#FactCheck-Fake Video of Mass Cheating at UPSC Exam Circulates Online

Introduction
‍

India's digital governance system is experiencing a significant transformation. The Department of Telecommunications (DoT) has extended the deadline for implementing SIM binding requirements for messaging platforms to December 31, 2026, while also stepping back from earlier proposals such as mandatory periodic web logouts. 

The government extended the current proposal but decided to cancel its previous requirement, which mandated messaging platforms to implement mandatory logout periods. The authorities implemented this action to control the increasing occurrence of digital impersonation, financial fraud, online scams and identity theft, which occurs through messaging applications.

The authorities are said to have implemented this action to control the increasing occurrence of digital impersonation, financial fraud, online scams and identity theft, which occurs through messaging applications.
‍

What Has Changed
‍

The SIM binding mandate, which the Telecommunication Cyber Security framework introduced in late 2025 requires messaging platforms to maintain user account connections with active SIM cards that match their registered mobile numbers. 

Platforms received a brief period for compliance with the original rules. Industry stakeholders, which included messaging services and device manufacturers, reported that they faced major technical and operational problems when trying to constantly verify SIM status on different devices and operating systems. 

The government postponed the compliance date to December 2026 to give organisations extra time for the gradual implementation of requirements. The policy now permits platforms to use risk-based or adaptive logout mechanisms, which enable security management without enforcing standard security procedures through their web messaging application platforms. 

‍

Why the Extension Was Necessary
‍

The extension operates as a recognition of both technical feasibility constraints and ecosystem's complex nature. Multiple devices at present enable messaging platforms to function which includes smartphones and desktops and web interfaces with real time synchronization. The system needs complete operational system and hardware component integration to maintain active SIM verification throughout all environments because stakeholders estimated that this process would take time to achieve proper results. 

The operating system providers and smartphone manufacturers expressed their worries about system limitations, which include testing procedures and compatibility problems. 

The government recognised through its deadline extension that security requirements need technical feasibility and scalability to function properly without causing service interruptions or requiring immediate implementation.

‍

Security Rationale Behind SIM Binding
‍

The SIM binding system serves its main purpose to enhance accountability while it protects digital communication systems from unauthorised use. Authorities have identified that messaging accounts can remain active even after the associated SIM card is removed, deactivated, or moved across regions. The situation creates paths for criminals to commit fraud and impersonation while perpetrating cybercrime across international borders because they can use digital identities that are hard to trace. 

The SIM binding system exists to solve this problem by 

• requiring active, Virtual KYC-verified SIMs to authenticate messaging accounts. 
• Users cannot access the system until they connect their active SIM. 
• The system maintains the capacity to track and authenticate digital identities. 

The measure aims to eliminate a security gap that digital communication systems currently use for fraudulent activities and identity theft.

‍

Shift Toward Risk-Based Regulation
‍

The current development marks a major change because it no longer applies fixed rules that used to determine what organisations must do, but now uses risk assessment methods. The previous plan, which required users to log out every six hours from web sessions, has been replaced by platforms that now log users out based on their risk assessment. The shift demonstrates that cybersecurity needs to implement security measures that require specific context and need to match the existing environment. Organisations face challenges when trying to apply standard rules because users exhibit various behaviours while using different devices on multiple platforms. 

The risk-based model enables platforms to detect suspicious activity through dynamic monitoring, which establishes strict security measures for high-risk situations while preserving system access during periods of low risk.

‍

Implications for the Digital Ecosystem
‍

The extension, together with its related policy alterations, creates significant effects for organisations. The extra time allows the industry to create systems that can work together with different ecosystems while testing their implementation process and matching their required operational standards. 

The shift shows policymakers that they should adopt a process that combines multiple rounds of assessment with stakeholder input to develop their regulations. 

The upcoming changes will create invisible effects for users, which will determine the future methods of digital identity verification and the security functions of communication platforms.

‍

Conclusion
‍

The extension of the SIM binding deadline represents a new approach to regulations instead of being a regulatory rollback. The process requires both dedicated efforts and actual implementation to create secure digital environments. 

