The Indian Cybercrime Coordination Centre has directed Microsoft’s GitHub to remove the messaging app Bitchat. Officials cite that the app's offline, Bluetooth-based design allows for anonymous communication that bypasses law enforcement monitoring. This decision follows investigations into the use of similar decentralized tools during public protests where internet access was restricted.
Detailed Coverage
The Indian Cybercrime Coordination Centre (I4C), operating under the Ministry of Home Affairs, has issued a formal directive to Microsoft-owned GitHub to remove the messaging application Bitchat from its platform. The order, issued on July 23, 2026, stems from concerns that the application’s design poses a material risk to national security and complicates law enforcement efforts.
Security and Law Enforcement Concerns
Bitchat functions through a decentralized, peer-to-peer architecture that enables users to communicate via Bluetooth mesh networks without requiring a traditional internet connection or mobile network. Because the application does not mandate user registration or phone number verification, it provides a high level of anonymity. Security agencies have flagged this as a significant challenge for investigation, as the lack of a centralized service provider means there are no communication logs or subscriber records that authorities can access through standard legal processes.
The I4C’s notice highlights that this lack of oversight could allow anti-national elements, criminal organizations, and those involved in illegal activities to coordinate without being detected by law enforcement, particularly during periods of internet shutdowns or localized network restrictions.
Regulatory Context and Legal Basis
The government's intervention follows observations made during public demonstrations, including events in New Delhi, where participants were identified using similar offline messaging tools while internet services were temporarily suspended. Authorities are concerned that such decentralized platforms are being leveraged to coordinate unlawful assemblies and spread information that could challenge public order.
The directive issued to GitHub references potential violations of the Information Technology Act, including provisions related to unauthorized access and the facilitation of activities that may prejudice India's sovereignty and security. By compelling the removal of the app from a major developer platform like GitHub, the government is attempting to limit the distribution and accessibility of software that allows users to bypass traditional communication networks.
For users and developers, this move highlights the growing regulatory focus on decentralized communication technologies. The primary monitorable for the industry will be whether this directive leads to a wider crackdown on similar peer-to-peer or Bluetooth-based messaging applications that lack identity verification and centralized data storage, and how global platforms like GitHub respond to these specific compliance requirements under Indian law.