The Camera Outside the Shop Was Never Watching the Shop

The Espionage Story Isn't the Spy

• It's the Absence of a Wire Here's what's actually happening: for decades, a spy camera needed a wire - to power and often to a physical recording device someone had to retrieve. That wire was the weak point. Trace the cable, find the camera. Punjab's fifth bust in six months in as many months shows what happens once you remove it.

The One Mechanism Doing the Damage

Strip away the geopolitics and this is a simple engineering trick: a small solar panel replaces the power cable and a SIM card replaces the data cable, so the whole device runs completely off-grid, needing no connection to anything visible.

Mount it on an electricity pole or a shopfront facing a highway and it looks like exactly what a hundred other shops already have - ordinary CCTV for security. Nothing about it announces "this feeds a foreign handler." That is the entire trick and it's why the same setup has now been found near Delhi Cantt, Sonipat, Bathinda, Pathankot and most recently outside a rented shoe shop near Baddowal Cantonment, each time under a different local face.

Why the Fix Keeps Failing This is

where the story stops being about spycraft and starts being about regulation. After the March bust in Ghaziabad, the Ministry of Home Affairs ordered a nationwide CCTV audit specifically because officials recognised this pattern.

And yet Punjab alone has recorded four more such busts since then. The reason isn't that the audit failed to happen - it's that an audit built around inspecting wired infrastructure and registered installers has a structural blind spot for devices that were never wired or registered in the first place.

A camera bought online, paired with a prepaid SIM and bolted to a pole by someone paid a few tens of thousands of rupees has no paper trail for an audit to follow unless someone is specifically looking for solar panels and SIM slots, not just cameras.

Where India Actually Stands

This isn't a capability gap - India's counter-intelligence agencies are clearly capable of tracing these networks back to device IDs, SIM registrations and handler contacts, as five successful busts demonstrate. The gap is upstream, in prevention: there is no functioning registration or geofencing regime for commercially sold IoT cameras near sensitive installations, so each module has to be caught after it has already been streaming, sometimes for months, rather than blocked before installation.

The Official Secrets Act, 1923 - a hundred-year-old law - remains the primary legal tool being used to prosecute a threat built on hardware that didn't exist when it was written, which works for punishment but does nothing to close the detection gap upstream.

For an aspirant, the exam-relevant insight isn't "cameras are being used to spy"

• it's that persistent, low-cost technological threats routinely outrun the administrative machinery built to audit them, because that machinery is usually designed around the previous generation's method of attack, not the current one.