in the Nashik Rape Case
How mobile cloning, alias contact detection, and multi-layered digital evidence recovery are reshaping the SIT's investigation into accused astrologer Ashok Kharat — and what it signals for forensic science in India.
- Advanced mobile cloning technique used to preserve and analyse a forensic copy of the accused's phone
- Analysis to be conducted in the accused's presence — a key procedural safeguard for evidentiary integrity
- Suspected alias identities used for contacts — indicating deliberate obfuscation of a criminal network
- Parallel cyber forensic + financial forensic tracks running simultaneously under SIT supervision
- Growing reliance on behavioral profiling correlated with digital trace evidence in Indian courts
On March 18, 2026, Ashok Kharat — a 67-year-old self-styled astrologer, numerologist, and former Merchant Navy officer who called himself "Captain" — was arrested by Nashik Crime Branch Unit 1 in what has rapidly become one of Maharashtra's most significant criminal investigations of 2026. [The Federal]
The case began with a complaint about a single rape allegation, but investigators quickly confirmed that digital evidence suggested possible patterns of exploitation and unauthorised recordings. What unfolded next was a sprawling forensic investigation spanning mobile devices, pen drives, CCTV recordings, financial records, and properties worth an estimated ₹1,500 crore.
According to police, Kharat gained the trust of a 35-year-old married woman by demonstrating 'Tantric' rituals, claiming divine powers, and administering intoxicating substances mixed into her food and water. Between November 2022 and December 2025, he allegedly raped her on multiple occasions. [Punjab Kesari]
Since his arrest, the case has expanded dramatically. Nashik police registered two more FIRs — one for cheating and another for sexual assault — taking the total number of cases against the self-styled astrologer to 10. Eight of the 10 cases involve allegations of rape and sexual exploitation of women, while the remaining two relate to cheating and extortion targeting businessmen. [NewsX]
The physical and digital evidence trail in this case is extraordinary in scope. From Kharat's Canada Corner office and Mirgaon farmhouse, investigators have recovered a wide array of digital devices and storage media. Forensic teams from the SIT are now working through layers of data that paint a detailed picture of alleged criminal operations.
A pen drive containing 100+ obscene video clips — initially reported as 58 — has been sent for forensic analysis.
Two laptops and a Digital Video Recorder (DVR) from his office were seized for data extraction.
Multiple mobile phones recovered and sent for cyber forensic analysis — now at the centre of the remand extension request.
Hidden camera footage planted by a whistleblower-employee showing alleged exploitation inside Kharat's office chamber.
A revolver, 21 live cartridges, and 5 empty shells recovered — 5 missing bullets raise serious questions under forensic examination.
A diary, files, and property documents seized — under scrutiny by Income Tax and SIT for financial forensics.
Maharashtra Chief Minister Devendra Fadnavis confirmed that Kharat's mobile phones have been sent for cyber forensic analysis, and authorities have issued a lookout notice to prevent him from fleeing abroad. Assets worth around Rs 40 crore linked to Kharat have been identified, including 33 acres of land, a farmhouse, plots, a flat in Pune, land in Panvel, and a marriage hall in Sinnar. [National Herald India]
The single most forensically significant development in the Kharat investigation is the cloning of his seized mobile phone for detailed digital analysis. Investigators have requested extended police custody specifically because recovering Kharat's mobile data and tracking his movable assets is still pending, with work underway to gather information from the forensic team, after which a face-to-face interrogation based on those details will be required. [Deccan Chronicle]
Mobile cloning in the forensic context does not refer to SIM cloning (a criminal act) — it refers to creating a bit-for-bit forensic image of the device's entire storage using tools such as Cellebrite UFED, Oxygen Forensic Detective, or MSAB XRY. This image is a perfect duplicate of the original that allows investigators to:
- Recover deleted data — including deleted contacts, messages, call logs, and multimedia files that may have been deliberately erased
- Preserve hash-verified evidence — the forensic clone carries a unique MD5/SHA-256 hash ensuring the copy is identical to the original, maintaining chain of custody
- Non-destructive examination — analysts work on the clone, never touching the original device, which remains intact as primary evidence for court
- Metadata extraction — GPS coordinates, timestamps, device logs, and app usage patterns embedded in files can reveal crucial details
- Cross-referencing — data from the phone can be correlated against seized laptops, DVR footage, and financial records
A notable procedural detail in this case is that the forensic analysis is reportedly planned to be conducted in the presence of the accused. Under Indian evidentiary law, having the accused present during forensic analysis of seized devices:
(1) Reduces the risk of tampering allegations during trial; (2) Allows the accused to identify or dispute contacts in real time, which is especially critical when alias identities are suspected; (3) Ensures procedural fairness as required under the CrPC, strengthening the admissibility of digital evidence under Section 65B of the Indian Evidence Act.
Perhaps the most forensically revealing angle of the mobile phone investigation is the suspected use of alias identities in Kharat's contact list. This is not uncommon in organised criminal networks and points to a deliberate strategy of obfuscation.