India needs to establish secure and scalable user-friendly systems while advancing its digital infrastructure development. The current developments show progress toward achieving a solution that protects cybersecurity needs while considering technological facts and user experience. Organisations face two main obstacles in modern interdependent systems: they must protect their systems while maintaining user trust and system protection, and their capability to operate over extended periods.
‍

References
‍

• https://www.thehindu.com/sci-tech/technology/government-shelves-periodic-web-logout-for-chat-apps-extends-sim-binding-to-december-31/article70811929.ece
• https://www.gadgets360.com/telecom/news/dot-sim-binding-mandate-extension-2026-report-11301917

‍

Executive Summary

‍
A video showing several children in an injured condition is being widely shared on social media with the claim that the footage is from the ‘Sansad March’ protest organised by the Cockroach Janata Party (CJP) on July 20, 2026. The video is being circulated with the allegation that Delhi Police lathi-charged children during the protest in Delhi. CyberPeace Research Wing’s research found the claim to be false. The viral video is not related to the CJP protest in Delhi. The footage is from an old incident at a private school hostel in Farrukhabad, Uttar Pradesh, where a warden was accused of assaulting students. The old video has been falsely linked to the recent protest with a misleading claim.

‍

Claim:

‍

A Facebook user named ‘The sociopolitics’ shared the video on July 23, 2026, claiming that children were beaten by Delhi Police during the protest.The post stated, “What had the children done wrong? Were they beaten with their eyes covered, or was the anger of their bosses taken out on the public?” The viral post was shared widely on social media by users who believed the claim to be true. The archived version of the post can be accessed here:

https://www.instagram.com/reels/DbKiqy8lOu5/ 

‍

Fact Check:

‍

To verify the authenticity of the viral video, the Desk first analysed the footage carefully and examined its audio. The conversation of the children in the video made it clear that the visuals were not connected to the student protest at Delhi’s Jantar Mantar or any police lathi-charge. In the video, the children can be heard mentioning the name of their school and speaking about the warden who allegedly assaulted them. The video also displayed the Instagram username ‘parulpatel4618’, which provided a lead for further research.

https://www.instagram.com/p/DbFcdAjxvG5 

‍

‍

In the next stage of the research, the Desk found a Facebook post dated July 22, 2026, related to the incident. According to the post, students at CP International School hostel in Farrukhabad, Uttar Pradesh, were allegedly beaten, following which a protest was reported. The post stated that the hostel warden was accused of assaulting students with a PVC pipe, leaving several children injured. After receiving information about the incident, parents reached the spot and protested. Police took the warden to the police station and initiated an research.

https://www.facebook.com/watch/?v=992060370500487

‍

‍

Conclusion:

‍

The research established that the viral video is not from the CJP ‘Sansad March’ protest in Delhi. The footage is from an old incident at a private school hostel in Farrukhabad, Uttar Pradesh, where a warden was accused of assaulting students. The video is being circulated with a false claim by linking it to a recent protest.

‍

Introduction

With the increasing frequency and severity of cyber-attacks on critical sectors, the government of India has formulated the National Cyber Security Reference Framework (NCRF) 2023, aimed to address cybersecurity concerns in India. In today’s digital age, the security of critical sectors is paramount due to the ever-evolving landscape of cyber threats. Cybersecurity measures are crucial for protecting essential sectors such as banking, energy, healthcare, telecommunications, transportation, strategic enterprises, and government enterprises. This is an essential step towards safeguarding these critical sectors and preparing for the challenges they face in the face of cyber threats. Protecting critical sectors from cyber threats is an urgent priority that requires the development of robust cybersecurity practices and the implementation of effective measures to mitigate risks.

Overview of the National Cyber Security Policy 2013

The National Cyber Security Policy of 2013 was the first attempt to address cybersecurity concerns in India. However, it had several drawbacks that limited its effectiveness in mitigating cyber risks in the contemporary digital age. The policy’s outdated guidelines, insufficient prevention and response measures, and lack of legal implications hindered its ability to protect critical sectors adequately. Moreover, the policy should have kept up with the rapidly evolving cyber threat landscape and emerging technologies, leaving organisations vulnerable to new cyber-attacks. The 2013 policy failed to address the evolving nature of cyber threats, leaving organisations needing updated guidelines to combat new and sophisticated attacks.

