Pakistan's Inter-Services Intelligence (ISI) has intensified its espionage operations inside India following Operation Sindoor, deploying a multi-tiered spy network that recruits youth for as little as ₹500 to monitor sensitive military movements, according to intelligence officials. The low-cost operatives, largely invisible to conventional surveillance, have emerged as a strategic concern for Indian security agencies in the weeks since the operation was carried out to avenge the Pahalgam attack.

The ₹500 Operative: Who They Are and What They Do

At the base of the ISI's layered espionage structure sits a network of young, largely unemployed individuals paid between ₹500 and ₹1,000 per assignment. According to an Intelligence Bureau official, these recruits are identified at railway stations — often youths who loiter without purpose — and tasked with monitoring the movement of Indian Army troops and military logistics.

The Indian Army relies heavily on the railway network for troop mobilisation, operating dedicated Military Special Trains to move personnel, tanks, artillery, and heavy logistics across the country during both peacetime and conflict. A recruit's job is straightforward: note the timings, direction, and destination of such trains and relay that information to a handler. No specialised training is required.

Notably, these operatives use cheap mobile phones with no GPS or recording capabilities, making them extremely difficult to track. Once an assignment is complete, SIM cards are discarded and replaced, severing any digital trail. Officials say this combination of low cost, minimal training, and disposable communication tools makes the network exceptionally hard to detect and dismantle.

How the Network Expands — and Why It Is Hard to Crack

The recruitment model is deliberately decentralised, according to officials. Handlers inside India are instructed to identify only a small number of initial recruits. Those recruits then draw in additional operatives from their own social circles, creating an organic, self-replicating chain. For the young men involved, officials say, the motivation is purely financial — the modest payments are sufficient to secure compliance.

This peer-referral structure limits exposure at every node. No single operative knows more than a fragment of the broader network, making it resilient against targeted arrests. The ISI's investment, officials note, is negligible: recruitment costs are minimal and training is virtually non-existent.

Higher Tiers: CCTV Installations and White-Collar Agents

The ₹500 layer is only the foundation. Indian agencies have also busted a network that installs solar-powered CCTV cameras at sensitive locations. Operatives in this tier are paid between ₹10,000 and ₹15,000 per installation, according to officials.

At the top of the hierarchy sits a white-collar network whose members are reportedly paid between ₹50,000 and ₹75,000. These agents are tasked with gathering high-value intelligence on India's defence, science, and technology sectors. This tier is also reportedly used to run honey-trap operations targeting sensitive personnel.

The ISI's Motive After Operation Sindoor

Officials say the ISI is attempting to rebuild its intelligence picture of India after what they describe as an embarrassment inflicted by Operation Sindoor, which dealt a significant blow to Pakistan's terror infrastructure. The spy agency is reportedly desperate to gather actionable intelligence that could be used to plan strikes on Indian military installations and strategic locations, according to officials.

Indian agencies have already dismantled several such networks, including a CCTV spying operation and a network of social media influencers. Security officials warn, however, that the low-cost, high-volume grassroots tier remains the most difficult to fully neutralise — and potentially the most consequential given its reach.