The SIT is probing whether Kharat had saved the names of his contacts under false identities. Other digital evidence related to the allegations are also being probed. [The Week]
In the context of this case, the alleged alias identity strategy carries several dimensions of forensic significance:
| Forensic Dimension | Significance | Priority |
|---|---|---|
| Contact Alias Detection Identifying real persons behind coded/alias names in phonebook |
Reveals network of associates, victims, and political contacts deliberately hidden | Critical |
| Communication Pattern Analysis Call logs, SMS, WhatsApp metadata |
Establishes timelines and frequency of contact with specific individuals before and after alleged offences | High |
| Deleted Message Recovery Encrypted app data, deleted WhatsApp/Telegram chats |
May reveal coercion, blackmail threats, and coordination with co-accused | High |
| Financial App Analysis UPI, banking apps, hawala transaction traces |
Corroborates extortion allegations and maps hawala network suspected by SIT | Medium-High |
| Cloud Backup Recovery Google Drive, iCloud or local encrypted backups |
Kharat may have backed up critical data to cloud accounts not accessible from the physical device alone | Medium |
The alias contact strategy is particularly concerning given that Kharat allegedly cultivated relationships with politicians, bureaucrats, and celebrities — leveraging religious faith, alleged mystical abilities, and occult practices to build influence. [India TV News] Forensic reconstruction of real identities behind alias names thus becomes central to establishing the full scope of the criminal network.
The Maharashtra government constituted a Special Investigation Team (SIT) on March 19, 2026 — one day after the arrest. Led by IPS officer Tejaswini Satpute, the SIT operates across several simultaneous forensic tracks:
Crime Branch Unit 1 arrests Kharat. Pen drive with 58+ videos seized. Mobile phones, laptops, DVR recovered.
Maharashtra government hands investigation to SIT led by IPS Tejaswini Satpute. Digital forensics and financial forensics teams engaged.
SIT reveals Rs 1,500 crore in linked assets and 100+ obscene videos. Income Tax Department roped in.
Custody extended to March 29. Prosecution reveals 5 missing pistol cartridges. More time sought for mobile forensic data extraction.
Court extends remand. SIT confirms probe into alias contacts in phone. 10 FIRs registered, 100+ complaints received.
Further remand hearing. Forensic team expected to present initial findings from mobile phone clone analysis to the SIT.
The probe team comprises five to ten officers from the crime branch, including women personnel to handle victims' sensitive statements. Maharashtra's Director General of Police and the state government are monitoring the investigation to ensure accountability and swift progress. [The Federal]
One of the most notable forensic aspects of the Kharat case is the explicit integration of behavioral evidence with digital forensics — a growing methodology in complex Indian criminal investigations.
Investigators allege that Kharat used psychological techniques such as "hot and cold reading" to manipulate victims. He reportedly posed as a siddha purush and claimed to solve personal and marital issues through rituals, and is also accused of threatening victims, warning them of harm to their families if they disobeyed his demands. [Odisha Connect]
This behavioral pattern — the use of fear, spiritual authority, and psychological coercion — directly informs how digital evidence is being interpreted. For example:
- Call log analysis: Investigators are cross-referencing when Kharat called victims with victim statements about when they were summoned to his office
- Video metadata: Timestamps from obscene videos are being matched against victim accounts of when assaults allegedly occurred
- Sedative purchase records + digital payments: Behavioral claims about substance administration are being correlated with financial forensics
- Victim identification from videos: Forensic verification is being conducted to identify individuals in videos and determine if materials were used to exert coercion
- Alias contact reconstruction: Behavioral analysis of Kharat's modus operandi helps predict what types of contacts would have been hidden under aliases — guiding forensic priorities
This corroborative approach — where behavioral patterns generated from victim testimony guide digital forensic search parameters — represents a maturing of Indian investigative methodology, increasingly aligned with global best practices in complex exploitation cases.
1. Digital Evidence as the Backbone of Multi-Victim Cases: With 10+ FIRs, 100+ phone complaints, and allegations spanning three years, traditional physical evidence would be insufficient to build a coherent narrative. The digital evidence — videos with timestamps, call logs, payment records — provides the connective tissue between individual victim accounts.
2. The Evidentiary Value of Whistleblower-Planted Surveillance: A former employee surfaced with damning evidence, claiming he had secretly installed a CCTV camera in Kharat's office after becoming suspicious of the treatment his own pregnant wife received during a "blessing" ritual — the resulting footage has been handed over to police. The admissibility and forensic handling of such evidence raises important questions for legal-forensic practitioners. [Grow Just India]
3. Social Media Evidence and Victim Privacy: Maharashtra Police have swung into action to stop the spread of videos and images, urging people to delete such content immediately, with strict action warned against anyone sharing photos, videos, or identifying details of the women who were abused. [The Week] This highlights the emerging challenge of protecting victim digital privacy in the social media era.
4. Section 65B Certification and Chain of Custody: For the forensic evidence in this case to be admissible in court, it must comply with Section 65B of the Indian Evidence Act — requiring proper certification of electronic records. The SIT's disciplined approach of cloning phones and conducting analysis in the accused's presence suggests awareness of these legal requirements.
5. Multi-Agency Forensic Coordination: While the Income Tax department is investigating financial irregularities, the cyber police are examining the videos — a model of parallel forensic tracks that maximises investigative efficiency. [India TV News]
The digital forensic investigation into the Ashok Kharat case represents a textbook deployment of modern mobile forensics in a complex sexual exploitation case in India. The decision to clone the accused's phone, conduct analysis in his presence, and systematically probe alias contacts reflects a growing sophistication in how Indian investigative agencies handle digital evidence in high-profile matters.
For budding forensic experts, this case underscores a vital truth: in the 21st century, the perpetrator's phone is often the most truthful witness in the courtroom — but only if it is handled with the procedural precision and scientific integrity that digital forensics demands.
As the SIT awaits forensic reports from the cyber lab and prepares for its next court appearance on April 1, 2026, the Nashik case will continue to offer crucial real-world lessons in the intersection of digital forensics, behavioral evidence, and the pursuit of justice for sexual violence survivors.
- 01
- 02
- 03National Herald IndiaFadnavis Confirms Mobile Phones Sent for Cyber Forensic Analysis
- 04
- 05
- 06
- 07
- 08
- 09
- 10
- 11
- 12
- 13
- 14
- 15
