INTRODUCTION:

In Adnan Haider Bhai v. State of Rajasthan and connected petitions, the Rajasthan High Court was confronted with an increasingly alarming landscape of cyber-enabled criminality, artificial intelligence misuse, and digital fraud when two young adults sought bail after being accused of impersonating police personnel, creating a situation of digital arrest, and extorting more than Rs. 2 crores from an elderly couple aged over 80. Justice Ravi Chirania, presiding over the matter, was compelled to examine a broader systemic question that transcended the individual guilt or innocence of the accused—namely, whether the State’s digital infrastructure, cyber policing mechanism, and regulatory frameworks were sufficiently developed to safeguard citizens in an era where artificial intelligence, deepfakes, compromised networks, synthetic identities, and technologically sophisticated crimes have transcended boundaries and traditional law-and-order paradigms. The petitioners maintained that they were entitled to bail, while the State opposed their release, citing growing patterns of similar offences, the gravity of the crime, and the urgent need to contain a digital menace that was advancing faster than institutional safeguards. Against this backdrop, the Court examined the cumulative failures, lacunae, and administrative inertia that allowed such crimes to proliferate, and while ultimately rejecting bail, issued a historic catalogue of 21 directives to reshape Rajasthan’s digital governance, strengthen cyber investigative capabilities, regulate digital and fintech platforms, train law enforcement, protect vulnerable users, and prepare the State machinery to confront AI-driven crimes, deepfake-based misrepresentation, identity theft, banking fraud, and technologically orchestrated coercion.

ARGUMENTS OF PETITIONERS AND RESPONDENTS:

The petitioners argued that they were entitled to the benefit of bail as the allegations against them, though serious, were yet to be established through trial, and that they were young individuals who could not be perpetually incarcerated pending adjudication, particularly as no direct physical harm had been caused to the victims. They contended that the charges rested predominantly on digital evidence, susceptible to manipulation, and that custodial interrogation was unnecessary given that the investigative agencies had already seized relevant devices. They stressed their willingness to cooperate with authorities, asserting that prolonged custody would jeopardize their future prospects and constitute pretrial punishment. They further argued that cybercrimes, although rising, should not justify denial of constitutional liberties guaranteed under Article 21, and that mere apprehension of future misconduct could not supplant principles of presumption of innocence. The petitioners also maintained that calling their conduct impersonation of public authorities was an exaggerated interpretation of their online presence, and the money transactions were allegedly consensual or solicited, not extorted, asserting that the alleged digital arrest was not conclusively proven.

The respondents—the State and prosecution—vehemently opposed bail, arguing that the petitioners’ acts were deliberate, orchestrated, and represented a disturbing trend in cybercrime where sophisticated technology, voice spoofing, impersonation, deepfake tools, and digital pressure tactics were deployed to psychologically imprison vulnerable citizens, particularly the elderly. They contended that digital extortion had become a pervasive menace, operating across jurisdictions, using untraceable financial systems, mule accounts, crypto wallets, cloned SIMs, and virtual identities that enabled criminals to vanish into the cyber-ecosystem. The State emphasized that cybercrime today was not merely a crime against individuals, but against the economic integrity of the nation, social confidence in technology, and institutional trust in digital governance. They asserted that releasing the petitioners on bail would embolden new offenders, undermine deterrence, and compromise ongoing efforts to trace accomplices, financial trails, AI-based interventions, and criminal networks that functioned in clusters. The State argued that the magnitude of Rs. 2 crores defrauded from a vulnerable elderly couple was itself demonstrative of the petitioners’ capacity to manipulate digital environments and exploit institutional loopholes. The respondents concluded that granting bail in such cases would send a wrong signal at a time when cybercrime, data exploitation, phishing, ransomware, botnet operations, and digital impersonation were growing exponentially, and that custodial deterrence was essential to disrupt this emerging criminal paradigm.

COURT’S JUDGMENT:

