Ahmedabad's Cyber Crime Branch has uncovered suspected links to Pakistan and Bangladesh in a series of bomb threats sent to schools, courts, the Mayor's Office and the Narendra Modi Cricket Stadium. Police have registered two separate cases after threatening emails named multiple locations across the city.
Preliminary findings suggest compromised Gmail accounts were bought using cryptocurrency through Telegram and WhatsApp networks and then used to send the threats. The probe was conducted under the guidance of Police Commissioner GS Malik and senior police officials.
First emails named 16 locations
In the first set of threats, emails were sent from two Gmail accounts under false names. The messages mentioned specific timings and carried Khalistani-related content, according to investigators.
The threats named about 16 locations, including 10 schools, the Mayor's Office, the Gujarat High Court, the court complex in Sola, Metro Court, the District and Sessions Court in Ahmedabad, and the Narendra Modi Cricket Stadium. Cybercrime teams visited schools and court complexes and obtained email headers for technical examination.
Accounts traced to Bangladesh and Rawalpindi
Preliminary analysis indicated the email accounts were associated with Bangladesh and had been created or obtained earlier and operated from Bangladesh and Rawalpindi in Pakistan. Investigators are still verifying the exact chain behind the accounts.
On October 27, another threatening email was received, naming 19 locations including 14 schools, the Mayor's Office at Danapith, the Gujarat High Court, Metro Court, the Gheekanta court complex, the City Civil Court and the Narendra Modi Cricket Stadium. The Cyber Crime Branch registered a second case and sought further technical details.
Second email traced to Rangpur and Lahore
According to preliminary findings, the second email's connections were traced to Rangpur in Bangladesh and Lahore in Pakistan. A separate investigation into earlier threats issued in the name of a Khalistani organisation led police to an accused arrested in West Bengal.
During questioning, the accused allegedly revealed he had sold hacked Gmail accounts to a person in Bangladesh, who subsequently sold them to an individual in Pakistan, with payments reportedly made in cryptocurrency. Investigators suspect compromised accounts are being bought through Telegram and WhatsApp networks and used to create fear in India, particularly around festivals and major events. The investigation is continuing, and the alleged international links remain subject to further verification.
