What Is Cyber Crime?

Cyber crime is basically crime or criminal activity in cyber space. It refers to unlawful activities conducted through, against, or by means of computer systems, digital networks or electronic data, primarily for financial gain, personal advantage, coercion or illicit facilitation. Unlike cyber warfare or cyber terrorism, cyber crime does not inherently require political or ideological motivation. Its defining characteristic is criminal intent, typically profit-oriented, and it encompasses offences such as hacking, ransomware, financial fraud, identity theft, online drug trafficking, human trafficking facilitation, data breaches and digital money laundering. Cyber crime may be categorised into three principal types:

• Cyber-dependent crimes — offences that can only be committed using digital systems (e.g., malware deployment, ransomware attacks).
• Cyber-enabled crimes — traditional crimes amplified or facilitated by digital tools (e.g., drug sales via encrypted platforms, online human trafficking networks).
• Cyber-supported criminal logistics — the use of digital systems for coordination, financial transfers, recruitment and concealment within organised crime structures.

The third category is particularly relevant to understanding the evolution of organised crime networks in South Asia.

The Connection to Organised Crime and Terrorism

Organised crime refers to structured groups engaged in sustained illegal activity for profit, often employing violence, corruption and transnational linkages. In India, organised crime historically evolved in port cities, especially Mumbai, where smuggling, extortion and black-market trade intersected with political patronage and cross-border networks. One of the most prominent organised crime figures associated with this evolution is Dawood Ibrahim, founder of the D-Company syndicate. His network expanded from gold smuggling and extortion in Mumbai during the 1970s–80s into a transnational criminal enterprise spanning narcotics trafficking, hawala financial systems, arms smuggling and alleged terror facilitation.

In the contemporary era, these operations increasingly incorporate digital tools — encrypted communication platforms for coordination, cryptocurrency or layered digital financial channels for laundering, dark web marketplaces for narcotics sales, and online recruitment and coercion mechanisms. Organised crime has thus undergone partial digital transformation, expanding its operational resilience. The digital domain now functions as a multiplier for organised criminal enterprises, visible in online financial fraud and money-laundering syndicates that employ phishing schemes and shell digital entities, ransomware groups that operate with hierarchical structures resembling traditional organised crime, dark web drug markets, and social media platforms exploited for human-trafficking recruitment.

These patterns reflect not the replacement of traditional organised crime but its technological augmentation. The convergence between organised crime and cyber terrorism operates along three dimensions:

Financial convergence — organised crime generates substantial illicit revenue streams (drugs, smuggling, extortion). Terrorist organisations may rely on these channels for funding, and digital laundering mechanisms reduce traceability, enabling covert transfer of resources.

Logistical convergence — criminal syndicates provide expertise in forged documentation, transport corridors and covert communications, from which terrorist networks benefit.

Operational convergence in cyberspace — some cyber-criminal groups may provide "services" (malware tools, ransomware infrastructure, phishing kits) that can be repurposed by ideologically motivated actors. While motivations differ, technical ecosystems overlap.

A crucial analytical distinction must be preserved, however: organised crime is profit-driven, whereas cyber terrorism is ideology-driven. The relationship is therefore instrumental rather than ideological. Criminal syndicates generally avoid sustained political engagement unless it serves commercial interests — yet hybridisation occurs when political actors leverage criminal infrastructure for strategic ends.

The Mumbai Connection

The 1993 Bombay bombings represent a critical historical intersection between organised crime and terrorism. Investigations indicated collaboration between criminal syndicates and Pakistan-based extremist elements, marking a structural convergence between profit-driven crime and politically motivated violence. The bombings demonstrated how organised crime logistics — smuggling routes, financial networks and corrupt facilitation chains — could be repurposed for mass-casualty terrorism. The D-Company network and similar syndicates have historically operated within narcotics corridors linking South Asia, the Middle East and Europe, with drug trafficking financing parallel criminal ecosystems that often intersect with extremist financing channels.

