India orders GitHub to Block Decentralized Messaging App Bitchat over security concerns

The Indian Cyber Crime Coordination Centre (I4C), under the Ministry of Home Affairs (MHA), has directed GitHub to remove or disable access to repositories linked to the decentralized messaging application Bitchat. The order, issued on July 23, 2026, was made under Section 79(3)(b) of the Information Technology Act, 2000, read with Rule 3(1)(d) of the IT Rules, 2021, which empowers the government to require intermediaries to remove unlawful content.

The notice targets three GitHub repositories hosting the application's source code and Android releases. GitHub has been instructed to block access to the identified URLs within three hours of receiving the communication, failing which it may lose the legal protections available to intermediaries under Indian law.

According to the government, Bitchat is a decentralized communication platform that allows users to exchange messages through Bluetooth mesh networks, enabling communication without internet connectivity, mobile networks, centralized servers, user registration, phone number verification, or central logging systems.

Authorities have raised concerns that the application's architecture makes lawful interception, user identification, and criminal investigations significantly more difficult. Since communication occurs directly between nearby devices, law enforcement agencies may be unable to access subscriber information, communication records, or other data typically available from service providers during investigations.

The order states that such decentralized platforms could potentially be misused for coordinating unlawful activities, including violent protests, dissemination of misinformation, radicalization, criminal conspiracies, organized crime, and terrorism-related activities. Officials also expressed concern that the platform can continue functioning during internet shutdowns or communication restrictions, allowing users to bypass measures imposed by authorities.

The government has classified the content hosted in the repositories as unlawful, citing provisions of the Information Technology Act, 2000 (Sections 43, 84B and 84C) and the Bharatiya Nyaya Sanhita, 2023 (Section 61 read with Sections 196 and 197). Based on these provisions, GitHub has been ordered to remove or disable access to the repositories while preserving evidence.

The action highlights growing concerns among authorities regarding decentralized and anonymous communication technologies. While supporters argue that such technologies enhance privacy and communication resilience, the government maintains that they can also be exploited by criminal and anti-national elements, posing risks to public order, national security, and law enforcement efforts.