Jammu and Kashmir Police have arrested Kashmiri Pandit activist Rakesh Handoo in a case involving the alleged alteration and repeated circulation of online threat material. Investigators have invoked Section 66F of the Information Technology Act, a provision dealing with cyber terrorism that carries severe penalties upon conviction.
The case centres on allegations that digital material originally referring to another person was modified to make it appear that a Kashmiri Pandit employee posted in Baramulla was being targeted. Handoo’s family and lawyer dispute aspects of the police account, and the allegations have not been established in court.
According to the report published by The420, a court in north Kashmir remanded Handoo to five days of police custody on October 27, 2026. The investigation includes examination of seized electronic devices and social-media records.
Police Allege Threat Material Was Altered and Circulated
The investigation concerns threatening content that circulated online earlier in 2026 and was purportedly attributed to groups identifying themselves as Soldier of Resistance and United Liberation Council. The material reportedly targeted Kashmiri Pandit employees and migrant workers in the Valley.
Police allege that Handoo did not simply share the material but modified it in a way that made complainant Rohit Raina appear to be the intended target. Investigators claim the original identifying details referred to another person with a similar name.
According to the report, police have seized two mobile phones and documentary material and obtained information relating to the social-media account allegedly used to circulate the posts. Investigators have also collected witness statements and call-detail records.
Forensic and technical examination remains pending. The results may help establish whether the material was altered, how it was distributed and who was responsible for the alleged changes.
Police have maintained that the current case focuses on the alleged modification and circulation of threatening content. It is separate from the broader question of who originally created the material.
Family and Lawyer Challenge the Police Account
Police have said Handoo did not join the investigation despite receiving notices, following which investigators obtained an arrest warrant. According to the police version cited in the report, he was taken into custody in Faridabad on October 17.
Handoo’s family has offered a different account of the events. His son reportedly said that police came to their Faridabad home and informed the family about the complaint. According to the family, Handoo subsequently travelled towards Jammu and Kashmir in his own vehicle accompanied by police personnel.
His lawyer has challenged aspects of the case, suggested that personal animosity may be involved and indicated that bail would be sought.
Supporters have also referred to Handoo’s earlier public statements about threats against Kashmiri Pandits and concerns over the exposure of community members’ personal information. Police, however, maintain that the present investigation concerns the alleged alteration and circulation of threat material.
These competing accounts remain part of the case, and the investigation will need to establish the circumstances through evidence and legal proceedings.
Why Section 66F of the IT Act Matters
Section 66F of the Information Technology Act addresses cyber terrorism. It covers specified computer-related acts committed with the intent to threaten India’s unity, integrity, security or sovereignty, or to strike terror among people, as well as certain unauthorised access involving restricted information connected with state security.
A conviction under the provision can result in imprisonment for life. The report also states that police have invoked Section 84C of the Act, which concerns attempts to commit offences under the legislation.
The inclusion of Section 66F makes the legal questions particularly significant. Alleged online impersonation, alteration of posts or circulation of threatening material does not, by itself, establish every element required for a cyber-terrorism offence. Investigators and prosecutors must establish the relevant statutory requirements, including the applicable intent and conduct.
The final legal assessment will depend on the evidence and how the alleged actions fit within the law.
Digital Evidence and Criminal Intent Are Central to the Case
The investigation is likely to turn on several questions: whether the disputed material was altered, who made any changes, when those changes occurred, how the content was circulated and whether the accused acted with the intent required under the charged provision.
The seized phones, account records, forensic findings and witness statements could help investigators reconstruct the sequence of events. Technical evidence will also need to distinguish the original material from the version police allege was subsequently modified.
The outcome cannot be determined solely by the content of the posts or the fact that they circulated online. Evidence must connect the alleged actions to the accused and support the legal elements of the charges.
Digital investigations increasingly involve questions of account attribution, content authenticity and the interpretation of electronic records. For organisations and individuals seeking to understand suspicious financial or digital activity, financial investigation services may be relevant in appropriate circumstances, although the present case concerns alleged cybercrime rather than a reported financial offence.
What Happens Next?
As of the report’s publication, Handoo remained an accused person and the forensic examination was still pending. His defence disputes the police narrative, while investigators are relying on digital records and alleged repeated circulation of the material.
The next stages will depend on the findings of the investigation, any bail proceedings and the decisions of the court. Until the allegations are tested through due process, they should not be treated as proven facts.