The Central Bureau of Investigation registered a First Information Report on May 12, 2026, regarding an alleged leak of the NEET UG 2026 question paper [1, 3].
The investigation highlights systemic vulnerabilities in India's medical entrance exams, which affect more than 20 lakh students annually [4]. Because the National Testing Agency cancelled the exam following the allegations, the case has created significant academic disruption for thousands of applicants.
The CBI filed the FIR charging suspects with cheating and criminal conspiracy [1]. "The CBI has registered a case under sections of cheating and criminal conspiracy," a senior police official said [1].
Law enforcement officials have arrested 15 suspects in connection with the leak [3]. These arrests span several states, including Uttarakhand and Rajasthan, with specific operations conducted in Dehradun, Sikar, Churu, Jhunjhunu, and Jaipur [3]. Police sources said that the group of detainees includes a man from Jaipur [3].
Investigators are examining the role of digital platforms in the conspiracy. Reports indicate that a Telegram and WhatsApp group consisting of 400 members was used to share sample papers [1].
However, the National Testing Agency has challenged the validity of some reports. "The NTA has warned students that the alleged paper‑leak posts on Telegram are fake," an agency spokesperson said [2]. This contradiction persists as the CBI continues its criminal probe into the conspiracy.
The scale of the investigation reflects the pressure on the NTA to maintain the integrity of the testing process. The current probe focuses on how the materials were accessed and whether the leak was an internal breach or an external manipulation of the distribution chain [1, 3].
“"The CBI has registered a case under sections of cheating and criminal conspiracy,"”
The involvement of the CBI indicates that the Indian government views this as a high-level criminal conspiracy rather than a localized incident of cheating. The contradiction between the NTA's claims that posts were fake and the CBI's subsequent arrests suggests a complex investigation into whether 'fake' leaks were used as cover for actual breaches, or if the arrests are tied to a different mechanism of fraud.
