Information Warfare

Information warfare is the organised contest to protect one’s own information, decision processes and legitimacy while influencing, degrading or exploiting those of an adversary. It includes propaganda and disinformation but is broader: cyber intrusion, military deception, electronic activity, public diplomacy, psychological methods, data exploitation and real-time narrative competition can operate as one campaign.

Its strategic object is an effect, not a post. The effect may be hesitation in a command chain, mistrust between citizens and institutions, loss of coalition unity, panic in a community, reduced morale or acceptance of an adversary’s framing. Content is the ammunition; perception and decision are the target.

Information Warfare in Modern Conflict — the Doctrinal Shift

Earlier models treated information mainly as support to kinetic operations: conceal one’s plan, deceive the enemy and persuade the public. Digital networks have made the information environment a continuously contested arena in which actions, images and interpretations feed back into military, diplomatic, economic and domestic-security decisions.

Earlier emphasis	Contemporary shift	Internal-security consequence
Wartime activity	Persistent competition below, during and after armed conflict.	Security institutions require continuous monitoring and trusted communication without normalising permanent emergency powers.
Mass broadcasting	Micro-targeted, multilingual and community-specific persuasion.	Different groups may inhabit different accounts of the same event; a single national rebuttal may miss the target audience.
State-controlled channels	States, proxies, platforms, influencers, diaspora networks, hacktivists and ordinary users interact.	Attribution and intent are harder to establish; genuine citizen speech can be exploited without being centrally controlled.
One-way message	Real-time measurement, testing and adaptation through engagement data.	Influence becomes an iterative operation that learns which grievance, image or messenger works.
False information as principal tool	A mixture of truth, leaks, edited context, authentic footage, synthetic media and coordinated amplification.	Fact-checking individual claims is necessary but cannot by itself expose the campaign or protect decision systems.
Separate cyber and media activity	Combined operations such as account compromise, data theft, selective leak and narrative amplification.	Technical defence must connect with communication, intelligence, diplomacy and legal response.

Map	Create	Seed	Amplify	Adapt	Convert
Identify audiences, fractures and trusted voices	Build a narrative from truth, distortion, fabrication or omission	Place it through overt, covert or proxy channels	Use networks, automation, influencers and news attention	Measure reaction and modify message in real time	Turn perception into hesitation, polarisation, compliance or action

The centre of gravity has shifted from merely controlling transmission to influencing interpretation. A battlefield action now has a physical result, a recorded image, competing explanations and algorithmically distributed reactions. Strategic success therefore requires operational performance, credible evidence and communication discipline; a narrative cannot permanently rescue visible failure.

DEMOCRATIC DOCTRINE Information advantage does not mean ‘lying more effectively’. A democracy’s durable advantage lies in credibility, speed, verifiable evidence, plural trusted messengers and willingness to correct error. Manipulation may win a news cycle; institutional trust determines resilience over time.

Psychological Operations, Influence Operations, Cognitive Warfare

These terms overlap but answer different questions. Precision matters because not every public statement is psychological warfare, and not every influence activity is malign.

Concept	Primary object	Characteristic means	Boundary
Psychological operations	Influence the emotions, motives, reasoning and behaviour of specified audiences in support of an operational or strategic objective.	Planned messages, demonstrations, leaflets, broadcasts, digital content and carefully selected messengers.	Commonly associated with military or security operations; lawfulness depends on audience, method and context.
Influence operations	Produce a desired effect on a target audience or decision-maker through coordinated use of informational and other instruments.	Narratives, diplomatic signalling, media, proxies, cyber activity, economic pressure, influencers, bots, trolls and covert networks.	May be overt and legitimate or covert and manipulative; organisation and strategic intent are central.
Cognitive warfare	Shape not only what people think but how they perceive, interpret, trust and decide.	Persistent data-driven exposure, identity cues, information overload, contradiction, synthetic media and behavioural targeting.	A useful lens for the contested human mind, but an expansive concept that must not turn ordinary persuasion or dissent into ‘warfare’.
Public diplomacy and strategic communication	Explain policy, build relationships and maintain credibility through attributable communication.	Official briefings, cultural exchange, diplomacy, public engagement and evidence publication.	Overt attribution and accountability distinguish it from deceptive covert manipulation, though all communication seeks influence.

