Cyber Police Investigate Sophisticated Investment Fraud Operated Through Fake Trading Apps and Messaging Groups

Hyderabad Cyber Crime Police have registered a case after a 31-year-old software engineer allegedly lost ₹37 lakh in a carefully designed online investment scam involving fake stock advisory groups posing as SEBI-registered professionals.

Officials said the fraud was executed through a structured digital ecosystem that used impersonation, manipulated trading dashboards, and psychological pressure tactics to extract large sums from the victim over several weeks.

Fake SEBI Identity Used to Build Investor Trust

According to investigators, the victim was added to a closed WhatsApp group that claimed to offer premium stock market insights under the name “A15 SEBI Premium Market Analyst Insights.”

To appear legitimate, the operators allegedly shared forged certificates, fabricated registration details, and staged performance reports showing consistent trading profits. Fake testimonials from other group members were also circulated to strengthen credibility.

The scammers gradually convinced the victim that the advisory group was officially connected to regulated financial authorities, encouraging him to participate in high-value investments.

Fraudulent Trading App Created Illusion of Profits

Authorities revealed that the victim was instructed to install a third-party application through an external link. The app reportedly simulated a live trading environment, displaying artificial profits and portfolio growth.

Encouraged by the apparent returns, the software engineer transferred multiple payments to different bank accounts controlled by the fraud network. The total amount invested eventually reached ₹37 lakh.

Police believe the platform was designed purely to manipulate user perception, creating a false sense of financial success to drive further deposits.

Pressure Tactics and Fake Regulatory Threats

The scam escalated when the victim attempted to withdraw his funds. At that stage, the operators allegedly changed their communication style, claiming that his account had violated regulatory trading rules.

They reportedly demanded an additional “compliance penalty” of 25% of the total balance to release the funds. When the victim questioned the charges, communication was abruptly cut off and access to the platform was blocked.

Investigators say this is a common pattern in digital investment fraud, where victims are pushed from promised profits into fear-based payment demands before being cut off entirely.

Cyber Police Investigation Underway

Hyderabad Cyber Crime officials have registered the case under relevant sections of the Bharatiya Nyaya Sanhita (BNS) and the Information Technology Act. Forensic teams are tracing digital footprints, including IP addresses, server routes, and linked bank accounts used to divert the funds.

Authorities are also identifying suspected “mule accounts” used to quickly transfer and launder the stolen money across multiple layers of transactions.

Public Advisory on Online Investment Scams

Cybersecurity officials have once again warned investors against joining unverified stock market groups on messaging platforms. They emphasized that legitimate regulatory bodies and licensed brokers do not operate investment schemes through informal chat groups or third-party download links.

Citizens are advised to verify any investment opportunity through official channels and immediately report suspicious financial activity to the national cybercrime helpline 1930 to increase the chances of fund recovery.

Bengaluru, June 18, 2026: A 62-year-old Bengaluru resident has allegedly lost more than ₹7.44 lakh in a sophisticated SIM swap fraud, exposing ongoing vulnerabilities in mobile-linked banking security systems and raising concerns about the growing threat of cybercrime.

According to a police complaint, the victim’s mobile number suddenly became inactive for nearly a week, preventing him from receiving calls, messages, or banking alerts. During this period, cybercriminals are believed to have gained unauthorized access to his bank account and carried out multiple transactions without his knowledge.

Mobile Number Inactive for Several Days

The incident reportedly occurred between May 31 and June 7, 2026. The victim noticed that his mobile connection had stopped working and initially suspected a technical issue. He approached his telecom service provider seeking assistance, but the disruption continued for several days.

Investigators suspect that fraudsters exploited this interruption to execute a SIM swap attack—a cybercrime technique that allows criminals to take control of a victim’s phone number. Once access is gained, they can intercept banking alerts, verification messages, and one-time passwords (OTPs) used for account authentication.

Fraud Discovered After Service Restoration

The alleged scam came to light when the victim regained access to his mobile number and attempted to log into his banking application. After encountering login problems, he visited an ATM to review his account activity.

The account statement reportedly revealed several unauthorized transactions. Alarmed by the findings, the victim immediately contacted his bank and reported the suspicious activity.

Bank officials later confirmed that ₹7,44,831 had been withdrawn or transferred from the account through transactions that the account holder claims he did not authorize.

