The Delhi Police’s cyber and forensic investigation into the violence linked to the Cockroach Janta Party (CJP)-led student protests has uncovered what investigators describe as a coordinated digital campaign
involving fake social media accounts and suspected foreign bot networks to amplify inflammatory content online.
According to sources, the probe has found that a large number of fake accounts were created and activated during the protests to systematically circulate controversial videos, statements and reels across multiple social media platforms.
Investigators suspect that thousands of bot accounts were used to artificially boost engagement, making posts appear widely viewed, shared and discussed within a short period.
Coordinated Campaign Under Scanner
Police sources said the cyber investigation found that between July 20 and July 23, content related to the protests was repeatedly and systematically shared across platforms in what appeared to be a coordinated effort rather than organic social media activity.
The preliminary findings suggest the possible use of a foreign bot network to rapidly expand the reach of the content.
According to investigators, the objective was to amplify inflammatory material and shape the narrative around the protests on social media by creating the impression of overwhelming public support and engagement.
Meta, Google And X Asked To Share Details
As part of the investigation, Delhi Police has written to several social media companies, including Meta, Google and X, seeking information about the accounts involved.
The police have requested details, including account ownership information, IP addresses, server logs, login histories, and other digital records.
Officials said the information will help identify those operating the fake accounts and map the larger digital network behind the campaign.
Who Was Behind The Campaign?
Investigative agencies are now attempting to establish who created and operated the fake accounts, whether the activity originated within India or abroad, and whether any organisations coordinated the online campaign.
The forensic analysis is also examining how the alleged bot network was deployed, the platforms used to amplify content, and whether multiple accounts were centrally controlled.
Probe Builds On Earlier Findings
The latest cyber findings add another dimension to the ongoing investigation into the CJP protests.
Earlier, News18 had reported that Delhi Police was examining the role of around 480 Pakistan-based social media handles that allegedly spread misinformation and provocative content during the agitation. Investigators had found that several of these accounts had also been active during Operation Sindoor, prompting agencies to examine possible links between the two online campaigns.
Police sources had also told News18 that nearly 3,000 people with criminal records were identified among those who participated in the protests, while investigations into the funding, mobilisation and planning of the agitation continue.
Separately, Delhi Police had issued notices to CJP organisers over alleged violations of crowd-management norms after videos from the Jantar Mantar protest went viral, triggering concerns over security arrangements.
Officials emphasised that the cyber investigation is ongoing and that findings regarding the alleged foreign bot network and fake accounts are based on the investigation conducted so far. They said further action will depend on the responses received from social media companies and the digital evidence collected during the probe.
