Delhi School Bomb Threat: Only one and a half months into 2026, and several Delhi schools have received hoax bomb threats, building on several other incidents in the previous year. However, the Delhi police have not been able to crack the case as a technical probe led police to a virtual private network (VPN) based in Bangladesh, Singapore, and other countries. The VPN address used to send the bomb hoaxes to South Delhi schools earlier this month was traced to Bangladesh. Days later, similar threats were received by schools in northwest Delhi, where a US-based VPN was used, while several months ago, hoax threats were reported in West Delhi involving Singapore based VPN.
While police were busy writing to these networks to trace the users, several other hoax threats followed. The question remains, why do police appear helpless in the face of the menace and have not been able to solve the cases?
ALSO READ: Epstein Survivor Rina Oh Reveals Abuse Ordeal, Alleges Trump's Knowledge
The police swiftly responded to hoax emails with the deployment of sniff dogs, evacuation of students from the campus and blaring emergency alarms, but on the technical front, the response remained demoralising as Delhi cyber police could reach nowhere with every new hoax mail.
Why Perpetrators Aren’t Caught
The perpetrators behind these hoax threats continue to remain digital ghosts, not because of the lack of sources, but due to technical disadvantages that the cyber cell can't overcome. Technical hurdles such as the ironclad privacy of Swiss servers, geopolitical opacity of foreign domains and multi-layered shields of VPNs are the major challenges for the police. When police try to locate the origin of the threats, they are not taken to any address in Delhi but servers that operate under the jurisdictions like Panama or the Seychelles.
Using VPN, offenders have ensured that when police trace them, they are led to fake IP addresses.
What Investigators Are Saying
"The hoaxers hide their actual location in Delhi or elsewhere behind a series of encrypted ‘tunnels'. The IP address that police see may belong to a server in Austria, Singapore or Netherlands. To us, it is like chasing a shadow in a room full of mirrors; every time we think we have a lead, the trail bounces to another country," Times of India, quoted a cyber cell investigator as saying.
To get the real IP address of perpetrators policd must get logs from VPN providers. The majority of VPN providers operate on a no-log policy, meaning that providers do not save the information of users. It means there is actually no data that can be given to the Delhi cops to probe the case, resulting in no real information present in the physical world.