#FactCheck: Viral letter allegedly issued by PMO on reservation is fake, AI-generated document

Introduction

Empowering today’s youth with the right skills is more crucial than ever in a rapidly evolving digital world. Every year on July 15th, the United Nations marks World Youth Skills Day to emphasise the critical role of skills development in preparing young people for meaningful work and resilient futures. As AI transforms industries and societies, equipping young minds with digital and AI skills is key to fostering security, adaptability, and growth in the years ahead.

Why AI Upskilling is Crucial in Modern Cyber Defence

Security in the digital age remains a complex challenge, regardless of the presence of Artificial Intelligence (AI). It is one of the biggest modern ironies, and not only that, it is a paradox wrapped in code, where the cure and the curse are written in the same language. The very hand that protects the world from cyber threats can very well be used for the creation of that threat. This being said, the modern-day implementation of AI has to circumvent the threats posed by it or any other advanced technology. A solid grasp of AI and machine learning mechanisms is no longer optional; it is fundamental for modern cybersecurity. The traditional cybersecurity training programs employ static content, which can often become outdated and inadequate for the vulnerabilities. AI-powered solutions, such as intrusion detection systems and next-generation firewalls, use behavioural analysis instead of just matching signatures. AI models are susceptible, nevertheless, as malevolent actors can introduce hostile inputs or tainted data to trick computers into incorrect classification. Data poisoning is a major threat to AI defences, according to Cisco's evidence.

As threats surpass the current understanding of cybersecurity professionals, a need arises to upskill them in advanced AI technologies so that they can fortify the security of current systems. Two of the most important skills for professionals would be AI/ML Model Auditing and Data Science. Skilled data scientists can sift through vast logs, from pocket captures to user profiles, to detect anomalies, assess vulnerabilities, and anticipate attacks. A news report from Business Insider puts it correctly: ‘It takes a good-guy AI to fight a bad-guy AI.’ The technology of generative AI is quite new. As a result, it poses fresh security issues and faces security risks like data exfiltration and prompt injections. 

Another method that can prove effective is Natural Language Processing (NLP), which helps machines process this unstructured data, enabling automated spam detection, sentiment analysis, and threat context extraction. Security teams skilled in NLP can deploy systems that flag suspicious email patterns, detect malicious content in code reviews, and monitor internal networks for insider threats, all at speeds and scales humans cannot match. 

The AI skills, as aforementioned, are not only for courtesy’s sake; they have become essential in the current landscape. India is not far behind in this mission; it is committed, along with its western counterparts, to employ the emerging technologies in its larger goal of advancement. With quiet confidence, India takes pride in its remarkable capacity to nurture exceptional talent in science and technology, with Indian minds making significant contributions across global arenas.

AI Upskilling in India

As per a news report of March 2025, Jayant Chaudhary, Minister of State, Ministry of Skill Development & Entrepreneurship, highlighted that various schemes under the Skill India Programme (SIP) guarantee greater integration of emerging technologies, such as artificial intelligence (AI), cybersecurity, blockchain, and cloud computing, to meet industry demands. The SIP’s parliamentary brochure states that more than 6.15 million recipients have received training as of December 2024. Other schemes that facilitate educating and training professionals, such as Data Scientist, Business Intelligence Analyst, and Machine Learning Engineer are,

• Pradhan Mantri Kaushal Vikas Yojana 4.0 (PMKVY 4.0)
• Pradhan Mantri National Apprenticeship Promotion Scheme (PM-NAPS)
• Jan Shikshan Sansthan (JSS)

Another report showcases how Indian companies, or companies with their offices in India such as Ernst & Young (EY), are recognising the potential of the Indian workforce and yet their deficiencies in emerging technologies and leading the way by internal upskilling and establishing an AI Academy, a new program designed to assist businesses in providing their employees with essential AI capabilities, in response to the increasing need for AI expertise. Using more than 200 real-world AI use cases, the program offers interactive, organised learning opportunities that cover everything from basic ideas to sophisticated generative AI capabilities. 

In order to better understand the need for these initiatives, a reference is significant to a report backed by Google.org and the Asian Development Bank; India appears to be at a turning point in the global use of AI. As per the research, “AI for All: Building an AI-Ready Workforce in Asia-Pacific,” India urgently needs to provide accessible and efficient AI upskilling despite having the largest workforce in the world. According to the paper, by 2030, AI could boost the Asia-Pacific region’s GDP by up to USD 3 trillion. The key to this potential is India, a country with the youngest and fastest-growing population.

