When the State Digitises Childhood, Who Protects the Child?
"India’s digital public infrastructure promises inclusion and efficiency. But when essential services depend on handing over data, children become legible to the state long before anyone listens to them."
India’s digital transformation deserves much of the praise it gets. Digital Public Infrastructure (DPI) has taken public services to people at a scale few countries have managed. Still, one question gets less attention than it should: what happens when the state’s wish for a neatly administered citizen starts to override the rights of a child?
Aditi Pillai takes this up in From Principle(al) to Practice: The Child as a Datafied Digital Citizen in India’s Digital Public Infrastructure. She doesn’t argue against digital infrastructure. Her point is that its claim to serve the public can’t be separated from the power it holds over the people enrolled in it. The most obvious example is children. When they are persons with rights today, they run the risk of being reduced to administrative categories, data points and future projections. A child’s citizenship is suspended until adulthood. These days, identity, privacy and agency are important but digital governance frequently views childhood as something that needs to be tracked, controlled and maximised.
Protection without participation
Pillai’s sharpest idea is what she calls “double paternalism.” She uses 49-story completion responses from parents who completed brief hypothetical situations regarding enrolling a child in a computerised system, as well as expert interviews. Her focus is on how parental and institutional power reinforce one another and prevent kids from making decisions about their own online life.
Consider the Automated Permanent Academic Account Registry (APAAR), which provides a permanent academic identification for every student. Consolidating records may well help administrators. The harder questions are whether enrolment is truly voluntary, whether refusing carries a penalty, and whether a family can question how data is collected and linked without risking the child’s schooling.
The answers weren’t encouraging. Many parents either accepted enrolment despite their reservations or viewed it as a requirement that wasn’t worth challenging. Out of the 48, only four exhibited aggressive resistance and just one admitted that the adolescent in the scenario might have a voice. It is not appropriate to interpret this little qualitative study as a statistical representation of Indian parents. Nevertheless, it implies that there was never a choice and that obedience may be mistaken for informed agreement.
That is the double edge. The state compels, or strongly nudges, parents to enrol their children. Parents then decide on the child’s behalf without involving them. Both layers claim to protect the child’s interests, and the child’s own voice is missing from both.
When convenience becomes compulsion
It is easy to treat digital systems as neutral tools. They aren’t. Every system embodies decisions about what is collected, which records are linked, who can see them, and what happens to someone who can’t or won’t comply.
Pillai points to what can follow when educational records are tied to identity systems. Persistent data trails can expose children to long-term profiling. Rigid identification rules can shut out those whose lives don’t fit the institutional template: children without reliable documents, those who have left abusive homes, those who can’t provide valid biometrics.
There is an irony here. A system built to make citizens more visible to the state can make its most vulnerable citizens less visible as people. When a child can’t meet the system’s requirements, the result is often exclusion, not accommodation.
All of this does not imply that India should abandon digital infrastructure.The true debate is whether people’s freedom of choice, privacy and equitable access should be sacrificed for efficiency. A system can’t call itself inclusive if participation is compulsory in practice and the exceptions are badly designed.
Parents can’t carry this alone
Pillai also names “potentiality risk,” the worry that data gathered in childhood will quietly shape future opportunities, reputation or identity. A school record can outlast the circumstances that produced it. A bad year, once logged, may follow a student if institutions come to read them through a permanent digital profile.
Parents are left in an impossible spot. They are expected to guard their children against risks they may not fully understand and have little power to control. Responsibility slides from the institutions that build and run these systems to the families who must live with them. That is a weak form of accountability. Parental consent can’t justify every kind of data processing involving a child, and parents shouldn’t have to bargain one by one with schools or authorities when the alternative is losing an essential service.
The Digital Personal Data Protection Act, 2023, treats children as a distinct category of data principals and requires verifiable parental consent, subject to its provisions and rules. That is a start. The deeper question remains: does a child-focused data regime only regulate what adults decide about children, or does it also leave room for children’s own evolving views and abilities? Protection without participation can turn into control by another name.
From data subjects to digital citizens
Pillai’s strategy is built on two interconnected concepts: a rights-based perspective of data justice rooted in the UN Convention on the Rights of the Child (UNCRC) and participatory digital citizenship.
In actuality, this entails consulting kids before systems are developed rather than after. Parents need clear information and practical options to raise concerns about enrolment. Accessible grievance procedures, real alternatives when necessary and safeguards against exclusion are all necessary for institutions. Collection and linking of data should be proportionate to a legitimate purpose with clear accountability for how it is used later. Above all, the child’s best interests should be a standard that actually governs decisions, not a phrase invoked to excuse administrative convenience.
India’s digital ambitions and children’s rights don’t have to collide. A public system is best judged by how it treats the people least able to challenge it. The real test of a digital state is not how many people it can enrol or connect, but whether they keep their dignity and agency once inside. Children should not end up as records to be maintained or risks to be managed. They are citizens now, and their rights matter now.
References
- Aditi Pillai, ‘From Principle(al) to Practice: The Child as a Datafied Digital Citizen in India’s Digital Public Infrastructure’ (2026) 22(2) Indian Journal of Law and Technology, Article 3. DOI: 10.55496/NFYV5618.
