#FactCheck-Protest Video from Nagrota Falsely Linked to Opposition Against Indian Army

Introduction

In a business that historically operated in a landscape defined by probability and odds, India’s real-money gaming companies have taken their own legal bet, a gamble that may very well decide whether or not they survive. Play Games24x7, Junglee Games, Sachiko Gaming, and Head Digital Works were in front of India’s highest court on July 14, seeking review of an order that will ultimately decide the fate of these companies.

The Facts

The firms’ review petitions challenge the May 27 ruling in which the Supreme Court also upheld the constitutional legality of the 28% GST on online gaming, paving the way for over 1.5 trillion in back taxes. The petitions, prepared by the Lakshmikumaran & Sridharan law firm, “do not ask to set the entire case all over again” since a review is a technical process usually dealt with by the same bench of judges in their chambers when there’s an error on the record or genuinely fresh material before it before the case may potentially be referred for a new trial in open court if there is something significant in it.

The Genesis of the Legal Battle

To understand why gaming firms are pulling this lever, it helps to revisit what the Court actually decided in May. A bench of Justices J.B. Pardiwala and R. Mahadevan ruled that once a player stakes money on an uncertain outcome, the platform is supplying an "actionable claim" arising from betting and gambling under GST law. The long-cherished distinction between a "game of skill" and a "game of chance", which the industry had used for years to argue it wasn't really gambling, was declared irrelevant the moment cash entered the pot.

Just as consequentially, the Court rejected the industry's central financial argument: that GST should be calculated only on the platform's commission, or gross gaming revenue, rather than on the entire amount players deposit into a contest. The bench sided with tax authorities, ruling that the 28% levy applies to the full face value of every bet. It also found that 2023 amendments to GST law were merely "clarificatory", not the creation of a brand-new tax, a finding that opened the door to retrospective demands stretching back years, rather than only from October 2023 onwards, when the amendments took effect.

The practical fallout was severe. The ruling revived a ₹21,000 crore notice against Gameskraft that the Karnataka High Court had earlier quashed, and it validated roughly 91 show-cause notices issued industry-wide, with estimates of the total exposure ranging as high as ₹1.5–2.5 lakh crore, depending on the source. For context, that figure dwarfs the cumulative revenues several of these companies have ever earned.

The Arguments Now on the Table

The review petitions attack the judgement from several angles. Head Digital Works, the parent of gaming platform A23, argues the case raised substantial constitutional questions that should have gone to a larger Constitution Bench rather than a two-judge bench and that the ruling contains errors serious enough to warrant reconsideration. A recurring theme across the petitions is timing: the companies contend GST should be triggered only when winnings are actually paid out to players, not the moment an entry fee changes hands, and that treating the 2023 amendments as retrospective effectively taxes transactions under a legal framework that didn't yet exist when they occurred. They also argue the ruling creates an unfair mismatch, taxing online games more harshly than comparable offline activity, and in Head Digital Works' filing that the judgement glosses over the industry's long-standing constitutional protection for skill-based businesses under Article 19(1)(g).

A Sector Already on the Ropes

What makes this legal battle unusually high-stakes is that it isn't happening in isolation. In August 2025, Parliament passed the Promotion and Regulation of Online Gaming Act, banning all online real-money games nationwide regardless of whether they involve skill, chance, or a mix of both while carving out room for e-sports and social gaming. That law is itself under constitutional challenge, with hearings before a three-judge bench expected this year. So the same companies fighting a ₹1.5 trillion tax bill for games they used to run are simultaneously fighting for the right to run those games at all going forward. Add to this that GST on the relevant category of actionable claims was separately hiked to 40% in September 2025 as part of a broader rate overhaul, and it's clear the ground has shifted well beyond what the industry anticipated when this dispute began.

What Comes Next

The Supreme Court will first decide whether these petitions clear the threshold for review, a high bar by design, since courts are wary of turning review into a backdoor appeal. If the bench finds no fresh ground, the May 27 judgement becomes final, and companies will be left negotiating settlements, instalment plans, or insolvency proceedings against tax bills that, in several cases, exceed what they've ever earned. If the Court does find merit, it could reopen questions that reshape not just the gaming industry's tax liability but the constitutional line between what states can regulate as "betting and gambling" and what Parliament can tax as a national digital service.

Either way, the outcome will be watched well beyond the gaming world. Any digital business that collects money from users against an uncertain outcome from fantasy sports to prediction markets to certain fintech products has a stake in how the court defines "actionable claim" and how far a "clarificatory" amendment can legally reach into the past. Tax authorities, for their part, will be watching just as closely: a win here reinforces a template they've already begun applying to other sectors accused of restructuring around narrow tax definitions.

