Connect with us

Cybercrime

₹21 Lakh for a Traffic Challan? Mumbai Businessman Duped in WhatsApp APK Scam

Published

on

A Malad-based businessman fell victim to a WhatsApp-based cyber fraud, losing over ₹21 lakh after cybercriminals tricked him into installing a malicious APK disguised as a traffic e-challan. Mumbai Police have arrested a 25-year-old student from Surat, identified as a key participant in the sophisticated money-laundering network behind the scam.

How the Scam Unfolded

Investigators revealed that the 42-year-old victim received a WhatsApp message on November 17, 2025, while attending a family wedding in Gujarat. The message carried a file titled “RTO Challan”, appearing to be an official traffic fine notification.

Assuming the file was legitimate, the businessman clicked it, unknowingly installing a malicious Android Package (APK). The app granted attackers remote access to his device, including banking applications. Within minutes, ₹11.33 lakh was drained from his account and ₹10.39 lakh from his wife’s, transferred through a series of rapid transactions designed to avoid triggering alerts.

Fraud Discovered

The theft remained undetected until December 1, when the businessman visited his bank. Officials identified suspicious withdrawals and alerted him, prompting a complaint to Mumbai North Cyber Police and the Cyber Helpline 1930.

Technical analysis traced part of the stolen funds, approximately ₹8.5 lakh, to the account of Hardik Ashokbhai Borda, a 25-year-old BCom student from Surat who also runs a small online business. Authorities said Borda routed the stolen money through multiple accounts to obscure its origin.

APK Scams: A Rising National Threat

The Future Crime Research Foundation (FCRF) has identified APK-based scams as a growing cybercrime pattern across India. Criminals often impersonate government departments, banks, or courier services to exploit trust, using fake e-challans, KYC updates, and urgent notices to manipulate victims into installing malware.

Former IPS officer Prof. Triveni Singh noted that these attacks are particularly dangerous because they give attackers full remote control of victims’ smartphones. Fraudsters can read OTPs, capture PINs, operate banking apps, and execute high-value transactions in real time.

Cybersecurity experts say malicious APKs bypass official app store checks and request broad permissions, including SMS access, screen overlay, and accessibility services, enabling automated, undetectable transactions.

Police Advisory

Mumbai Police have urged citizens to remain vigilant:

  • Download apps only from official app stores
  • Keep “Install from Unknown Sources” turned off
  • Regularly review app permissions
  • Report suspected frauds immediately to 1930 or the nearest cyber police station

Authorities emphasize that awareness and caution remain the strongest defenses against fast-evolving cybercrime, highlighting how a single click can result in substantial financial loss.

Continue Reading
Advertisement
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Cybercrime

Faridabad Police Arrest Account Holder in Stock Investment Fraud

Published

on

By

Faridabad cyber police have arrested a man from Ludhiana in Punjab in connection with a large-scale online investment fraud case involving alleged losses of nearly ₹73.97 lakh. The accused is suspected of facilitating the movement of fraudulent funds collected through fake stock market investment schemes operated via social media platforms.

Authorities say the arrest is part of an ongoing investigation into a wider cyber fraud network that targeted victims with promises of high returns through stock trading and pre-IPO investment opportunities.

Victim Lured Through WhatsApp Investment Group

According to police officials, the victim—a resident of Sector 86 in Faridabad—was first contacted through a WhatsApp message containing a link to an investment group. After joining the group, the victim was repeatedly persuaded by fraudsters to invest in stock market schemes promising unusually high profits.

Investigators said the scammers presented themselves as investment advisors and encouraged the victim to transfer money in multiple installments to different bank accounts.

Over time, the victim transferred a total of ₹73,97,600, but no returns were ever provided. When withdrawal attempts failed and communication stopped, the victim reported the matter to cyber police.

Investigation Traces Funds to Firm Account in Ludhiana

During the financial investigation, police traced part of the defrauded money to a business account linked to a transport firm named Janata Trans Co. in Ludhiana.

Authorities identified the account holder as Hansraj Goyal, who was arrested from the Transport Nagar area in Ludhiana. Police said approximately ₹7 lakh from the fraudulent proceeds had been routed through the firm’s bank account.

Investigators believe the account was used as a “mule account” to channel scam proceeds, a common tactic in online financial fraud cases where multiple accounts are used to obscure money trails.

Arrest and Custody for Further Investigation

Following his arrest, the accused was produced before a local court and has been remanded to police custody for further interrogation.

Cyber police officials stated that questioning will focus on identifying:

  • Other individuals involved in the fraud network
  • Additional bank accounts used to route stolen funds
  • Possible links to larger interstate cybercrime operations

Authorities are also working to trace the remaining diverted funds and determine how they were distributed across multiple accounts.

