#FactCheck: Misleading Clip of Nepal Crash Shared as Air India’s AI-171 Ahmedabad Accident

Over the last decade, battlefields have percolated from mountains, deserts, jungles, seas, and the skies into the invisible networks of code and cables. Cyberwarfare is no longer a distant possibility but today’s reality. The cyberattacks of Estonia in 2007, the crippling of Iran’s nuclear program by the Stuxnet virus, the SolarWinds and Colonial Pipeline breaches in recent years have proved one thing: that nations can now paralyze economies and infrastructures without firing a bullet.  Cyber operations now fall beyond the traditional threshold of war, allowing aggressors to exploit the grey zone where full-scale retaliation may be unlikely. 

At the same time, this ambiguity has also given rise to the concept of cyber deterrence. It is a concept that has been borrowed from the nuclear strategies during the Cold War era and has been adapted to the digital age. At the core, cyber deterrence seeks to alter the adversary’s cost-benefit calculation that makes attacks either too costly or pointless to pursue. While power blocs like the US, Russia, and China continue to build up their cyber arsenals, smaller nations can hold unique advantages, most importantly in terms of their resilience, if not firepower.   

‍

Understanding the concept of Cyber Deterrence

‍

Deterrence, in its classic sense, is about preventing action through the fear of consequences. It usually manifests in four mechanisms as follows:

• Punishment by threatening to impose costs on attackers, whether by counter-attacks, economic sanctions, or even conventional forces. 
• Denial of attacks by making them futile through hardened defences, and ensuring the systems to resist, recover, and continue to function. 
• Entanglement by leveraging interdependence in trade, finance, and technology to make attacks costly for both attackers and defenders. 
• Norms can also help shape behaviour by stigmatizing reckless cyber actions by imposing reputational costs that can exceed any gains. 

However, great powers have always emphasized the importance of punishment as a tool to showcase their power by employing offensive cyber arsenals to instill psychological pressure on their rivals. Yet in cyberspace, punishment has inherent flaws. 

‍

The Advantage of Asymmetry 

‍

For small states,  smaller geographical size can be utilised as a benefit. Three advantages of this exist, such as:

• With fewer critical infrastructures to protect,  resources can be concentrated. For example, Denmark, with a modest population of $40 million cyber budget, is considered to be among the most cyber-secure nations, despite receiving billions of US spending.  
• Smaller bureaucracies enable faster response. The centralised cyber command of Singapore allows it to ensure a rapid coordination between the government and the private sector. 
• Smaller countries with lesser populations can foster a higher public awareness and participation in cyber hygiene by amplifying national resilience.  

In short, defending a small digital fortress can be easier than securing a sprawling empire of interconnected systems. 

‍

Lessons from Estonia and Singapore 

‍

The 2007 crisis of Estonia remains a case study of cyber resilience. Although its government, bank, and media were targeted in offline mode, Estonia emerged stronger by investing heavily in cyber defense mechanisms. Another effort in this case stood was with the hosting of NATO’s Cooperative Cyber Defence Centre of Excellence to build one of the world’s most resilient e-governance models. 

Singapore is another case. Where, recognising its vulnerability as a global financial hub, it has adopted a defense-centric deterrence strategy by focusing on redundancy, cyber education, and international partnership rather than offensive capacity. These approaches can also showcase that deterrence is not always about scaring attackers with retaliation, it is about making the attacks meaningless.  

‍

Cyber deterrence and Asymmetric Warfare

‍

Cyber conflict is understood through the lens of asymmetric warfare, where weaker actors exploit the unconventional and stronger foes. As guerrillas get outmanoeuvred by superpowers in Vietnam or Afghanistan, small states hold the capability to frustrate the cyber giants by turning their size into a shield. The essence of asymmetric cyber defence also lies in three principles, which can be mentioned as; 

• Resilience over retaliation by ensuring a rapid recovery to neutralise the goals of the attackers. 
• Undertaking smart investments focusing on limited budgets over critical assets, not sprawling infrastructures. 
• Leveraging norms to shape the international opinions to stigmatize the aggressors and increase the reputational costs. 