There's also an investor angle that tends to get lost in the legal jargon. Real-money gaming in India attracted billions of dollars in foreign investment over the past decade, built on the premise that skill-based games occupied a legitimate, constitutionally protected business category distinct from gambling. Between the May verdict and the PROGA ban, that premise has effectively collapsed within the space of a year. Whether or not the review petitions succeed, the episode is likely to be studied as a cautionary tale about regulatory and tax risk in India's digital economy, a reminder that a business model resting on a legal distinction is only as durable as a court's willingness to keep drawing that line.

Conclusion

The Supreme Court's decision will extend far beyond the gaming industry, shaping India's approach to digital taxation, regulatory certainty, and investor confidence. For now, the ball is back in the Supreme Court's hands, and the industry has staked its remaining legal capital on convincing the same bench that got it here to think again.

Sources

• Online gaming firms move Supreme Court seeking review of verdict upholding 28% GST levy — ANI News
• Promotion and Regulation of Online Gaming Act, 2025 — Wikipedia
• Anti-gambling act targets real-money gaming — Law.asia
• Behind the Ban: The Promotion and Regulation of Online Gaming Act, 2025 — Lexology

‍

The more ease and dependency the internet slithers into our lives, the more obscure parasites linger on with it, menacing our privacy and data. Among these digital parasites, cyber espionage, hacking, and ransom have never failed to grab the headlines. These hostilities carried out by cyber criminals, corporate juggernauts and several state and non-state actors lend them unlimited access to the customers’ data damaging the digital fabric and wellbeing of netizens. 

As technology continues to evolve, so does the need for robust safety measures. To tackle these emerging challenges, Korea based Samsung Electronics has introduced a cutting-edge security tool called Auto Blocker.  Introduced in the One UI 6 Update, Auto Blocker boasts an array of additional security features, granting users the ability to customize their device's security as per their requirements Also known as ‘advanced sandbox’ or ‘Virtual Quarantine’. Sandboxing is a safety measure for separating running programs to prevent spread of digital vulnerabilities. It prohibits automatic execution of malicious code embedded in images. This shield now extends to third-party apps like WhatsApp and Facebook messenger, providing better resilience against cyber-attacks in all Samsung devices.  

Matter of Choice 

Dr. Seungwon Shin, EVP & Head of Security Team, Mobile eXperience Business at Samsung Electronics, emphasizes the significance of user safety. He stated “At Samsung, we constantly strive to keep our users safe from security attacks, and with the introduction of Auto Blocker, users can continue to enjoy the benefits of our open ecosystem, knowing that their mobile experience is secured.” 

Auto Blocker is a matter of choice. It's not a cookie cutter solution; instead, its USP is the ability to customize security measures of your device. The Auto Blocker can be accessed through device’s setting, and is activated via toggle. 

Your personal Digital Armor 

One of Auto Blocker's salient features is its ability to prevent bloatware (unnecessary apps) from installing in the devices from unknown sources which is called sideloading. While sideloading provides greater scope of control and better customization, it also exposes users to potential threats, such as malicious file downloads. The proactive approach of Auto Blocker disables sideloading by default.  Auto Blocker serves as an extra line of defense, especially against gruesome social engineering attacks such as voice Phishing (Vhishing).  The app has an essential tool called ‘Message Guard’, engineered to combat Zero Click attacks. These complicated attacks are executed when a message containing an image is viewed. 

The Auto Blocker also offers a wide variety of new controls to enhance device’s safety, including security scans to detect malwares. Additionally, Auto Blocker prevents the installation of malwares via USB cable. This ensures the device's security even when someone gains physical access to it, such as when the device is being charged in a public place.

Raising the Bar for Cyber Security

Auto Blocker testifies Samsung's unwavering commitment to the safety and privacy of its users. It acts an essential part of Samsung's security suite and privacy innovations, improving overall mobile experience within the Galaxy’s ecosystem. It provides a safer mobile experience while allowing user superior control over their device's protection. In comparison. Apple offers a more standardized approach to privacy and security with emphasis on user friendly design and closed ecosystem. Samsung disables sideloading to combat threats, while Apple is more flexible in this regard on macOS.

