Indian Police Probe Google After Dismantling Massive Fake Gmail Network Used for Bomb Threats

### Massive Cyber Operation Uncovered in Gujarat

In a significant blow to cyber-criminality, law enforcement agencies in the western Indian state of Gujarat have dismantled a sprawling network dedicated to creating and managing fraudulent email accounts. The operation resulted in the arrest of two individuals and the seizure of a staggering 513,847 sets of Gmail credentials. According to official reports, this vast arsenal of fake accounts was utilized to orchestrate a campaign of fear, sending false bomb threats to various government institutions across multiple states.

Senior official Beta from the Gujarat Cyber Crime Department described the discovery as the largest network of fraudulent Gmail accounts the agency has ever encountered. The scale of the infrastructure suggests a highly organized operation designed to bypass standard detection methods and maintain a persistent presence within the digital ecosystem.

### Targeting Global Security Vulnerabilities

The investigation has now shifted its focus toward the service provider. Gujarat police have announced plans to formally name Google as a subject of their investigation. Officials intend to send a formal communication to the tech giant, demanding an overhaul of current policies to prevent security measures from being circumvented on such a massive scale.

One of the most perplexing aspects of the case is the technical sophistication of the fake accounts. Investigators discovered that a significant portion of these accounts had two-factor authentication (2FA) enabled—a security feature designed to prevent unauthorized access and bot-creation. The fact that over half a million accounts were successfully created and maintained despite these safeguards has raised serious questions about potential loopholes in Google's security architecture. Police are currently analyzing how the perpetrators managed to automate or bypass these protections to build their network.

### The Anatomy of the Threat

The catalyst for the investigation was a threatening email sent to the Gujarat government on September 10. The timing of the threat was particularly sensitive, as New Delhi was preparing to host the BRICS summit. The emails not only targeted local infrastructure but also extended threats toward countries partnering with India. While the police quickly determined that the threats were hoaxes, the investigation into the source of the emails revealed the deeper network.

Further evidence suggests that the operation had an international dimension. One of the detained suspects had been in communication with a buyer based in Bangladesh. These bulk accounts were reportedly sold in large batches, with transactions often conducted via cryptocurrency to obscure the financial trail and avoid detection by traditional banking monitors.

### Broader Implications for Cybersecurity in India

This case comes at a time when India is grappling with a surge in high-tech financial crimes. The country estimates that it loses over $2 billion annually to various forms of digital fraud. This economic drain has pushed law enforcement agencies to transition from merely chasing individual scammers to scrutinizing the technology platforms that facilitate these crimes.

While the Gujarat police move forward with their investigation into Google, Alphabet, the parent company of Google, has not yet provided a comment on the matter. It remains unclear what specific legal charges or penalties the company might face if the investigation proves that systemic negligence contributed to the creation of these accounts. For now, the incident serves as a stark reminder of the ongoing arms race between cybersecurity firms and organized cyber-criminal networks.