Conclusion and CyberPeace Resolution

As the world stands at the crossroads of innovation and insecurity, India finds itself uniquely poised, with its vast young population and growing technologies. But to truly safeguard its digital future and harness the promise of AI, the country must think beyond flagship schemes. Imagine classrooms where students learn not just to code but to question algorithms, workplaces where AI training is as routine as onboarding. 

India’s journey towards digital resilience is not just about mastering technology but about cultivating curiosity, responsibility, and trust. CyberPeace is committed to this future and is resolute in this collective pursuit of an ethically secure digital world. CyberPeace resolves to be an active catalyst in AI upskilling across India. We commit to launching specialised training modules on AI, cybersecurity, and digital ethics tailored for students and professionals. It seeks to close the AI literacy gap and develop a workforce that is both morally aware and technologically proficient by working with educational institutions, skilling initiatives, and industry stakeholders. 

References

1. https://www.helpnetsecurity.com/2025/03/07/ai-gamified-simulations-cybersecurity/ 
2. https://www.businessinsider.com/artificial-intelligence-cybersecurity-large-language-model-threats-solutions-2025-5?utm
3. https://apacnewsnetwork.com/2025/03/ai-5g-skills-boost-skill-india-targets-industry-demands-over-6-15-million-beneficiaries-trained-till-2024/ ‍
4. https://indianexpress.com/article/technology/artificial-intelligence/india-must-upskill-fast-to-keep-up-with-ai-jobs-says-new-report-10107821/

Introduction

The information of hundreds of thousands of Indians who received the COVID vaccine was Leaked in a significant data breach and posted on a Telegram channel. Numerous reports claim that sensitive information, including a person’s phone number, gender, ID card details, and date of birth, leaked over Telegram. It could be obtained by typing a person’s name into a Telegram bot.

What really happened?

The records pertaining to the mobile number registered in the CoWin portal are accessible on the Malayalam news website channel. It is also feasible to determine which vaccination was given and where it was given.

According to The Report, the list of individuals whose data was exposed includes BJP Tamil Nadu president K Annamalai, Congress MP Karti Chidambaram, and former BJP union minister for health Harsh Vardhan. Telangana’s minister of information and communication technology, Kalvakuntla Taraka Rama Rao, is also on the list.

MEITY stated in response to the data leak, “It is old data, we are still confirming it. We have requested a report on the matter.

After the media Report, the bot was disabled, but experts said the incident raised severe issues because the information might be used for identity theft, phishing emails, con games, and extortion calls. The Indian Computer Emergency Response Team (CERT-In), the government’s nodal body, has opened an investigation into the situation

The central government declared the data breach reports regarding the repository of beneficiaries against Covid to be “mischievous in nature” on Monday and claimed the ‘bot’ that purportedly accessed the confidential data was not directly accessing the CoWIN database.

According to the first complaint by CERT-In, the government’s cybersecurity division, the government claimed the bot might be displaying information from “previously stolen data.” Reports.

The health ministry refuted the claim, asserting that no bots could access the information without first verifying with a one-time password.

“It is made clear that all of these rumours are false and malicious. The health ministry’s CoWIN interface is entirely secure and has sufficient data privacy protections. The security of the data on the CoWIN portal is being ensured in every way possible, according to a statement from the health ministry.

Meity said the CoWin program or database was not directly compromised, and the shared information appeared to be taken from a previous intrusion. But the hack again highlights the growing danger of cyber assaults, particularly on official websites.‍

Recent cases of data leak

Dominos India 2021– Dominos India, a division of Jubilant FoodWorks, faced a cyberattack on May 22, 2021, which led to the disclosure of information from 180 million orders. The breach exposed order information, email addresses, phone numbers, and credit card information. Although Jubilant FoodWorks acknowledged a security breach, it refuted any illegal access to financial data.

Air India – A cyberattack that affected Air India in May 2021 exposed the personal information of about 4.5 million customers globally. Personal information recorded between August 26, 2011, and February 3, 2021, including names, dates of birth, contact information, passport information, ticket details, frequent flyer information from Star Alliance and Air India, and credit card information, were exposed in the breach.

