Mumbai man held with 20,000+ CSEAM files in Maharashtra Cyber crackdown
Synopsis
Maharashtra Cyber's surveillance units tracked digital activity to a 49-year-old Mumbai resident allegedly hoarding over 20,000 CSEAM files on his mobile device — one of the largest single-device hauls in recent state cyber enforcement. With forensic analysis now underway to trace origins and potential distribution networks, the case could widen significantly.
Key Takeaways
Maharashtra Cyber arrested Saifuddin Zamir Uddin Malik , 49 , from Malad (West), Mumbai on 7 November .
More than 20,000 CSEAM images and videos were allegedly recovered from his mobile device.
88/2026 was filed under Section 294 BNS , Section 15 POCSO Act 2012 , and Section 67(B) IT Act 2000 .
Three specialised units — CCPWC , OCWC , and TRACE — conducted the digital surveillance that led to the arrest.
Forensic examination is ongoing to determine origin, download method, and whether material was shared or circulated.
Maharashtra Cyber has handled 5.67 lakh cyber tipline reports and 31,000 online child exploitation complaints to date.
Maharashtra Cyber has arrested a 49-year-old Mumbai resident for allegedly possessing more than 20,000 images and videos of Child Sexual Exploitation and Abuse Material (CSEAM), in what officials have described as a significant strike against online child sexual exploitation. The accused, Saifuddin Zamir Uddin Malik, a resident of Malad (West), Mumbai, was taken into custody on 7 November following a targeted cyber intelligence operation.
How the Arrest Unfolded
The operation was driven by continuous digital surveillance conducted by three specialised units of Maharashtra Cyber — the CCPWC, OCWC, and TRACE divisions. According to a press release issued by the office of the Additional Director General of Police, Maharashtra Cyber, these units received intelligence about an individual allegedly downloading and storing CSEAM on a personal device.
Investigators deployed technical analysis and cyber intelligence tools to trace the activity back to Malik, establishing his identity before proceeding with the arrest from his residence in Malad.
Charges Filed
Following the arrest, FIR No. 88/2026 was registered at the nodal cyber police station of Maharashtra Cyber. The charges were filed under Section 294 of the Bharatiya Nyaya Sanhita (BNS), Section 15 of the Protection of Children from Sexual Offences (POCSO) Act, 2012, and Section 67(B) of the Information Technology Act, 2000. The combination of statutes reflects the multi-layered legal framework India deploys against child exploitation offences.
Scale of the Alleged Cache
More than 20,000 objectionable images and videos were allegedly recovered from Malik's mobile device during the investigation. Authorities are now conducting a detailed forensic examination to determine the origin of the material, the methods used to download it, and whether it was further shared or circulated across any online platform. This last point — potential distribution — could significantly affect the severity of charges that follow.
Maharashtra Cyber's Broader Record
This arrest is part of a sustained enforcement push. According to Maharashtra Cyber, it has so far acted on 5.67 lakh cyber tipline reports and 31,000 online child exploitation complaints — figures that underscore the scale of the problem as well as the unit's operational reach. Notably, this case reflects a growing pattern of CSEAM arrests driven by digital intelligence rather than conventional tip-offs, signalling a shift in how Indian cyber units are proactively identifying offenders.
How to Report Child Exploitation Online
Maharashtra Cyber has reiterated that downloading, possessing, storing, sharing, or circulating CSEAM constitutes a serious criminal offence under Indian law. Citizens can report suspicious activity involving child exploitation through the National Cyber Crime Reporting Portal at www.cybercrime.gov.in or by calling the cybercrime helpline 1930.
Forensic findings from Malik's device are expected to determine whether the investigation expands to include additional accused or online networks.
Point of View
000 files on a single personal device — points to a systemic consumption problem that arrests alone cannot solve. Maharashtra Cyber's use of proactive digital intelligence rather than reactive complaint-based policing is a meaningful shift, but the unit's own data — 31,000 child exploitation complaints acted upon — suggests demand for CSEAM in India is far broader than individual arrests can address. The forensic phase of this case matters most: if investigators establish distribution links, it could expose a network rather than an isolated offender. India's legal framework under POCSO and the IT Act is robust on paper; consistent enforcement at scale remains the gap.
NationPress
7 Nov 2026
Frequently Asked Questions
Who was arrested by Maharashtra Cyber in the Mumbai CSEAM case?
The arrested individual is Saifuddin Zamir Uddin Malik, a 49-year-old resident of Malad (West), Mumbai. He was taken into custody on 7 November after a cyber intelligence operation tracked alleged CSEAM downloading activity to his mobile device.
What charges have been filed against the accused?
FIR No. 88/2026 has been registered under Section 294 of the Bharatiya Nyaya Sanhita (BNS), Section 15 of the POCSO Act 2012, and Section 67(B) of the Information Technology Act 2000. These provisions collectively cover possession, storage, and transmission of child sexual abuse material.
How did Maharashtra Cyber track down the accused?
Three specialised units — CCPWC, OCWC, and TRACE — conducted continuous surveillance of the digital space. They received intelligence about an individual allegedly downloading CSEAM, then used technical analysis and cyber intelligence tools to trace and identify Malik before making the arrest.
What happens next in the investigation?
Authorities are conducting a detailed forensic examination of Malik's mobile device to establish the origin of the material, the method of download, and whether it was shared or circulated on any online platform. The findings could lead to additional charges or the identification of further accused.
How can citizens report online child exploitation in India?
Suspicious activity involving child exploitation can be reported through the National Cyber Crime Reporting Portal at www.cybercrime.gov.in or by calling the cybercrime helpline 1930. Maharashtra Cyber has urged citizens to report any such activity promptly.
