Security & Defence Administration Laws

Maritime & Aviation Security Statutes

---

Anti-Hijacking Act 2016 & Anti-Maritime Piracy Act 2022

Anti-Hijacking Act 2016 & Anti-Maritime Piracy Act 2022

Cue Words	Notes
What does the Anti-Hijacking Act, 2016 replace, and how has it expanded the definition of hijacking?	Anti-Hijacking Act, 2016: Passed: May 2016; replaces the Anti-Hijacking Act, 1982. Expanded Definition: Covers not just physical seizure but also credible threats to seize, conspiracy/complicity, and technological interference with aircraft control. Aircraft in flight: Defined from the moment all external doors close after embarkation until any door opens for disembarkation. Implements: Hague Convention 1970, Montreal Convention 1971, and Beijing Protocol 2010.
What are the penalties and jurisdictional reach of the Anti-Hijacking Act, 2016?	Penalties & Jurisdiction: Death penalty if hijacking results in death of a passenger/crew/security personnel; otherwise life imprisonment plus confiscation of property. Threatening/organizing/directing hijack: life imprisonment plus fine. Hoax threats: up to 5 years. Endangering aircraft safety: up to 10 years. Jurisdiction: Covers Indian-registered aircraft anywhere, foreign aircraft landing in India, Indian citizens abroad, and offenders found on Indian soil.
What is the objective of the Anti-Maritime Piracy Act, 2022, and how does it define piracy?	Anti-Maritime Piracy Act, 2022: Passed: December 2022 — India's first dedicated domestic anti-piracy law (previously relied on IPC, which has jurisdictional limits beyond territorial waters). Definition: Implements UNCLOS Article 101 — illegal violence/detention/depredation for private ends by a private ship/aircraft crew against another ship/aircraft on the high seas, including incitement/facilitation. Territorial scope: Applies to India's EEZ (12–200 nm) and the high seas; does NOT cover territorial waters (0–12 nm), governed by IPC. Driver: Somali piracy threatening Indian trade lanes in the Western Indian Ocean; aligns with UNCLOS and the SUA Convention.
Detail the penalties, investigating agencies, and trial framework under the Anti-Maritime Piracy Act, 2022.	Piracy Act — Enforcement: Penalties: Piracy — life imprisonment plus fine; piracy causing death — death penalty or life imprisonment; attempt/abetment — up to 14 years; mandatory confiscation of ships/aircraft/proceeds. Investigation: Officers not below Deputy SP rank; Indian Navy and Coast Guard personnel empowered to arrest/search/seize vessels. Trial: Designated Sessions Courts as Special Courts; offences deemed committed in India regardless of offender/vessel nationality; trial to commence within 1 year, with priority listing.

Armed Forces Administration

---

Armed Forces Tribunal Act 2007 & Cantonment Act 2006

Armed Forces Tribunal Act 2007 & Cantonment Act 2006

Cue Words	Notes
What is the Armed Forces Tribunal (AFT), its composition, and its jurisdiction?	Armed Forces Tribunal Act, 2007: Established: Enacted 20 December 2007, operational from 8 August 2009; takes over service-dispute jurisdiction previously held by High Courts. Composition: Chairperson — retired SC Judge or retired HC Chief Justice; Judicial Members — retired HC Judges; Administrative Members — retired Major Generals (or equivalent)/JAG officers. 4-year tenure (age caps 70/65). Principal Bench in Delhi plus 8 regional benches. Jurisdiction: All service matters (promotions, pensions, tenure, leave) and appeals against Court Martial (General/District/Summary/Summary General) convictions, for serving/retired personnel of all three services and their heirs/widows. Powers: Can set aside convictions, reduce sentences, order retrial, direct reinstatement/compensation. Appeal route: Directly to the Supreme Court within 60 days, but only with AFT's "leave to appeal" unless a substantial question of law of general public importance is involved.
How are cantonments classified and governed under the Cantonment Act, 2006?	Cantonment Act, 2006: Basis: Replaces the colonial Cantonments Act, 1924; administered under Entry 2A, Union List (Seventh Schedule); under the Ministry of Defence. 62 cantonments nationwide. Classification: Category I (>50,000 population), II (10,000–50,000), III (2,500–10,000), IV (<2,500). Cantonment Board: President — the Station Commander (ex-officio); Vice-President elected by civilian members; includes Executive Engineer, Senior Medical Officer, government nominees, and elected members (5-year term via universal adult franchise). CEO: Appointed by the Centre, generally from the Indian Defence Estates Service (IDES); executes Board decisions. Functions (S.62): Obligatory — sanitation, water supply, primary schools, fire safety; Discretionary — parks, libraries, transit. Central control (S.255–258): Centre can supersede/dissolve non-performing Boards and veto decisions affecting defence interests. Reform: Post-2021 proposals to excise civilian areas and merge them with local municipalities, focusing military control on core zones.