This also helps to transform the levels of cyber deterrence into a game of endurance rather than escalating it into a domain where small states can excel. 

There remain challenges as well, as attribution problems persist, the smaller nations still depend on foreign technology, which the adversaries have sought to exploit. Issues over the shortage of talent have plagued the small states, as cyber professionals have migrated to get lucrative jobs abroad. Moreover, building deterrence capability through norms requires active multilateral cooperation, which may not be possible for all small nations to sustain. 

Conclusion

‍

Cyberwarfare represents a new frontier of asymmetric conflict where size does not guarantee safety or supremacy. Great powers have often dominated the offensive cyber arsenals, where small states have carved their own path towards security by focusing on defence, resilience, and international collaboration. The examples of Singapore and Estonia demonstrate the fact that the small size of a state can be its identity of a hidden strength in capabilities like cyberspace, allowing nimbleness, concentration of resources and societal cohesion. In the long run, cyber deterrence for small states will not rest on fearsome retaliation but on making attacks futile and recovery inevitable. 

‍

References

‍

• https://bluegoatcyber.com/blog/asymmetric-warfare/
• https://digitalcommons.usf.edu/cgi/viewcontent.cgi?article=2268&context=jss
• https://www.linkedin.com/pulse/rising-tide-cyberwarfare-battle-between-superpowers-hussain/ 
• https://digitalcommons.odu.edu/cgi/viewcontent.cgi?article=1243&context=gpis_etds
• https://www.scirp.org/journal/paperinformation?paperid=141708
• https://digitalcommons.odu.edu/cgi/viewcontent.cgi?article=1243&context=gpis_etds 

Introduction

The increase in consumer demands has resulted in a sharp increase in digital financing in India. As a result, the reputation of the digital lending sector has been impacted, as bad actors increasingly deploy illicit lending platforms such as fraudulent loans and trading apps. As millions of Indians download fast loan applications to help them meet their financial ends, the fraudulent apps result in cyber crimes including financial fraud. Consumers need to be vigilant of dubious trading or loan applications as bad actors frequently use illegitimate apps to trick victims by advertising limited-period offers and applying pressure.

Recently the Indian Cyber Crime Coordination Centre (I4C) led handel CyberDost has issued a cybercrime alert against the ‘CashExpand-U’ finance assistant app, which has been now removed from the Google Play Store. The app was found to be associated with hostile foreign entities, and the app had made it easier to raise small loans. However, such loan apps are seldom credible and may compromise financial information. 

Raising cases of Fraudulent Loan Apps

The finance minister had stated that the government is constantly engaged with the Reserve Bank of India and other regulators and stakeholders to control fraudulent loan apps. In FY23, there were 1,062 complaints against such apps, the Finance Minister shared during a Lok Sabha session. Google removed almost 134 fake apps from the Play Store in a single week in September 2023 after multiple complaints were registered against such apps. The Reserve Bank of India (RBI) had also issued regulatory guidelines on digital lending in April 2023 to bring transparency in the digital loan space. 

CyberPeace Policy Wing Advisory for Users

1. Be cautious of App Permissions 

Fake lending apps collect data by fraudulently taking numerous app permissions from consumers and misusing them later. The users must effectively manage their app permissions to avoid denying any extra permissions such as access to contacts, location, and photos. This is because fraudulent digital lenders access users' personal data to extort additional money even after loan repayment.

2. Practice Due Diligence 

Consumers must exercise care & caution before applying for a loan from digital lending platforms.  Before applying for a loan or downloading any such apps, consumers must conduct due diligence by verifying the app's name, rating, reviews, physical address, and contact information. Always double-verify the paperwork before signing any agreement or contract. Always apply for loans from RBI-approved and compliant banking and financial services providers.

3. Download from Official Sources 

To avoid downloading counterfeit apps, only download lending apps from official stores like Google Play Store or Apple App Store, and avoid downloading apps from web links sent via SMS, email, or social media, even if shared by your known persons.

4. Be sceptical of too-good-to-be-true offerings

Be cautious of deals that seem too good to be true, like hassle-free easy loans as they can be fraudulent. If an offer seems too good to be true, it might be a red flag. Hence always conduct your own research to verify the lender and avoid making hasty decisions.

