#FactCheck: AI Generated audio of CDS admitting that Pakistan Army is superior than Indian Army.

Introduction

A policy, no matter how artfully conceived, is like a timeless idiom, its truth self-evident, its purpose undeniable, standing in silent witness before those it vows to protect, yet trapped in the stillness of inaction, where every moment of delay erodes the very justice it was meant to serve. This is the case of the Digital Personal Data Protection Act, 2023, which holds in its promise a resolution to all the issues related to data protection and a protection framework at par with GDPR and Global Best Practices. While debates on its substantive efficacy are inevitable, its execution has emerged as a site of acute contention. The roll-out and the decision-making have been making headlines since late July on various fronts. The government is being questioned by industry stakeholders, media and independent analysts on certain grounds, be it “slow policy execution”, “centralisation of power” or “arbitrary amendments”. The act is now entrenched in a never-ending dilemma of competing interests under the DPDP Act.

The change to the Right to Information Act (RTI), 2005, made possible by Section 44(3) of the DPDP Act, has become a focal point of debate. This amendment is viewed by some as an attack on weakening the hard-won transparency architecture of Indian democracy by substituting an absolute exemption for personal information for the “public interest override” in Section 8(1)(j) of the RTI Act. 

The Lag Ledger: Tracking the Delays in DPDP Enforcement 

As per a news report of July 28, 2025, the Parliamentary Standing Committee on Information and Communications Technology has expressed its concern over the delayed implementation and has urged the Ministry of Electronics and Information Technology (MeitY) to ensure that data privacy is adequately ensured in the nation. In the report submitted to the Lok Sabha on July 24, the committee reviewed the government’s reaction to the previous recommendations and concluded that MeitY had only been able to hold nine consultations and twenty awareness workshops about the Draft DPDP Rules, 2025. In addition, four brainstorming sessions with academic specialists were conducted to examine the needs for research and development. The ministry acknowledges that this is a specialised field that urgently needs industrial involvement. Another news report dated 30th July, 2025, of a day-long consultation held where representatives from civil society groups, campaigns, social movements, senior lawyers, retired judges, journalists, and lawmakers participated on the contentious and chilling effects of the Draft Rules that were notified in January this year. The organisers said in a press statement the DPDP Act may have a negative impact on the freedom of the press and people’s right to information and the activists, journalists, attorneys, political parties, groups and organisations “who collect, analyse, and disseminate critical information as they become ‘data fiduciaries’ under the law.” 

The DPDP Act has thus been caught up in an uncomfortable paradox: praised as a significant legislative achievement for India’s digital future, but caught in a transitional phase between enactment and enforcement, where every day not only postpones protection but also feeds worries about the dwindling amount of room for accountability and transparency. 

The Muzzling Effect: Diluting Whistleblower Protections

The DPDP framework raises a number of subtle but significant issues, one of which is the possibility that it would weaken safeguards for whistleblowers. Critics argue that the Act runs the risk of trapping journalists, activists, and public interest actors who handle sensitive material while exposing wrongdoing because it expands the definition of “personal data” and places strict compliance requirements on “data fiduciaries.”One of the most important checks on state overreach may be silenced if those who speak truth to power are subject to legal retaliation in the absence of clear exclusions of robust public-interest protections.

Noted lawyer Prashant Bhushan has criticised the law for failing to protect whistleblowers, warning that “If someone exposes corruption and names officials, they could now be prosecuted for violating the DPDP Act.”

Consent Management under the DPDP Act

In June 2025, the National e-Governance Division (NeGD) under MeitY released a Business Requirement Document (BRD) for developing consent management systems under the DPDP Act, 2023. The document supports the idea of “Consent Manager”, which acts as a single point of contact between Data Principals and Data Fiduciaries. This idea is fundamental to the Act, which is now being operationalised with the help of MeitY’s “Code for Consent: The DPDP Innovation Challenge.” The government has established a collaborative ecosystem to construct consent management systems (CMS) that can serve as a single, standardised interface between Data Principals and Data Fiduciaries by choosing six distinct entities, such as Jio Platforms, IDfy, and Zoop. Such a framework could enable people to have meaningful control over their personal data, lessen consent fatigue, and move India’s consent architecture closer to international standards if it is implemented precisely and transparently. 

There is no debate to the importance of this development however, there are various concerns associated with this advancement that must be considered. Although effective, a centralised consent management system may end up being a single point of failure in terms of political overreach and technical cybersecurity flaws. Concerns are raised over the concentration of power over the framing, seeking, and recording of consent when big corporate entities like Jio are chosen as key innovators. Critics contend that the organisations responsible for generating revenue from user data should not be given the responsibility for designing the gatekeeping systems. Furthermore, the CMS can create opaque channels for data access, compromising user autonomy and whistleblower protections, in the absence of strong safeguards, transparency mechanisms and independent oversight. 