Essential Defence Services Act 2021 & Inter-Services Organisations Act 2023

Essential Defence Services Act 2021 & Inter-Services Organisations Act 2023

Cue Words	Notes
What triggered the Essential Defence Services Act, 2021, and what does it prohibit?	Essential Defence Services Act, 2021: Enacted: 11 August 2021, triggered by the corporatization/dissolution of the Ordnance Factory Board (OFB) in October 2021, which sparked employee union protests. 7 new Defence PSUs: AWEIL (small arms), AVNL (armoured vehicles), MIL (munitions), IOL (optical sensors), GIL (parachutes), TCL (troop comforts), YIL (components). Prohibitions: Bans strikes, lockouts, work slowdowns, and concerted casual leave in notified essential defence services (ordnance factories, defence production/repair/maintenance). Government prohibition orders last 6 months, extendable by another 6. Penalties: Participating in illegal strike — up to 1 year/₹10,000 fine; instigating/funding strikes — up to 2 years/₹15,000 fine; summary dismissal without inquiry permitted. Retained rights: Trade unions, collective bargaining, and grievance redressal remain allowed — only the right to strike is curtailed.
Why was the Inter-Services Organisations Act, 2023 needed, and what powers does it grant?	Inter-Services Organisations Act, 2023: Enacted: 15 April 2023 — legislative prerequisite for Integrated Theatre Commands (Theaterisation). Pre-2023 gap: A joint-command officer (e.g., at Andaman & Nicobar Command) could not discipline personnel from a different service; cases had to be routed back to the parent service HQ, since the Army Act 1950, Navy Act 1957, and Air Force Act 1950 operated in silos. ISO examples: Andaman & Nicobar Command (India's first joint command), Strategic Forces Command (nuclear assets), Defence Space Agency, Defence Cyber Agency, Armed Forces Special Operations Division. Commander powers: Unified operational command, administrative control (postings/leave), and disciplinary authority (inquiry, court-martial, penalties) over personnel from any service; punishments still follow the offender's parent service act to preserve parity. Strategic significance: Enables planned Western, Northern (China-facing), Maritime, and Air Defence Theatre Commands — faster decisions, shared logistics, single-point accountability; complements the CDS role.

WMD & Strategic Controls

---

WMD Amendment Act 2022 & Arms Amendment Act 2019

WMD Amendment Act 2022 & Arms Amendment Act 2019

Cue Words	Notes
What does the WMD Amendment Act, 2022 add to the 2005 Act, and what global obligations does it meet?	WMD (Amendment) Act, 2022: Enacted: 6 April 2022; amends the WMD and Their Delivery Systems (Prohibition of Unlawful Activities) Act, 2005. Core change: Prohibits financing of WMD-related activity (manufacture, acquisition, possession, development, transport, transfer) and empowers the Centre to freeze/seize/attach proliferators' assets by executive order, without needing a court order first. WMD categories covered: Nuclear, Chemical (CWC-aligned), Biological (BWC-aligned), Radiological ("dirty bombs"), and Delivery Systems (missiles/UAVs). Global compliance: Aligns with UNSC Resolution 1540 (non-state actor proliferation) and FATF Recommendation 7 (proliferation financing); complements India's SCOMET dual-use export control list. Penalty: Core WMD activity and WMD financing both attract rigorous imprisonment up to life. India's profile: No First Use (NFU) policy, non-signatory to NPT, signatory to CWC/BWC, member of MTCR/Wassenaar Arrangement/Australia Group (not NSG).
What did the Arms (Amendment) Act, 2019 change regarding licensed weapons, penalties, and celebratory firing?	Arms (Amendment) Act, 2019: Enacted: 14 December 2019, amending the Arms Act, 1959. Possession limit: Cut from 3 firearms to 2 firearms per individual; excess weapons surrendered within 1 year (to heirs, dealers, or police). License validity: Extended from 3 to 5 years. Penalties: Acquisition without license — up from 3–7 years to 7 years–life; dealing in prohibited arms — 10 years–life; prohibited-arms use causing death — death penalty/life; organized-crime weapon use — 10 years–life. Celebratory firing (S.25(1BB)): Up to 2 years or ₹1 lakh fine, or both. Licensing authority: Prohibited arms (Schedule I, e.g., AK-47s, automatic weapons) — Central Government; non-prohibited arms (Schedule II, e.g., shotguns, .22 rifles) — District Magistrate. Database: NDAL issues a Unique License Identification Number (UIN); integrated with NATGRID for real-time intelligence queries.
What does the Petroleum and Explosives Safety Organisation (PESO) regulate, and under which statutes?	PESO — Explosives & Petroleum Safety: - Statutory authority under the DPIIT, Ministry of Commerce and Industry, ensuring safety/security of public and property from fire and explosion. - Administers the Explosives Act 1884, Petroleum Act 1934, and Inflammable Substances Act 1952, along with rules framed under them. - Relevance: sale/handling of precursor chemicals like ammonium nitrate is regulated under this framework, central to preventing improvised-explosive attacks (e.g., 2025 Red Fort blast used ammonium nitrate plus TATP).