The 2008 Mumbai attacks occupy a distinct but related place in this history. They are counted, alongside the 2001 Parliament attack, among the paradigm cases through which Indian courts have interpreted "waging war" against the state — acts of organised, violent character aimed at challenging state authority. The attacks also became the direct trigger for India's cyber-legal architecture: the Information Technology (Amendment) Act, 2008, enacted in their aftermath, introduced Section 66F — the cyber terrorism offence — strengthened data protection provisions, and enhanced government surveillance and blocking powers. In other words, the most significant single legislative response to cyber terrorism in India's history was written in direct response to a kinetic terror attack, not a digital one — underlining how tightly conventional terrorism and India's cyber-legal doctrine remain linked.

Nevertheless, large-scale destructive cyber terrorism linked directly to traditional organised crime syndicates has not yet been publicly evidenced in India at the scale of the kinetic-terror collaborations seen in the 1990s. The risks are understood to be emerging rather than fully realised: criminal ransomware infrastructure could be covertly repurposed for political disruption, disinformation campaigns may be amplified by bot networks originally built for fraud or spam, and digital financial networks could obscure terror-financing trails.

The Jamtara Story

If Mumbai represents the historical convergence of organised crime, terror financing and the state's legal response, Jamtara — a small, largely rural district in Jharkhand — represents cyber crime's more recent and more distinctly "digital-native" evolution in India.

Since the early-to-mid 2010s, Jamtara has earned a reputation as one of India's most concentrated hubs of phishing-based fraud, with law enforcement officials and media reports repeatedly describing it as a nationwide organised phone-fraud network operating out of a cluster of villages. The pattern is consistent across cases: young, often unemployed men pose as bank or telecom customer-care representatives, post fake customer-service numbers online, and call or receive calls from victims across India — persuading them to share OTPs, card details or click phishing links that drain their accounts. Investigations into Jamtara-linked gangs have repeatedly uncovered large caches of pre-activated SIM cards and mobile phones, evidence of a semi-industrial fraud operation rather than isolated opportunistic scams. The racket gained mainstream cultural visibility through the Netflix series Jamtara: Sabka Number Ayega, inspired by these real events, which in turn drew further national and international media and law-enforcement attention to the district.

What makes Jamtara analytically significant is not its scale alone but its structure. It exemplifies "cyber-enabled crime" in its purest form — a traditional confidence-trick, extended and multiplied by mobile telephony, spoofed caller IDs, and low-cost digital tools, run at a volume and reach that physical-world fraud never could achieve. Successive crackdowns — including raids by Delhi Police and, more recently, coordinated raids across West Bengal — indicate that the "Jamtara model" has since franchised outward: gangs describing themselves or being described by police as "Jamtara-style" have been found operating from other districts and states entirely, with newer variants including digital-arrest scams, job scams, investment fraud and sextortion. In that sense, Jamtara is less a single crime hub today than the origin template for a nationally replicated cyber-fraud methodology.

Key Takeaways

• Cyber crime is defined by intent, not method. Profit-driven digital offences — fraud, ransomware, identity theft — are analytically distinct from ideologically-driven cyber terrorism, even when the technical toolkit overlaps.
• Organised crime has digitised, not disappeared. Syndicates like D-Company built their power through physical smuggling and extortion networks in Mumbai; today's equivalent operations increasingly run on encrypted apps, cryptocurrency laundering and dark-web marketplaces.
• 1993 and 2008 mark two different kinds of convergence. The 1993 Bombay bombings showed organised-crime logistics being repurposed for terrorism; the 2008 Mumbai attacks directly triggered the legal creation of India's cyber terrorism offence (Section 66F) — linking a kinetic attack to India's entire subsequent cyber-legal doctrine.
• The financial, logistical and operational convergence between crime and terror is instrumental, not ideological. Criminal networks rarely share terrorist motives — but their infrastructure (money-laundering channels, forged documentation, phishing kits) is available to be rented, borrowed or repurposed by those who do.
• Jamtara shows how ordinary cyber-enabled crime scales nationally. A hyper-local phishing operation, run largely by young men with basic smartphones, became a template replicated across states — a reminder that most of India's cyber-crime burden looks less like state-sponsored sabotage and more like industrialised, low-tech social engineering at massive scale.
• The line between "crime" and "terror-adjacent" is often attribution, not impact. As with cyber terrorism cases more broadly, the same tools — ransomware, phishing infrastructure, encrypted coordination — can serve a purely criminal syndicate or be quietly repurposed for coercive political ends, and India's institutional framework still struggles to draw that line in real time.

— Digital Arthashastra: Decoding the digital battlefield