Inside India’s Phone-Cracking Surge: High-Level Approvals and the Growing Blind Spots in Device Seizures
Summarized by AI; it may make mistakes. Check important info
Summarized by AI; it may make mistakes. Check important info
Official procurement records analyzed by digital rights advocacy group Internet Freedom Foundation (IFF) have shed light on the rapid expansion of advanced digital extraction tools across Indian law enforcement agencies. A Ministry of Home Affairs document from January 2026 reveals that Union Home Minister Amit Shah approved a special exemption allowing the National Investigation Agency (NIA) to bypass "Make in India" procurement regulations to purchase high-end device-cracking software.
The contract, valued at roughly ₹4.98 crore, forms part of a broader wave of acquisitions involving Israeli forensics firm Cellebrite's technology across multiple state and federal bodies.
The Scale of Public Procurements
Government tenders from 2026 alone show at least fifteen procurement listings tied to Cellebrite products spread across eleven separate contracts, according to the IFF report. The acquiring entities span a diverse range of security and regulatory bodies, including the NIA, the Serious Fraud Investigation Office (SFIO), the Department of Military Affairs, alongside police and forensic divisions in states like Kerala, Karnataka, and Himachal Pradesh.
While agencies such as the Delhi Police have housed similar digital forensic extraction capabilities since 2020—and secured additional Home Ministry clearances for specialized branches—the recent surge highlighted by IFF underscores an intensifying reliance on specialized software capable of bypassing device encryption.
Questions Over Legal Safeguards and Seizures
The deployment of these powerful extraction tools has intensified scrutiny regarding transparency during law enforcement investigations. Legal experts and digital rights advocates at IFF point out that Indian criminal procedure lacks specific statutory guidelines governing how seized mobile devices must be handled, how long digital clones may be retained, or under what precise conditions data extraction can take place.
Although Section 69 of the Information Technology Act provides broad provisions concerning electronic interception and decryption, its constitutional validity and procedural boundaries remain subject to ongoing legal challenges in higher courts—including a petition filed by IFF in the Supreme Court. Civil society watchdogs continue to push for tighter legislative oversight, arguing that the widespread adoption of military-grade extraction equipment necessitates clear, enforceable guardrails to protect citizen privacy and ensure rigorous chain-of-custody protocols.
This report incorporates primary investigative findings and procurement disclosures originally published by the Internet Freedom Foundation (IFF).