Property & Disaster Statutes

---

Enemy Property (Amendment) Act 2017 & Disaster Management Act 2005

Enemy Property (Amendment) Act 2017 & Disaster Management Act 2005

Cue Words	Notes
What does the Enemy Property (Amendment and Validation) Act, 2017 change about succession and retrospective application?	Enemy Property (Amendment) Act, 2017: Passed: March 2017; amends the Enemy Property Act, 1968. Enemy property: Property of nationals of Pakistan (post-1965/1971 wars) or China (post-1962 war) who left India and took enemy-country citizenship; managed by the Custodian of Enemy Property for India (CEPI) under the MHA — approx. 9,400+ properties worth over ₹1 lakh crore. Bar on succession: Post-2017, legal heirs (even Indian citizens) cannot inherit enemy property — it remains permanently vested in the Custodian; any post-vesting transfer by the enemy is void. Retrospective effect: Applies retrospectively from 1968, nullifying past transfers and past favorable court decisions; civil courts are barred from entertaining vesting disputes (only writ jurisdiction survives). Raja of Mahmudabad case (2005): SC had ruled in favor of an Indian-citizen heir's inheritance claim; the 2017 Amendment directly overrode this judgment, keeping the property with the Custodian. Concerns: Challenged on Article 300A (property) and Article 14 (equality) grounds; criticized for retrospectively overturning SC decrees.
What is the three-tier institutional structure under the Disaster Management Act, 2005, and how was it invoked during COVID-19?	Disaster Management Act, 2005: Enacted: 23 December 2005, post-1999 Odisha super cyclone and 2001 Bhuj earthquake — shifted India from reactive relief to prevention-preparedness. Three tiers: NDMA (chaired by PM, apex policy body), SDMA (chaired by CM), DDMA (co-chaired by District Magistrate and Zilla Parishad President). NEC (chaired by Union Home Secretary) is the NDMA's executive arm. NDRF: Dedicated battalions drawn from CAPFs (BSF/CRPF/CISF/ITBP) for multi-hazard search and rescue, under a Director General. Funding: NDRF/SDRF for immediate relief; Central contribution 75:25 for general states, 90:10 for special-category (NE/Himalayan) states. COVID-19 use: Section 6 (NDMA lockdown guidelines), Section 10 (Home Secretary/NEC directs uniform state containment measures), Section 38 (state duty to coordinate medical supplies), Section 51 (penalizes obstruction of official orders). Penalties: Obstructing officials — up to 1 year (2 years if loss of life); false relief claims/misappropriation — up to 2 years; spreading false alarms — up to 1 year.

Revision Strategy

Maritime/Aviation: Anti-Hijacking 2016 (death penalty, Hague/Montreal/Beijing) + Anti-Piracy 2022 (UNCLOS Art 101, EEZ + high seas). Armed Forces Admin: AFT 2007 (service disputes, SC appeal only with leave) + Cantonment Act 2006 (62 cantonments, Station Commander as President) + Essential Defence Services 2021 (OFB corporatization, 7 PSUs, no-strike) + ISO Act 2023 (Theaterisation enabler). WMD/Strategic: WMD Amendment 2022 (UNSC 1540, asset freeze) + Arms Amendment 2019 (2-gun limit, celebratory firing penalty). Property/Disaster: Enemy Property 2017 (no succession, retrospective) + DM Act 2005 (NDMA-SDMA-DDMA, COVID-19 use).