An influence operation can be understood as an organised attempt to achieve a specific effect among a target audience. Its advantage in hybrid and grey-zone competition is low visibility: the sponsor may use proxies, authentic grievances and lawful content while concealing coordination. Social platforms enable scale, immediate feedback and rapid modification at relatively low cost.

A complete influence toolkit may combine:

• narrative construction: selective history, identity frames, victimhood, conspiracy and moral binaries;
• distribution infrastructure: content farms, coordinated accounts, bots, trolls, paid influencers and diaspora or community channels;
• deception: impersonation, astroturfing, forged documents, deepfakes and false attribution;
• cyber-enabled release: theft followed by selective or altered disclosure — the ‘hack-and-leak’ model;
• behavioural adaptation: testing messages, observing reaction and moving successful frames across languages and platforms; and
• conversion: calls for protest, boycott, harassment, recruitment, funding, withdrawal of cooperation or violence.

DEFENSIVE PRINCIPLE Counter-influence has three layers: resilience before exposure, deterrence and cost imposition against organised hostile actors, and rapid counter-measures during a campaign. Removing a false post addresses only one layer; trusted institutions and an audience capable of recognising manipulation are the strategic defence.

Foreign Information Manipulation and Interference Targeting India

Foreign Information Manipulation and Interference (FIMI) is a pattern of intentional and coordinated manipulative behaviour by a foreign actor, proxy or aligned network that can threaten political processes, security or social cohesion. The focus on behaviour is important: the material may be false, selectively true or entirely authentic, while the accounts, sponsorship or distribution remain deceptive.

Targeted fault line or asset	Possible operation	Sought effect
Jammu and Kashmir and military operations	Fabricated casualty claims, recycled images, impersonated official handles, selective battlefield footage and multilingual narrative seeding.	Undermine military credibility, exaggerate success, create panic, internationalise a preferred narrative or provoke overreaction.
Punjab and Khalistan-related narratives	Proxy accounts, diaspora amplification, manipulated grievance content and coordinated hashtags.	Deepen centre–state or community distrust, normalise separatist frames and generate intimidation or recruitment.
Communal relations	Fabricated atrocities, decontextualised religious content, synthetic speeches and coordinated outrage.	Convert distant or invented events into local polarisation, vigilantism and public-order pressure.
North-East and regional identity	Exploitation of migration, ethnicity, border events and perceived neglect through locally adapted messages.	Reduce trust in protection by the State, intensify identity insecurity and widen distance between regions and the national public sphere.
Elections and institutions	Leaked or forged material, covert promotion, suppression narratives, harassment and claims that every adverse result is illegitimate.	Erode procedural trust even without changing a vote count; make governance harder after the election.
Diaspora information spaces	Targeting overseas communities through identity media, influencers, events and coordinated narratives that later re-enter India.	Secure funding, legitimacy and transnational amplification while obscuring the originating sponsor.

The evidentiary threshold must remain high. Foreign location is not foreign direction; a trending slogan is not proof of coordination; criticism of government is not disinformation; and diaspora advocacy is not automatically interference. Assessment should combine foreign nexus, strategic intent, deceptive behaviour, coordination, infrastructure, funding and sought harm, with stated confidence and independent scrutiny.

Attribution level	Evidence sought	Responsible conclusion
Content assessment	Accuracy, provenance, editing, timing and omitted context.	This claim is false, altered, unverified or misleading; no actor attribution yet.
Behavioural assessment	Synchronous posting, identical assets, account creation patterns, automation, cross-platform migration and evasion.	This appears coordinated or inauthentic; organisation remains under investigation.
Network assessment	Shared administrators, infrastructure, payment, tasking, proxy media and operational-security errors.	This network is linked with a stated level of confidence.
Sponsor assessment	Intelligence, financing, direction, consistent strategic benefit and corroborated institutional linkage.	Public attribution should explain confidence, limits and the legal or policy consequence.

India’s defence must connect foreign-language monitoring, platform and telecom cooperation, cyber forensics, intelligence, diplomatic engagement, election integrity and local public communication. The most credible rebuttal is often delivered by a trusted institution closest to the affected audience, supported by evidence that independent journalists and researchers can inspect without revealing sensitive methods.

