Hours after the National Testing Agency (NTA) cancelled the NEET-UG exam conducted on May 3, 2026 following a paper leak, authorities have now revealed how a swift and meticulous probe by investigation agencies traced the entire trail of the leak within the span of a few hours.
The exam, conducted for undergraduate medical admissions, was taken by around 22 lakh candidates across India. After receiving inputs from investigators, the NTA said the “present examination process could not be allowed to stand” and announced cancellation of the test.
A re-examination will be conducted, with fresh dates to be announced soon. Students will not need to register again, and previously submitted applications will remain valid.
The Overnight Operation: 8 PM to 3 AM
The Rajasthan Special Operations Group (SOG) cracked the NEET-UG 2026 paper leak network in just seven hours , tracing the chain from its first intelligence input at 8 pm on May 8 to the identification of the key accused by 3 am the next day.
The rapid operation exposed a network that stretched from Rajasthan to Haryana, Uttarakhand, Maharashtra and Kerala.
Rajasthan SOG launched the probe after receiving intelligence inputs from the Intelligence Bureau (IB) on the evening of May 8 about a suspected leak of the NEET-UG question paper.
Senior officers, including Vishal Bansal , Ajaypal Lamba and Kundan Kanwariya , immediately assembled at the SOG headquarters and began verifying the claims.
Leaked vs. Original Papers Matched
The first stage of the investigation involved downloading the original NEET-UG 2026 paper and comparing it with handwritten and digital question sets that had gone viral on social media as a so-called “guess paper.”
At 9 pm , a high-level meeting commenced. Till 12 am (midnight), SOG officials downloaded the original NEET paper and cross-referenced it with the questions that were circulating on social media.
Officials found that 135 questions , including multiple-choice options, matched exactly. Several Biology and Chemistry questions were identical , strengthening suspicion that the exam had been compromised.
Over 150 People Interrogated
During the overnight operation, the SOG questioned more than 150 people , including around 80 students.
After 12 am , the SOG initiated the interrogation of suspects. The investigation began to reveal links extending across Sikar, Jhunjhunu, and even as far as Kerala.
Subsequently, ADG Vishal Bansal and IG Ajaypal Lamba departed for Sikar with a team comprising over 100 officers. The SOG team arrived in Sikar around 3 am. There, more than a dozen students and their parents were interrogated.
Links Traced to Sikar Firm: RK Consultancy
The investigation revealed that the paper had leaked from RK Consultancy , an establishment operating in Sikar (Rajasthan).
When the location of the consultancy’s proprietor was traced, he was found to be in Dehradun (Uttarakhand).
The SOG immediately contacted the Dehradun Police to facilitate his interrogation. During the questioning — conducted via video calls and telephone — he disclosed the names of three to four students, whom the SOG immediately proceeded to interrogate.
The Breakthrough: e-Mitra Operator’s Lead
A breakthrough came when an e-Mitra operator in Sikar told investigators that a group of students had come to his shop on May 1 to photocopy documents that later turned out to be copies of the leaked paper.
This lead took the SOG to Jamwa Ramgarh , where two brothers — Mangilal and Dinesh Biwal — were detained.
They allegedly told investigators they had purchased the paper on April 29 from Yash Yadav , based in Gurugram (Haryana).
According to the probe, the brothers carried the paper to Sikar because one of their relatives was appearing for the exam there. They allegedly distributed copies among relatives and students.
How the Paper Was Circulated: The Chain
Acting with local police, the SOG then arrested Yash Yadav in Gurugram. He allegedly confessed that the paper had been sourced from Shubham Khairnar in Nashik (Maharashtra).
Investigators suspect the leak originated at a printing press in Nashik before moving through intermediaries to Gurugram and Rajasthan.
Police said the paper was sold in multiple states and reached aspirants through digital PDFs and printed copies.
The Full Leak Chain (Based on Investigation)
| Step | Location | Person/Entity Involved |
|---|---|---|
| 1 | Nashik printing press | Suspected origin |
| 2 | Nashik | Shubham Khairnar |
| 3 | Gurugram | Yash Yadav |
| 4 | Jamwa Ramgarh | Mangilal & Dinesh Biwal |
| 5 | Sikar | RK Consultancy |
| 6 | Sikar | e-Mitra shop (photocopying) |
| 7 | Multiple states | Students and aspirants |
CBI Takes Over the Case
On Tuesday (May 12, 2026), the Centre handed the case to the CBI , which registered an FIR under:
- Criminal conspiracy
- Cheating
- Breach of trust
- Theft
- Destruction of evidence
- Provisions of the Public Examination (Prevention of Unfair Means) Act, 2024
The SOG handed over several accused to the CBI in Jaipur, including Yash Yadav, Mangilal, Dinesh and others arrested in Rajasthan. More than 45 people have been detained so far.
The Shadow Exam Economy
The case has reignited concerns over the integrity of competitive examinations in India.
Investigators are also examining how private Telegram and WhatsApp groups may have functioned as distribution channels, with students allegedly paying for “high probability” or “final selection” papers that later matched the actual exam amounts ranging from ₹30,000 to ₹28 lakh (as reported in previous coverage).
This “shadow exam economy” — where leaked papers are sold as “guess papers” or “practice sets” — has become a recurring problem in India’s high-stakes entrance exams.
What Next for 22 Lakh Aspirants?
For millions of aspirants, the cancellation has triggered uncertainty. But authorities say the move was necessary to preserve trust in one of India’s largest entrance examinations.
Key next steps:
- Re-examination date to be announced soon by NTA
- No new registration required — previously submitted applications remain valid
- CBI investigation to continue, with focus on identifying the mastermind(s)
- Possible policy changes to prevent future leaks (e.g., digital delivery of question papers, shorter window between printing and exam)
