MainActivity
• Target SDK: 34
• Min SDK: 24
• Max SDK:
• Android Version Name:: 1.0
• Android Version Code:: 1

App Components:

• Activities: 8
• Services: 2
• Receivers: 2
• Providers: 1
• Exported Activities: 0
• Exported Services: 1
• Exported Receivers: 2
• Exported Providers:: 0

Certificate Information:

• Binary is signed
• v1 signature: False
• v2 signature: True
• v3 signature: False
• v4 signature: False
• X.509 Subject: CN=PANDEY, OU=PANDEY, O=PANDEY, L=NK, ST=NK, C=91
• Signature Algorithm: rsassa_pkcs1v15
• Valid From: 20240904 07:38:35+00:00
• Valid To: 20490829 07:38:35+00:00
• Issuer: CN=PANDEY, OU=PANDEY, O=PANDEY, L=NK, ST=NK, C=91
• Serial Number: 0x1
• Hash Algorithm: sha256
• md5: 4536ca31b69fb68a34c6440072fca8b5
• sha1: 6f8825341186f39cfb864ba0044c034efb7cb8f4
• sha256: 6bc865a3f1371978e512fa4545850826bc29fa1d79cdedf69723b1e44bf3e23f
• sha512:05254668e1c12a2455c3224ef49a585b599d00796fab91b6f94d0b85ab48ae4b14868dabf16aa609c3b6a4b7ac14c7c8f753111b4291c4f3efa49f4edf41123d
• PublicKey Algorithm: RSA
• Bit Size: 2048
• Fingerprint: a84f890d7dfbf1514fc69313bf99aa8a826bade3927236f447af63fbb18a8ea6
• Found 1 unique certificate

‍

App Permission 

‍

‍

1. Normal Permissions

• Access_network_state: Allows the App to View the Network Status of All Networks.
• Foreground_service: Enables Regular Apps to Use Foreground Services.
• Foreground_service_data_sync: Allows Data Synchronization With Foreground Services.
• Internet: Grants Full Internet Access.

2. Signature Permission:

• Broadcast_sms: Sends Sms Received Broadcasts. It Can Be Abused by Malicious Apps to Forge Incoming Sms Messages.

3. Dangerous Permissions:

• Read_phone_numbers: Grants Access to the Device’s Phone Number(S).
• Read_phone_state: Reads the Phone’s State and Identity, Including Phone Features and Data.
• Read_sms: Allows the App to Read Sms or Mms Messages Stored on the Device or Sim Card. Malicious Apps Could Use This to Read Confidential Messages.
• Receive_sms: Enables the App to Receive and Process Sms Messages. Malicious Apps Could Monitor or Delete Messages Without Showing Them to the User.
• Send_sms: Allows the App to Send Sms Messages. Malicious Apps Could Send Messages Without the User’s Confirmation, Potentially Leading to Financial Costs.

On further analysis on virustotal platform using md5 hash file, the following results were retrieved where there are 24 security vendors out of 68, marked this apk file as malicious and the graph represents the distribution of malicious file in the environment.

‍

‍

Key Takeaways:

• Normal Permissions: Generally Safe for Accessing Basic Functionalities (Network State, Internet).
• Signature Permissions: May Pose Risks When Misused, Especially Related to Sms Broadcasts.
• Dangerous Permissions: Provide Sensitive Data Access, Such as Phone Numbers and Device Identity, Which Can Be Exploited by Malicious Apps.
• The Dangerous Permissions Pose Risks Regarding the Reading, Receiving, and Sending of Sms, Which Can Lead to Privacy Breaches or Financial Consequences.

How to Identify the Scam:

• Official Statement: SBI never asks clients to download unauthorized APKs for upgrades related to KYC or other services. All formal correspondence takes place via the SBI YONO app, which may be found in reputable app shops.
• No Immediate Threats: Bank correspondence never employs menacing language or issues harsh deadlines, such as "your account will be blocked today."
• Email Domain and SMS Number: Verified email addresses or phone numbers are used for official SBI correspondence. Generic, unauthorized numbers or addresses are frequently used in scams.
• Links and APK Files: Steer clear of downloading APK files from unreliable sources at all times. For app downloads, visit the Apple App Store or Google Play Store instead.