In a sweeping, visionary, and unprecedented judgment, Justice Ravi Chirania of the Rajasthan High Court rejected the bail applications of the accused, situating the matter within a far broader legal and social framework than ordinary adjudication of penal liability, and holding that cybercrime had graduated from being an ancillary offence committed through computers into becoming one of the most sophisticated, silent, and pervasive forms of crime capable of collapsing socio-economic structures, destabilizing national fiscal ecosystems, corroding personal autonomy, exploiting the digitally vulnerable, and overwhelming investigative machinery. The Court observed that digital infrastructure today touches every sphere—banking, education, administration, personal communication, employment, governance, and even intimate identity—making cybercrime not merely an offence but a direct assault on the very architecture sustaining the modern State. The Court lamented that offences involving digital arrest, threat imposition, identity spoofing, AI-generated deepfake impersonation, synthetic voices, chatbot-enabled manipulations, algorithmic fraud, and sophisticated phishing mechanisms had become rampant across India and shared an identical modus operandi: fraudsters calling citizens under the guise of law enforcement, freezing accounts, coercing digital compliance, invoking imaginary warrants, terrorising them with fake surveillance, and then siphoning their savings through a chain of mule accounts or fintech intermediaries. While considering bail, the Court concluded that the petitioners’ actions were not isolated but part of a growing cyber-ecosystem weaponised through technological anonymity, rapid fund transfers, virtual communication platforms, VoIP masking, and absence of geographical boundaries, thereby requiring heightened judicial vigilance. The Court reasoned that the threat landscape had undergone a seismic shift, such that conventional policing, reliant on human intelligence, territorial jurisdiction, and document-based evidence, was now obsolete because cyber criminals leveraged real-time encryption, AI-assisted deception, remote access trojans, device cloning, anonymised SIM cards, and algorithmic predictive techniques that rendered outdated the policing templates devised for physical crimes. The Court stressed that cybercrimes, by their very nature, involve widespread digital footprints, cross-platform infiltration, invisible coordination networks, and financial laundering channels, making them infinitely more dangerous than traditional offences, as they target psychological vulnerabilities rather than physical coercion, extract consent through fear, and erode public trust in digital systems that are now indispensable for daily life. The Court further observed that the elderly, technologically unsophisticated, and financially dependent individuals were most susceptible, lacking digital literacy to distinguish authentic institutional communication from impostor threats disguised as official correspondence, thereby losing lifetime savings to criminals who neither wielded guns nor physical weapons, but deployed mobile screens, cloned voices, and panic-inducing algorithms as instruments of domination. The Court declared that the present case was symptomatic of a national pattern threatening sovereignty and financial integrity, and therefore, the criminal justice system must evolve to confront technological criminality with equal sophistication. The Court underscored three fundamental concerns: first, cybercrime undermines public trust in banking institutions and online economic infrastructure; second, it destabilizes legal consciousness by creating parallel digital power structures that impersonate legitimate authorities; and third, it erodes institutional sovereignty by enabling foreign or untraceable actors to influence domestic financial systems without crossing territorial borders. The Court concluded that unless urgent systemic measures were implemented, India’s digital future would be held hostage by a criminal ecosystem that continuously re-engineers itself by exploiting bureaucratic inertia, digital illiteracy, fragmented regulatory regimes, jurisdictional confusion, and lack of technologically trained law enforcement. In this context, the Court praised the Union Government’s initiative establishing the 14C-MHA cyber coordination platform but lamented that States had failed to replicate and integrate such mechanisms. The Court held that Rajasthan could no longer remain a passive observer and must erect a self-sustaining, technologically empowered cyber defence system. Therefore, while rejecting bail due to the gravity of the offence, the intentional impersonation of police personnel, and the abuse of public trust, the Court embarked on a judicial transformation agenda unparalleled in the domain of cyber jurisprudence. It issued twenty-one exhaustive directives designed to erect a cyber-governance architecture resilient against deepfakes, AI-assisted extortion, financial laundering systems, bot-based fraud networks, and digital cloning. The Court directed the establishment of the Rajasthan Cyber Crime Control Centre (R4C), to operate in full coordination with the central 14C platform, possessing equivalent jurisdictional, investigatory, and operational capabilities; mandated a new toll-free number for automatic FIR registration; directed the Additional Chief Secretary (Home) to appoint inspectors exclusively for cyber governance and prohibit their transfer; ordered the creation of accredited forensic labs under Section 79A of the IT Act equipped with state-of-the-art digital infrastructure; instructed banking entities, fintech companies, and financial institutions to deploy AI-based tools to detect multiple ATM card usage by unauthorized persons; required mandatory adoption of the RBI’s Mule Hunter tool to curb mule accounts used for laundering fraud proceeds; ordered renewed KYC verification for dead and dormant accounts; mandated restrictions on internal banking operations of suspicious account holders lacking digital literacy or possessing minimal annual transactions; compelled robust monitoring of bulk transfers and unexplained deposits; imposed regulatory oversight on sale and purchase of electronic devices with mandatory digital registration and cancellation of dealer licenses upon breach; restricted SIM card issuance per person to three; mandated registration of call centres, telemarketing platforms, and digital communication agencies; directed Aadhaar-based identification for users of social media platforms residing within the State; required regulation of digital influencers and online content creators; mandated QR-tagged uniforms for gig workers; compelled monthly digital audits by government departments; directed banks to monitor high-value transfers made by elderly citizens and mandate physical verification within 48 hours; required banks to classify vulnerable users and conduct periodic awareness training about digital arrest and cyber fraud; and ordered the appointment of Special Public Prosecutors and cyber consultants to strengthen prosecutorial capacity. The Court emphasised that these directions were merely the initial scaffolding of a continuously evolving cyber governance doctrine, and insisted that Rajasthan must not delay its transformation because digital criminals evolve rapidly while governments often remain bureaucratically paralysed. Justice Chirania concluded that technology is not inherently dangerous; rather, unregulated technology wielded by hostile or unscrupulous actors becomes an existential threat, and therefore, judicial intervention must catalyse legislative, executive, and infrastructural reform before society enters a stage where digital impersonation, AI-driven deception, and deepfake-engineered realities become indistinguishable from truth. Accordingly, the Court dismissed the bail petitions, directed immediate compliance by State authorities, and declared that the judiciary would not remain a silent spectator while artificial intelligence transforms crime faster than the law evolves to control it.