CURRENT STATUS (AS OF AUGUST 2026) During and after Operation Sindoor in 2025, official counter-disinformation reporting described coordinated false or misleading claims, impersonated material and communal or anti-India narratives, much of it attributed to Pakistan-based sources. The episode demonstrated the modern fusion of military action, social-media narrative contest, rapid fact-checking and statutory blocking. Official attribution should still be read claim by claim rather than used to label all criticism or cross-border speech as hostile interference.

India’s Counter-disinformation Capacity: PIB Fact Check, Section 69A Blocking, and its Critics

Counter-disinformation has three separate tasks: correct a claim, disrupt unlawful distribution, and investigate the actor or network. Confusing them creates legal and policy error. A fact-check is an evidentiary communication; blocking is a coercive legal measure; prosecution requires an offence and due process.

Instrument	What it does	Legal or institutional limit
PIB Fact Check Unit	Verifies claims concerning the Central Government, consults official sources and publishes corrections through public channels.	It is not a general fact-checker for every social claim. An administrative correction is evidence and communication, not by itself a binding judicial determination of illegality.
Section 69A, Information Technology Act, 2000	Allows the Central Government or authorised officer to direct blocking on specified grounds including sovereignty and integrity, defence, security of the State, friendly relations, public order and prevention of incitement to related cognisable offences.	Requires reasons recorded in writing and the statutory procedure. The Supreme Court upheld the framework in Shreya Singhal v. Union of India (2015) partly because of its defined grounds, procedural safeguards and availability of judicial review.
Platform enforcement	Labels, reduces distribution, removes content, disables coordinated accounts, preserves evidence and provides authoritative context under law and platform rules.	Private rules can be opaque, inconsistent or influenced by commercial and geopolitical incentives; users need notice and appeal.
Police and intelligence action	Attributes networks, protects targets, preserves electronic evidence and investigates incitement, impersonation, fraud, terrorism or other specified offences.	Must be targeted, lawful and evidence-based; dissent, satire and error cannot be collapsed into subversion.
Independent media and civil society	Supply distributed verification, linguistic reach, source criticism and external scrutiny of official claims.	Capacity and quality vary; independence requires transparent methods and correction policies rather than official or partisan alignment.

CURRENT STATUS (AS OF AUGUST 2026) The PIB Fact Check Unit has operated since November 2019 and had published 2,913 fact-checks by 1 April 2026. Official reporting states that more than 1,400 URLs were blocked during Operation Sindoor under Section 69A. Separately, the 2023 rule that would have given a notified Central Government fact-check unit special intermediary consequences for government-related information was struck down by the Bombay High Court in the litigation led by Kunal Kamra v. Union of India in September 2024. The Union’s appeal was pending and no stay had restored that rule by August 2026. The administrative PIB Fact Check Unit continues, but it must not be described as possessing the struck-down statutory status.

What works	What does not work	Required safeguard
Rapid, evidence-backed correction from the institution holding the record can close an information vacuum.	A bare ‘fake’ label, delayed denial or partisan tone may strengthen the original narrative.	Publish the evidence, method, time and scope; correct government error with equal visibility.
Blocking can interrupt urgent incitement, impersonation or coordinated hostile distribution at scale.	Opaque or overbroad blocking can remove lawful journalism, satire or dissent and prevent external evaluation of necessity.	Use narrow statutory grounds, reasoned orders, notice where compatible with the investigation, periodic transparency and effective judicial review.
A central unit can coordinate authoritative records and multilingual crisis communication.	Making the government the binding judge of truth about its own affairs creates conflict of interest and a chilling effect.	Keep official fact-checking rebuttable and transparent; preserve courts, independent media and plural verification.
Network analysis can expose organised manipulation that content-only checking misses.	Treating virality or disagreement as proof of a hostile network produces false attribution and politicised enforcement.	Require multi-source behavioural evidence, documented confidence levels, audit and remedy.

The most effective architecture is distributed but connected: authoritative data from government, professional verification by media and independent bodies, platform detection of coordinated behaviour, lawful investigation of specific offences, diplomatic action against foreign sponsors and citizen resilience. No single ministry or fact-checking label can establish trust by decree.

SECTION TAKEAWAY Information security in a democracy is the capacity to keep citizens and institutions accurately informed, freely reasoning and operationally safe under manipulation. The State must be fast enough to defeat a harmful falsehood, restrained enough to protect constitutional speech, and credible enough that evidence travels farther than rumour.