Indian authorities have dismantled an espionage network allegedly operating across Haryana and Punjab, with deep links to Pakistani Intelligence Operatives (PIOs). The network involved six Indian nationals who acted as informants, financial conduits, and agents, passing sensitive information in exchange for money and false promises of romantic relationships or social support.
Among those arrested is Jyoti Malhotra, a Haryana-based travel blogger who ran the popular YouTube channel "Travel with Jo". She was reportedly recruited during a 2023 trip to Pakistan, where she developed close ties with Ehsan-ur-Rahim alias Danish, a former staffer at the Pakistan High Commission in New Delhi. Danish has since been expelled from India and declared persona non grata on May 13, 2025, after being exposed for his role in coordinating cross-border espionage.
According to intelligence officials, Jyoti Malhotra established contacts with multiple Pakistani operatives through Danish. She remained in touch via encrypted messaging platforms like Telegram, WhatsApp, and Snapchat, often using aliases such as "Jatt Randhawa" to conceal identities. Investigators allege she shared sensitive information regarding Indian military and strategic locations while actively projecting a pro-Pakistan narrative on her social media platforms.
In a disturbing twist, she reportedly entered into a romantic relationship with one of the PIOs and even traveled to Bali, Indonesia with him. She has now been charged under Section 152 of the Bharatiya Nyaya Sanhita (BNS) and Sections 3, 4, and 5 of the Official Secrets Act, 1923. A written confession has been secured, and the case is currently being handled by the Economic Offences Wing in Hisar, Haryana.
Another key accused is Guzala, a 32-year-old widow from Malerkotla, Punjab. She came into contact with Danish during a visa application visit to the Pakistan High Commission in February 2025. He quickly transitioned communication to Telegram, assuring her of better privacy. Danish promised marriage and initiated an online romantic relationship to emotionally manipulate her.
Over a series of interactions, he sent financial rewards via PhonePe and Google Pay, including instructions to transfer money to specific contacts in smaller, broken-down payments. Guzala later returned to the High Commission with her friend Banu Nasreena, another widow, for visa facilitation — further raising red flags for authorities.
The other accused individuals include:
• Yameen Mohd, a Malerkotla resident who facilitated financial transactions and visa logistics on behalf of Danish.
• Devinder Singh Dhillon, a Sikh student from Kaithal, Haryana, who was recruited during a pilgrimage to Pakistan. He allegedly sent videos of the Patiala Cantonment area and other sensitive content.
• Arman, a resident of Nuh, Haryana, who supplied Indian SIM cards, transferred funds, and even visited the Defence Expo 2025 under instructions from Pakistani handlers.
Sources within the investigation suggest that the network strategically targeted vulnerable individuals — including widows, students, and social media influencers — exploiting them through a combination of emotional manipulation, monetary incentives, and religious soft spots.
Officials have confirmed that confessional statements have been obtained from all six accused, and a broader investigation is underway to identify additional links, digital footprints, and financial trails. The operation is believed to be part of a larger espionage framework run by Pakistan's intelligence services, aiming to infiltrate Indian civil and strategic circles.
This case underscores a serious national security concern involving foreign espionage using digital tools, emotional coercion, and financial lures. The arrest of individuals from different walks of life reveals the sophisticated nature of such recruitment campaigns, which exploit gaps in cybersecurity awareness, socio-economic vulnerability, and personal loneliness.
The Indian government is expected to issue a formal diplomatic communication to Pakistan, questioning the activities of its expelled High Commission staffer. Additionally, agencies are calling for tighter visa scrutiny, cross-border digital monitoring, and social media surveillance to preempt further recruitment by foreign intelligence entities.
As authorities continue unraveling the deeper connections in this high-profile spy ring, the case serves as a chilling reminder of how easily modern espionage operations can embed themselves within civilian populations, often hiding in plain sight.