Cybercrime
₹21 Lakh for a Traffic Challan? Mumbai Businessman Duped in WhatsApp APK Scam
A Malad-based businessman fell victim to a WhatsApp-based cyber fraud, losing over ₹21 lakh after cybercriminals tricked him into installing a malicious APK disguised as a traffic e-challan. Mumbai Police have arrested a 25-year-old student from Surat, identified as a key participant in the sophisticated money-laundering network behind the scam.
How the Scam Unfolded
Investigators revealed that the 42-year-old victim received a WhatsApp message on November 17, 2025, while attending a family wedding in Gujarat. The message carried a file titled “RTO Challan”, appearing to be an official traffic fine notification.
Assuming the file was legitimate, the businessman clicked it, unknowingly installing a malicious Android Package (APK). The app granted attackers remote access to his device, including banking applications. Within minutes, ₹11.33 lakh was drained from his account and ₹10.39 lakh from his wife’s, transferred through a series of rapid transactions designed to avoid triggering alerts.
Fraud Discovered
The theft remained undetected until December 1, when the businessman visited his bank. Officials identified suspicious withdrawals and alerted him, prompting a complaint to Mumbai North Cyber Police and the Cyber Helpline 1930.
Technical analysis traced part of the stolen funds, approximately ₹8.5 lakh, to the account of Hardik Ashokbhai Borda, a 25-year-old BCom student from Surat who also runs a small online business. Authorities said Borda routed the stolen money through multiple accounts to obscure its origin.
APK Scams: A Rising National Threat
The Future Crime Research Foundation (FCRF) has identified APK-based scams as a growing cybercrime pattern across India. Criminals often impersonate government departments, banks, or courier services to exploit trust, using fake e-challans, KYC updates, and urgent notices to manipulate victims into installing malware.
Former IPS officer Prof. Triveni Singh noted that these attacks are particularly dangerous because they give attackers full remote control of victims’ smartphones. Fraudsters can read OTPs, capture PINs, operate banking apps, and execute high-value transactions in real time.
Cybersecurity experts say malicious APKs bypass official app store checks and request broad permissions, including SMS access, screen overlay, and accessibility services, enabling automated, undetectable transactions.
Police Advisory
Mumbai Police have urged citizens to remain vigilant:
- Download apps only from official app stores
- Keep “Install from Unknown Sources” turned off
- Regularly review app permissions
- Report suspected frauds immediately to 1930 or the nearest cyber police station
Authorities emphasize that awareness and caution remain the strongest defenses against fast-evolving cybercrime, highlighting how a single click can result in substantial financial loss.
Cybercrime
₹2.52 Crore Digital Arrest Scam Busted, Four Accused Arrested, Cyber Fraud Network Spreads Across Delhi and Other States
Gwalior authorities have successfully dismantled a ₹2.52 crore digital arrest scam, arresting four individuals linked to a sprawling cyber fraud ring operating across Delhi and multiple Indian states. The Crime Branch’s investigation revealed that the fraudsters impersonated officials from a central investigative agency and psychologically coerced a retired Indian Air Force radiologist into transferring large sums of money over 27 days of continuous video surveillance.
Multi-State Money Movement Across 15 States
The investigation uncovered a complex money laundering operation involving more than 300 bank accounts across 15 states including Delhi, Uttar Pradesh, Andhra Pradesh, Rajasthan, Chhattisgarh, Odisha, Jharkhand, Bihar, Assam, and Karnataka. Initially, approximately ₹1.5 crore was funneled into two accounts in Andhra Pradesh, while nearly ₹1 crore was transferred to three accounts across Delhi and Uttar Pradesh. The funds were quickly dispersed through multiple accounts to evade detection.
Suspicious Shell Company Under Scrutiny
Authorities also traced part of the scam’s financial trail to a Delhi-based shell company named “Jingga Crunch and Snacks.” The firm’s bank account was reportedly used to facilitate fraudulent transactions. Police raided multiple shops linked to the firm and detained two suspects, Mohit Mishra and Shahil Khan. Both admitted to receiving commissions for allowing their company’s account to be exploited, though they claimed no involvement in the core fraudulent operations. Investigators suspect the firm was a front directed by higher-ranking members of the cybercriminal syndicate.
Arrests and Network Breakdown
Further probes led to the arrest of Rahul Prajapati and Harish Yadav, accused of opening mule accounts and managing financial channels for the scam. The gang used psychological manipulation—threatening victims with legal repercussions and instructing them to avoid contact with others—to instill fear and compliance. The retired doctor, their prime victim, was falsely told he was under investigation, prompting him to comply with repeated demands for money transfers.
Anatomy of a Digital Arrest Scam
Cybersecurity experts characterize such scams as evolving schemes that exploit fear to extract money via online banking. The Future Crime Research Foundation noted that the use of mule accounts and multi-layered transactions complicates tracing stolen funds and identifying perpetrators. Law enforcement continues interrogations and is actively working to dismantle the entire fraud network, which they believe has additional active members.
Authorities urge the public to remain vigilant and avoid sharing personal or financial details with unknown callers, especially those employing aggressive or threatening tactics via phone or video calls.
Cybercrime
WhatsApp Business Deal Lure Leads to ₹20.70 Lakh Cyber Fraud, Two Arrested
Sambalpur, Odisha: Police in Sambalpur have arrested two individuals in connection with a ₹20.70 lakh cyber fraud that targeted an agricultural business using WhatsApp, officials said. The accused are Jagdish Kumar (44) from Narela, New Delhi, and Ram Ashre (39) from Malkaganj, Odisha, who allegedly acted as intermediaries for an organized cybercrime network.
