After the deadly Pahalgam terror attack and India’s retaliatory Operation Sindoor, Indian counterintelligence agencies have ramped up vigilance. In the last month, officials arrested or detained at least 15 individuals across Rajasthan, Maharashtra, Delhi, Haryana, Uttar Pradesh, Gujarat, and Punjab for allegedly working with Pakistan’s Inter-Services Intelligence (ISI).
Exposing the Network: From Dockyards to Villages
Among those arrested are civilians with no prior criminal records — engineers, vloggers, government workers, health employees, and even SIM card suppliers. Though unconnected directly, their stories share one common thread: ties to ISI operatives.
CRPF Link: Moti Ram Jat
Moti Ram Jat, a CRPF personnel, was arrested in Delhi by the National Investigation Agency (NIA) for allegedly sharing sensitive information with Pakistan Intelligence Officers (PIOs) since 2023. His online activity raised internal flags. “Jat was dismissed after being found to have ‘acted in violation of established norms and protocols,'” said the CRPF. He remains in NIA custody until June 6.
Engineer Trapped Online: Ravindra Verma
In Maharashtra, ATS officials arrested Ravindra Verma, a 27-year-old engineer at a Mumbai-based defence tech firm. With access to the Naval Dockyard, Verma was accused of sharing naval sketches and audio notes after being honey-trapped via fake Facebook accounts “Payal Sharma” and “Ispreet.” Officials revealed that “he would sketch from memory and send images later,” circumventing mobile restrictions in the dockyard. He allegedly communicated with handlers since November 2024 and is in custody.
Vlogger Turned Spy: Jyoti Malhotra
Travel vlogger Jyoti Malhotra was arrested by Haryana Police in mid-May. Authorities traced her contact with ISI operatives through multiple visits to Pakistan and interactions with individuals named Danish, Ahsan, and Shahid. Devices seized from her contained 12 terabytes of sensitive data. A Scottish YouTuber’s video showed her in Lahore’s Anarkali Bazaar surrounded by armed men. She faces charges under the Official Secrets Act and Bharatiya Nyaya Sanhita. Her trial begins in June.
Health Worker Arrested: Sahdev Singh Gohil
In Gujarat, ATS detained Sahdev Singh Gohil from Kachchh for allegedly sending images of Indian Air Force and BSF facilities to a contact believed to be a Pakistani operative using the alias “Aditi Bharadwaj.” Gohil reportedly procured a SIM card and activated a WhatsApp account for the handler using OTP verification. He allegedly received Rs 40,000 for his services.
Recruitment in Haryana: A Cluster of Young Spies
Haryana saw multiple arrests of young men believed to have been recruited by ISI through financial bait:
-
Davender Singh Dhillon, 25, from Patiala, was arrested after uploading gun photos and making a trip to Pakistan in November 2024.
-
Nauman Ilahi, 24, worked as a security guard in Panipat and used his brother-in-law’s bank account for cross-border transactions.
-
Arman and Tarif from Nuh district were arrested after Tarif tried deleting chats with Pakistani numbers during a raid.
The Government Insider: Shakur Khan
Rajasthan government employee Shakur Khan, 49, was taken into custody for allegedly spying for Pakistan. Once a personal assistant to ex-minister Shale Mohammad, Khan had made at least seven trips to Pakistan. Digital analysis revealed deleted files and dubious transactions. Investigators are now exploring his wider connections.
SIM Card Supplier: Kasim from Deeg
Kasim, 34, from Rajasthan’s Deeg, was caught supplying Indian SIM cards to ISI handlers. He had visited Pakistan twice between August 2024 and March 2025. Fearing a crackdown after the Pahalgam attack, he deleted much of his device data. Forensic teams are now reconstructing his digital records.
Mumbai Tech Lead and App Use
In Thane, another man allegedly trapped via social media shared information from November 2024 to March 2025. Investigators say he was manipulated using WhatsApp and Facebook channels.
In Jalandhar, Mohammad Murtaza Ali, a tech developer, created an app through which he sent sensitive Indian defence information to Pakistani handlers. Police seized multiple devices from his home.
Smuggler-Turned-Spy: Shahzad from Uttar Pradesh
In Moradabad, UP’s Special Task Force arrested Shahzad, a Rampur-based businessman. He allegedly smuggled goods and shared intelligence during visits to Pakistan.
Further Probes in Punjab
Two more suspects from Punjab, Gazala and Yamin Mohammad, are under scrutiny for suspected ties with foreign agents. Authorities are reviewing their digital communications and travel histories.
Operation Sindoor’s Impact on Counterintelligence
The Pahalgam terror attack, which killed 26, prompted India’s robust military retaliation under Operation Sindoor. Following this, Pakistan launched missile and drone attacks, largely neutralised by Indian defences.
In its wake, Indian agencies tightened surveillance in border states and critical sectors. Rajasthan Police confirmed seven suspects questioned in Jaisalmer in just one month. In Haryana, officials began reviewing financial records and travel logs of vulnerable professions.