Peaceful protest is a legitimate feature of every functioning democracy. It becomes a strategic and security concern the moment it crosses from articulating grievance into orchestrated disorder. That crossing is rarely accidental. It follows a discernible anatomy, one that students of conflict and irregular mobilisation have traced across continents for several decades, and one that Indian security planners can no longer afford to treat as a purely law-and-order matter.
Every genuine agitation begins with an authentic grievance. Students denied a fair examination, farmers facing an unfamiliar law, or citizens denied a hearing all have legitimate cause. The anatomy of escalation begins after that point. A grievance is amplified across digital platforms at a velocity disproportionate to its organic reach. Leadership consolidates around figures or fronts whose funding is opaque, and a trigger event, often a police action, converts a peaceful sit-in into a confrontation. Violence, once introduced, becomes a bargaining tool rather than an accident, since it forces the state into a binary choice between capitulation and repression, both of which serve the escalatory design. Political high-handedness and the absence of dialogue lead to its exploitation by vested interests with a totally different agenda.
It is also important to distinguish between three situations that are too often placed under the single label of “external involvement.” The first is an organic protest, in which the grievance, leadership and mobilisation remain rooted in the affected community. The second is a genuine movement that is subsequently amplified from outside, through funding, digital messaging or organisational support, without necessarily changing the substance of its original demand. The third is a captured movement, in which outside or vested interests gradually redirect an authentic grievance towards objectives that have little to do with the cause that brought people onto the streets in the first place. These are not interchangeable phenomena. An organic protest is part of democratic dissent. External amplification deserves scrutiny. A movement that is progressively captured and redirected can become a matter of national security. aThe difficulty for the state lies in telling them apart without either criminalising legitimate dissent or overlooking genuine attempts at exploitation.
The hidden hand, when it exists, does not create a grievance. It captures one. Three markers distinguish an organic movement from a captured one. The first is logistical infrastructure, legal counsel, medical camps, and sustained supply lines, appearing before a movement has demonstrated the scale to justify such support. The second is coordinated narrative seeding across multiple platforms simultaneously, well beyond what a loosely organised group could produce on its own. The third, and most sensitive, is tracing funding or leadership threads to jurisdictions with a documented interest in destabilising Indian institutions. None of these markers alone is proof. Together, and examined through due process rather than at a press conference, they constitute the profile investigators look for.
India has direct precedent for this pattern. During the passage of the farm laws, allegations surfaced that funding for sections of the protest had originated from organisations linked to Khalistani networks operating abroad. The Enforcement Directorate had earlier flagged concerns that foreign contributions were reaching political formations through the repeated use of common passports, cards and contact details for donations routed from overseas. Whatever the eventual judicial outcome of those specific cases, they established a template. A genuine domestic grievance can coexist with an overlay of external financing whose purpose is strategic rather than charitable.
The student agitation that gathered force through the summer of 2026 illustrates the pattern in its earliest phase. The trigger was concrete and defensible. A leak in the NEET undergraduate medical entrance examination, compounded by irregularities in the Central Board of Secondary Education’s on-screen marking and revaluation process, left millions of students and their families without confidence in the system’s fairness. Protests under the banner of the Cockroach Janta Party, a movement that began in May 2026 as social media satire directed at a remark by the Chief Justice of India, gathered at Jantar Mantar from early June and grew rapidly once activist Sonam Wangchuk began an indefinite hunger strike on 28 June. The demand, the resignation of the Union Education Minister over examination integrity, was narrow, specific and entirely legitimate on its own terms. The students’ grievance is genuine, and the anger of a generation of aspirants who found the one examination that decides their future compromised, some by a leaked paper and others by a flawed revaluation process, is fully justified. No analysis of external exploitation should be read as a comment on the merit of that underlying cause.
The escalation followed a familiar sequence. A march to Parliament on 20 July produced attacks on journalists, damage to public and private property, injuries to police personnel and an attempt to breach parliamentary security. Police resorted to lathi charges and tear gas against protesting students, after mobs at some locations pelted stones at the vehicles. A movement that had begun as a demand for examination reform had acquired the character of a direct political confrontation with the national government. The arson, stone pelting and physical assaults carried out by sections of the crowd, and the injuries inflicted on police personnel and journalists in the course of duty, are deplorable and cannot be justified by any grievance, however legitimate that grievance may be. A just cause does not sanctify an unjust method, and the students who protested peacefully should not be conflated with those who turned specific incidents violent.
It is at this point that the foreign footprint question has been formally raised, and it deserves to be stated with precision rather than assumption. A petition before the Delhi High Court alleges that the protest forms part of a wider conspiracy involving foreign-funded organisations and political elements, and seeks transfer of the related cases to the National Investigation Agency along with a probe into external links. A separate petition before the Allahabad High Court has sought a multi-agency investigation and the extradition of the movement’s founder, who had been based in the United States before returning to India to launch the first physical demonstration at Jantar Mantar. These are allegations under judicial consideration. They are not, at this stage, adjudicated fact, and the movement’s spokespersons have rejected the characterisation as politically motivated.