Ultra-Fast Revision Series for UPSC CSE. I'll read the specified section of the notes file and convert every Cyber Security, Money Laundering, Organised Crime, Terrorism, and Military/Police Operations detail into VitePress + Cornell Notes format with zero loss.The military ops are near the end of that range; I'll search the rest of the notes for CERT-In, I4C, PMLA, FATF, NIA, and UAPA.Cyber Security / PMLA / NIA content isn't in that NOTES_FILE range—only the military ops are. I'll locate the full security block in the source materials.Checking for existing Cornell security conversions and reading the I4C/UAPA sections for completeness.Confirming: Cyber Security / PMLA / NIA live in the ECO security source; NOTES_FILE 3401–4224 holds the listed operations. Converting both into zero-loss Cornell notes.# Internal Security — Cyber · Money Laundering · Organised Crime · Terrorism · Military/Police Operations

Source conversion (zero-loss): NOTES_FILE.md lines 4200–4224 (Military/Police Ops) + Security corpus (CERT-In, I4C, PMLA, FATF, NIA, UAPA, Organised Crime) · VitePress + Cornell Notes format

---

A. Cyber Security (CERT-In, I4C)

CERT-In — Status, Mandate & Key Actions

Cue Words	Notes
What is CERT-In and under which law is it designated?	Under Section 70B of the Information Technology (IT) Act, 2000, CERT-In is designated as the national agency for responding to cyber security incidents. It is the central agency for: incident response, vulnerability handling, and security management. It plays a vital role in controlling cybersecurity incidents and coordinating incident response activities.
What are key CERT-In actions / advisories in the notes?	Quantum Cyber Readiness: MeitY, CERT-In, and SISA launched whitepaper "Transitioning to Quantum Cyber Readiness" on cybersecurity impact of quantum technologies. Warned quantum computers threaten current encryption (especially RSA); can solve complex problems and do ML/optimization far faster. Highlighted Harvest Now, Decrypt Later (HNDL) attacks — encrypted data stored now, decrypted later. Issued advisory on active threat campaign targeting WhatsApp users using GhostPairing. In 2022, published directions requiring VPN providers to maintain logs of Indian users.
What is Cyber Swachhta Kendra?	Initiative focused on detecting and removing malicious botnet programs from computers and devices. Provides free tools for malware analysis and helps improve system security.

I4C — Structure, Portals & e-Zero FIR

Cue Words	Notes
What is I4C?	Indian Cybercrime Coordination Centre (I4C) established in 2018 under MHA to coordinate and address cybercrime-related issues at the national level.
What is the National Cybercrime Reporting Portal?	Launched in 2019; officially dedicated to the nation in 2020 under I4C by the MHA. Enables online reporting of cybercrimes. Covers: financial frauds, ransomware, cyberbullying, child pornography, online stalking, social media crimes. Allows evidence upload and anonymous filing for sensitive cases. Users can track complaint status via a reference ID; complaints forwarded to law enforcement. Features cyber safety tips; guidelines on 24 crime types (e.g., phishing, vishing). Secure and anonymous mechanisms; focus on women- and children-related crimes. Aims to strengthen coordination among LEAs, banks, and financial institutions for faster action against cyber fraud.
What rackets does I4C flag?	As per I4C: digital arrest, trading scam, investment scam, romance/dating scam.
What is the e-Zero FIR Initiative?	I4C launched a system that automatically converts financial cybercrime complaints above ₹10 lakh into FIRs. Launched on a pilot basis in Delhi. Aim: expedite investigations; crack down swiftly on cybercriminals; address difficulties in recovering money lost to financial cybercrime. Integrates: I4C’s National Cybercrime Reporting Portal + Delhi Police’s e-FIR system + NCRB’s CCTNS. MHA stated initiative will be extended nationwide soon.
What is CCTNS (linked to I4C ecosystem)?	Initiated in 2009 by MHA as Mission Mode Project under National e-Governance Plan. Connects 17,130+ police stations nationwide — centralized platform for crime investigation, detection, law enforcement. Records crime data, FIRs, investigations, charge-sheets digitally for nationwide tracking. Provides complaint tracking, verification, and police clearance via integrated online portal. Linked with ICJS (Integrated Criminal Justice System) — connecting police, courts, prisons, prosecution, and forensic labs.

