The Central Bureau of Investigation (CBI) has uncovered critical digital evidence in the ongoing probe into the alleged ₹657 crore Haryana bank fraud, revealing that SMS alerts linked to dozens of suspicious transactions were allegedly diverted to mobile numbers controlled by individuals connected to the accused.

The findings were presented before a court in Panchkula, where two former bank officials were remanded to CBI custody as investigators expand their probe into what appears to be a deeply coordinated banking and financial manipulation network.

Fraud Alerts Routed to Unauthorized Numbers

According to the CBI, 47 suspicious debit transactions worth approximately ₹187.26 crore triggered SMS alerts that were not delivered to authorized government officials. Instead, the alerts allegedly reached mobile numbers linked to co-accused individuals.

Investigators believe this diversion played a crucial role in concealing unauthorized withdrawals from multiple government department accounts.

Bank Officials Under Scrutiny

The court has sent former IDFC First Bank Area Head Shamim Dar and former AU Small Finance Bank Branch Manager Charanjeet Singh Randhawa to three days of CBI custody.

The agency alleges that Dar played a key role in facilitating the opening of several government-linked accounts at a Chandigarh branch by certifying Know Your Customer (KYC) documents and confirming account verification procedures that are now under question.

These certifications, investigators claim, were later exploited to operate accounts using allegedly forged or manipulated banking instruments.

Suspicious Account Activity Across Departments

The investigation has revealed that multiple government accounts, including those belonging to the Haryana State Pollution Control Board (HSPCB), Haryana School Shiksha Pariyojna Parishad (HSSPP), and Haryana State Agricultural Marketing Board (HSAMB), were allegedly misused for fraudulent financial transactions.

One mobile number linked to a co-accused, Abhishek Singla, was reportedly registered across multiple government accounts and used to receive transaction alerts, raising concerns over systemic security failures in account verification processes.

Alleged Fake Vendor Payments and High-Value Transfers

The CBI has also flagged several transactions presented as legitimate payments to vendors or contractors, which investigators now suspect were used to bypass internal financial approvals.

Among the flagged activities is a ₹2.49 crore transaction categorized as a vendor payment and a ₹10 crore withdrawal executed using a cancelled cheque. Officials allege that procedural checks were bypassed or manipulated to enable these transfers.

Shell Company and Large-Scale Fund Diversion

Investigators have identified a firm named M/s Swastik Desh Projects, which is suspected to be a shell entity used for routing fraudulent transactions.

According to the agency, multiple payments from the Panchayat Department account were transferred to this entity, including transactions allegedly linked to former bank officials involved in authorization and verification processes.

The CBI also highlighted a ₹25 crore transaction from the HPGCL Employees’ Pension Fund Trust account that was allegedly diverted to the same entity on December 29, 2025.

Probe Focus: Digital Evidence and Money Trail

The investigation is now centered on analyzing call detail records, banking documentation, KYC verification files, and digital transaction logs to reconstruct the complete flow of funds.

Authorities are also examining whether unauthorized changes were made to registered mobile numbers in government accounts, which may have enabled the concealment of fraudulent activity.

Systemic Lapses Under Review

Officials say the case has raised serious concerns about banking compliance, verification procedures, and oversight mechanisms in handling government-linked accounts.

The CBI is currently working to establish the full extent of involvement of all accused individuals while assessing whether the fraud was part of a larger organized financial network

The Special Investigation Team (SIT) investigating the Maharashtra Teachers Eligibility Test (Maha TET) paper leak case has arrested the wife of the alleged mastermind as authorities continue to crack down on a suspected interstate examination fraud network.

Suman Kumari Gupta (40), a resident of Patna, Bihar, was taken into custody in connection with the ongoing investigation. She is the wife of Bijendar Kumar Baleshwar Kumar Sah, who has been identified by investigators as the alleged kingpin of the operation and remains absconding. A local court has remanded Gupta to police custody until July 6 for further questioning.

Financial Trail Under Investigation

According to the SIT, Gupta’s alleged involvement emerged during an examination of financial records and communication links between individuals suspected of participating in the paper leak network. Investigators believe she was aware of financial transactions connected to the alleged racket and had contact with several accused persons.

Police are now questioning her to determine the structure of the network, identify additional participants, and trace the movement of funds allegedly used to support the illegal operation.

Look Out Circulars Issued Against Absconding Accused

The investigation has also intensified efforts to locate two absconding suspects. Authorities have issued Look Out Circulars (LOCs) against Bijendar Kumar Baleshwar Kumar Sah and Kapil Dahiya to prevent them from leaving the country.