5. Reporting Mechanism

In case of facing a scam by such fraudulent apps, victims can file a complaint with the ‘National Cyber Crime Reporting Portal’ or Cyber Crime Helpline ‘1930’, or they can also contact us at CyberPeace Helpline +919570000066 and helpline@cyberpeace.net to get assistance in reporting their cases. 

Final Words

Illegitimate loan/trading apps have been raising concerns by defrauding innocent consumers who seek financial assistance. The Center has recently warned against the CashExpand-U app, which has been now removed from the Google Play Store. Users are advised to exercise due care and caution while downloading loan apps and applying for loans to prevent any potential scams. keep up to date with news from concerned authorities about common scams and fraudulent practices in the lending space and stay safe in the online world.

References:

• https://www.livemint.com/news/beware-govt-issues-cybercrime-alert-against-loan-app-cashexpand-u-finance-assistant-11720338996430.html
• https://timesofindia.indiatimes.com/technology/tech-news/government-has-issued-an-important-warning-for-this-loan-app/articleshow/111541577.cms

‍

Introduction
‍

When Tamil Nadu Police arrested a man from Vellore in May 2026 on suspicion of being the point person helping Indian youth to be smuggled into cyber scam compounds in Cambodia, the papers led with the accused. They shouldn't have led with the accused but with the system. The arrest, one in a long string of them in Tamil Nadu, Madurai, and other states, is not simply another one-off policing victory. Rather, the arrest gives us an insight into a larger, darker world: an international criminal organisation that has successfully combined human trafficking and cybercrime, a new trend in criminality that specialists are calling 'cyber slavery.'
‍

What Is Cyber Slavery?

“Cyber slavery” involves trafficking persons under the pretence of employment, forcing them into committing online fraud to serve criminal enterprises. Victims are not merely victims of the work they are forced to do; they are often turned into culprits as they become complicit in victimising others. Trafficked victims are compelled to participate in frauds targeted at unsuspecting victims all around the globe. These activities, organised into robust criminal schemes, involve victims of sex or labour trafficking who are forced into operating romance scams or the so-called "pig butchering" scams that defraud people of their investment in cryptocurrency, all in heavily secured complexes guarded with threats of violence and torture. The extent of the problem is enormous, with the UN Office of the High Commissioner for Human Rights estimating in a 2023 report that there are over 100,000 victims of cyber scam compounds in Cambodia and another 120,000 in Myanmar. Schemes throughout Southeast Asia were projected to commit as much as $39.9 billion in fraudulent schemes a year.
‍

Why Southeast Asia? The Geography of Organised Crime
‍

In order to answer why Cambodia, Myanmar, Laos, and the surrounding regions have developed into the cyber slavery hub of the world, we can draw together an array of structural reasons:

• Casino clampdown and crime diversification: Cambodia's ban on online gambling in 2019 broke down established casino-related criminal networks. This saw old casinos and Special Economic Zones turn into cyber scam compound operations.
• Corruption and state complicity: A pre-existing environment of corruption and involvement of politically linked figures permitted scamming networks to flourish, and the armed groups in the border areas of Myanmar are reportedly complicit in these operations through supplying land and protection for the networks to operate in.
• Poor governance in the border areas: The lack of state control in the frontier areas of Myanmar provided the criminal networks with a secure sanctuary in which they could operate with impunity and cross borders to escape crackdowns and move their operations.
• Post-pandemic growth: The economic stress associated with the COVID-19 pandemic led to an increase in the supply of vulnerable individuals available to fill the scam networks, as well as unprecedented profit margins on scams.