Key Cyber Threats, Frauds & Legal Provisions

Cue Words	Notes
What is a DDoS attack?	DDoS: attempt to disrupt normal functioning of a targeted server/service/network by overwhelming it with a flood of internet traffic. Unlike a single-source DoS, DDoS leverages multiple compromised systems (a botnet) to generate traffic. Bot detection technologies such as CAPTCHA can identify and block automated tools/bots. Context: FM chaired meeting on cybersecurity preparedness of financial institutions; banks must designate 2 senior officials — 1 for cyber incident reporting, 1 for operational continuity (incl. ATM cash); banks confirmed deployment of anti-DDoS systems.
What laws apply to cyberbullying / online abuse?	BNS: Section 74 (outraging modesty), 75 (sexual harassment), 351 (criminal intimidation), 356 (defamation), 196 (promoting enmity). IT Act, 2000: Section 66C (identity theft), 66D (impersonation), 67 (obscene material). These laws do not explicitly criminalise persistent, non-obscene, anonymous online abuse. Section 69A IT Act: government may block content for public order/national security; non-compliant platforms lose safe harbour under Section 79. Doxxing acknowledged by Delhi HC (2023) as serious threat — search for and publish private/identifying info online, typically with malicious intent. DPDPA exempts “publicly available data” but fails to define it — potential for cyber harassment via data aggregation. NCII (Non-Consensual Intimate Image Abuse): algorithms generate deepfake pornographic images without knowledge/control.
What are modern cyber frauds and Section 66D?	Modern frauds: phishing (fake emails/SMS); remote access scams via malicious apps; job and loan scams; OTP and UPI frauds; identity theft (Aadhaar, PAN, bank details); digital arrests (criminals impersonate officials). Section 66D IT Act, 2000: cheating by impersonation using a communication device or computer resource — imprisonment up to 3 years + fine up to ₹1 lakh. Cases under 66D include deepfake-related offences and digital impersonation scams. Karnataka accounted for more than one-fourth of all cybercrime cases nationwide in 2023; first State to establish a dedicated city-level cybercrime police station. Cybercrime cases surged by 31.2% in 2023 vs 2022; majority: fraud, extortion, sexual exploitation.
What is a Digital Arrest scam?	Fraudsters impersonate law enforcement through video calls and threaten fake arrests to extort money. Often claim victims have sent/are to receive parcels containing illegal goods, drugs, fake passports, or other contraband.
What is 2FA / TOTP?	Two-Factor Authentication (2FA): second layer of security; widely implemented via Google Authenticator and TOTP (Time-based One-Time Password). First factor: something you know (password). Second: something you have (authenticator app). OTPs valid only for ~30 seconds. TOTP uses cryptographic function HMAC-SHA-256 to generate short numeric code; both device and server compute same code → match = authenticated. Hash function: one-way, fixed-length output; sensitive to small changes. HMAC: Hash-based Message Authentication Code — secret key + message with hash. Other 2FA: HOTP (counter-based); push-based apps; hardware tokens (e.g., YubiKeys).
What are APK scams, CoinDCX, and SE Asia scam hubs?	APK fraud: malicious apps mimic official portals; trick users into granting permissions; can spread malware. CoinDCX breach: FIU-registered crypto exchange (~1.6 crore users); operational hot wallet on partner exchange compromised via server breach; only internal liquidity wallet affected — no customer funds compromised. WazirX hack (2024): N. Korean attackers exploited multi-signature wallet; stole $230M — India’s largest crypto breach. Hot wallet: continuously connected to internet for quick transactions. Multi-signature wallet: requires multiple keys to unlock/approve transactions. ~500 Indians fled KK Park cybercrime hub in Myawaddy, Myanmar (junta-allied BGF-controlled “scam city” on Myanmar–Thailand border) — set for repatriation. Most infamous scam: “pig butchering” — investment + romance fraud using fake crypto platforms. Cambodia major hub: Sihanoukville, Bavet, O’Smach.
What is GPS spoofing?	Cyberattack transmitting false GPS signals to mislead navigation systems. GNSS spoofing: counterfeit satellite signals → incorrect aircraft position, higher pilot workload, potential safety risks despite redundancies. Rare over inland metropolitan airspace; more common in border/conflict zones; unusual over Delhi vs India–Pakistan border. Delhi among top 10 global hotspots. Does not hamper aircraft safety: redundancies include Inertial Reference System (safe up to 5 hours if primary fails). Spoofing = counterfeit signals for wrong position; jamming = overpowering satellite signals with strong radio interference. NavIC: independent navigation satellite system by ISRO.
What about VPN regulation and GhostPairing?	VPN traffic: encrypted point-to-point tunnel; masks IP; can sidestep website blocks/firewalls. Authorities suspended VPN services in Poonch and Rajouri for two months. CERT-In 2022 directions: VPN providers must maintain logs of Indian users; large paid firms (ExpressVPN, NordVPN) refused and shifted “India” servers to Singapore; bought India-associated IP blocks while serving from Singapore. GhostPairing: hijacks WhatsApp without passwords/SIM swaps; exploits “Linked Devices” — victims authorize attacker’s browser as “ghost” device → full real-time access to chats, media, contacts.
What are mule accounts and MuleHunter.AI?	Mule bank accounts: used to launder proceeds from investment scams, gaming apps, QR frauds, digital arrests — layered transactions obscure trails. RBI launched MuleHunter.AI for detection.
What is the UN Convention against Cybercrime?	SC underlined importance of international cooperation; asked Centre to take a call on ratifying the UN Convention against Cybercrime. World’s first universal legislative framework; 72 of 193 UN members signed in Hanoi, Vietnam; as of October, India has not signed. Proposes framework for LEA cooperation + technical assistance; covers illegal interception, money laundering, hacking, online CSAM.