As a result, an updated and more comprehensive policy, the National Cyber Security Reference Framework 2023, was necessary to address emerging challenges and provide strategic guidance for protecting critical sectors against cyber threats.

Highlights of NCRF 2023

• Strategic Guidance: NCRF 2023 has been developed to provide organisations with strategic guidance to address their cybersecurity concerns in a structured manner.
• Common but Differentiated Responsibility (CBDR): The policy is based on a CBDR approach, recognising that different organisations have varying levels of cybersecurity needs and responsibilities.
• Update of National Cyber Security Policy 2013: NCRF supersedes the National Cyber Security Policy 2013, which was due for an update to align with the evolving cyber threat landscape and emerging challenges.
• Different from CERT-In Directives: NCRF is distinct from the directives issued by the Indian Computer Emergency Response Team (CERT-In) published in April 2023. It provides a comprehensive framework rather than specific directives for reporting cyber incidents.
• Combination of robust strategies: National Cyber Security Reference Framework 2023 will provide strategic guidance, a revised structure, and a proactive approach to cybersecurity, enabling organisations to tackle the growing cyberattacks in India better and safeguard critical sectors.

Rising incidents of malware attacks on critical sectors

In recent years, there has been a significant increase in malware attacks targeting critical sectors. These sectors, including banking, energy, healthcare, telecommunications, transportation, strategic enterprises, and government enterprises, play a crucial role in the functioning of economies and the well-being of societies. The escalating incidents of malware attacks on these sectors have raised concerns about the security and resilience of critical infrastructure.

• Banking: The banking sector handles sensitive financial data and is a prime target for cybercriminals due to the potential for financial fraud and theft.
• Energy: The energy sector, including power grids and oil companies, is critical for the functioning of economies, and disruptions can have severe consequences for national security and public safety.
• Healthcare: The healthcare sector holds valuable patient data, and cyber-attacks can compromise patient privacy and disrupt healthcare services. Malware attacks on healthcare organisations can result in the theft of patient records, ransomware incidents that cripple healthcare operations, and compromise medical devices.
• Telecommunications: Telecommunications infrastructure is vital for reliable communication, and attacks targeting this sector can lead to communication disruptions and compromise the privacy of transmitted data. The interconnectedness of telecommunications networks globally presents opportunities for cybercriminals to launch large-scale attacks, such as Distributed Denial-of-Service (DDoS) attacks.
• Transportation: Malware attacks on transportation systems can lead to service disruptions, compromise control systems, and pose safety risks.
• Strategic Enterprises: Strategic enterprises, including defence, aerospace, intelligence agencies, and other sectors vital to national security, face sophisticated malware attacks with potentially severe consequences. Cyber adversaries target these enterprises to gain unauthorised access to classified information, compromise critical infrastructure, or sabotage national security operations.
• Government Enterprises: Government organisations hold a vast amount of sensitive data and provide essential services to citizens, making them targets for data breaches and attacks that can disrupt critical services.

Conclusion  

The sectors of banking, energy, healthcare, telecommunications, transportation, strategic enterprises, and government enterprises face unique vulnerabilities and challenges in the face of cyber-attacks. By recognising the significance of safeguarding these sectors, we can emphasise the need for proactive cybersecurity measures and collaborative efforts between public and private entities. Strengthening regulatory frameworks, sharing threat intelligence, and adopting best practices are essential to ensure our critical infrastructure’s resilience and security. Through these concerted efforts, we can create a safer digital environment for these sectors, protecting vital services and preserving the integrity of our economy and society. The rising incidents of malware attacks on critical sectors emphasise the urgent need for updated cybersecurity policy, enhanced cybersecurity measures, a collaboration between public and private entities, and the development of proactive defence strategies. National Cyber Security Reference Framework 2023 will help in addressing the evolving cyber threat landscape, protect critical sectors, fill the gaps in sector-specific best practices, promote collaboration, establish a regulatory framework, and address the challenges posed by emerging technologies. By providing strategic guidance, this framework will enhance organisations’ cybersecurity posture and ensure the protection of critical infrastructure in an increasingly digitised world.