A 49-year-old Mumbai resident has been arrested by Maharashtra Cyber after investigators reportedly recovered more than 20,000 photographs and videos containing Child Sexual Exploitation and Abuse Material (CSEAM) from his mobile phone. Authorities are conducting a detailed forensic examination to trace the origin of the material and determine whether it was shared online.
Intelligence-Led Cyber Investigation Leads to Arrest
Maharashtra Cyber Police have arrested a 49-year-old man from Malad (West), Mumbai, following an investigation into the alleged downloading and storage of child sexual exploitation and abuse material on electronic devices.
The accused has been identified as Saifuddin Zamir Uddin Malik. According to reports, the investigation began after specialised units of Maharashtra Cyber received intelligence regarding suspicious online activity involving the alleged downloading and storage of CSEAM.
Investigators subsequently used cyber intelligence tools and technical analysis to identify the individual and trace the suspected activity. Following preliminary enquiries, the police registered a case and arrested him from Malad (West).
More Than 20,000 Digital Files Recovered
During the examination of the accused's mobile phone, investigators reportedly recovered more than 20,000 photographs and videos containing material related to the sexual exploitation and abuse of children.
The recovery has prompted a detailed digital forensic investigation to establish the origin of the files, the manner in which they were downloaded and whether they were subsequently shared or circulated through online platforms.
Investigators are also examining the digital trail to determine whether other individuals may have been involved in the alleged activity.
FIR Registered Under BNS, POCSO and IT Act
According to reports, Maharashtra Cyber registered FIR No. 88/2026 at its nodal cyber police station under the following provisions:
-
Section 294, Bharatiya Nyaya Sanhita (BNS), 2023
-
Section 15, Protection of Children from Sexual Offences (POCSO) Act, 2012
-
Section 67(B), Information Technology Act, 2000
The accused was arrested following the investigation, and further examination of the seized digital material is underway.
Digital Forensic Examination Underway
A significant part of the investigation now concerns the forensic examination of the seized mobile device.
Investigators are attempting to establish:
-
The original sources from which the material was downloaded.
-
The timeline of downloads and storage on the device.
-
Whether the files were transmitted or shared with other individuals.
-
Whether additional digital accounts, devices or online platforms were involved.
-
Whether other individuals participated in the alleged activity.
The examination of digital artefacts, file metadata, device activity and relevant network records may help investigators reconstruct the suspected activity and establish the digital trail.
Maharashtra Cyber Strengthens Online Child Protection Monitoring
Maharashtra Cyber has been monitoring online platforms through specialised units, including CCPWC, OCWC and TRACE, to identify suspected online child exploitation activities.
According to the agency, it has acted on more than 5.67 lakh cyber tipline reports and approximately 31,000 online child exploitation complaints. The department has also urged citizens to report suspected online child exploitation through the National Cyber Crime Reporting Portal or the cybercrime helpline at 1930.
Forensic Perspective: The Importance of Digital Evidence in Child Protection Investigations
This case highlights the growing role of digital forensics in investigating online child exploitation.
Unlike conventional crime scenes, cybercrime investigations frequently involve electronic devices, online accounts, cloud-based platforms and digital communication records. Establishing the origin, authenticity and movement of digital files can therefore become central to the investigation.
Forensic examination of seized devices can help reconstruct user activity, identify relevant digital artefacts and establish timelines. Maintaining proper evidence preservation, forensic imaging, cryptographic hash verification and documented chain of custody is essential to ensure that digital evidence remains reliable and admissible during judicial proceedings.
The investigation also demonstrates the importance of coordinated cyber intelligence, technical surveillance and forensic examination in identifying suspected online child exploitation activities.
The investigation remains ongoing, and the allegations against the arrested individual will be subject to judicial determination.