RelationWatch
OSINT Case File

Jyoti Malhotra Allegedly Involved in Espionage, Hisar, Haryana, India

Case Summary

Jyoti Malhotra, a 33-year-old YouTuber and travel vlogger from Hisar, Haryana, India, was arrested on May 16, 2025, by Hisar Police under Section 152 BNS and the Official Secrets Act for suspected espionage on behalf of Pakistan's intelligence agency, ISI. Investigations revealed she made multiple visits to Pakistan between 2023 and 2025, funded beyond her documented income, and was in contact with Ehsan Dar (alias Danish), a former Pakistan Embassy employee, and ISI official Ali Hasan. Authorities suspect she gathered information on sensitive security installations, including the Pathankot army cantonment and airbase, border security details, and religious tourism sites, transmitting data via encrypted platforms (Signal, Telegram, TOR, VPN). Seized electronics were sent for forensic analysis while Hisar Police, the NIA, and IB conduct joint interrogations during her 5-day police remand.

Verified True
Confidence 4
Incident Date May 16, 2025
Incident Type Non-Murder

Basic Information

Country: India

State/Province: Haryana, India

City/Region: Hisar

Incident Type: Non-Murder

Relationship Status: Unkown

Relationship Duration:

Incident Date: May 16, 2025

Relationship Journey

Relationship Origins:

  • No data available.

Relationship Stages:

  • No data available.

Analysis

Contributing Factors:

  • Financial Issues
  • Career / Employment Decline

Red Flags:

  • Changing contact names to hide identity
  • Deleting call or message history
  • Secretive communication patterns
  • Unexplained spending or money transfers
  • Suspects identified
  • Secret phone communication
  • Hiding Chat

Motives:

  • Money / Financial Gain

Relationship Outcomes:

  • Legal case ongoing
  • Arrest made
  • Investigation still ongoing

People Link Graph

Relationship Journey Graph

1

Origin

How the relationship or connection began.

2

Status

  • Unkown
3

Stages

Important relationship phases recorded for this case.

4

Warning Signals

  • Changing contact names to hide identity
  • Deleting call or message history
  • Secretive communication patterns
  • Unexplained spending or money transfers
  • Suspects identified
  • Secret phone communication
  • Hiding Chat

Reported red flags or early concern points.

5

Pressure Points

  • Financial Issues
  • Career / Employment Decline
  • Money / Financial Gain

Contributing factors and possible motives from the available sources.

6

Incident

2025-05-16

7

Outcome

  • Legal case ongoing
  • Arrest made
  • Investigation still ongoing

Recorded relationship or case outcome.

Sources

English labels are shown first. Original-language titles are preserved for source verification.

AI Intelligence Assessment

Relationship Pattern

Unknown

Pattern Analysis

The source describes a pattern of alleged digital and intelligence recruitment where a travel vlogger was approached, facilitated through visa assistance, and encouraged to collect surveillance details under the cover of religious tourism. Communication relied on fake contact names, encrypted messaging apps, cloud sharing, and deleted chat histories. Financial transactions from overseas, including Dubai, were identified alongside unexplained tour funding.

Investigative Notes

Note: This case does not appear to be primarily relationship-driven; it is an official national security and cross-border espionage investigation. Jyoti Malhotra was arrested on May 16, 2025, by Hisar Police under Section 152 BNS and the Official Secrets Act. Seized items include three mobile phones, one laptop, and electronic devices, sent for forensic evaluation. Hisar Police maintained custody under a 5-day remand while collaborating with NIA, IB, and Military Intelligence. Police clarified that no evidence has yet established direct links to terrorist organizations, marriage to Pakistani officers, religious conversion, or direct access to classified military defense documents.

Investigation Confusion

Hisar Police issued a press release refuting speculative social media and media reports. Authorities clarified that police retain sole custody of the suspect and that rumors regarding military data leaks, formal terrorist ties, secret marriage, or religious conversion lack factual backing at this stage of the investigation. Alleged diary pages shown publicly were also stated not to be in official police possession.

Case Reconstruction / Puzzle Pieces

According to investigative agencies, Jyoti Malhotra transitioned into travel vlogging after losing her job during the COVID-19 pandemic. In 2023, she sought a Pakistan visa and befriended embassy staff member Ehsan Dar (Danish). During subsequent trips to Pakistan, she was hosted by Ali Hasan and met intelligence officials. Investigators found that her travel content focused disproportionately on security features near sensitive border sites rather than cultural sights. Following Operation Sindoor, she allegedly transmitted local blackout and siren messages to Danish and subsequently deleted the chat history, leading to suspicion, surveillance, and her eventual arrest.

Risk Assessment

The case involves potential national security risks regarding strategic defense installations, airbases, border areas, and public infrastructure. Central intelligence agencies (NIA, IB, Military Intelligence) and local police are conducting technical and financial reviews to assess the full extent of alleged espionage networks across borders.

Key Takeaways

Digital travel content creators and public influencers can be targeted for intelligence exploitation through visa facilitation, sponsored travel, and strategic hospitality. Red flags include sudden unexplained foreign funding, secretive encrypted communications, saving contacts under aliases, deleting message histories following sensitive events, and focusing on security parameters at strategic sites.

AI Case Q&A

What early signals mattered most?

Disproportionate focus on security arrangements and border facilities in religious travel vlogs, unexplained high expenditure on international trips relative to income, and saving contacts of foreign agents under false names.

Which clues helped connect the case?

Unpublished visits to sensitive locations such as Pathankot airbase, deleted WhatsApp chats following Operation Sindoor, financial transactions originating from Dubai, and visa application details listing a permanent address in Dhaka, Bangladesh.

Which evidence types appeared strongest?

Three mobile phones, one laptop, electronic devices sent for forensic extraction, Dubai bank transfer records, recovered photos/clips from Pathankot, and confessed usage of encrypted communication platforms (Signal, Telegram, TOR, VPN).

Witness / Eyewitness Statements

SP Hisar Shashank Kumar Sawan stated: 'Her interrogation is underway. The investigation is going on right now, and her financial transactions, we are analyzing them. Whatever her travel details are, where all she went, whom she met, we are analyzing all that. We are in touch with central agencies, and with their coordination, we are investigating this very seriously.'

How did follow-up reports change the understanding?

Hisar Police issued an official statement clarifying that they maintain sole custody of the suspect, refuting unverified media reports regarding leaks of top-secret military operational details, direct terrorist group links, conversion, or marriage to foreign officers.

What remained unclear?

Forensic reports for seized laptops and phones remain pending; source of funding for foreign travel is under analysis; exact nature of interactions in Bangladesh and potential recruitment network links remain under active investigation.

← Back to Home