Cyber Security, Money Laundering and Border Management

Cyber security

• Threats include malware, ransomware, phishing, DDoS attacks, data breaches and attacks on critical information infrastructure (power grids, banks, telecoms).
• Information Technology Act, 2000 – India's main cyber law: recognises e-records and digital signatures, and punishes cyber crimes.

• Digital Personal Data Protection Act, 2023 – rules for processing personal data, and the rights of individuals.
• Good cyber hygiene: strong passwords, two-factor authentication, software updates, and never sharing OTPs.

Money laundering and terror financing

• Money laundering turns "dirty" money into "clean" money in three stages: placement → layering → integration.
• Prevention of Money Laundering Act (PMLA), 2002 – enforced by the Enforcement Directorate (ED). Banks report suspicious transactions to the Financial Intelligence Unit–India (FIU-IND).
• FATF (Financial Action Task Force), set up in 1989 at a G7 meeting in Paris, sets global standards and keeps "grey" and "black" lists. India became a full member in 2010.
• Other tools: tackling hawala, counterfeit currency, and the misuse of cryptocurrency and shell companies.

Border management

• India has about 15,000+ km of land borders with seven countries, and a long coastline.
• Challenges: difficult terrain (mountains, riverine and marshy areas), porous borders, smuggling, illegal migration and infiltration.
• Measures: fencing and floodlighting, Comprehensive Integrated Border Management System (CIBMS) technology (sensors, radars), border roads (the BRO), the Vibrant Villages Programme for border villages, and Integrated Check Posts for trade.
• Coastal security was strengthened after 26/11 with a three-tier system (the Navy, the Coast Guard and the marine police) and coastal radar chains.

Role of media and social media

They raise awareness but can spread fake news and radicalisation. The responses are fact-checking, digital literacy, IT Rules for platforms and quick official communication.

Background: new threats in a connected world

India has over 900 million internet users and the world's largest real-time payment system (UPI). It runs critical infrastructure – power grids, banking, telecom – that depends on networks. This makes cyber security a national security issue. Meanwhile, money laundering and terror financing fuel crime and insurgency, and India's 15,000+ km of land borders with seven countries need constant management.

Cyber security – threats in plain language

Institutional framework

• IT Act 2000 (amended 2008) – Section 66 (hacking), 66F (cyber terrorism), 69 (interception), 70 (protected systems).
• CERT-In (Indian Computer Emergency Response Team) – the national nodal agency for incident response. Directions (2022) require incidents to be reported within 6 hours.
• NCIIPC – protects critical information infrastructure (under NTRO).
• I4C (Indian Cyber Crime Coordination Centre, MHA) – the 1930 helpline and the cybercrime.gov.in portal.
• National Cyber Security Policy 2013 (a new strategy is pending); the National Cyber Security Coordinator (NSCS).
• DPDP Act 2023 – data fiduciaries' duties, consent, the Data Protection Board, penalties of up to ₹250 crore (rules notified in 2025).
• International: India has not signed the Budapest Convention (citing sovereignty and data-sharing concerns); it supported the new UN Convention against Cybercrime (adopted 2024).

Challenges: a shortage of skilled professionals, dependence on imported hardware (supply-chain risks – the ban on some Chinese apps in 2020, trusted source rules for telecom), low awareness, weak coordination, and the cross-border nature of crime.

Money laundering – how it works

Laundering has three stages:

1. Placement – bringing dirty cash into the system (cash deposits, casinos);
2. Layering – hiding the trail through multiple transactions (shell companies, hawala, crypto);
3. Integration – bringing the money back as "clean" assets (real estate, businesses).

Indian framework:

• the Prevention of Money Laundering Act (PMLA) 2002 – the Enforcement Directorate (ED) investigates. The Supreme Court upheld key provisions in Vijay Madanlal Choudhary (2022) (review pending);
• the FIU-IND (Financial Intelligence Unit) receives suspicious transaction reports;
• the Benami Transactions Act (amended 2016);
• the Black Money Act 2015 (undisclosed foreign assets);
• the Fugitive Economic Offenders Act 2018;
• crypto: virtual digital asset service providers were brought under PMLA in 2023.

International: the FATF (1989) sets the standards. India has been a member since 2010, and the 2024 mutual evaluation placed India in "regular follow-up" (the best category).

Terror financing: sources include hawala, fake Indian currency notes (FICN), narco-trafficking (the "Golden Crescent" and "Golden Triangle"), extortion and NGO misuse. The NIA's TFFC cell and the UAPA cover it.

Border management

Tools:

• CIBMS (Comprehensive Integrated Border Management System) – smart fencing with sensors, radars and cameras (pilots in Assam's Dhubri – BOLD-QIT);
• Integrated Check Posts (Attari, Petrapole);
• the Vibrant Villages Programme (2023) – developing border villages to stop out-migration (northern border first; VVP-II for other borders);
• Border Area Development Programme;
• anti-drone systems.

Case study: drones on the Punjab border

Since about 2019, drones from across the border have dropped weapons, drugs and FICN in Punjab. The responses included:

• extending the BSF's jurisdiction to 50 km from the border in Punjab, West Bengal and Assam (2021, debated by the states);
• anti-drone systems and jammers;
• forensic analysis of recovered drones;
• coordination with state police.

The case shows the hybrid nature of modern threats – technology, narco-terror and federal coordination all in one.

Common misconceptions

• "Cyber security is only the IT department's job." – It is a whole-of-nation issue, involving users, businesses and government.
• "Hawala is illegal everywhere and always connected with terror." – Informal value transfer systems exist widely; their misuse for laundering and terror financing is the concern.
• "Fencing alone can secure borders." – Riverine and mountainous terrain needs technology, people-friendly policies and cooperation with neighbours.

How UPSC asks it

Mains themes include cyber threats to critical infrastructure, the need for a data protection and cyber security framework, money laundering and its link with organised crime and terror, the challenges of managing the Indo-Bangladesh/Indo-Myanmar borders, and the role of technology in border management.

Mains answer framework

Q-type: "Discuss the challenges to India's cyber security and suggest a comprehensive strategy."

• Intro: digital growth plus recent incidents (AIIMS).
• Challenges: state and non-state actors, critical infrastructure, supply chains, skills, awareness, laws, coordination.
• Strategy: an updated national cyber security strategy, a dedicated cyber law, CERT-In and NCIIPC capacity, public–private partnership, skilling, trusted hardware (semiconductors), international cooperation, awareness (the 1930 helpline).
• Conclusion: cyber resilience is the foundation of a digital economy.

Practice question

Q. Why is cyber security a national security issue? Attacks on power grids, banking and health systems can disrupt the economy and endanger lives; CERT-In and the National Critical Information Infrastructure Protection Centre lead the response.