Conclusion

Despite being hailed as a turning point in India’s digital governance, the DPDP Act is still stuck in a delayed and unequal transition from promise to reality. Its goals are indisputable, but so are the conundrum it poses to accountability, openness, and civil liberties. Every delay increases public mistrust, and every safeguard that remains unsolved. The true test of a policy intended to safeguard the digital rights of millions lies not in how it was drafted, but in the integrity, pace, and transparency with which it is to be implemented. In the digital age, the true cost of delay is measured not in time, but in trust. CyberPeace calls for transparent, inclusive, and timely execution that balances innovation with the protection of digital rights.

References

• https://www.storyboard18.com/how-it-works/parliamentary-committee-raises-concern-with-meity-over-dpdp-act-implementation-lag-77105.htm 
• https://thewire.in/law/excessive-centralisation-of-power-lawyers-activists-journalists-mps-express-fear-on-dpdp-act
• https://www.medianama.com/2025/08/223-jio-idfy-meity-consent-management-systems-dpdpa/ ‍
• https://www.downtoearth.org.in/governance/centre-refuses-to-amend-dpdp-act-to-protect-journalists-whistleblowers-and-rti-activists

Introduction

With the development of a digital economy in India, merchants in the country are often caught in a tough situation where their bank accounts have been placed under a debit freeze, due to a suspected link of the bank account with some form of cyber fraud. These merchants are left in a tough situation, as their funds, including their personal earnings, and money earned through the running of their business, have become frozen, regardless of whether or not the account holder had knowingly or intentionally engaged in any kind of illicit activity. The funds of legitimate businesses have become tied up due to this activity. 

This concern was recognized and was addressed by the Supreme Court of India in their order, which was issued in 2026, which prompted the RBI to issue their draft Directions, in 2026. The draft directions are aimed at balancing the need of the state to stop the rapid withdrawal of stolen funds, while also trying to balance the needs of law-abiding citizens to hold and access their own money and maintain some financial stability.

Understanding Money-Mule Accounts

A "money mule" account is used for depositing and/or layering/integrating illicit money. There is a broad range of culpability when a person uses their bank account as a money mule account. Some people knowingly give someone else control over their bank account and use that control to commit illegal acts to make some money. Others, however, are unsuspecting and fall victim to fraudulent activities such as online ads offering bogus jobs or romance scams.

The proliferation of these accounts introduces severe systemic friction into cybercrime investigations, as stolen assets are rapidly dispersed across multiple tranches and jurisdictions before law enforcement can trace the primary beneficiaries. Accordingly, banking institutions bear a rigorous compliance burden to deploy real-time transaction monitoring systems capable of identifying anomalous patterns to pre-emptively mitigate the dissipation of fraudulent proceeds.

However, having an account involved in a questionable money transfer does not make the person account holding automatically a money mule. There is the innocent account holder who is being used as a transferrer for money to a person who has something to trade in exchange, or perhaps an account holder whose account was taken over. There are also accounts who have unknowingly been victim to identity theft. Due process requires a framework that allows an account holder to contest their money hold while providing regulatory safeguards to protect consumers.

What Does the RBI’s Draft Propose?

1. Temporary debit holds on suspicious transactions

The Draft Directions mandate that banking institutions institute temporary debit holds upon detecting transactions or accounts exhibiting a suspected nexus with money mule activities or cyber-enabled financial fraud. Real-time transaction monitoring systems leveraging advanced Artificial Intelligence (AI) and Machine Learning (ML) architectures shall be deployed to identify anomalous or suspicious transactions capturing a threshold value of ₹1,000 or more.

2. Notice and an opportunity to explain

Procedural safeguards within the framework include notice being provided by the banking institution to the customer within a statutory time period following a debit hold. The notice must specify the reason(s) behind the hold, and the procedures for a customer to request for the hold to be vacated, as well as providing information and contact details of the officer handling the matter.