Police Launch Cyber Fraud Investigation

Following the discovery, the victim lodged a complaint through the National Cyber Crime Helpline and submitted a formal report to law enforcement authorities. Police have since registered a case and initiated a detailed investigation.

Officials are examining bank records, telecom logs, and digital evidence to identify how the attackers gained access to the victim’s mobile number and banking credentials. Authorities have also sought information from the telecom operator regarding the status and handling of the SIM during the period of disruption.

How SIM Swap Frauds Work

Cybersecurity specialists explain that SIM swap scams typically involve fraudsters convincing telecom providers to transfer a victim’s mobile number to a new SIM card under their control. Once successful, criminals can receive OTPs and security notifications intended for the legitimate user, enabling them to bypass two-factor authentication safeguards.

This method allows cybercriminals to access banking applications and conduct fund transfers before victims become aware of the breach.

Experts Urge Greater Vigilance

The case has renewed concerns about reliance on OTP-based verification systems for financial transactions. Security experts recommend that users immediately report unexpected loss of mobile network service, monitor bank accounts regularly, and enable additional security features wherever possible.

Authorities have also advised citizens to remain cautious of suspicious calls, phishing messages, and requests for personal or banking information. Any prolonged mobile service disruption should be reported promptly to both telecom providers and financial institutions.

Investigators are exploring whether the incident may be connected to a broader cybercrime operation targeting multiple victims through coordinated SIM swap attacks. The probe remains ongoing.

Google has launched a major legal offensive against an alleged international cybercrime operation accused of orchestrating large-scale phishing attacks that targeted internet users through fake websites, deceptive text messages, and artificial intelligence-powered scams.

According to the technology giant, the lawsuit is aimed at dismantling a sophisticated criminal network known as the “Outsider Enterprise,” which is allegedly responsible for stealing sensitive information, including passwords, payment card details, and personal data from victims across multiple regions.

Thousands of Fake Websites Identified

Google claims its security teams uncovered an extensive digital infrastructure supporting the operation. Investigators reportedly traced approximately 9,000 fraudulent websites and more than one million malicious URLs connected to the network.

The company alleges that the group distributes phishing toolkits that enable cybercriminals to launch convincing scams at scale. These fraudulent campaigns often impersonate trusted organizations and well-known brands, making it difficult for users to distinguish legitimate communications from malicious ones.

Google stated that the operation has already resulted in significant financial losses for consumers, amounting to millions of dollars.

AI and Messaging Platforms Used in Fraud Campaigns

The lawsuit alleges that the cybercrime network operates from China and uses messaging platforms to coordinate activities and distribute phishing resources.

Security investigators claim the group leveraged artificial intelligence technologies to enhance the effectiveness of its scams. By using AI-generated content and automated phishing tools, attackers were reportedly able to create more convincing messages and fake websites designed to trick users into revealing confidential information.

These campaigns primarily relied on text-message phishing, commonly known as “smishing,” where victims receive fraudulent messages containing links to counterfeit websites.

Millions of Suspicious Messages Detected

Google reported a sharp increase in phishing-related activity during a recent monitoring period. The company said Android users submitted reports of approximately 55,000 spam text messages within a two-week timeframe.

During the same period, security systems identified around 2.5 million text messages containing links associated with websites allegedly created by the Outsider Enterprise network.

The scale of the operation highlights the growing sophistication of cybercriminal groups that increasingly use automated technologies to expand their reach and target larger numbers of victims.

FBI Supports Ongoing Investigation

Google confirmed it is working closely with the Federal Bureau of Investigation (FBI) to disrupt the network and identify those responsible.

Cybersecurity officials have warned that criminals are rapidly adopting artificial intelligence tools to make online scams more believable and harder to detect. Law enforcement agencies believe stronger collaboration between technology companies, telecommunications providers, and government authorities is essential to combating these evolving threats.

An FBI Cyber Division representative noted that cybercriminal groups are increasingly building organized business models around impersonating trusted brands and exploiting consumer trust for financial gain.

Collaboration With Telecom Providers

Beyond legal action, Google is expanding partnerships with major telecommunications companies to strengthen protections against fraudulent messages and online scams.

The company said it will continue working with industry stakeholders to block malicious communications before they reach consumers and support legislative efforts aimed at improving long-term cybersecurity protections.

As phishing attacks become more sophisticated through the use of artificial intelligence and automated tools, cybersecurity experts continue to urge users to verify links, avoid sharing sensitive information through unsolicited messages, and report suspicious activity immediately.