Online radicalisation denotes the process by which the internet—social media platforms, encrypted messaging, gaming forums, video-sharing services, and dedicated propaganda repositories—becomes the primary vector through which an individual moves from grievance or curiosity toward acceptance of extremist ideology and, in the gravest cases, the intent to commit violence. The concept gained legal and policy salience after the rise of the Islamic State (ISIL) from 2014, whose sophisticated use of Twitter, Telegram, and the magazines Dabiq and Rumiyah demonstrated that recruitment no longer required physical proximity. In the Indian context the governing statutory framework is the Unlawful Activities (Prevention) Act, 1967, particularly Sections 13, 18, 38 and 39 dealing with incitement, conspiracy and association with terrorist organisations, read with the Information Technology Act, 2000—Section 69A enabling content-blocking and Section 79 governing intermediary liability. At the multilateral level, UN Security Council Resolution 2178 (2014) on foreign terrorist fighters and Resolution 2354 (2017) endorsing the Comprehensive International Framework to Counter Terrorist Narratives anchor state obligations to disrupt incitement disseminated online.
The radicalisation process is rarely instantaneous; analysts describe a funnelling sequence. It begins with exposure, in which algorithmic recommendation systems or peer-shared content surface grievance-framed material to a receptive individual. This is followed by engagement, where the target interacts with a community that offers identity, belonging, and a moral framework dividing the world into virtuous in-group and dehumanised out-group. Recruiters then conduct isolation and grooming, frequently migrating the contact from open platforms to encrypted channels such as Telegram, Signal or WhatsApp, where private mentorship intensifies commitment and severs competing social ties. The final stages involve ideological consolidation and, for a minority, mobilisation to action—the acquisition of operational knowledge, target selection, or travel to a conflict theatre. Crucially, the digital environment compresses each stage and removes geographic and social gatekeepers that historically slowed offline recruitment.
Several variants and accelerants distinguish the contemporary landscape. Self-radicalisation, in which a "lone actor" assembles an extremist worldview largely through passive consumption without direct recruiter contact, complicates detection because it leaves a thin intelligence signature. Algorithmic amplification—the tendency of engagement-optimised recommendation engines to reward sensational and emotive content—creates so-called rabbit holes that draw users toward progressively extreme material. Gamification, the use of leaderboards, livestreamed attacks and meme culture, was evident in the Christchurch attack of March 2019, whose perpetrator livestreamed the assault on Facebook. Encrypted and decentralised platforms, alt-tech sites, and ephemeral content frustrate both moderation and forensic recovery, while generative artificial intelligence now enables automated production of tailored propaganda at scale.
Named contemporary instances illustrate the operational reality. India's National Investigation Agency has prosecuted multiple cases of ISIL-inspired online recruitment, including the 2016 dismantling of modules linked to the so-called Junood-ul-Khilafa-fil-Hind and recurrent action against the Popular Front of India before its banning in September 2022. The Ministry of Home Affairs, through its Counter-Terrorism and Counter-Radicalisation Division, and the Indian Cyber Crime Coordination Centre (I4C) under MHA coordinate detection and takedown. Internationally, the European Union's Internet Referral Unit at Europol, established in 2015, and the EU Terrorist Content Online Regulation (2021/784), effective June 2022, mandate removal of flagged content within one hour. The Global Internet Forum to Counter Terrorism (GIFCT), founded in 2017 by Facebook, Microsoft, Twitter and YouTube, operates a shared hash database to prevent re-upload of known terrorist material.
Online radicalisation must be distinguished from adjacent concepts. Disinformation concerns the deliberate spread of false information to deceive, and need not aim at violence; radicalisation may exploit disinformation but is defined by ideological commitment rather than factual falsity. Cyberterrorism, by contrast, denotes attacks on digital infrastructure themselves—it is a mode of attack, whereas online radicalisation is a mode of recruitment and indoctrination. Hate speech is a legal category of expression that may be a precursor to, but is not synonymous with, the deeper attitudinal and behavioural transformation radicalisation entails. Confusing these categories produces both over-broad censorship and under-targeted intervention.
The field is contested. Civil-liberties advocates warn that content-blocking under Section 69A operates without published reasons and limited judicial review, a concern partly addressed in Shreya Singhal v. Union of India (2015), which struck down Section 66A while upholding 69A's procedural safeguards. The encryption debate—exemplified by litigation over the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and their traceability mandate—pits investigative access against privacy under K.S. Puttaswamy (2017). Scholars also dispute the causal weight of the internet itself: empirical studies suggest offline social ties and pre-existing grievance remain decisive, with online channels acting as accelerant rather than sole cause. Recent developments include concern over AI-generated propaganda and the radicalising potential of gaming-adjacent platforms such as Discord and Roblox.
For the working practitioner—desk officer, intelligence analyst or policy researcher—online radicalisation demands an integrated response combining lawful content disruption, counter-narrative and "off-ramp" deradicalisation programmes, and inter-agency coordination across home, foreign and technology ministries. India's preference for prosecution-led deterrence contrasts with the rehabilitation-oriented models of states such as Denmark's Aarhus programme, presenting a live policy choice. Effective practice requires precise threat assessment that respects constitutional limits on speech and privacy, partnership with private platforms that control the relevant infrastructure, and recognition that purely kinetic or censorial measures address symptoms rather than the underlying drivers of grievance and identity that the digital ecosystem so efficiently exploits.
Example
In September 2022, the Government of India banned the Popular Front of India under UAPA, citing its use of social media and encrypted channels to radicalise and recruit youth toward violent extremism.
Frequently asked questions
The principal instruments are the Unlawful Activities (Prevention) Act, 1967, for incitement and terrorist association, and the Information Technology Act, 2000, whose Section 69A permits blocking of content and Section 79 governs intermediary liability. The IT Rules, 2021, add takedown and traceability obligations on platforms.
Keep learning