‍

The Recruitment Pipeline: How Are Indian Youth Trapped?
‍

The typical journey from an Indian town or village to a locked compound in Southeast Asia follows the same narrative:

• The bait: On platforms like Facebook, WhatsApp, and Telegram, gangs lure with posts of lucrative overseas employment for IT work, customer service, data entry, and digital marketing with attractive, albeit feasible, pay packages (Rs. 80,000 to Rs. 1.5 lakh per month) and destinations such as Thailand and Singapore added for a veneer of genuineness.
• The recruiters: Local agents who gain trust, arrange visas and flight tickets, and collect the application fees are key intermediaries. Cases registered in Vellore and Madurai hint at recruitment agents receiving a commission for each person successfully smuggled into a trap, linked to larger travel and immigration networks.
• The lie: Victims are assured that they will be working legitimately in Thailand, but on reaching the border and crossing over, they find themselves pushed into scam compounds in neighbouring countries and have their passports, mobile phones and devices confiscated, thus rendering any escape attempt futile.
• The trap: In the interim, fake interviews, false job promises and convincing flight tickets serve to maintain the facade until the victims are forced to participate in cyber-fraud schemes.

The Architecture of Coercion: Life Inside the Scam Compounds
‍

It is in these compounds that the fates of the victims become known. Survivor accounts, investigations and UN human rights reports provide evidence of these circumstances. These compounds are often surrounded by barbed wire fences, monitored with cameras and heavily guarded. Once a potential victim is captured, they are stripped of their passports and any other electronic devices, preventing them from being able to contact the outside world or to escape. Workers are allocated stringent targets, ranging from the number of potential victims they must solicit for scams and the amount of money they must acquire through such scams. Failure to do so, or perceived disobedience, may lead to beatings, electroshock treatment, starvation and long periods in confinement. These beatings are supplemented with psychological torture, with scammers assuring their victims that they owe money for their journey, stay and training. This method of debt bondage keeps people at the compound even when the opportunity for escape is presented to them. The victims are then forced to take part in more complex online scams, which involve romance scams, fake investment scams, and impersonation scams using scripts and with supervision. In some cases, families will be encouraged to pay for their captive relatives' release by ransom, whereas those who refuse to comply or meet performance requirements may be sold and transferred to another compound as a piece of property within a transnational criminal network.
‍

Cybercrime Is No Longer Just About Hacking
‍

This emergency challenges the existing notion of cybercrime. The scam compound of Southeast Asia is not about a lonely hacker or a standalone breach; it is a form of organised cyber slavery in which trafficked individuals are made to commit financial fraud on an industrial level.

The probe of India's NIA found that recruitment is done in the Indian states of Bihar and Uttar Pradesh. Transport agents in Chennai and Madurai provide logistics, and Dubai and Bangkok act as transit points on the way to Cambodia, Laos, and Vietnam. It makes use of cryptocurrency wallets, shadow banking, and shell companies for the movement of funds across international borders. Companies such as the Huione Group has been accused of facilitating billions of dollars in financial transactions for scam infrastructure before receiving sanctions from the U.S.

To illustrate the threat landscape, the U.S. Treasury imposed sanctions on 19 entities spread across Myanmar and Cambodia and said that cyber scam operations looted $10 billion worth last year. Also, cryptocurrency transactions related to trafficking crimes jumped by 85% last year, which speaks to the expanding nature of the global criminal infrastructure.
‍

India's Exposure: A National Vulnerability
‍

The scale of exposure for India is large and expanding. The most likely victims are educated, and aspirational young men and women from Tier 2 and Tier 3 cities, seeking work abroad, which perfectly aligns with the primary target of such human trafficking networks.

Repeated incidents of people from Tamil Nadu falling victim to these networks have come to light. As far back as 2022, the chief minister wrote to the prime minister that close to 300 Indians, roughly 50 Tamils included, were being held in Myanmar. The Madurai-Cambodia case that came to light in 2026 revealed an entire network spanning Cambodia, Laos, and Vietnam, with authorities believing that thousands of Indians might have been trafficked there over the past three years. Such cases from Kerala, Karnataka, Andhra Pradesh, and some northern Indian states have been reported. Last year, India had to charter Air Force flights to rescue over 549 Indians from cyber scam centres along the Myanmar-Thailand border.