CyberPeace Advisory:

• The Research team recommends that people should avoid opening such messages sent via social platforms. One must always think before clicking on such links, or downloading any attachments from unauthorised sources.
• Downloading any application from any third party sources instead of the official app store should be avoided. This will greatly reduce the risk of downloading a malicious app, as official app stores have strict guidelines for app developers and review each app before it gets published on the store.
• Even if you download the application from an authorised source, check the app's permissions before you install it. Some malicious apps may request access to sensitive information or resources on your device. If an app is asking for too many permissions, it's best to avoid it.
• Keep your device and the app-store app up to date. This will ensure that you have the latest security updates and bug fixes.
• Falling into such a trap could result in a complete compromise of the system, including access to sensitive information such as microphone recordings, camera footage, text messages, contacts, pictures, videos, and even banking applications and could lead users to financial loss.
• Do not share confidential details like credentials, banking information with such types of Phishing scams.
• Never share or forward fake messages containing links on any social platform without proper verification.

Conclusion:

Fake APK phishing scams target financial institutions more often. This report outlines safety steps for SBI customers and ways to spot and steer clear of these cons. Keep in mind that legitimate banks never ask you to get an APK from shady websites or threaten to close your account right away. To stay safe, use SBI's official YONO app on both systems and get apps from trusted places like Google Play or the Apple App Store. Check if the info is true before you do anything turn on 2FA for all your bank and money accounts, and tell SBI or your local cyber police about any scams you see.

‍

Introduction

In a world where Artificial Intelligence (AI) is already changing the creation and consumption of content at a breathtaking pace, distinguishing between genuine media and false or doctored content is a serious issue of international concern. AI-generated content in the form of deepfakes, synthetic text and photorealistic images is being used to disseminate misinformation, shape public opinion and commit fraud. As a response, governments, tech companies and regulatory bodies are exploring ‘watermarking’ as a key mechanism to promote transparency and accountability in AI-generated media. Watermarking embeds identifiable information into content to indicate its artificial origin. 

Government Strategies Worldwide

Governments worldwide have pursued different strategies to address AI-generated media through watermarking standards. In the US, President Biden's 2023 Executive Order on AI directed the Department of Commerce and the National Institute of Standards and Technology (NIST) to establish clear guidelines for digital watermarking of AI-generated content. This action puts a big responsibility on large technology firms to put identifiers in media produced by generative models. These identifiers should help fight misinformation and address digital trust.

The European Union, in its Artificial Intelligence Act of 2024, requires AI-generated content to be labelled. Article 50 of the Act specifically demands that developers indicate whenever users engage with synthetic content. In addition, the EU is a proponent of the Coalition for Content Provenance and Authenticity (C2PA), an organisation that produces secure metadata standards to track the origin and changes of digital content.

India is currently in the process of developing policy frameworks to address AI and synthetic content, guided by judicial decisions that are helping shape the approach. In 2024, the Delhi High Court directed the central government to appoint members for a committee responsible for regulating deepfakes. Such moves indicate the government's willingness to regulate AI-generated content. 

China, has already implemented mandatory watermarking on all deep synthesis content. Digital identifiers must be embedded in AI media by service providers, and China is one of the first countries to adopt stern watermarking legislation.

Understanding the Technical Feasibility

Watermarking AI media means inserting recognisable markers into digital material. They can be perceptible, such as logos or overlays or imperceptible, such as cryptographic tags or metadata. Sophisticated methods such as Google's SynthID apply imperceptible pixel-level changes that remain intact against standard image manipulation such as resizing or compression. Likewise, C2PA metadata standards enable the user to track the source and provenance of an item of content.