Growing Trend of Online Investment Scams

Officials noted that the case reflects a rising pattern of cyber frauds across India involving fake investment schemes promoted through messaging apps and social media platforms.

In such scams, victims are typically added to WhatsApp or Telegram groups where fraudsters:

  • Pose as financial advisors or trading experts
  • Promote stock trading or pre-IPO investment opportunities
  • Display fake profit screenshots to build trust
  • Pressure victims into making repeated deposits

Once significant funds are collected, the scammers either disappear or block access to withdrawal channels.

Conclusion

The Faridabad case highlights the increasing use of digital platforms in financial fraud and the role of intermediary bank accounts in laundering illicit funds. As investigations continue, cyber police are expected to uncover additional links within the wider network responsible for orchestrating the scam.

Authorities have once again urged citizens to exercise caution when responding to unsolicited investment offers received through social media or messaging apps.

Continue Reading

Cybercrime

Labour Room Privacy Breach Case Expands Into Major Footage Sale Network

Published

on

By

A disturbing hospital privacy breach in Gujarat has expanded into a major cybercrime investigation, after authorities uncovered an alleged interstate network involved in hacking CCTV systems, recording sensitive medical footage, and distributing it through encrypted online platforms for profit.

The case, which initially involved a viral clip from a maternity hospital in Rajkot, has now revealed a broader operation spanning multiple Indian states and international digital channels, with investigators describing it as a coordinated illegal surveillance footage marketplace.

Viral Labour Room Video Triggers Cybercrime Investigation

The incident first came to light on February 17, 2025, when a sensitive video recorded inside a labour room at a maternity hospital in Rajkot surfaced on social media. The clip reportedly showed a healthcare worker attending to a female patient, sparking immediate public concern over patient privacy violations.

Following the emergence of the footage, the Ahmedabad City Cybercrime Branch registered a case and launched a detailed investigation into how restricted CCTV recordings from a medical facility were accessed and circulated online.

Hacked Hospital CCTV System Suspected

Early findings indicated that multiple videos originating from hospital surveillance systems had been leaked. Investigators soon discovered that the breach was not limited to a single incident, but part of a wider pattern involving several clips taken from private medical environments.

Authorities believe the hospital’s CCTV network was compromised externally, allowing unauthorized access to live or stored footage. Importantly, preliminary assessments suggested that hospital staff were not involved in the breach.

Investigators also confirmed that the leaked videos were being actively traded on private Telegram groups, while promotional clips were shared through public platforms to attract buyers.

Illegal Online Market for Sensitive Surveillance Footage

As the probe deepened, police uncovered a structured digital marketplace operating through encrypted messaging platforms. The network allegedly sold CCTV footage depicting patients in vulnerable medical situations, categorizing content and offering it to subscribers for payment.

Reports indicate that:

  • Short preview clips were circulated on video-sharing platforms
  • Full footage was sold on private Telegram channels
  • Prices reportedly ranged between ₹800 and ₹2,000 per video
  • Payments were routed through digital wallets, UPI, and gift cards

Investigators identified multiple Telegram groups allegedly involved in distribution, where content was organized and marketed systematically to potential buyers.

Multi-State Arrests and International Links

Police operations soon expanded across several Indian states, including Maharashtra, Uttar Pradesh, Delhi, and Uttarakhand. Multiple arrests were made as investigators tracked digital footprints linked to YouTube channels and Telegram groups involved in distributing the footage.

Authorities also reported that some suspects used virtual phone numbers to communicate with individuals believed to be operating from outside India, including contacts traced to Romania and the United States.

The investigation further revealed alleged coordination between multiple accused individuals who shared hacking tools, CCTV access credentials, and payment instructions through encrypted messaging platforms.

Stronger Legal Charges Including Cyber Terrorism

Initially, suspects were booked under provisions dealing with privacy violations and obscene content under India’s Information Technology laws. However, as the scale and sensitivity of the operation became clear, authorities escalated the charges.

Stronger legal provisions were added, including sections related to cybercrime and cyber terrorism under Indian criminal law frameworks. Officials cited the seriousness of the breach and its long-term psychological and privacy impact on victims and their families as justification for harsher charges.

Investigators also noted evidence suggesting coordinated operations, including:

  • Exchange of CCTV hacking tools
  • Distribution of access credentials
  • Financial transactions through digital channels
  • Use of multiple online groups to organize content sales

Digital Footprints Reveal Coordinated Network

Forensic analysis of seized devices reportedly uncovered extensive communication records, financial transactions, and tools linked to unauthorized access of CCTV systems.