In this dynamic digital space, the Auto Blocker offers a tool to maintain cyber peace and resilience. It protects from a broad spectrum of digital hostilities while allowing us to embrace the new digital ecosystem crafted by Galaxy. It's a security feature that puts you in control, allowing you to determine how you fortify your digital fort to safeguard your device against digital specters like zero clicks, voice phishing (Vishing) and malware downloads 

Samsung’s new product emerges as impenetrable armor shielding users against cyber hostilities. With its new customizable security feature with Galaxy Ecosystem, it allows users to exercise greater control over their digital space, promoting more secure and peaceful cyberspace. 

Reference:

HT News Desk. (2023, November 1). Samsung unveils new Auto Blocker feature to protect devices. How does it work? Hindustan Times. https://www.hindustantimes.com/technology/samsung-unveils-new auto-blocker-feature to-protect-devices-how-does-it-work 101698805574773.html

Introduction:

This report examines ongoing phishing scams targeting "State Bank of India (SBI)" customers, India's biggest public bank using fake SelfKYC APKs to trick people. The image plays a part in a phishing plan to get users to download bogus APK files by claiming they need to update or confirm their "Know Your Customer (KYC)" info.

Fake Claim:

A picture making the rounds on social media comes with an APK file. It shows a phishing message that says the user's SBI YONO account will stop working because of their "Old PAN card." It then tells the user to install the "WBI APK" APK (Android Application Package) to check documents and keep their account open. This message is fake and aims to get people to download a harmful app.

Key Characteristics of the Scam:

• The messages "URGENTLY REQUIRED" and "Your account will be blocked today" show how scammers try to scare people into acting fast without thinking.
• PAN Card Reference: Crooks often use PAN card verification and KYC updates as a trick because these are normal for Indian bank customers.
• Risky APK Downloads: The message pushes people to get APK files, which can be dangerous. APKs from places other than the Google Play Store often have harmful software.
• Copying the Brand: The message looks a lot like SBI's real words and logos to seem legit.
• Shady Source: You can't find the APK they mention on Google Play or SBI's website, which means you should ignore the app right away.

Modus Operandi:

• Delivery Mechanism: Typically, users of messaging services like "WhatsApp," "SMS," or "email" receive identical messages with an APK link, which is how the scam is distributed.
• APK Installation: The phony APK frequently asks for a lot of rights once it is  installed, including access to "SMS," "contacts," "calls," and "banking apps."
• Data Theft: Once installed, the program may have the ability to steal card numbers, personal information, OTPs, and banking credentials.
• Remote Access: These APKs may occasionally allow cybercriminals to remotely take control of the victim's device in order to carry out fraudulent financial activities.

While the user installs the application on their device the following interface opens: 

‍

‍

It asks the user to allow the following:

• SMS is used to send and receive info from the bank.
• User details such as Username, Password, Mobile Number, and Captcha. 

Technical Findings of the Application:

Static Analysis:

• File Name: SBI SELF KYC_015850.apk
• Package Name: com.mark.dot.comsbione.krishn
• Scan Date: Sept. 25, 2024, 6:45 a.m.
• App Security Score: 52/100 (MEDIUM RISK)
• Grade: B

File Information:

• File Name: SBI SELF KYC_015850.apk
• Size: 2.88MB
• MD5: 55fdb5ff999656ddbfa0284d0707d9ef
• SHA1: 8821ee6475576beb86d271bc15882247f1e83630
• SHA256: 54bab6a7a0b111763c726e161aa8a6eb43d10b76bb1c19728ace50e5afa40448

App Information:

• App Name: SBl Bank
• Package Name:: com.mark.dot.comsbione.krishn
• Main Activity: com.mark.dot.comsbione.krishn.MainActivity
• Target SDK: 34
• Min SDK: 24
• Max SDK:
• Android Version Name:: 1.0
• Android Version Code:: 1

App Components:

• Activities: 8
• Services: 2
• Receivers: 2
• Providers: 1
• Exported Activities: 0
• Exported Services: 1
• Exported Receivers: 2
• Exported Providers:: 0

Certificate Information:

• Binary is signed
• v1 signature: False
• v2 signature: True
• v3 signature: False
• v4 signature: False
• X.509 Subject: CN=PANDEY, OU=PANDEY, O=PANDEY, L=NK, ST=NK, C=91
• Signature Algorithm: rsassa_pkcs1v15
• Valid From: 20240904 07:38:35+00:00
• Valid To: 20490829 07:38:35+00:00
• Issuer: CN=PANDEY, OU=PANDEY, O=PANDEY, L=NK, ST=NK, C=91
• Serial Number: 0x1
• Hash Algorithm: sha256
• md5: 4536ca31b69fb68a34c6440072fca8b5
• sha1: 6f8825341186f39cfb864ba0044c034efb7cb8f4
• sha256: 6bc865a3f1371978e512fa4545850826bc29fa1d79cdedf69723b1e44bf3e23f
• sha512:05254668e1c12a2455c3224ef49a585b599d00796fab91b6f94d0b85ab48ae4b14868dabf16aa609c3b6a4b7ac14c7c8f753111b4291c4f3efa49f4edf41123d
• PublicKey Algorithm: RSA
• Bit Size: 2048
• Fingerprint: a84f890d7dfbf1514fc69313bf99aa8a826bade3927236f447af63fbb18a8ea6
• Found 1 unique certificate