Nonetheless, watermarking is not an infallible process. Most watermarking methods are susceptible to tampering. Aforementioned adversaries with expertise, for instance, can use cropping editing or AI software to delete visible watermarks or remove metadata. Further, the absence of interoperability between different watermarking systems and platforms hampers their effectiveness. Scalability is also an issue enacting and authenticating watermarks for billions of units of online content necessitates huge computational efforts and routine policy enforcement across platforms. Scientists are currently working on solutions such as blockchain-based content authentication and zero-knowledge watermarking, which maintain authenticity without sacrificing privacy. These new techniques have potential for overcoming technical deficiencies and making watermarking more secure.

Challenges in Enforcement

Though increasing agreement exists for watermarking, implementation of such policies is still a major issue. Jurisdictional constraints prevent enforceability globally. A watermarking policy within one nation might not extend to content created or stored in another, particularly across decentralised or anonymous domains. This creates an exigency for international coordination and the development of worldwide digital trust standards. While it is a welcome step that platforms like Meta, YouTube, and TikTok have begun flagging AI-generated content, there remains a pressing need for a standardised policy that ensures consistency and accountability across all platforms. Voluntary compliance alone is insufficient without clear global mandates.

User literacy is also a significant hurdle. Even when content is properly watermarked, users might not see or comprehend its meaning. This aligns with issues of dealing with misinformation, wherein it's not sufficient just to mark off fake content, users need to be taught how to think critically about the information they're using. Public education campaigns, digital media literacy and embedding watermarking labels within user-friendly UI elements are necessary to ensure this technology is actually effective.

Balancing Privacy and Transparency

While watermarking serves to achieve digital transparency, it also presents privacy issues. In certain instances, watermarking might necessitate the embedding of metadata that will disclose the source or identity of the content producer. This threatens journalists, whistleblowers, activists, and artists utilising AI tools for creative or informative reasons. Governments have a responsibility to ensure that watermarking norms do not violate freedom of expression or facilitate surveillance. The solution is to achieve a balance by employing privacy-protection watermarking strategies that verify the origin of the content without revealing personally identifiable data. "Zero-knowledge proofs" in cryptography may assist in creating watermarking systems that guarantee authentication without undermining user anonymity.

On the transparency side, watermarking can be an effective antidote to misinformation and manipulation. For example, during the COVID-19 crisis, misinformation spread by AI on vaccines, treatments and public health interventions caused widespread impact on public behaviour and policy uptake. Watermarked content would have helped distinguish between authentic sources and manipulated media and protected public health efforts accordingly.

Best Practices and Emerging Solutions

Several programs and frameworks are at the forefront of watermarking norms. Adobe, Microsoft and others' collaborative C2PA framework puts tamper-proof metadata into images and videos, enabling complete traceability of content origin. SynthID from Google is already implemented on its Imagen text-to-image model and secretly watermarks images generated by AI without any susceptibility to tampering. The Partnership on AI (PAI) is also taking a leadership role by building out ethical standards for synthetic content, including standards around provenance and watermarking. These frameworks become guides for governments seeking to introduce equitable, effective policies. In addition, India's new legal mechanisms on misinformation and deepfake regulation present a timely point to integrate watermarking standards consistent with global practices while safeguarding civil liberties.

Conclusion

Watermarking regulations for synthetic media content are an essential step toward creating a safer and more credible digital world. As artificial media becomes increasingly indistinguishable from authentic content, the demand for transparency, origin, and responsibility increases. Governments, platforms, and civil society organisations will have to collaborate to deploy watermarking mechanisms that are technically feasible, compliant and privacy-friendly. India is especially at a turning point, with courts calling for action and regulatory agencies starting to take on the challenge. Empowering themselves with global lessons, applying best-in-class watermarking platforms and promoting public awareness can enable the nation to acquire a level of resilience against digital deception. 

References

1. https://artificialintelligenceact.eu/
2. https://www.cyberpeace.org/resources/blogs/delhi-high-court-directs-centre-to-nominate-members-for-deepfake-committee
3.  https://c2pa.org
4. https://www.cyberpeace.org/resources/blogs/misinformations-impact-on-public-health-policy-decisions
5.  https://deepmind.google/technologies/synthid/
6. https://www.imatag.com/blog/china-regulates-ai-generated-content-towards-a-new-global-standard-for-transparency

‍