Police said multiple hacking applications were found on suspects’ devices, along with data indicating access to DVR systems and surveillance infrastructure from multiple locations.

The case also highlighted how encrypted platforms such as Telegram were allegedly used to organize a structured network involving content creators, distributors, and buyers.

Growing Concerns Over Surveillance Security in Healthcare Facilities

The case has raised serious concerns about the security of CCTV systems in sensitive environments such as hospitals. Experts note that healthcare institutions often store highly sensitive footage, making them attractive targets for cybercriminals.

Cybersecurity analysts warn that weak authentication, outdated firmware, and poorly secured remote access systems can expose surveillance networks to external compromise if not properly secured.

Conclusion

What began as a single viral video from a hospital labour room has evolved into one of the most significant cybercrime investigations in recent years, exposing a suspected multi-state network involved in hacking and monetizing sensitive surveillance footage.

The case highlights critical gaps in digital security infrastructure within healthcare systems and underscores the growing threat posed by cybercriminal networks exploiting private surveillance data for financial gain.

Continue Reading

Cybercrime

Bengaluru Employee Booked for Allegedly Routing Cyber Fraud Funds Through Bank Account

Published

on

By

Bengaluru cybercrime police have registered a case against a private company employee for allegedly allowing his bank account and digital banking credentials to be used in a large-scale cyber fraud money laundering network. Authorities say the account was used to route funds collected from victims of online scams across multiple Indian states.

The case has once again highlighted the growing misuse of so-called “mule accounts” in cybercrime operations, where legitimate bank accounts are allegedly exploited to move and conceal stolen money.

Suspicious Transactions Linked to Multiple Cyber Fraud Cases

According to Whitefield Cyber Crime Police, the investigation began after suspicious financial activity was detected in a private bank account. The account reportedly received funds linked to several cyber fraud complaints registered across India.

These include cases reported from:

  • Bengaluru (multiple cyber crime police stations)
  • Kerala districts including Palakkad and Kozhikode Rural
  • Maharashtra (Kolhapur and Pune)
  • Tamil Nadu (Ramanathapuram)
  • Delhi and other regions

Investigators noted that the repeated appearance of the same account across unrelated cases suggested its systematic use in routing illicit funds.

Account Allegedly Used as a Money Mule

Police identified the account holder as Murali G. Reddygopal, a 37-year-old Bengaluru resident employed in a private firm.

Authorities suspect that the accused knowingly provided access to his banking tools—including ATM card, mobile banking, and internet banking credentials—to cybercriminals. The account was then allegedly used to:

  • Receive funds from fraud victims
  • Transfer money to multiple destination accounts
  • Withdraw cash through ATMs

Officials believe the structure of transactions indicates intentional involvement rather than accidental misuse.

Banking Tools Used to Move Illicit Funds

Investigators say fraud proceeds were rapidly cycled through the account before being dispersed to other accounts or withdrawn in cash. The account has already been frozen and marked under lien due to its suspected role in cybercrime activities.

Police also noted that control over full banking access—including passwords and authentication tools—suggests the account functioned as part of a coordinated financial network supporting online fraud operations.

Legal Action Under IT Act and Bharatiya Nyaya Sanhita

Based on the preliminary findings, police have registered a case under provisions of:

  • Sections 66(C) and 66(D) of the Information Technology Act, 2000
  • Sections 319(2) and 318(4) of the Bharatiya Nyaya Sanhita (BNS), 2023

These provisions relate to identity theft, cheating by impersonation, and criminal conspiracy in financial fraud cases.

Investigators are now working to identify additional individuals involved in the money transfer chain and determine whether the accused was part of a larger organized network.

Rising Threat of Mule Account Networks

Cybercrime officials have repeatedly warned about the increasing use of mule accounts in online fraud cases. These accounts are often used to:

  • Break the financial trail of stolen money
  • Transfer funds across multiple jurisdictions
  • Evade detection by law enforcement agencies
  • Facilitate large-scale digital fraud operations

Authorities say such networks have become a critical backbone of cyber fraud ecosystems in India, enabling scams ranging from investment fraud to phishing and impersonation schemes.

Conclusion

The Bengaluru case underscores how legitimate banking channels are increasingly being exploited to facilitate cybercrime. With investigations ongoing, police are focusing on uncovering the broader network behind the fraudulent transactions and tracing the final beneficiaries of the diverted funds.

Officials have urged citizens to safeguard banking credentials and avoid sharing account access with unknown individuals, warning that even passive involvement in mule account operations can lead to serious legal consequences.

Continue Reading

Trending

Copyright © 2022 420 Reports Marijuana News & Information Website | Reefer News | Cannabis News