India opens cases against hundreds of VPN users in Kashmir; those found guilty of promoting “unlawful activities and secessionist ideology” face up to 7 years
with potentially 7 years in jail https://techcrunch.com/...
Context & Ripple Effects
This case-opening is the enforcement phase of a playbook India has been building since late 2019, when it shut down the internet across two states home to 32M people and let the Kashmir blackout run into its fourth month. Weeks later the Supreme Court ruled the indefinite Kashmir shutdown illegal, but rather than easing control, the government moved to criminalize the workaround — prosecuting VPN users directly.
The timing matters because it foreshadows the structural fix that followed: by 2022 India required VPN providers to register customers' real names and warned non-compliant operators they would have to pull out of the country entirely. Prosecuting individual users and forcing provider-level identification are two ends of the same strategy — closing off anonymity wherever the network itself can't simply be switched off.
First-order effects
- Hundreds of Kashmiri VPN users now face criminal cases under charges of promoting unlawful activities and secessionist ideology, with sentences of up to seven years for those convicted — turning a privacy tool into prosecutable offense evidence.
- VPN services serving the region shift from neutral utilities to legally hazardous intermediaries, since usage logs become the raw material for these prosecutions.
Second-order effects
- Global VPN and cloud operators face a compliance fork that India formalized months later: register identities or exit the market, a threat the IT ministry made explicit when it said non-compliant providers 'will have to pull out'.
- Platforms hosting dissent get squeezed by the same logic — the IT ministry had already ordered Twitter to block restored critic accounts and threatened its staff with jail time or fines, showing the enforcement appetite extends beyond connectivity tools.
Third-order effects
- If the pattern holds, India's approach migrates from blunt regional blackouts — which drew Supreme Court rebuke — toward targeted legal enforcement plus mandatory identity infrastructure, making circumvention punishable even where access is nominally restored.
- That combination normalizes a model other governments can copy: keep the internet nominally on, but make anonymity itself a chargeable offense, collapsing the distinction between connectivity policy and criminal law.
The trend: India is evolving from wholesale internet shutdowns toward criminalizing circumvention tools themselves, pairing user-level prosecutions with provider-level identity mandates to make anonymous access untenable.