Bigbasket – BigBasket, an online supermarket, had a data breach in November 2020, compromising the personal information of approximately 20 million consumers. Email IDs, password hashes, PINs, phone numbers, addresses, dates of birth, localities, and IP addresses were among the information released from an insecure database containing over 15 GB of customer data. BigBasket admitted to the incident and reported it to the Bengaluru Cyber Crime Department.

Unacademy – Unacademy, an online learning platform, experienced a data breach in May 2020, compromising the email addresses of approximately 11 million subscribers. While no sensitive information, such as financial data or passwords, was compromised, user data, including IDs, passwords, date joined, last login date, email IDs, names, and user credentials, was. The breach was detected when user accounts were uncovered for sale on the dark web.

2022 Card Data- Cybersecurity researchers from AI-driven Singapore-based CloudSEK found a threat actor offering a database of 1.2 million cards for free on a Dark Web forum for crimes on October 12, 2022. This came after a second problem involving 7.9 million cardholder records that were reported on the BidenCash website. This comprised information pertaining to State Bank of India (SBI) clients. And other well-known companies were among those targeted in high-profile data breach cases that have surfaced in recent years.

Conclusion

Data breach cases are increasing daily, and attackers are mainly attacking the healthcare sectors and health details as they can easily find personal details. This recent CoWIN case has compromised thousands of people’s data. The All-India Institute of Medical Sciences’ systems were compromised by hackers a few months ago. Over 95% of adults have had their vaccinations, according to the most recent data, even if the precise number of persons impacted by the CoWin privacy breach could not be determined.

Introduction

‍

In October 2024, when the comedian's phone rang, and the voice at the other end claimed to be a FedEx representative, comedian Ankita Shrivastav thought it was a simple issue of misdelivery or customer grievance. The caller said that a parcel in her name was detected being shipped to Iraq and contained illegal drugs. The phone was soon handed over to what appeared to be police personnel in uniform, and she was told that she was under investigation and placed under a so-called digital arrest. For seven hours, she was ordered not to disconnect the call, leave her home, or contact anyone. Through fear, authority, constant surveillance, and psychological pressure, the scammers coerced her into transferring ₹9 lakh in the FedEx parcel scam.

This is the anatomy of one of India's fastest-spreading cyber frauds, and it is costing victims everything.

‍

The Modus Operandi

‍

The most concerning part is the sheer consistency of the script. It usually starts with an unsolicited call, made on a spoofed number that could show up as a legitimate courier or government agency. The caller acts as a FedEx/DTDC executive and claims that a parcel dispatched in the victim’s name to either Taiwan, Iraq, Thailand, or Cambodia has been intercepted and contains drugs, forged passports, or fake credit cards.

As the victim tries to establish that they have no knowledge of this, the scammers smoothly shift the conversation to someone must have impersonated the victim’s Aadhaar number. The victim is now both accused and victim and, therefore, more easily manipulated.

The call is "transferred" to a fake NCB officer or cybercrime cell official. The victim sees a person dressed in uniform seated behind a mock police station set with official-looking documents scattered on the desk. A fake arrest warrant that carries the victim’s real name, address, and Aadhaar number, presumably acquired from stolen databases, is presented to the victim.

This is what the scammers call the "digital arrest." The victim is commanded not to move from the camera, nor leave the house, nor speak to anybody. Scammers take turns monitoring the call, who eventually ask the victim to transfer cash into a "secure government account" for RBI or CBI verification. 

‍

The Psychology of Fear

‍

"The art of scamming is psychological rather than technological," journalist and author Soumya Gupta opines. The scammers use two deeply primal fears: the fear of the police and the fear of social disgrace. Their victims are manipulated into believing that ending the call is tantamount to pleading guilty and that confessing to friends and family will only exacerbate their current circumstances. The victims' isolation is deliberately induced and combined with fatigue and disorientation.

"From a young age, we are taught to be scared of the police and not to question them,” comedian Ankita Shrivastav, who fell victim in October 2024, explains that childhood condition silenced the alarm bells ringing in my head. Shrivastav admitted that her fear of damage to her reputation made her more susceptible to the scam.