- Digital Personal Data Protection Act 2023, s 9.
- United Nations Convention on the Rights of the Child (adopted 20 November 1989, entered into force 2 September 1990) 1577 UNTS 3.
- Government of India, ‘G20 New Delhi Leaders’ Declaration’ (2023).
Related Blogs
Introduction
Over the past few months, cybercriminals have upped the ante with highly complex methods targeting innocent users. One such scam is a new one that exploits WhatsApp users in India and globally. A seemingly harmless picture message is the entry point to stealing money and data. Downloading seemingly harmless images via WhatsApp can unknowingly install malware on your smartphone. This malicious software can compromise your banking applications, steal passwords, and expose your personal identity. With such malware-laced instant messages now making headlines, it is advised for netizens to exercise extreme caution while handling media received on messaging platforms.
How Does the WhatsApp Photo Scam Work?
Cybercriminals began embedding malicious code in images being shared on WhatsApp. Here is how the attack typically works:
- The user receives a WhatsApp message from an unknown number with an image.
- The image may appear harmless—a greeting, meme, or holiday card—but it's packed with hidden malware.
- When the user taps to download the image, the malware gets installed on the phone in silent mode.
- Once installed, the malware is able to capture keystrokes, read messages, swipe banking applications, swipe credentials, and even hijack device functionality.
- Allegedly, in its advanced versions, it can exploit two-factor authentication (2FA) and make unauthorised transactions.
Who Is Being Targeted?
This scam targets both Android and iPhone users, with a focus on vulnerable groups like senior citizens, busy workers during peak seasons, and members of WhatsApp groups flooded with forwarded messages. Experts warn that a single careless click is enough to compromise an entire device.
What Can the Malware Do?
Upon installation, the malware grants hackers a terrifying level of access:
- Track user activity via keylogging or screen capture.
- Pilfer banking credentials and initiate fund transfers automatically.
- Obtain SMS or app-based 2FA codes, evading security layers.
- Clone identity information, such as Aadhaar details, digital wallets, and email access.
- Control device operations, including the camera and microphone.
This level of intrusion can result in not just financial loss but long-term digital impersonation or blackmail.
Safety Measures for WhatsApp Users
- Never Download Media from Suspicious Numbers
Do not download any files or pictures, even if the content appears to be familiar, unless you have faith in the source. Spread this advice among family members, particularly the older generation.
- Turn off Auto-Download in WhatsApp Settings
Navigate to Settings > Storage and Data > Media Auto-Download. Switch off auto-download for mobile data, Wi-Fi, and roaming.
- Install and Update Mobile Security Apps
Ensure your phone is equipped with a good antivirus or mobile security app that is updated from time to time.
- Block and Report Potential Scammers
WhatsApp offers the ability to block and report senders in a straightforward manner. This ensures that it notifies the platform and others as well.
- Educate Your Community
Share your knowledge on cyber hygiene with family, friends, and colleagues. Many people fall victim simply because they aren't aware of the risks, staying informed and spreading the word can make a big difference.
Advisories and Response
The Indian Cybercrime Coordination Centre (I4C) and other state cyber cells have released several alerts on increasing fraud via messaging platforms. Law enforcement agencies are appealing to the public not only to be vigilant but also to report any incident at once through the National Cybercrime Reporting Portal (cybercrime.gov.in).
Conclusion
The WhatsApp photo scam is a stark reminder that not all dangers come with a warning. A picture can now be a Trojan horse, propagating silently from device to device and draining personal money. Do not engage with unwanted media, refresh and update your privacy and security settings. Cyber criminals survive on neglect and ignorance, but through digital hygiene and vigilance, we can fight against these types of emerging threats.
References
- https://www.opswat.com/blog/how-emerging-image-based-malware-attacks-threaten-enterprise-defenses
- https://www.indiatvnews.com/technology/news/whatsapp-photo-scam-alert-downloading-random-images-could-cost-you-big-2025-05-06-988855
- https://www.hindustantimes.com/india-news/what-is-the-whatsapp-image-scam-and-how-can-you-stay-safe-from-it-101744353412848.html
- https://faq.whatsapp.com/898107234497196/?helpref=uf_share
- https://www.welivesecurity.com/en/malware/malware-hiding-in-pictures-more-likely-than-you-think/
- https://faq.whatsapp.com/573786218075805
- https://www.reversinglabs.com/blog/malware-in-images
Executive Summary:
Several videos claiming to show bizarre, mutated animals with features such as seal's body and cow's head have gone viral on social media. Upon thorough investigation, these claims were debunked and found to be false. No credible source of such creatures was found and closer examination revealed anomalies typical of AI-generated content, such as unnatural leg movements, unnatural head movements and joined shoes of spectators. AI material detectors confirmed the artificial nature of these videos. Further, digital creators were found posting similar fabricated videos. Thus, these viral videos are conclusively identified as AI-generated and not real depictions of mutated animals.
Claims:
Viral videos show sea creatures with the head of a cow and the head of a Tiger.