‍

App Permission 

‍

‍

1. Normal Permissions

• Access_network_state: Allows the App to View the Network Status of All Networks.
• Foreground_service: Enables Regular Apps to Use Foreground Services.
• Foreground_service_data_sync: Allows Data Synchronization With Foreground Services.
• Internet: Grants Full Internet Access.

2. Signature Permission:

• Broadcast_sms: Sends Sms Received Broadcasts. It Can Be Abused by Malicious Apps to Forge Incoming Sms Messages.

3. Dangerous Permissions:

• Read_phone_numbers: Grants Access to the Device’s Phone Number(S).
• Read_phone_state: Reads the Phone’s State and Identity, Including Phone Features and Data.
• Read_sms: Allows the App to Read Sms or Mms Messages Stored on the Device or Sim Card. Malicious Apps Could Use This to Read Confidential Messages.
• Receive_sms: Enables the App to Receive and Process Sms Messages. Malicious Apps Could Monitor or Delete Messages Without Showing Them to the User.
• Send_sms: Allows the App to Send Sms Messages. Malicious Apps Could Send Messages Without the User’s Confirmation, Potentially Leading to Financial Costs.

On further analysis on virustotal platform using md5 hash file, the following results were retrieved where there are 24 security vendors out of 68, marked this apk file as malicious and the graph represents the distribution of malicious file in the environment.

‍

‍

Key Takeaways:

• Normal Permissions: Generally Safe for Accessing Basic Functionalities (Network State, Internet).
• Signature Permissions: May Pose Risks When Misused, Especially Related to Sms Broadcasts.
• Dangerous Permissions: Provide Sensitive Data Access, Such as Phone Numbers and Device Identity, Which Can Be Exploited by Malicious Apps.
• The Dangerous Permissions Pose Risks Regarding the Reading, Receiving, and Sending of Sms, Which Can Lead to Privacy Breaches or Financial Consequences.

How to Identify the Scam:

• Official Statement: SBI never asks clients to download unauthorized APKs for upgrades related to KYC or other services. All formal correspondence takes place via the SBI YONO app, which may be found in reputable app shops.
• No Immediate Threats: Bank correspondence never employs menacing language or issues harsh deadlines, such as "your account will be blocked today."
• Email Domain and SMS Number: Verified email addresses or phone numbers are used for official SBI correspondence. Generic, unauthorized numbers or addresses are frequently used in scams.
• Links and APK Files: Steer clear of downloading APK files from unreliable sources at all times. For app downloads, visit the Apple App Store or Google Play Store instead.

CyberPeace Advisory:

• The Research team recommends that people should avoid opening such messages sent via social platforms. One must always think before clicking on such links, or downloading any attachments from unauthorised sources.
• Downloading any application from any third party sources instead of the official app store should be avoided. This will greatly reduce the risk of downloading a malicious app, as official app stores have strict guidelines for app developers and review each app before it gets published on the store.
• Even if you download the application from an authorised source, check the app's permissions before you install it. Some malicious apps may request access to sensitive information or resources on your device. If an app is asking for too many permissions, it's best to avoid it.
• Keep your device and the app-store app up to date. This will ensure that you have the latest security updates and bug fixes.
• Falling into such a trap could result in a complete compromise of the system, including access to sensitive information such as microphone recordings, camera footage, text messages, contacts, pictures, videos, and even banking applications and could lead users to financial loss.
• Do not share confidential details like credentials, banking information with such types of Phishing scams.
• Never share or forward fake messages containing links on any social platform without proper verification.

Conclusion:

Fake APK phishing scams target financial institutions more often. This report outlines safety steps for SBI customers and ways to spot and steer clear of these cons. Keep in mind that legitimate banks never ask you to get an APK from shady websites or threaten to close your account right away. To stay safe, use SBI's official YONO app on both systems and get apps from trusted places like Google Play or the Apple App Store. Check if the info is true before you do anything turn on 2FA for all your bank and money accounts, and tell SBI or your local cyber police about any scams you see.

‍