---

B. Money Laundering (PMLA, FATF)

PMLA, 2002 — Definition, Stages, Features & ED

Cue Words	Notes
What is money laundering under PMLA?	Defined under Section 3, PMLA as concealing/using proceeds of crime and projecting them as untainted property. Laundromat: term from U.S. crime syndicates; all-purpose financial vehicle — laundering crime proceeds, hiding asset ownership, embezzlement, tax evasion, offshore transfers.
What are the three stages of money laundering?	Placement: introducing illicit money. Layering: moving funds via investments/transactions. Integration: reintroducing into the economy.
What are key features of PMLA?	Enacted in line with UN 1990 declaration to prevent laundering and confiscate assets. Burden of proof on the accused. ECIR (Enforcement Case Information Report): internal ED document when a PMLA case is opened; similar to FIR; sufficient to initiate proceedings. Scheduled (predicate) offence is essential for prosecution under Sec 3. But property attachment under Section 5 can proceed without a pre-registered case → scope for misuse. ED can provisionally attach property if it has a “reason to believe” it is linked to proceeds of crime, even if the predicate offence is not yet registered. Why in news: since 2015, ED took up 5,892 PMLA cases but only 15 convictions — rising cases vs low conviction rate.
What is the Enforcement Directorate (ED)?	Established 1956 as ‘Enforcement Unit’ under DEA, Ministry of Finance, to handle exchange control violations under FERA, 1973. Later renamed ED; transferred to Department of Revenue; entrusted with enforcing financial laws. Enactment of FEMA (1999) and PMLA (early 2000s) increased ED’s powers; aligned functions with international AML standards.

FATF — Structure, Lists, India & Reports

Cue Words	Notes
What is FATF?	Founded 1989 by G7 countries. Purpose: combat money laundering and terrorist financing; mandate expanded in 2001 to include terror funding. HQs: Paris, France. Develops and promotes international standards for combating financial crimes; recommends measures to enhance financial systems’ integrity; assesses member compliance with FATF recommendations. Comprises about 39–40 members (countries + regional organizations). India became a member in 2010 (observer in 2006). Plenary = decision-making body; meets three times a year. Pakistan is not a FATF member, but of APG (Asia Pacific Group on Money Laundering) — largest FATF-Style Regional Body. India is member of both APG and FATF. GCC is full FATF member, but five individual GCC states (Bahrain, Kuwait, Oman, Qatar, UAE) are not; Saudi Arabia is FATF member since 2019.
What are Grey List and Black List?	Grey List: countries under increased monitoring; encouraged to address AML/CFT deficiencies. Black List: non-cooperative countries in combating ML and TF. Notes state: 21 countries on Grey List; 3 on Black List — Iran, Myanmar, North Korea. Demanding grey-list status for Pakistan requires member-led nomination and Plenary approval.
What FATF cases / reports are in the notes?	2020 Kandla seizure: India seized dual-use autoclaves from Pakistan-bound vessel Da Cui Yun; linked to Pakistan’s NDC (missile development). FATF confirmed mis-declaration and MTCR violation. Autoclaves critical for chemical coating/insulation of missile motors. FATF Report: first time a separate section on state-sponsored terrorism. 2025 Comprehensive Update on Terrorist Financing Risks — terror orgs receive financial/other support from national governments. Project co-led by UNSC CTED and France; India played significant role. India’s 2022 NRA identified Pakistan as state sponsor of terrorism; U.S. 2024 NTFR Assessment noted threats from Pakistan, Afghanistan, East Africa.
What is the FATF Asset Recovery Framework?	FATF released “Asset Recovery Guidance and Best Practices” to strengthen asset recovery against financial crimes. Practical measures: identify, trace, freeze, manage, confiscate, and return criminal assets. Includes examples from ED cases as models of effective recovery and inter-agency coordination. First time: mandated non-conviction-based confiscation when prosecution is not feasible. Encourages extended confiscations and unexplained wealth orders (prove lawful origin under reasonable suspicion). Greater emphasis on provisional measures to secure assets early and prevent dissipation.