• Showing Cause: The account holder shall ordinarily be granted a statutory window of 20 days from the receipt of notice to show cause and establish the legitimacy of the transaction or account.
• Adjudication by Bank: Upon submission of the customer's explanation, the bank is mandated to adjudicate the matter within 10 days. If the explanation is deemed statutorily satisfactory, the institution must vacate the hold instanter.
• Law Enforcement Referral: In the event the response is found to be lacking in substance, the bank can make a referral to the concerned law enforcement authority through the Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS) portal of the National Cybercrime Reporting Portal (NCRP).
• Temporal Sunset Clauses: The framework includes stringent temporal provisions for law enforcement actions to ensure that administrative delays do not turn the temporary holds into perpetual financial incapacitation:
  
  • The 30-Day Directive Rule: In case the competent law enforcement authority does not issue a formal directive for the need to maintain the hold beyond the stipulated period within 30 days of the referral, then the bank is statutorily bound to remove the restriction after 30 days.
  • Absolute Maximum Ceiling: In the absence of an explicit overriding direction from a competent judicial or statutory authority, the absolute maximum tenure of any temporary hold shall remain 60 days from the date of initiation of the hold.

3. Greater accountability for banks

Beyond the mechanics of fraud detection, the proposed framework also imposes greater responsibilities on banks with respect to compliance and governance. This implies that the banks need to have an internal policy on detection, implementation and release of the hold order, standardized customer communication, coordination with the law enforcement authorities, and also grievances redressal.

Balancing Fraud Prevention with Customer Rights

The promise of a proportionate approach

The core efficacy of the proposed regulatory framework rests upon its adherence to the constitutional doctrine of proportionality, seeking to calibrate administrative restrictions strictly to the scope of the alleged wrongdoing. Historically, the imposition of indiscriminate, blanket account freezes by banking institutions has induced severe financial disenfranchisement. These overreaching actions effectively inhibit the citizen’s ability to ensure basic necessities for oneself, meet one’s tenancy responsibilities, meet one’s medical liabilities, and remain solvent within the commercial environment.

For proprietary firms, micro-traders, and small-to-medium enterprises (SMEs), an inaccessible bank account means instant cessation of business activity, inability to pay salaries, and inability to pay suppliers. A transaction-based debit block, contingent upon statutory justification and limited by time is considerably less disruptive to the economic consequences.

The risks that remain

While Draft Directions are innovative, their effectiveness still rests on the ability of algorithms to detect fraud. An anomaly detection machine learning model is good at finding variations and deviations in transactions and the order of transactions. However, there are many variations in legitimate transactions, such as a large transfer in an otherwise small transaction account. An automated transaction system cannot identify fraud alone.

An over-reliance on unverified automated alerts creates an acute risk of systemic recidivism, wherein innocent depositors face iterative, unwarranted financial restrictions. Without legal and procedural support, automated fraud detection systems should not be used in banking and legal systems.

From an evidentiary standpoint, informal workers, small-scale vendors, and consumers lacking advanced digital literacy face severe structural barriers when ordered to establish the legitimacy of a transaction within the statutory 20-day window. These demographics frequently operate without formal invoices, digital ledger entries, or direct access to professional legal and banking assistance.

To prevent the reversing of the burden of proof onto the vulnerable, banking institutions must be mandated to provide simplified, multilingual channels for showing cause, accept alternative forms of secondary evidence, and eschew overly burdensome compliance hurdles. Crucially, where a depositor submits credible exculpatory evidence, clear statutory escalation and appellate pathways must be available to counter institutional inertia.

Recommendations for Effective Implementation

First, banks need to implement explainable and risk-based detection mechanisms, if needed, accompanied by human review. Secondly, banks need to give customers timely notice regarding the blocked transaction with explanation on what amount it concerns, steps to be taken and how one can submit additional evidence.

Thirdly, the RBI should ensure that grievance redressal is effective in practice, with urgent review of cases concerning necessary expenses and business hardship. Finally, coordination between banks and law-enforcement agencies must improve so that referrals are acted upon within the prescribed timelines.

Conclusion

The RBI’s Draft Know Your Customer Amendment Directions, 2026, represents a significant regulatory effort to resolve the systemic friction between combating cyber-enabled financial fraud and protecting consumer property rights. By introducing transaction-specific holds, mandatory customer notification, a statutory right to be heard, and strict temporal ceilings, the framework introduces a much-needed ethos of accountability into the digital ecosystem.

The sustainability of India’s digital economy in the long run cannot be contingent on a structure that inhibits the flow of illegitimate money through imposing severe, extrajudicial monetary disabilities on innocent people because the true effectiveness of any system entails not only inhibiting the criminals behind cybercrime but also protecting the financial safety and liquidity of regular depositors.