Investigators allege that Dahiya travelled under a false identity and was part of a group that reached Bhiwandi with the intention of distributing or selling leaked examination papers before the scheduled test. Police claim he escaped before officers could arrest him.

Interstate Network Suspected

According to investigators, Kapil Dahiya, a resident of Haryana’s Sonipat district, allegedly worked alongside Dheeraj Balraj Singh of Panipat, who was arrested earlier during a police operation targeting individuals accused of attempting to sell leaked examination papers.

The SIT believes two separate groups from Bihar and Haryana travelled independently to Maharashtra for the alleged operation. Although the teams reportedly had no direct connection with one another, investigators suspect both were coordinated by the absconding alleged mastermind.

Police further allege that Sah arranged flight bookings, local transportation, and maintained communication with members of the network throughout the operation before going into hiding after the first arrests were made.

Ten Investigation Teams Tracking Wider Conspiracy

To speed up the probe, the SIT has formed ten specialized teams to investigate different aspects of the case, including financial transactions, digital evidence, travel records, and communication networks.

Officials suspect the alleged mastermind may attempt to flee through the India-Nepal border due to his reported links to Bihar’s Samastipur district. The Look Out Circulars have been issued to prevent any international escape and assist law enforcement agencies in locating the accused.

Experts Call for Stronger Anti-Fraud Measures

Cybersecurity experts say organized examination fraud has evolved into sophisticated criminal enterprises involving encrypted communications, financial laundering, interstate coordination, and complex travel logistics.

Security analysts recommend stronger intelligence sharing between investigative agencies, advanced digital forensic capabilities, real-time financial monitoring, and coordinated interstate enforcement to dismantle such syndicates effectively. They also stress that enhanced security measures are essential to safeguard the credibility of public recruitment and competitive examinations across the country.

A disturbing case of alleged blackmail, extortion, and criminal intimidation has emerged from Lucknow’s Gomti Nagar area, where a chartered accountant and his family claim they were subjected to months of threats by their former driver, who allegedly used private content to demand large sums of money.

Police have registered a case and launched an investigation after the family accused the former employee of extorting ₹24 lakh and later demanding an additional ₹1 crore while allegedly threatening harm to their minor son.

Private Content Allegedly Used for Extortion

According to the complaint, the accused was employed as the family’s personal driver for a brief period. During his tenure, he allegedly gained access to or obtained private photographs and videos of the couple without their knowledge or permission.

Investigators say the accused later used the material to pressure the family, allegedly threatening to circulate the content online and on social media platforms unless his financial demands were met.

Fearing reputational damage and emotional distress, the victims reportedly made multiple payments through cash transactions and digital transfers. Authorities claim the total amount paid reached approximately ₹24 lakh.

Demands Escalated After Employment Ended

The situation allegedly intensified after the driver’s employment was terminated. According to police sources, the accused continued contacting the family and significantly increased his financial demands.

The complaint states that he allegedly sought ₹1 crore and issued threats involving the family’s child. Investigators are also examining claims that repeated threatening messages were sent through digital communication platforms, causing considerable mental stress to the victims.

Alleged Confrontation at Family Residence

The family further alleged that on June 12, the accused arrived at their residence accompanied by three unidentified individuals. During the visit, the group allegedly pressured the victims to make additional payments and issued direct threats.

The incident reportedly prompted the family to approach law enforcement authorities, leading to the registration of a formal criminal case.

Multiple Charges Registered

Police have booked the accused and his associates under various provisions related to extortion, criminal intimidation, blackmail, and conspiracy. Investigators are gathering digital evidence, financial records, and communication data to establish the sequence of events and verify the allegations.

Specialized teams, including cyber and surveillance units, have been assigned to track the accused and identify any accomplices who may have been involved.

Investigators Exploring Wider Criminal Links

Authorities are examining whether the accused acted independently or was connected to a larger network engaged in similar extortion schemes. Officials suspect that personal information and digital content may have been strategically used to exert long-term pressure on the victims.

As part of the investigation, law enforcement agencies are reviewing financial transactions, mobile records, and online activity linked to the case.

Growing Concerns Over Privacy and Employee Verification

The incident has reignited discussions about privacy protection, employee background verification, and the misuse of personal digital information for financial gain. Security experts emphasize the importance of safeguarding sensitive data and exercising caution when granting access to personal devices or private spaces.

Police officials stated that efforts to locate and apprehend the accused are ongoing. Further action will be determined based on evidence collected during the investigation.

The probe remains active, and authorities expect additional details to emerge as the case progresses.