After Maoists, Counter-Intelligence is top priority for Modi government
The article outlines a shift in India's security approach under the Modi government, prioritizing counter-intelligence (CI) and foreign-network disruption. It catalogs a series of CI operations from 2021 through 2026, highlighting arrests tied to ISI, MSS, and other foreign actors across multiple states and borders.
Why It Matters
The timeline shows how CI actions are being used to curb espionage and foreign influence on Indian soil, with implications for India’s security posture and international relations.
Timeline
11 Events
Remand of seven suspects in CI operations – 30 days judicial custody
The seven suspects linked to the March 2026 arrest wave, including Van Dyke and the Ukrainian nationals, were remanded to 30-day judicial custody on April 6, 2026.
Arrests of Matthew Van Dyke and Ukrainian nationals – Covert drone training network
Matthew Aaron Van Dyke, founder of private mercenary firm Sons of Liberty International (SOLI), was arrested at Kolkata airport on March 13, 2026. Six Ukrainian nationals were arrested at Lucknow and Delhi airports the same day. They conducted training for ethnic armed groups in drone operations, assembly and jamming technology. They were charged under UAPA Section 18 (Terror Conspiracy) and remanded to 30 days’ judicial custody on April 6, 2026.
Wu Hailong & Seng Jun Yong arrested – Indo-Nepal border area (Madhubani, Bihar)
Two Chinese intelligence operatives, Wu Hailong and Seng Jun Yong, were arrested in Madhubani, Bihar near the Indo-Nepal border. Anti-India and pro-Khalistan videos were recovered from their devices, and interrogations began soon after.
Ansarul Mian Ansari arrested – ISI operation linked to Indian Army data (Central Delhi)
Ansarul Mian Ansari, a Nepali-origin Pakistani spy, was arrested by the Delhi Police Special Cell in Central Delhi. He was tasked by ISI to compile a CD of confidential Army documents for transmission to Pakistan. He had previously worked as a cab driver in Qatar; the operation spanned January–March 2025 and involved central agencies.
Military Installation Live Feeds – ISI surveillance network operational inside India (2025)
Pakistan's ISI ran a sophisticated surveillance network inside India, planting disguised solar-powered SIM-enabled CCTV cameras at high-security locations (including Delhi Cantonment and Pune railway stations). The cameras streamed live feeds to ISI handlers in Pakistan via WhatsApp. UP Police and central agencies dismantled the operation, with about 15 arrests. The network was estimated at 20 to 25 members, with foreign-recruited handlers involved.
Army installation reconnaissance – Indo-Nepal border case in UP (arrest May 2024)
A Chinese national was arrested by Uttar Pradesh Police and the SSB for espionage along the Indo-Nepal border. The case involved photographs of Indian Army installations and references to trips to Pakistan, reinforcing a pattern of Chinese operatives using the Indo-Nepal corridor.
NIA chargesheet in Meer Balaj Khan navy espionage case (Visakhapatnam)
The NIA filed a chargesheet in the Meer Balaj Khan navy espionage case in June 2023, detailing the network and arrests connected to the case first registered in January 2021. The proceedings underscored cross-state CI actions tied to naval security.
Key Installation Reconnaissance, Delhi – Chinese national Wang Goujun arrested
Wang Goujun, a Chinese national, entered India through Nepal and conducted reconnaissance of critical installations in Delhi. He was arrested at the Gauriphanta-Nepal border in Lakhimpur Kheri and charged under IPC Section 121 (waging war against the Government of India). He was 26 years old at the time.
Fake Nepali Identity Infiltration – Three Chinese nationals arrested (2023)
Three Chinese nationals were arrested in 2023 for infiltrating India through Nepal using fake Nepali identities and fraudulent Indian passports. Indian intelligence agencies suspected a broader Chinese operation involving Nepali agents.
Deep Cover Identity Fraud, Delhi – Arrested October 2022
Delhi Police and central agencies arrested individuals linked to deep cover identity fraud and related espionage plots, with the entry listed as Deep Cover Identity Fraud, Delhi, Arrested October 2022.
Navy espionage case registered in Visakhapatnam (Meer Balaj Khan network)
Pakistani national Meer Balaj Khan allegedly ran an espionage network leaking sensitive and classified Indian Navy information. The case was originally registered in January 2021 by the Counter Intelligence Cell, Andhra Pradesh, in Visakhapatnam. The National Investigation Agency (NIA) took over in June 2023, and arrests in the case reached eight across Andhra Pradesh, Karnataka and Kerala.