The Indian embassy in Phnom Penh assisted the Indian nationals along with the CBI, MEA, and NIA in the rescue of 67 Indians in September 2024; however, these operations are largely reactive in the face of the vast and evolving transboundary crisis.
‍

Prevention
‍

The best solution is awareness. The following are tangible signs that a job offer might be a lead to trafficking:

Red Flags within the job offer:

• Receiving unsolicited recruitment messages on WhatsApp, Telegram or Instagram from unknown numbers/contacts.
• Offer of unbelievably high salaries in undefined roles like ‘data entry,’ ‘online marketing’ or ‘customer service’ outside India.
• Request for upfront money to cover costs of visas, travel, accommodation, and training.
• Job offers to places in Thailand or Singapore involving complex transit routes through other countries.
• An interview process entirely through messaging apps, where the company has no real office address or registration number.
• Urgency and/or confidentiality required.

Verification:

• Check if the recruiter is registered on MEA's e-Migrate portal-this is a portal where MEA lists authorised overseas recruiters.
• Verify the authenticity of the company through its business registration with official registries in the foreign country.
• Contact the Indian Embassy/Consulate in that foreign country if something doesn't add up about the offer.
• Do not hand over your passport to your employer on arrival; it is standard practice for recruiters working as traffickers to confiscate it.

What to do if trapped:

• Contact the closest Indian embassy or consulate immediately.
• Call the MEA overseas helpline: 1800-11-3090.
• Lodge a report on the National Cybercrime Reporting Portal (cybercrime.gov.in).

Policy Imperatives
‍

On their own, individual consciousness cannot undo such a massive criminal infrastructure. India has to enforce the Emigration Act rigorously, implement mandatory licensing of recruitment agents and create a specialised task force consisting of NIA, CBI, MEA and the states’ cybercrime units. Pre-departure orientations should also become mandatory for migrant workers who go to Southeast Asia. Globally, India needs to work more closely with Cambodia, Myanmar, Thailand and Laos via intel sharing protocols, victim repatriations and action against scam compounds. Financial probes must be on par with enforcement investigations to catch up with the perpetrators’ network, the cryptocurrency and hawala channels that facilitate money laundering and finance trafficking operations, as that would severely hit these networks.
‍

Conclusion
‍

This arrest of the recruiter in Vellore is just a small piece of a larger network. What we see in these instances is the marriage of cybercrime, trafficking, and financial fraud into a larger transnational ecosystem that systematically preys on the economic vulnerability of individuals. These young Indians are not simply falling for scams; they are being systematically targeted, recruited, trafficked, and forced into these criminal operations by a networked structure. The scam compounds in Cambodia and along the border of Myanmar and Thailand are only the end of a process that very likely starts with a convincing job offer on social media. Fighting cyber slavery will not be as simple as more arrests; we need education and international efforts, as well as policy responses that match the scope and scale of the problem.
‍

References
‍

1. https://the420.in/78415-2vellore-man-cambodia-cyber-slavery-trafficking-case/
2. https://the420.in/madhan-vadivel-cambodia-cyber-slavery-trafficking-racket-investigation/
3. https://www.newsonair.gov.in/tamil-nadu-police-arrest-key-recruiter-in-cambodia-cyber-slavery-racket/
4. https://kashmirdotcom.in/2026/05/16/cambodia-linked-human-trafficking-cyber-slavery-racket-nia-chargesheets-five-including-absconding-kingpin/
5. https://www.aljazeera.com/news/2025/7/16/more-than-1000-arrested-in-cambodian-cyber-scam-raids
6. https://www.pbs.org/newshour/world/why-southeast-asias-online-scam-industry-is-so-hard-to-shut-down
7. https://www.cfr.org/articles/how-myanmar-became-global-center-cyber-scams
8. https://www.amlrightsource.com/resources/scam-states-the-cybercrime-corruption-complex-in-southeast-asia-and-the-collapse-of-anti-money-laundering-enforcement
9. https://newlinesinstitute.org/global-security-mil-priorities/cybercrimes-human-trafficking-and-cryptocurrency-in-southeast-asias-special-economic-zones/
10. https://www.theweek.in/news/india/2026/03/21/lured-by-jobs-sold-into-slavery-indias-crackdown-on-cyber-trafficking-continues.html

‍