New Delhi’s ultimatum: Messaging platforms to be held responsible for feature-driven fraud

The Centre has issued a stern warning to tech giants, signaling that software design flaws that facilitate crime will no longer be met with mere warnings.

The recent restriction on Telegram during the NEET-UG re-examination, where the govt stepped in to disable message-editing features to curb the spread of fabricated paper leaks, was more than a stop-gap measure. It was a signal of a deepening rift between regulators and global tech conglomerates. Officials in Delhi are now making it clear: when messaging platforms introduce new features, they must account for how those tools might be weaponized by bad actors.

This shift in stance reflects a broader realization within the corridors of power. As India’s welfare systems, public examinations, and financial services migrate to digital platforms, the vulnerability of the average user has spiked. The government’s position is that cybersecurity cannot be an afterthought or a "patch" applied after a crisis. Instead, it must be integrated into the architecture of the product from the design stage.

The cost of innovation

The directive is blunt: if a platform’s feature creates a loophole for fraud, the platform itself will be held responsible. This marks a departure from the traditional hands-off approach to tech regulation. By emphasizing that no digital system is permanently secure, authorities are effectively shifting the burden of safety from the end-user to the service provider.

Whether it is protecting the sanctity of a national exam or preventing the digital arrest of citizens, the government is signaling that convenience cannot come at the expense of national security. The era of platforms escaping liability by claiming they are merely intermediaries is rapidly closing.

Why it matters

The bigger picture here is the tightening of the digital leash. We are seeing a global pattern—from the UK’s warnings to platforms like X to India’s proactive stance—where the state is reclaiming its role as the primary arbiter of online safety. For these companies, the stakes have evolved. It is no longer just about content moderation; it is about the accountability of the code itself.

If platforms fail to bake "secure-by-design" principles into their updates, they face the prospect of severe regulatory friction. Expect to see a surge in compliance costs for these firms, as they scramble to appease regulators while maintaining the user experience that keeps their daily active user counts high. In a market as vast and digitally hungry as India, the cost of being "held responsible" is a price few global tech giants can afford to ignore.