Under the Yogi government, security agencies keep cyber networks under surveillance; major action in bomb threat case
Threats issued to blow up schools, a Bollywood actor’s residence and Diljit Dosanjh’s show
Sold IDs to individuals based in Pakistan, Bangladesh and other countries; received payments in cryptocurrency
Fake email network behind bomb threats in Noida, Gurugram and Mumbai; ATS investigation underway
Lucknow, October 2026 : Under the Yogi government, the Uttar Pradesh Anti-Terrorist Squad (UP ATS) remains continuously active in strengthening security arrangements across Uttar Pradesh and curbing anti-national activities. In this connection, UP ATS has arrested 24-year-old Ankit Shankhwar from Kanpur Nagar for creating fake email IDs, selling them to individuals based outside the country and sending threatening emails. The investigation has revealed that these email IDs were used to issue bomb threats against schools and important establishments in Noida, Delhi-NCR, Gurugram and Mumbai.
The case also includes a threat to target singer Diljit Dosanjh’s proposed show in Delhi-NCR with a bomb blast. A threat was also issued to carry out a bomb blast at the residence of a Bollywood actor. The accused sold fake email IDs to individuals based in Pakistan, Bangladesh and other countries and received payments in cryptocurrency in return. ATS has recovered a mobile phone and a laptop from the accused. Approximately 5 lakh email IDs were found on the laptop.
According to UP ATS, the accused had been creating fake email IDs since 2021. He used Wi-Fi and proxy networks to conceal his identity. He was selling these IDs through groups on Facebook, a social media platform. During questioning, contacts with individuals and groups in Pakistan, Bangladesh, Türkiye, Egypt and other countries also came to light. Information related to WhatsApp numbers from different countries and a large volume of USDT cryptocurrency transactions was also found on the accused’s mobile phone.
According to ATS, the accused had provided fake email IDs to Bangladeshi national Alamin Islam. In return, he was paid 6,000 USDT. The investigating agency is now working to ascertain the role of other individuals linked to this network.
The email ID used to send threatening messages to schools in Noida, Delhi and Gurugram was among the fake IDs found on the accused’s laptop and mobile phone.
These emails contained threats invoking the names of the Khalistan National Army and Babbar Khalsa. The threats also included targeting Punjabi singer Diljit Dosanjh’s proposed event in Delhi-NCR and the residence of a well-known Bollywood actor.
Additionally, another email ID used in the case involving a bomb threat sent to the Mayor’s Office in Mumbai on October 23, 2026, was also found in the accused’s possession. According to ATS, the investigation has also identified an ID linked to threatening emails sent to schools in Noida and other locations on October 12.
During the arrest, approximately 5 lakh email IDs were found in Excel files on the recovered laptop. Information associated with these IDs, including passwords, recovery email addresses and two-factor authentication details, was also recorded.
The ATS investigation has revealed that the accused received payments through Binance crypto wallets in exchange for providing fake email IDs. Evidence of contact and payments involving Bangladeshi national Alamin Islam through WhatsApp has also been found. In this connection, a case has been registered under the relevant sections at the Lucknow ATS Police Station.
The process of producing the accused before the court and seeking police custody remand is underway so that other individuals involved in the conspiracy can be identified.