‍

References

1. Reserve Bank of India, Draft Reserve Bank of India (Know Your Customer) Amendment Directions, 2026 (11 September 2026) RBI official website.
2. In Re: Victims of Digital Arrest Related to Forged Documents, Suo Motu Writ Petition (Criminal) No. 3 of 2025 (Supreme Court of India, Order dated August 4, 2026)
3. Reserve Bank of India, Reserve Bank of India (Know Your Customer) Directions, 2025
4. ‘RBI Proposes Temporary Debit Holds on Suspected Money Mule Accounts’, Business Standard (13 September 2026), https://www.business-standard.com/finance/news/rbi-proposes-temporary-debit-holds-on-suspected-money-mule-accounts-126091300603_1.html.
5. ‘RBI Proposes Framework to Freeze Only Disputed Transaction Amount in Suspected Cyber Fraud Cases’, News on AIR (14 September 2026), https://newsonair.gov.in/rbi-proposes-framework-to-freeze-only-disputed-transaction-amount-in-suspected-cyber-fraud-cases/.
6. Reserve Bank of India, Draft Reserve Bank of India (Know Your Customer) Amendment Directions, 2026 (11 September 2026).

‍

Introduction

In an era when misinformation spreads like wildfire across the digital landscape, the need for effective strategies to counteract these challenges has grown exponentially in a very short period. Prebunking and Debunking are two approaches for countering the growing spread of misinformation online. Prebunking empowers individuals by teaching them to discern between true and false information and acts as a protective layer that comes into play even before people encounter malicious content. Debunking is the correction of false or misleading claims after exposure, aiming to undo or reverse the effects of a particular piece of misinformation. Debunking includes methods such as fact-checking, algorithmic correction on a platform, social correction by an individual or group of online peers, or fact-checking reports by expert organisations or journalists. An integrated approach which involves both strategies can be effective in countering the rapid spread of misinformation online.

Brief Analysis of Prebunking 

Prebunking is a proactive practice that seeks to rebut erroneous information before it spreads. The goal is to train people to critically analyse information and develop ‘cognitive immunity’ so that they are less likely to be misled when they do encounter misinformation. 

The Prebunking approach, grounded in Inoculation theory, teaches people to recognise, analyse and avoid manipulation and misleading content so that they build resilience against the same. Inoculation theory, a social psychology framework, suggests that pre-emptively conferring psychological resistance against malicious persuasion attempts can reduce susceptibility to misinformation across cultures. As the term suggests, the MO is to help the mind in the present develop resistance to influence that it may encounter in the future. Just as medical vaccines or inoculations help the body build resistance to future infections by administering weakened doses of the harm agent, inoculation theory seeks to teach people fact from fiction through exposure to examples of weak, dichotomous arguments, manipulation tactics like emotionally charged language, case studies that draw parallels between truths and distortions, and so on. In showing people the difference, inoculation theory teaches them to be on the lookout for misinformation and manipulation even, or especially, when they least expect it. 

The core difference between Prebunking and Debunking is that while the former is preventative and seeks to provide a broad-spectrum cover against misinformation, the latter is reactive and focuses on specific instances of misinformation. While Debunking is closely tied to fact-checking, Prebunking is tied to a wider range of specific interventions, some of which increase motivation to be vigilant against misinformation and others increase the ability to engage in vigilance with success.

There is much to be said in favour of the Prebunking approach because these interventions build the capacity to identify misinformation and recognise red flags However, their success in practice may vary. It might be difficult to scale up Prebunking efforts and ensure their reach to a larger audience. Sustainability is critical in ensuring that Prebunking measures maintain their impact over time. Continuous reinforcement and reminders may be required to ensure that individuals retain the skills and information they gained from the Prebunking training activities. Misinformation tactics and strategies are always evolving, so it is critical that Prebunking interventions are also flexible and agile and respond promptly to developing challenges. This may be easier said than done, but with new misinformation and cyber threats developing frequently, it is a challenge that has to be addressed for Prebunking to be a successful long-term solution. 

Encouraging people to be actively cautious while interacting with information, acquire critical thinking abilities, and reject the effect of misinformation requires a significant behavioural change over a relatively short period of time. Overcoming ingrained habits and prejudices, and countering a natural reluctance to change is no mean feat. Developing a widespread culture of information literacy requires years of social conditioning and unlearning and may pose a significant challenge to the effectiveness of Prebunking interventions. 

Brief Analysis of Debunking 

Debunking is a technique for identifying and informing people that certain news items or information are incorrect or misleading. It seeks to lessen the impact of misinformation that has already spread. The most popular kind of Debunking occurs through collaboration between fact-checking organisations and social media businesses. Journalists or other fact-checkers discover inaccurate or misleading material, and social media platforms flag or label it. Debunking is an important strategy for curtailing the spread of misinformation and promoting accuracy in the digital information ecosystem. 

