Islamabad – A hacker on the dark web has claimed possession of classified documents allegedly linked to India’s intelligence agency Research and Analysis Wing (RAW) and its operations in Pakistan’s Khyber Pakhtunkhwa province, demanding a payment of 500,000 Bitcoin, an amount worth billions of rupees, in exchange for their release.
According to the hacker, samples of the material would be leaked to validate the authenticity of the cache. The first document made available provides detailed allegations of connections between RAW operatives and a Pakistani politician from Khyber Pakhtunkhwa.
Allegations Against Political Figure
The leaked document names Iqbal Afridi, a former two-time elected Member of the National Assembly associated with Pakistan Tehreek-e-Insaf (PTI), as being in contact with RAW operatives. It further claims he facilitated the movement and operations of militant groups within the region, allegedly providing support networks that enabled attacks.
While the authenticity of these documents remains unverified, the nature of the allegations has generated attention in both political and security circles, especially as cross-border militancy remains a pressing issue for Pakistan.
Scale of the Claim
The hacker’s demand of 500,000 Bitcoin underscores the scale of the claim. If genuine, the amount would translate to several billion rupees, making it one of the most expensive information sales ever attempted on the dark web. Such exorbitant demands have raised skepticism, with some analysts suggesting that hackers sometimes inflate ransom figures to generate headlines or amplify pressure.
Dark web marketplaces are known for the sale of stolen or leaked state-linked material, though verifying authenticity remains a persistent challenge. Security agencies in Pakistan are expected to investigate whether the leaked documents connect to ongoing cases of infiltration and sabotage attributed to foreign intelligence operations in Khyber Pakhtunkhwa.
Broader Context
The timing of the alleged leaks comes amid renewed concerns in Pakistan about cross-border militancy and accusations of Indian involvement in destabilizing activities. Over recent years, Islamabad has repeatedly accused RAW of sponsoring terrorism in Balochistan and Khyber Pakhtunkhwa, claims India has routinely denied.
The mention of a mainstream political figure in connection with RAW, even if unverified, is likely to provoke significant political debate in Pakistan. Allegations of political facilitation of militant activity could deepen existing polarisation and add fuel to ongoing narratives about external interference in domestic politics.
What Happens Next
At present, the documents have not been independently authenticated by cybersecurity experts or law enforcement agencies. However, the claim is expected to attract the attention of Pakistan’s security institutions, given the sensitive combination of foreign intelligence, domestic politics, and militant facilitation alleged in the material.
The episode underscores the growing role of the dark web as a marketplace for sensitive data and the risks posed to states navigating a volatile mix of cyber warfare, intelligence leaks, and regional rivalries.

ALSO SEE
At PTI Rally, KP CM Gandapur Says ‘No Support for Military Ops’ as Militancy Rises
At PTI rally in Peshawar, CM Gandapur rules out support for operations in KP; security experts warn appeasement risks deepening terror threat.