---

C. Organised Crime

Organised Crime — NATGRID, MAC & Network Database

Cue Words	Notes
What is NATGRID and how does it link to organised crime?	National Intelligence Grid (NATGRID): platform for police and investigating agencies to securely access government and private databases in real time. Single platform instead of seeking data from multiple sources. Conceptualised 2009; became operational later; linked to NPR (family-wise details of 119 crore residents). Datasets include: driving licence, Aadhaar, airline data, bank records, social media accounts sharing posts on particular issues. Access now available to SP-rank officers (earlier only 10 Central agencies). Organised Crime Network Database developed on NATGRID’s IT platform for secure data-sharing between NIA and State ATS. Upgraded tools, especially “Gandiva”, support multi-source data collection/analysis (e.g., facial recognition).
What is the Multi Agency Centre (MAC)?	Counter-terrorism grid under IB; conceptualised post-Kargil (2001). MHA inaugurated the revamped MAC. New MAC network connects all police districts securely; built at ₹500 crore. 28 organisations including RAW, armed forces, and State police share real-time intelligence. MHA: new MAC will help combat the terror ecosystem linked with organised crime. Functions 24/7; collates/analyzes inputs under heads: J&K, Northeast, LWE, Rest of India; coordinates via Subsidiary MACs (SMACs) in States/districts. Upgraded 2025 at ₹500 crore — AI/ML, GIS for predictive analytics and hotspots. Connects NATGRID and CCTNS for seamless data fusion and last-mile connectivity.
How does NIA link terrorism to organised crime?	NIA now focuses not only on terror acts but on dismantling the broader ecosystem — financial and logistical wings, including organised criminal gangs, narco-terrorism, and terror financing.

---

D. Terrorism (NIA, UAPA)

NIA — Origin, Mandate & Expansion

Cue Words	Notes
Why and how was the NIA established?	Created after the 26/11 Mumbai terror attacks for specialised investigation of complex, inter-state, and trans-national terror plots. NIA Act, 2008 enacted immediately after the attack. Under administrative control of MHA — specialised central agency for transnational/complex terror plots.
What is NIA’s primary function and expanded role?	Investigate and prosecute scheduled offences under the NIA Act, 2008 — serious crimes involving national security and those under the UAPA, 1967. Role expanded: dismantling broader terror ecosystem — financial/logistical wings, organised criminal gangs, narco-terrorism, terror financing. NIA (Amendment) Act, 2019 significantly broadened the agency’s powers.
What recent NIA-related policy/events are noted?	GoI finalising first anti-terror policy as template for States to combat and respond to terror attacks. 2-day Anti-Terrorism Conference–2025 organised by NIA.

UAPA — Investigation, Bail & Chargesheet

Cue Words	Notes
What are key UAPA investigation / chargesheet rules?	Chargesheet must be filed within the statutory period under UAPA, 1967. Section 43D(2)(a): investigation period may be extended only up to 180 days. Section 43D(7): statutory bar on bail for a non-Indian citizen who entered illegally, except in exceptional circumstances.
What is the UAPA bail regime (Section 43D(5))?	Why in news: Delhi HC denied bail again to Umar Khalid and others; held 5-year custody not sufficient ground for bail under stringent UAPA provisions. Section 43D(5) bars bail if there are “reasonable grounds” to believe accusations are prima facie true. Law forbids detailed examination of evidence at bail stage — courts forced to accept prosecution narrative; if charge sheet alleges conspiracy with voluminous material, accused remains jailed. 180-day investigation period + prohibition of anticipatory bail → process itself becomes punishment. If delay substitutes for conviction, it undermines Articles 19 and 21.