Debunking interventions are crucial in combating misinformation. However, there are certain challenges associated with the same. Debunking misinformation entails critically verifying facts and promoting corrected information. However, this is difficult owing to the rising complexity of modern tools used to generate narratives that combine truth and untruth, views and facts. These advanced approaches, which include emotional spectrum elements, deepfakes, audiovisual material, and pervasive trolling, necessitate a sophisticated reaction at all levels: technological, organisational, and cultural.

Furthermore, It is impossible to debunk all misinformation at any given time, which effectively means that it is impossible to protect everyone at all times, which means that at least some innocent netizens will fall victim to manipulation despite our best efforts.  Debunking is inherently reactive in nature, addressing misinformation after it has grown extensively. This reactionary method may be less successful than proactive strategies such as Prebunking from the perspective of total harm done. Misinformation producers operate swiftly and unexpectedly, making it difficult for fact-checkers to keep up with the rapid dissemination of erroneous or misleading information. Debunking may need continuous exposure to fact-check to prevent erroneous beliefs from forming, implying that a single Debunking may not be enough to rectify misinformation.  Debunking requires time and resources, and it is not possible to disprove every piece of misinformation that circulates at any particular moment. This constraint may cause certain misinformation to go unchecked, perhaps leading to unexpected effects. The misinformation on social media can be quickly spread and may become viral faster than Debunking pieces or articles. This leads to a situation in which misinformation spreads like a virus, while the antidote to debunked facts struggles to catch up.

Prebunking vs Debunking: Comparative Analysis

Prebunking interventions seek to educate people to recognise and reject misinformation before they are exposed to actual manipulation. Prebunking offers tactics for critical examination, lessening the individuals' susceptibility to misinformation in a variety of contexts. On the other hand, Debunking interventions involve correcting specific false claims after they have been circulated. While Debunking can address individual instances of misinformation, its impact on reducing overall reliance on misinformation may be limited by the reactive nature of the approach.

CyberPeace Policy Recommendations for Tech/Social Media Platforms

With the rising threat of online misinformation, tech/social media platforms can adopt an integrated strategy that includes both Prebunking and Debunking initiatives to be deployed and supported on all platforms to empower users to recognise the manipulative messaging through Prebunking and be aware of the accuracy of misinformation through Debunking interventions. 

1. Gamified Inoculation: Tech/social media companies can encourage gamified inoculation campaigns, which is a competence-oriented approach to Prebunking misinformation. This can be effective in helping people immunise the receiver against subsequent exposures. It can empower people to build competencies to detect misinformation through gamified interventions. 
2. Promotion of Prebunking and Debunking Campaigns through Algorithm Mechanisms: Tech/social media platforms may promote and guarantee that algorithms prioritise the distribution of Prebunking materials to users, boosting educational content that strengthens resistance to misinformation. Platform operators should incorporate algorithms that prioritise the visibility of Debunking content in order to combat the spread of erroneous information and deliver proper corrections; this can eventually address and aid in Prebunking and Debunking methods to reach a bigger or targeted audience.
3. User Empowerment to Counter Misinformation: Tech/social media platforms can design user-friendly interfaces that allow people to access Prebunking materials, quizzes, and instructional information to help them improve their critical thinking abilities. Furthermore, they can incorporate simple reporting tools for flagging misinformation, as well as links to fact-checking resources and corrections.
4. Partnership with Fact-Checking/Expert Organizations: Tech/social media platforms can facilitate Prebunking and Debunking initiatives/campaigns by collaborating with fact-checking/expert organisations and promoting such initiatives at a larger scale and ultimately fighting misinformation with joint hands initiatives.

Conclusion

The threat of online misinformation is only growing with every passing day and so, deploying effective countermeasures is essential.  Prebunking and Debunking are the two such interventions. To sum up: Prebunking interventions try to increase resilience to misinformation, proactively lowering susceptibility to erroneous or misleading information and addressing broader patterns of misinformation consumption, while Debunking is effective in correcting a particular piece of misinformation and having a targeted impact on belief in individual false claims. An integrated approach involving both the methods and joint initiatives by tech/social media platforms and expert organizations can ultimately help in fighting the rising tide of online misinformation and establishing a resilient online information landscape. 

References

1. https://mark-hurlstone.github.io/THKE.22.BJP.pdf
2. https://futurefreespeech.org/wp-content/uploads/2024/01/Empowering-Audiences-Through-%E2%80%98Prebunking-Michael-Bang-Petersen-Background-Report_formatted.pdf
3. https://newsreel.pte.hu/news/unprecedented_challenges_Debunking_disinformation
4. https://misinforeview.hks.harvard.edu/article/global-vaccination-badnews/

‍