Modus Operandi: WhatsApp Business Deception
Investigation revealed that the fraudsters impersonated buyers interested in purchasing agricultural equipment. They contacted the victim, Achyutananda Patel, through WhatsApp, placing a fake bulk order for 50 agricultural reaper machines in 2025. To gain trust, the fraudsters deposited advance payments totaling ₹20,70,005 over 12 transactions between August 5 and August 14, 2025.
The accused then used psychological pressure and impersonation tactics, including claiming connections with influential figures and government agencies, to coerce the victim into withdrawing and transferring ₹13 lakh in cash and an additional ₹7 lakh from personal savings.
Use of Mule Accounts to Obscure the Money Trail
Authorities discovered that mule accounts were used to hide the illicit funds. Money was first deposited into accounts under fake or third-party names, then routed in multiple stages to prevent tracing. Bank records and digital evidence were seized to support the ongoing investigation.
Arrests and Wider Network
The accused were apprehended in New Delhi, and police are probing the larger network behind the scam. Officials urged businesses to verify unknown orders and proposals received through social media or messaging platforms to prevent falling victim to similar schemes.
Police Advisory
- Always confirm the identity of business contacts before transferring money.
- Avoid complying with emergency demands or unsolicited advance payments.
- Report suspicious accounts or transactions to the local cybercrime unit.
Authorities continue to investigate and trace additional members of the organized cybercrime network.
Cybercrime
Fake Elon Musk Romance Scam Leaves Mumbai Woman Financially Ruined
A Mumbai-based woman has been left financially devastated after falling victim to an elaborate online romance scam in which a cyber fraudster posed as billionaire entrepreneur Elon Musk. The accused allegedly exploited her trust with promises of marriage and relocation to the United States before disappearing after siphoning off more than ₹16 lakh through digital gift cards.
The case surfaced earlier this month when the 40-year-old woman, a resident of the Chembur–Tilak Nagar area, approached the cyber police. An FIR has since been registered against two unidentified individuals for cheating, online financial fraud, and impersonation.
From Social Media Chat to Emotional Manipulation
According to the police complaint, the woman was previously employed in the accounts division of an insurance firm and is currently a homemaker. Her interaction with the accused began in late September 2025 on X (formerly Twitter), where the man claimed to be Elon Musk and initiated casual conversation.
Over time, the exchanges became frequent and emotionally charged. The impersonator presented himself as lonely and interested in a serious relationship. Within weeks, he proposed marriage and told the woman that he intended to settle with her in the United States, assuring her that all legal and travel arrangements would be taken care of.
The accused later persuaded her to move the conversation to the encrypted messaging app Signal, a common tactic used by cybercriminals to evade detection. Soon after, he introduced a second individual claiming to be a visa consultant named “James,” who informed the woman that payments were required to process visa documents and travel formalities.
Payments Routed Through Gift Cards
The woman was instructed to purchase Amazon gift cards and share the codes via email, allegedly for “security” and confidentiality reasons. Trusting the assurances of marriage and overseas relocation, she complied.
Between October 2, 2025, and January 7, 2026, she purchased gift cards worth ₹16,34,194, using her personal bank account. The transactions were made in multiple instalments over several weeks. Police officials confirmed that bank statements and transaction records submitted by the complainant corroborate the payments.
The scam began to unravel in mid-January when the impersonator demanded an additional ₹2 lakh, claiming it was needed for flight tickets and final travel arrangements. When the woman expressed her inability to pay, communication from the accused became sporadic and evasive.
Realisation and Police Complaint
Alarmed by the sudden change in behaviour, the woman consulted her family and reviewed the communication history. It was then that she realised she had been targeted through a carefully orchestrated online romance scam.
She contacted the National Cyber Crime Helpline 1930 on January 17 and again on January 19, receiving formal acknowledgements. Based on her complaint and supporting evidence — including bank records, emails, and gift card details — the East Region Cyber Police Station registered a case and launched an investigation.
Authorities are now tracing digital footprints such as IP addresses, email accounts, and messaging platforms used by the accused in an effort to identify those involved.
A Growing Pattern of Celebrity Impersonation Scams
Cybercrime officials say the case reflects a rising trend of romance scams in which fraudsters impersonate high-profile public figures to gain credibility and emotionally manipulate victims. Such scams typically involve prolonged grooming, avoidance of video calls, requests to move conversations to encrypted apps, and demands for payment via gift cards or cryptocurrencies.
Police have reiterated that no legitimate individual, organisation, or government agency ever seeks payments through gift cards or vouchers. Citizens are being urged to remain cautious of online relationships that involve sudden financial requests, promises of marriage, foreign travel, or claims of celebrity status.
While the investigation is ongoing, the incident underscores the severe emotional and financial harm that digital deception can cause — and serves as a stark reminder of the risks lurking behind seemingly genuine online interactions.
-
Business2 years agoPot Odor Does Not Justify Probable Cause for Vehicle Searches, Minnesota Court Affirms
-
Business2 years agoNew Mexico cannabis operator fined, loses license for alleged BioTrack fraud
-
Business2 years agoAlabama to make another attempt Dec. 1 to award medical cannabis licenses
-
Business2 years agoWashington State Pays Out $9.4 Million in Refunds Relating to Drug Convictions
-
Business2 years agoMarijuana companies suing US attorney general in federal prohibition challenge
-
Business2 years agoLegal Marijuana Handed A Nothing Burger From NY State
-
Business2 years agoCan Cannabis Help Seasonal Depression
-
Blogs3 years agoCannabis Art Is Flourishing On Etsy
