⚠️ DISCLAIMER: Ministry of Cyber Affairs is an independent news, guides and directory service on cybercrime and cybersecurity, for victims and investigators. It is NOT an official government or ministry portal.
Website Scam CheckerNew
Back to News

CISF Foils IIT Goa Recruitment Cheating Bid: Bluetooth Kits Caught in Airport X-Ray

13 October 2026
Source:CISF / PIB
Share
CISF Foils IIT Goa Recruitment Cheating Bid: Bluetooth Kits Caught in Airport X-Ray

CISF screeners at Goa's Dabolim airport intercepted two Delhi-bound passengers carrying concealed Bluetooth cheating kits linked to the IIT Goa Non-Teaching Staff Recruitment exam. One admitted he had sat the exam in place of another candidate. Both were handed to police and a case has been registered.

Central Industrial Security Force (CISF) personnel at Goa International Airport, Dabolim, intercepted two passengers on 10 October 2026 carrying concealed Bluetooth devices meant for cheating in competitive examinations.

At about 14:25, the first passenger, booked on Air India Express IX-1340 to Delhi, put his handbag through X-ray at the pre-embarkation checkpoint.

The screener flagged suspicious objects, and a physical search turned up three electronic devices, two SIM cards and three Bluetooth earpieces.

Under questioning, he admitted the kit was for exam cheating and said an associate had already boarded the same flight.

CISF had the second passenger offloaded with the help of airline staff.

His bag held a similar device, two Bluetooth earpieces, one SIM card and an admit card for the Administrative Assistant post in the IIT Goa Non-Teaching Staff Recruitment exam held earlier that day.

Impersonation Uncovered

In a joint interrogation with intelligence agencies, the first passenger disclosed that he had taken the exam in place of another candidate.

Aadhaar cards belonging to two other people, which he had thrown away in the security hold area, were recovered.

His claim to be a civilian employee of a defence establishment was verified with the authorities concerned.

Modus Operandi: Bluetooth Relay

  • SIM-enabled device: a small unit with its own SIM card, hidden on the body, keeps a live call open to an outside helper.
  • Bluetooth earpiece: a tiny earpiece placed deep in the ear receives the answers, and it is hard to spot at a visual check.
  • Proxy candidate: an impersonator sits the exam on someone else's identity documents.
  • Spare kits: extra devices, SIMs and earpieces point to an organised operation working across multiple candidates or exams.

Action Taken

Both men and the seized items were handed to Dabolim Airport Police and then transferred to Ponda Police Station, which covers the exam centre.

A case has been registered and the investigation continues.

The X-ray screening that caught the kits stopped two suspects in an alleged recruitment fraud from leaving the State with the evidence.

More in Cybersecurity

Related articles

Cybersecurity

OpenAI Disclosed ChatGPT User Content, Including Prompts and Files, in 88 Government Requests

OpenAI disclosed user content, including text and files entered into or generated by its services, in response to 88 government requests in January–June 2026, covering 130 accounts. The company received 146 content requests, typically search warrants, and produced data in about 60 percent of them, plus 620 non-content requests for subscriber records. Ordinary requests more than doubled from late 2025. No country breakdown is given. U.S. national security demands totaled 250–499.

12 Nov 2026
Cybersecurity

CyberStrike AI - Detection for Defenders: Scripting, Tempo and Residue

CyberStrike is a free, open-source AI agent for offensive security that pairs any LLM with 56+ tools, including a 40,000-line Windows post-exploitation module. A source-code reading of commit a5ed1e0 (v1.1.16) shows every Windows action runs through five fixed wrappers after a hard-coded five-process capability probe, leaving default cs-* and CyberStrike* artefacts. Includes Sigma, Suricata, YARA and KQL detections and a response playbook.

4 Nov 2026
Cybersecurity

Cybersecurity Checklist in the Agentic Hacking Era

Google Threat Intelligence Group and Mandiant say threat actors are now using agentic offensive frameworks such as ARTEX and PentAGI in real intrusions, moving from first stolen account to deep access in hours, sometimes 15 minutes. With CERT-In already warning of AI-assisted payment API hijacking at Indian NBFCs and fintechs, here is a checklist built on Google's five defence layers and CERT-In's controls.

2 Nov 2026