The Vakilkaro Brief: The 'Digital Whack-a-Mole' Limitation: Mahindra & Mahindra v. Diksha Sharma

The Infinite Hydra. In the digital trenches of March 2026, brand protection has become a game of high-speed geometry. You block one fraudulent site, and three more spring up before the court order is even signed. This is the "Digital Whack-a-Mole" crisis. For a global powerhouse like Mahindra and Mahindra, whose name carries immense trust in rural and urban India alike, these "mirror sites" aren't just a nuisance—they are a threat to consumer safety. On March 28, 2026, the Delhi High Court addressed this exhaustion in Mahindra and Mahindra Ltd v. Diksha Sharma and Others, signaling that while the law is fast, the "mole" is getting smarter.

Key Takeaways

• Diksha Sharma and Others, signaling that while the law is fast, the "mole" is getting smarter.
• While the Court granted an ad-interim injunction, the hearing highlighted the Whack-a-Mole Limitation: the defendants were using AI-scripts to automatically register new domains (e.g., mahindra-offer-in.online, mahindra-dealership-vahan.xyz ) the moment an ISP block was detected.
• The "John Doe" Exhaustion: Mahindra, like many 2026 plaintiffs, is facing "Defendant Anonymity." The March 28 order reinforced that Dynamic Injunctions must now be paired with Financial Freezing Orders (targeting the UPI IDs used for the scams) to actually stop the "Whack-a-Mole" cycle.
• “Kill the cash, kill the mole.” The "Good, Bad, and Ugly" of Digital Whack-a-Mole The Good The Bad The Ugly Pre-emptive Blocking: Courts are now granting orders that "anticipate" future mirror sites based on naming patterns.
• The "Digital Whack-a-Mole" limitation is real, but by shifting focus from URLs to Infrastructure, the law is finally catching up.

The Mahindra Mandate: When "Dynamic" Isn't Fast Enough

Beyond "Static Blocking" to "Algorithmic Evasion." A breakdown of the March 28th order and the tactical limits of John Doe (Ashok Kumar) orders in 2026.

The Update:

Mahindra and Mahindra moved the Court against a massive network of "Phishing Dealerships." Scammers were using the Mahindra trademark to offer fake vehicle bookings and lucky draws, collecting "processing fees" from unsuspecting customers. While the Court granted an ad-interim injunction, the hearing highlighted the Whack-a-Mole Limitation: the defendants were using AI-scripts to automatically register new domains (e.g., mahindra-offer-in.online, mahindra-dealership-vahan.xyz ) the moment an ISP block was detected. Justice Tushar Rao Gedela’s order from March 28th reflects a pivot—moving from simply listing URLs to targeting the Technical Infrastructure of the scammers.

The Impact:

• The Metadata Struggle: The Court noted that simply blocking a URL is a "temporary bandage." In 2026, the focus has shifted to Domain Name Registrars (DNRs). The order directed DNRs to provide the underlying KYC and payment trail of the "Moles" to identify the human behind the bot.
• The "John Doe" Exhaustion: Mahindra, like many 2026 plaintiffs, is facing "Defendant Anonymity." The March 28 order reinforced that Dynamic Injunctions must now be paired with Financial Freezing Orders (targeting the UPI IDs used for the scams) to actually stop the "Whack-a-Mole" cycle.
• Section 8 Vulnerability: The Court observed that these scams often target rural segments—the same demographic served by Section 8 MFIs. By mimicking trusted brands like Mahindra, scammers drain the very liquidity that micro-finance institutions aim to provide.

The Action:

In 2026, a court order is only the first step. You need a Digital Response Team that can feed new infringing URLs into the Judicial Ledger in real-time. At Vakilkaro, we help brands navigate the "Dynamic+ " era, ensuring that your injunction is as fast as the scammer’s script.

1. Defining the "Mole": AI-Generated Hopping

In April 2026, scammers no longer manually register sites.

• The Bot-Loop: As soon as an ISP triggers a "403 Forbidden" block on a domain, a script activates a pre-purchased "Sleeper Domain."
• The Result: The brand owner is stuck in a loop of filing "Additional Affidavits" while the scammer stays live.
• The Legal Counter: The Mahindra case emphasizes the need for orders that cover "Substantially Similar" alphanumeric strings, not just specific URLs.

2. Targeting the Payment Gateways

The most effective part of the March 28th order was the move against the Money Trail:

• UPI Blocking: The Court directed banks and NPCI to freeze specific UPI handles linked to the "Mahindra Lucky Draw" scam.
• Logic: You can change a domain in 5 seconds, but opening a fresh, KYC-compliant bank account in 2026 takes much longer. “Kill the cash, kill the mole.”

The "Good, Bad, and Ugly" of Digital Whack-a-Mole

The Good The Bad The Ugly

Pre-emptive Blocking: Courts are now granting orders that "anticipate" future mirror sites based on naming patterns. The "Shadow" ISP: Some offshore ISPs ignore Indian court mandates, allowing the "Mole" to remain visible via VPNs. Consumer Loss: Between the "Whack" and the "Mole" popping up elsewhere, thousands of rupees are lost by victims in the 3-hour lag window.

3. Checklist: 5 Elements for a "Whack-a-Mole" Proof Injunction

• Omnibus URL Coverage: Ensure your prayer includes "any other mirror/alphabetically similar domains" created by the defendants.
• KYC Disclosure Mandate: Always ask the Court to direct DNRs to reveal the IP Log and Credit Card details of the registrant.
• Financial Injunctions: Don't just block the site; implead the Payment Aggregators to freeze the scammer's revenue stream.
• Google De-indexing: Explicitly request that Google LLC be directed to remove the "Snippet" and "Cache" of the infringing sites, not just the link.
• Section 8 Synergy: If you are an MFI, use Mahindra v. Diksha Sharma as a precedent to protect your rural beneficiaries from "Phishing Micro-loans."

Conclusion and What Should You Do Now?

The Mahindra & Mahindra v. Diksha Sharma ruling of March 28, 2026, is a sobering reminder that IPR enforcement in the AI age is a marathon, not a sprint. The "Digital Whack-a-Mole" limitation is real, but by shifting focus from URLs to Infrastructure, the law is finally catching up.

Strategy is Key:

• Don't play the game alone. Use AI-monitoring tools to find the moles before your customers do.
• Go for the Wallet. An injunction that doesn't freeze the scammer’s bank account is just a suggestion.

In the 2026 digital race, the fastest legal shield wins. Stay tuned for more updates on Phishing Law, Domain Disputes, and High-Court IPR Rulings. Vakilkaro offers expert services in Whack-a-Mole Litigation, Financial IP Enforcement, and Section 8 MFI Registration. We also specialize in LLP Registration, OPC, and Private Limited Company Registration, ensuring your brand's digital perimeter is iron-clad from Day 1.

Official External Resources

Use these primary/official sources to verify rules, forms, fees, timelines and regulatory updates before publication.

• IP India - Patents, Designs, Trade Marks & Copyright
• eCourts Services