‍

The Human Cost

‍

The FedEx parcel scam is targeting everyone, irrespective of age, income, background, or education. Victims of this scam show the kind of different people they are: A 70-year-old veteran journalist was psychologically tortured for eight days in Bangalore, losing 1.2 crores, whereas a 61-year-old retired executive of a multinational was video watched for almost a fortnight in Bangalore, losing 9.14 crores, and additionally, a 25-year-old woman lost 10 lakhs through a video call scam in Coimbatore.

Such a varied mix of victims in such different cases suggests how hard it is to stereotype the ones being swindled: there can be individuals of different age groups ranging from 25 to 70 years old, both educated and non-educated.

‍

Why the Scam Is Spreading?

‍

This FedEx parcel scam is a result of a highly industrialised, sophisticated cybercrime system. The National Cyber Crime Reporting Portal records over 45,000 complaints tagged as specifically 'courier-impersonation fraud' in 2024 alone, where a 1,200-crore loss was registered in that category. 

This scam is powered by stolen Personal Identifiable Information (PII), illegally gathered by scammers through compromised e-commerce stores and rogue registry sites. This data enables the scammers to personalise and tailor the conversation to each individual to make it more believable. Furthermore, fake arrest warrants can be produced within minutes using official-looking templates, and the scammers utilise AI voice cloning and deep-fake videos of government officials. Vast networks of call centres (some based out of India and some overseas, including scam compounds in Cambodia and Myanmar) operate this scam with teams working in shifts. Money is quickly laundered into accounts of 'mule' account holders and quickly into cryptocurrency wallets. Post 24 hours of receiving the funds, recovering money is nearly impossible.

‍

What You Must Do If You Get This Call?

‍

One should always remember: no genuine government official will ever carry out an arrest over a video call. There is no "digital arrest," and this process has absolutely no basis in Indian law. If you do get such a call:

• Cut the call immediately: The scammers have you where they want you if you stay on the line. It is not illegal to hang up on them.
• Do not transfer money under threat or compulsion: No authentic investigative process ever requires you to move money to a "secure government account."
• Never share: your Aadhaar details, bank details, OTP, or passwords with anyone you speak to on the phone.
• Do not provide video statements: Whatever you say can be recorded and used to blackmail you further.
• Verify information independently: Call FedEx India (1800-22-6161) or any courier company using numbers from their official website, never numbers provided to you by the caller.
• Lock: your UPI, cards and Aadhaar biometrics instantly if you feel you have shared information with them.
• Call: 1930 within an hour of money transfer. The rate of recovery is 40-60% within one hour and less than 5% after 24 hours.
• File a complaint at cybercrime.gov.in and an FIR at your local cyber police station.
• Tell someone: Isolation is the scammer's greatest tool. Breaking it breaks the scam

‍

Conclusion

‍

The FedEx parcel scam is also based on a very basic human reaction: the fear of being accused, the urge to obey any figure that represents authority, and the desire to avoid public humiliation. It is designed to skip any part of the brain that may be used to rationalise anything. The only real prevention is to realise, before answering, that the call is never about the FedEx parcel, never from FedEx.

‍

References

‍

• https://www.aol.com/news/fedex-says-parcel-drugs-scam-220400617.html
• https://righttoinformation.wiki/fedex-courier-scam-recovery
• https://www.thenewsminute.com/karnataka/beware-of-fedex-scam-bengaluru-journalist-loses-rs-12-crore
• https://www.digit.in/news/general/coimbatore-woman-loses-rs-10-lakh-in-shocking-courier-scam-heres-what-happened.html
• https://www.deccanherald.com/india/fedex-courier-scam-a-tale-of-terror-trickery-and-deceit-2804802
• https://www.deccanherald.com/india/karnataka/bengaluru/fedex-frauds-con-scared-retiree-of-rs-9-crore-2810169
• https://www.deccanherald.com/india/karnataka/bengaluru/fedex-frauds-hold-woman-in-digital-captivity-for-8-days-2848168
• https://www.deccanherald.com/india/karnataka/bengaluru/how-to-fight-fedex-courier-scam-2836566
• https://www.businesstoday.in/india/story/fedex-scam-lawyer-blackmailed-424883-2024-04-09
• https://www.ncrb.gov.in/uploads/files/2CrimeinIndia2024-VolumeII.pdf‍
• https://www.newsmobile.in/fraud-and-scam/indian-comedian-falls-victim-to-fedex-digital-arrest-scam-loses-rs-9-lakh/