The suspicion of external involvement has been further sharpened by the conduct of a foreign mission in the days immediately preceding the violence. On 17 July 2026, three days before the march on Parliament, the United States Embassy in New Delhi issued a Demonstration Alert naming Jantar Mantar, Parliament House and Kisan Ghat as the precise locations of anticipated large-scale gatherings on 20 and 21 July, at a stage when Delhi Police had not yet ruled on permission for the procession and before the eventual scale of the mobilisation had become publicly apparent. The granularity of dates and locations named so far in advance of an unpermitted demonstration has led Indian commentators and analysts to question how a foreign mission possessed such specific foreknowledge. The episode raises a legitimate counter-intelligence question: what information was available to the mission, from what sources, and through what routine or non-routine channels? That question can be answered only through evidence, not inference. The Embassy has described the alert as a routine consular communication issued for any large gathering, and points to an identically structured advisory issued for the farmer mobilisation at the same location in 2021 as precedent. That precedent tempers the inference but does not eliminate it, since routine practice and precise foreknowledge of an unconfirmed event are not mutually exclusive, and the coincidence of timing warrants formal inquiry rather than dismissal on either side.
Taken together, the funding trail alleged in the farm law episode, the founder’s foreign residence and return, the two High Court petitions alleging external conspiracy, and the precisely timed foreign advisory form a cumulative pattern that India’s security establishment cannot dismiss as coincidence and must not treat as proof. Each element, in isolation, admits an innocent explanation. Their convergence around a single agitation, within a compressed window of weeks, is sufficiently unusual to warrant investigation into whether the movement is being externally amplified or exploited. It is a pattern that security professionals should examine, not a conclusion they should announce in advance. The proper response is neither public alarm nor public dismissal, but a formal, evidence-driven investigation that follows the money, the timing and the coordination wherever they lead.
What can be said with confidence, independent of where that investigation leads, is the shape of the vulnerability itself. A genuine examination grievance, shared by lakhs of aspirants across every state, is precisely the kind of authentic wound that any external actor seeking to destabilise India would prefer to exploit rather than manufacture. Manufactured grievances are detectable and dismissible. Captured grievances are not, because the underlying anger is real even when part of the amplification and financing behind it is not. This is the essential difficulty security planners must reckon with. Delegitimising the entire agitation, or the students who animate it, because of foreign hand allegations still under investigation would be as strategically unwise as ignoring the mounting circumstantial pattern because the underlying grievance is genuine.
The comparative record from Hong Kong in 2019, Sri Lanka in 2022, Bangladesh in 2024, and Nepal shows a common thread, though these cases are politically, historically and structurally very different. In each case, a specific, resolvable grievance was overtaken within weeks by demands for the wholesale removal of the government. Across these cases, external actors, transnational networks and competing geopolitical interests sought, to varying degrees, to shape narratives or exploit political instability once mass mobilisation had acquired momentum. India’s institutions retain considerably greater resilience than any of those four states possessed at the relevant time. That resilience should not be mistaken for immunity.
Three responses follow from this anatomy. First, the state must resolve the underlying grievance over examination integrity with visible speed and transparency, since a credible remedy is the most effective solvent of any external attempt to prolong the agitation. Second, investigations into funding, foreign advisories, and leadership linkages must proceed through the National Investigation Agency and the courts, insulated from partisan framing, so that findings carry evidentiary rather than rhetorical weight. Third, India needs a standing capability to map digital amplification patterns in real time during any large-scale agitation, distinguishing organic virality from coordinated seeding before a movement reaches critical mass.
The anatomy of protest is therefore not a call to suspect every protester of foreign allegiance. The real challenge is to build the forensic and institutional capacity to distinguish a citizen’s legitimate anger from a strategic actor’s convenient use of it, and to make that distinction on evidence rather than assertion. That distinction, more than any single arrest or extradition order, will determine whether India’s democratic space remains resilient or, one agitation at a time, becomes an arena contested by hands other than its own.
ABOUT THE AUTHOR
Lieutenant General A B Shivane, is the former Strike Corps Commander and Director General of Mechanised Forces. As a scholar warrior, he has authored over 200 publications on national security and matters defence, besides four books and is an internationally renowned keynote speaker. The General was a Consultant to the Ministry of Defence (Ordnance Factory Board) post-superannuation. He was the Distinguished Fellow and held COAS Chair of Excellence at the Centre for Land Warfare Studies 2021 2022. He is also the Senior Advisor Board Member to several organisations and Think Tanks.
