New Delhi. The investigation into the alleged espionage case involving Mohammad Sahil and Sameera, who were arrested on suspicion of spying for Pakistan’s intelligence agency ISI, has expanded to suspected digital and financial networks. According to the police, interrogation of the couple has produced inputs suggesting a possible attempt to gain unauthorised access to digital communications linked to Indian military establishments. The alleged plan reportedly involved using an e-SIM to gain access to a WhatsApp group associated with the Indian Air Force. The claims are yet to be independently established through technical and other evidence gathered during the investigation.
The police are now conducting forensic examinations of the couple’s mobile phones, SIM cards, computers and other electronic devices. Investigators are focusing on identifying the digital platforms allegedly used by the accused, their contacts and whether they communicated with any foreign handlers through secure or encrypted channels.
Suspected funding through gaming apps and cryptocurrency
Investigators are also examining the possibility that the suspected network used digital channels rather than conventional banking systems to receive or transfer funds. Police are looking into possible transactions involving gaming applications, cryptocurrency and other digital payment platforms.
The immediate challenge for investigators is to establish the source of the suspected funds and identify their ultimate beneficiaries. Where direct banking records are limited, investigators are examining digital wallets, cryptocurrency transactions and payment records associated with online platforms.
The probe is also examining whether digital platforms were allegedly used to conceal the source or purpose of funds. Bank records, mobile data and online activity linked to the accused are being compared to identify possible financial connections.
Probe into alleged e-SIM access to military communications
The alleged plan to use an e-SIM to gain access to an Indian Air Force-linked WhatsApp group has emerged as a significant aspect of the investigation. Police are trying to determine who allegedly devised the plan and how the accused may have obtained information relating to military communications.
Investigators are examining SIM and e-SIM records, contact details and digital activity found on the suspects’ devices. They are also checking whether the accused allegedly received assistance from another person in attempting to access any sensitive digital group or communication channel.
Forensic examination of devices underway
The forensic examination of the couple’s electronic devices is expected to play a crucial role in establishing the digital trail. Specialists are examining available data for suspicious applications, deleted files, chat records and other digital activity that could help establish communication links.
Police are also checking whether the accused allegedly used Telegram, Signal or other messaging platforms to communicate with foreign contacts. Data recovered during forensic analysis will be compared with information obtained during interrogation and other evidence.
Local network under investigation
Another key focus of the investigation is identifying the couple’s alleged local contacts. Police are examining who was in contact with Sahil and Sameera in Delhi and elsewhere and whether any of these individuals allegedly played a role in the suspected espionage network.
Investigators are also examining the possibility of a local module that may have allegedly operated on the instructions of foreign handlers to collect information, establish contacts or facilitate financial transactions. Suspected mobile numbers, social media accounts and digital contacts are being analysed to identify additional links.
Forensic report could determine next phase
The forensic reports from the electronic devices sent for technical examination could provide crucial information about alleged foreign contacts, digital payments, communication methods and activities carried out through the devices.
For now, investigators are attempting to corroborate the claims emerging during interrogation with independent technical and financial evidence. If the digital records and financial trails substantiate the allegations, the probe could widen to include other suspected members of the network. Investigators will also focus on identifying those allegedly behind the plan to gain access to military-related digital communications.
About the author — Suvedita Nath is a science student with a growing interest in cybercrime and digital safety. She writes on online activity, cyber threats, and technology-driven risks. Her work focuses on clarity, accuracy, and public awareness.