Terror Cases — Ricin, TATP, Tech Misuse & Forensics

Cue Words	Notes
What is ricin and how does it act?	Extremely lethal toxin derived from castor beans; protein extracted from castor bean (grown industrially in India, Brazil, China for castor oil). Seeds: typically 30–60% castor oil; ricin = 1–5% of solid residue weight. Attaches to ribosomes (RNA + protein organelles that read genetic code and synthesise proteins) → stops protein synthesis → multi-organ failure / death depending on cells affected. No antidote; treatment is symptomatic. Context: arrests over chemical weapons plot with global terror network links; accused developing ricin for planned terror strikes. Related: two infiltrators killed in Keran sector, Kupwara (N. Kashmir) under Operation Pimple.
What explosives and forensics tools are noted (Red Fort blast context)?	Forensic analysis: mixture of ammonium nitrate + TATP (triacetone triperoxide). TATP (“Mother of Satan”): peroxide-based organic compound; extreme sensitivity / “hair-trigger” volatility; nitrogen-free → can evade nitrogen-detecting scanners; sensitive to friction, shock, heat, static electricity; can detonate without traditional detonator. Detonation described as “entropy burst” (not mainly thermochemical heat): each solid TATP molecule → four gas molecules (1 ozone + 3 acetone) → devastating blast pressure. Can be synthesised from household ingredients: acetone (nail polish remover); hydrogen peroxide (hair bleach/disinfectants); acid catalyst (sulfuric/hydrochloric/citric). Forensics: FTIR / ATR-FTIR (IR interaction); Raman spectroscopy (chemical composition of explosives); SEM (morphology of fragments); EDX (elemental analysis); thermal analysis (chemical activity/stability). PESO: statutory authority ensuring safety from fire/explosion; administers Explosives Act 1884, Petroleum Act 1934, Inflammable Substances Act 1952 + rules; under DPIIT, Ministry of Commerce and Industry.
How was technology misused by terror suspects?	Threema (Swiss messaging app): high privacy; no phone/email required — random user ID; end-to-end encryption, no metadata storage, message deletion → hard to reconstruct communication chains. Dead-drop emails: shared email account; messages saved as unsent drafts, accessed by others, then deleted — almost no digital footprint (no in/out email record).

---

E. Military / Police Operations

UPSC Prelims PYQ — Army Goodwill Operations

Cue Words	Notes
PYQ 2024: Operations for upliftment of local population in remote areas are called?	Question: Operations undertaken by the Army towards upliftment of the local population in remote areas to include addressing of their basic needs is called… (a) Operation Sankalp (b) Operation Maitri (c) Operation Sadbhavana (d) Operation Madad Answer: 1(c) — Operation Sadbhavana

Domestic Operations — Op Sarvashakti · Op Sadbhavana · Op Sankalp

Cue Words	Notes
What is Operation Sarvashakti (2024)?	Lead Agency: Indian Army Objective: Anti-terror initiative to flush out terrorists from the Pir Panjal range (J&K).
What is Operation Sadbhavana?	Lead Agency: Indian Army Objective: Ongoing “Goodwill” mission in J&K and Ladakh focusing on schools (Army Goodwill Schools) and health. Matches the PYQ framing: Army operations for upliftment of local population / basic needs in remote areas.
What is Operation Sankalp?	Lead Agency: Indian Navy Objective: Maritime security operations in the Persian Gulf and Gulf of Oman to ensure safety of Indian-flagged vessels.

Other Operations — Op Sindoor · Op Mahadev · Op Thunderbolt · Op Rakshak · Op Black Tornado

Cue Words	Notes
What is Operation Sindoor?	Lead Agency: Indian forces Location: Pakistan Border Areas Objective / Context: Recent multi-domain operation responding to the Pahalgam terror incidents.
What is Operation Mahadev?	Lead Agency: Army / CRPF Location: Kashmir Objective / Context: Joint counter-terror operation by the Indian Army, CRPF, and Jammu & Kashmir Police, which neutralized three terrorists responsible for the Pahalgam attack.
What is Operation Thunderbolt?	Lead Agency: Kerala Police Location: Kerala Objective / Context: Counter-insurgency by “Kerala Thunderbolts” (Special Task Force) to curb Maoist sightings in the Western Ghats.
What is Operation Rakshak?	Lead Agency: Indian Army Location: J&K / Punjab Objective / Context: Longest-running counter-insurgency operation (since 1990) to curb cross-border militancy.
What is Operation Black Tornado?	Lead Agency: NSG Location: Mumbai Objective / Context: The specific 2008 operation to neutralize terrorists during the 26/11 Mumbai attacks.

---

Quick Ops Matrix (Zero-loss table form)

Operation	Lead Agency	Location / Theatre	Objective / Context
Op Sarvashakti (2024)	Indian Army	Pir Panjal (J&K)	Anti-terror flush-out of terrorists
Op Sadbhavana	Indian Army	J&K and Ladakh	Ongoing “Goodwill” — Army Goodwill Schools & health
Op Sankalp	Indian Navy	Persian Gulf & Gulf of Oman	Safety of Indian-flagged vessels
Op Sindoor	Indian forces	Pakistan Border Areas	Multi-domain response to Pahalgam terror incidents
Op Mahadev	Army / CRPF (+ J&K Police)	Kashmir	Neutralized 3 terrorists responsible for Pahalgam attack
Op Thunderbolt	Kerala Police (“Kerala Thunderbolts” STF)	Kerala / Western Ghats	Curb Maoist sightings
Op Rakshak	Indian Army	J&K / Punjab	Longest-running CI ops since 1990; curb cross-border militancy
Op Black Tornado	NSG	Mumbai	Neutralize terrorists in 26/11 (2008)