Ghaziabad spy ring busted: 22 arrested in Pakistan-linked espionage network

At least 22 people, including several minors, have been arrested so far after suspicious activity was flagged at the Kaushambi police station on March 14, media reports said.

Initial inputs indicated that youths were filming railway stations and military installations in Bhovapur, but investigators soon uncovered a far more organised operation.

A Special Investigation Team (SIT), comprising personnel from Indirapuram Police, Crime Branch, cyber units and intelligence agencies, was formed.

Interrogations revealed a structured command chain allegedly run from Pakistan by handlers identified as Suhail Malik, Naushad Ali, and Sameer alias Shooter.

The accused were allegedly recruited via social media and encrypted messaging platforms and received precise instructions on targets, camera angles, and data transmission.

Payments ranging from ₹5,000 to ₹20,000 per assignment were used to lure economically vulnerable youths.

Authorities found mobile phones filled with photos, videos, GPS tags, and sensitive details of military perimeters and railway infrastructure — confirming the operation went beyond casual surveillance.

Investigators believe the network was conducting reconnaissance for a potential large-scale attack in Jammu and Kashmir. Some of the accused had previously travelled to Pulwama, where they allegedly transmitted critical intelligence across the border.

One of the most alarming revelations was a plan to install solar-powered CCTV cameras along the Delhi–Jammu railway corridor to provide real-time surveillance of troop movement.

Cameras in Delhi Cantonment and Sonipat were already operational, with a broader target list of nearly 50 locations under consideration.

The group reportedly used foreign-controlled mobile applications to transmit data, while over 450 training files linked to Pakistan have been identified.

Recruitment focused on individuals with basic technical skills — including mobile repair workers and CCTV technicians — while women and minors were used to avoid suspicion. A key recruiter has been identified as Iram alias Mahak.

In a parallel crackdown, investigators uncovered an OTP and SIM card racket that enabled foreign operatives to use Indian numbers for communication.

SIM cards were procured using forged documents, phishing, and pre-activation through agents, while funds were routed through small vendors and Jan Seva Kendras to avoid detection.

The network spanned multiple states, including Uttar Pradesh, Bihar, Maharashtra, and extended into Nepal, underscoring its scale and coordination.

On March 22, police arrested Naushad Ali alias Lalu in Faridabad, along with Meera, an e-rickshaw driver from Mathura, and a minor. Meera had previously been arrested in a weapons supply case and is now linked to another Pakistan-based handler, Sarfaraz alias Sardar.

Sameer alias Shooter remains absconding and is believed to be a key figure in the cross-border module.

Multiple agencies, including the National Investigation Agency (NIA) and Anti-Terrorism Squads (ATS), are coordinating efforts across states to dismantle the network. Investigators are now reconstructing the full chain by mapping every site, device, and transaction linked to the operation.

Authorities say the case highlights a shift from traditional espionage to tech-enabled, decentralised surveillance networks, with potentially serious national security implications.