A classified document allegedly exposing India’s Research and Analysis Wing (RAW) as the mastermind behind a false flag operation in Pahalgam has surfaced on social media, raising serious concerns over the credibility of New Delhi's narrative around the recent attack.

According to security sources, the document, leaked via the encrypted messaging platform Telegram, provides compelling evidence of the Indian government’s involvement in orchestrating the Pahalgam incident. The revelations have brought into question the legitimacy of India's counter-terrorism claims and point to a deliberate attempt to malign Pakistan.

Sources said the document reveals detailed instructions, timelines, and inconsistencies that ultimately caused the false flag narrative to unravel. One directive, for instance, allegedly instructed Indian media outlets to blame Pakistan and the ISI 36 hours after the attack—a timeline that was reportedly botched when the media prematurely aired accusations, derailing the carefully planned narrative.

The document also suggests that RAW may itself be receiving covert instructions, hinting at internal divisions within the Indian intelligence community. The leak, security officials claim, may be the result of dissent from within RAW, particularly from those opposed to the Hindutva agenda.

Among the shocking revelations, the document reportedly includes the following:

RAW operatives were to activate media assets 36–48 hours before the attack near the target location.

The operation was timed to coincide with the diplomatic visit of U.S. Vice President JD Vance, aiming to evoke international sympathy and support.

The narrative was to depict the attack as targeting both the state and non-Muslim civilians, in order to broaden its global impact.

RAW planned to fabricate blurry videos, stage witness testimonies using AI, and use over 200 social media accounts to amplify disinformation.

A parallel media campaign would steer global discourse away from Kashmir and toward supposed wider "Islamic conspiracies."

Alleged ISI documents would be “forensically leaked” by Indian Northern Command to establish false links.

A backup system in Shopian was activated in case the plan was compromised.

RAW also anticipated a limited military escalation near the Line of Control (LoC), but was instructed not to exceed 1.2 kilometers to avoid inviting UN or Chinese mediation.

Furthermore, the leaked files mention potential BLA and BNA activity in Balochistan as part of broader regional destabilization efforts and propose operational time windows ranging from 3 to 48 hours following the Kashmir attack.

Indian authorities are reportedly probing the document leak, which security experts describe as a serious blow to the credibility of India’s intelligence operations. The explosive revelations, if authenticated, could significantly damage India’s global standing and deepen suspicions of state-sponsored disinformation campaigns.

A fresh set of leaked documents attributed to India's Research and Analysis Wing (RAW) has unveiled a meticulously planned alternative strategy in the event of the Pahalgam operation being exposed. According to security sources, the documents underscore a broader intelligence framework designed to manipulate regional narratives, incite tensions, and justify internal and cross-border actions.

The documents point to the activation of a backup system in Shopian, which was to be deployed immediately if the primary plan was compromised. Furthermore, RAW assessed that a rapid advance by Pakistani forces along the Line of Control (LoC) could challenge India’s control, specifically warning that a 1.3 km violation might prompt UN or Chinese mediation.

In response, Indian forces were instructed to limit their movements to 1.2 km, as outlined in the classified notes, to avoid triggering international arbitration. RAW also acknowledged the likelihood of neutral countries applying pressure in response to any such escalation.

One segment of the leaked document refers to the activation of code INDOPACOM, suggesting that a contingency corridor labeled “TANGO-ECHO” was to remain operational for maneuvering purposes. The blueprint also anticipates potential fallout in Balochistan, with a risk of divergence between banned groups BLA and BNA due to the manipulation of regional dynamics.

Other key takeaways from the leaked RAW dossier include:

Time windows between 3 to 48 hours post-attack were earmarked for possible retaliatory or diversionary actions.

BLA cells under codename T-48 were tasked with initiating operations in Sui and Quetta.

The killing of Hindus was to be kept limited to select unofficial platforms to control the narrative.

Undercover “Denters Squads” were to be deployed in the Anantnag and Kandarbal corridors.

Surveillance was to be intensified on China’s economic interests, especially CPEC and Gwadar, during early operational phases.

Final decisions would be based on R&AW strategic points, and if no hurdles arose by April 21, 2025, the final command would be transmitted through an analog channel.

Following the operation, all field operatives were instructed to adopt black status, indicating deep-cover or off-grid protocol.

Defense analysts, reacting to the revelations, have called the Pahalgam attack a premeditated and state-approved false flag operation. They assert that the leaked document clearly exposes India’s deep-seated hostility toward Kashmiris, and reveals a disturbing pattern of using innocent civilians for political objectives.

“This leak confirms that the Pahalgam incident, like previous attacks, was orchestrated under a false narrative,” said a senior defense expert. “The Modi government has consistently relied on such strategies to stoke nationalism and suppress dissent in Kashmir.”

As calls for an international investigation grow, the Indian government has yet to issue a formal response regarding the authenticity or implications of the leaked documents.