In a major nationwide crackdown triggered by the April 22 Pahalgam terror incident, Indian authorities have arrested 11 individuals suspected of espionage on behalf of Pakistan. These arrests span multiple states including Haryana, Punjab, and Uttar Pradesh over just three days.
Among those apprehended is Haryana-based travel content creator Jyoti Malhotra, accused of leaking sensitive information to foreign handlers. The others include students, a security personnel, an app developer, and everyday citizens, highlighting the diverse profiles involved in these covert networks.
Recruitment Tactics Involving Social Media and Monetary Incentives
Investigators revealed that suspects were drawn into espionage rings through social media platforms, enticing offers, messaging applications, and direct personal contacts linked to Pakistan. The use of social media influencers and younger demographics in their 20s and 30s illustrates evolving spycraft methods exploiting modern communication channels.
Key Arrests:
Jyoti Malhotra & Associates
Jyoti Malhotra, a popular YouTuber behind the channel 'Travel with Jo' boasting nearly 385,000 subscribers, was reportedly being groomed as an intelligence asset. She traveled to Pakistan thrice between 2023 and early 2025, just before the Pahalgam attack. Police say she maintained contact with Ehsan-ur-Rahim (also known as Danish), a recently expelled Pakistani High Commission official, suspected of facilitating visa arrangements and financial transactions linked to espionage.
Alongside Jyoti, Gazala, a 32-year-old widow, and Yameen Mohammad from Malerkotla, Punjab, were also arrested for sharing information with Pakistani agents in return for money, with ties to the same Pakistani diplomat.
Devender Singh
The 25-year-old political science student from Khalsa College, Patiala, was detained in Haryana’s Kaithal district. Authorities allege he transmitted sensitive images, including those of the Patiala military cantonment, to ISI contacts. He was also reportedly active on Facebook, sharing photos of firearms, and had visited Pakistan last November.
Arman and Tarif from Nuh
Arman, 26, is accused of relaying military secrets to Pakistan through WhatsApp. Another Nuh resident, Tarif, admitted to connections with Pakistani embassy officials who supplied him with SIM cards and directed him to collect photos of the Sirsa airport. His interrogation remains ongoing.
Nauman Ilahi
A 24-year-old security guard from Kairana, Uttar Pradesh, Nauman Ilahi was caught in Panipat, Haryana. He allegedly maintained communication with ISI agents and provided sensitive information after traveling to Pakistan multiple times. All his electronic devices were seized for further examination.
Mohammad Murtaza Ali
Arrested in Jalandhar, Punjab, Murtaza Ali reportedly conducted espionage using a self-developed mobile application. Police confiscated several phones and SIM cards from him.
Shehzad
A resident of Rampur district, Shehzad was detained by Uttar Pradesh ATS in Moradabad. He allegedly engaged in illegal cross-border trade as a cover for espionage and maintained close contact with ISI operatives. His activities reportedly involved smuggling cosmetics, clothing, and spices while passing on crucial security-related intelligence. He is currently under 14-day judicial custody.
Sukhpreet Singh and Karanbir Singh
Punjab Police arrested both suspects in Gurdaspur, where they were accused of leaking classified data linked to ‘Operation Sindoor’—including troop movements and strategic locations across Punjab, Himachal Pradesh, and Jammu & Kashmir. The Director General of Punjab Police, Gaurav Yadav, disclosed that these individuals became active after the Pahalgam attack and received payments of approximately Rs 1 lakh. Both are charged under the stringent Official Secrets Act and have been linked to drug smuggling as well.
This wave of arrests underscores the expanding and increasingly sophisticated espionage operations targeting India via diverse profiles and cutting-edge communication platforms.