Fact Check:
On receiving several videos of bizarre mutated animals, we searched for credible sources that have been covered in the news but found none. We then thoroughly watched the video and found certain anomalies that are generally seen in AI manipulated images.
Taking a cue from this, we checked all the videos in the AI video detection tool named TrueMedia, The detection tool found the audio of the video to be AI-generated. We divided the video into keyframes, the detection found the depicting image to be AI-generated.
In the same way, we investigated the second video. We analyzed the video and then divided the video into keyframes and analyzed it with an AI-Detection tool named True Media.
It was found to be suspicious and so we analyzed the frame of the video.
The detection tool found it to be AI-generated, so we are certain with the fact that the video is AI manipulated. We analyzed the final third video and found it to be suspicious by the detection tool.
The detection tool found the frame of the video to be A.I. manipulated from which it is certain that the video is A.I. manipulated. Hence, the claim made in all the 3 videos is misleading and fake.
Conclusion:
The viral videos claiming to show mutated animals with features like seal's body and cow's head are AI-generated and not real. A thorough investigation by the CyberPeace Research Team found multiple anomalies in AI-generated content and AI-content detectors confirmed the manipulation of A.I. fabrication. Therefore, the claims made in these videos are false.
- Claim: Viral videos show sea creatures with the head of a cow, the head of a Tiger, head of a bull.
- Claimed on: YouTube
- Fact Check: Fake & Misleading
Introduction
Charity and donation scams have continued to persist and are amplified in the digital era, where messages spread rapidly through WhatsApp, emails, and social media. These fraudulent schemes involve threat actors impersonating legitimate charities, government appeals, or social causes to solicit funds. Apart from targeting the general public, they also impact entities such as reputable tech firms and national institutions. Victims are tricked into transferring money or sharing personal information, often under the guise of urgent humanitarian efforts or causes.
A recent incident involves a fake WhatsApp message claiming to be from the Indian Ministry of Defence. The message urged users to donate to a fund for “modernising the Indian Army.” The government later confirmed this message was entirely fabricated and part of a larger scam. It emphasised that no such appeal had been issued by the Ministry, and urged citizens to verify such claims through official government portals before responding.
Tech Industry and Donation-Related Scams
Large corporations are also falling prey. According to media reports, an American IT company recently terminated around 700 Indian employees after uncovering a donation-related fraud. At least 200 of them were reportedly involved in a scheme linked to Telugu organisations in the US. The scam echoed a similar situation that had previously affected Apple, where Indian employees were fired after being implicated in donation fraud tied to the Telugu Association of North America (TANA). Investigations revealed that employees had made questionable donations to these groups in exchange for benefits such as visa support or employment favours.
Common People Targeted
While organisational scandals grab headlines, the common man remains equally or even more vulnerable. In a recent incident, a man lost over ₹1 lakh after clicking on a WhatsApp link asking for donations to a charity. Once he engaged with the link, the fraudsters manipulated him into making repeated transfers under various pretexts, ranging from processing fees to refund-related transactions (social engineering). Scammers often employ a similar set of tactics using urgency, emotional appeal, and impersonation of credible platforms to convince and deceive people.
Cautionary Steps
CyberPeace recommends adopting a cautious and informed approach when making charitable donations, especially online. Here are some key safety measures to follow:
- Verify Before You Donate. Always double-check the legitimacy of donation appeals. Use official government portals or the official charities' websites. Be wary of unfamiliar phone numbers, email addresses, or WhatsApp forwards asking for money.
- Avoid Clicking on Suspicious Links
Never click on links or download attachments from unknown or unverified sources. These could be phishing links/ malware designed to steal your data or access your bank accounts. - Be Sceptical of Urgency Scammers bank on creating a false sense of urgency to pressure their victims into donating quickly. One must take the time to evaluate before responding.
- Use Secure Payment Channels Ensure that one makes donations only through platforms that are secure, trusted, and verified. These include official UPI handles, government-backed portals (like PM CARES or Bharat Kosh), among others.
- Report Suspected Fraud In case one receives suspicious messages or falls victim to a scam, they are encouraged to report it to cybercrime authorities via cybercrime.gov.in (1930) or the local police, as prompt reporting can prevent further fraud.
Conclusion
Charity should never come at the cost of trust and safety. While donating to a good cause is noble, doing it mindfully is essential in today’s scam-prone environment. Always remember: a little caution today can save a lot tomorrow.
References
- https://economictimes.indiatimes.com/news/defence/misleading-message-circulating-on-whatsapp-related-to-donation-for-armys-modernisation-govt/articleshow/120672806.cms?from=mdr
- https://timesofindia.indiatimes.com/technology/tech-news/american-company-sacks-700-of-these-200-in-donation-scam-related-to-telugu-organisations-similar-to-firing-at-apple/articleshow/120075189.cms
- https://timesofindia.indiatimes.com/city/hyderabad/apple-fires-some-indians-over-donation-fraud-tana-under-scrutiny/articleshow/117034457.cms
- https://www.indiatoday.in/technology/news/story/man-gets-link-for-donation-and-charity-on-whatsapp-loses-over-rs-1-lakh-after-clicking-on-it-2688616-2025-03-04
