A major cybercrime investigation in Uttar Pradesh’s Kanpur has uncovered seven bank accounts linked to nearly 65,000 complaints registered on the National Cyber Crime Reporting (NCRP) portal, raising serious concerns over the misuse of the banking system by cybercriminals. Investigators found that these accounts, maintained across different banks and payment platforms, witnessed suspicious transactions ranging from ₹2 crore to ₹7 crore in a single day. The findings have prompted investigators to widen the probe beyond account holders to examine whether procedural lapses or collusion enabled the continued operation of these high-risk accounts.
According to investigators, the accounts came under scrutiny while tracing the money trail in multiple cyber fraud cases. Analysis of NCRP data collected since January 2025 revealed that each of the seven accounts had attracted thousands of complaints from victims across the country. Despite the unusually high number of complaints, several of the accounts allegedly remained operational for prolonged periods, allowing large volumes of suspected fraudulent funds to continue moving through the banking system.
The investigation found a recurring pattern in the transactions. Officials said crores of rupees were credited into the accounts and transferred or withdrawn within hours, a pattern commonly associated with organised cybercrime and money laundering. Investigators suspect that these accounts functioned as mule accounts, receiving proceeds of cyber fraud before routing the money through multiple accounts to conceal its origin and make recovery more difficult.
Authorities are now examining whether banking safeguards, transaction-monitoring systems, and compliance mechanisms were followed in accordance with regulatory requirements. Investigators believe accounts generating such an extraordinary number of complaints should have triggered enhanced due diligence, internal reviews, and timely restrictions on suspicious transactions. The inquiry is focusing on whether negligence or deliberate facilitation allowed these accounts to remain active despite repeated fraud reports.
The probe has also expanded to the role of banking personnel. Investigators are analysing account-opening documents, Know Your Customer (KYC) records, transaction histories, internal alerts, and communication between bank branches and their headquarters. The objective is to determine whether warning signs were overlooked or whether any individuals knowingly assisted the operation of accounts allegedly used in cyber fraud schemes.
According to the investigation, the institutions linked to the highest number of NCRP complaints include Jio Payments App with 15,434 complaints, Punjab & Sind Bank with 10,770, Yes Bank with 10,604, NSDL-related accounts with 9,021, Sarvodaya Bank with 7,772, Fino Payments Bank with 5,701, and the State Bank of India (SBI) with 5,532 complaints. Investigators clarified that these figures relate to complaints associated with accounts maintained on these platforms and do not, by themselves, establish wrongdoing by the institutions.
Reports have been sought from the headquarters of the concerned banks regarding the operation of these accounts, the monitoring measures adopted, and the action taken after complaints were received. Investigators are analysing the responses alongside transaction records and digital evidence to determine whether regulatory obligations were fulfilled and whether additional individuals should be brought under the scope of the investigation.
Renowned cybercrime expert and former IPS officer Prof. Triveni Singh said that mule bank accounts have become one of the most critical components of organised cybercrime networks. According to him, fraudsters rely on such accounts to rapidly layer and disperse stolen funds before victims or authorities can freeze the transactions. He stressed that banks must strengthen real-time transaction monitoring, promptly act on repeated fraud complaints, and ensure stricter KYC verification to prevent the misuse of the financial system. He also advised citizens never to transfer money to unknown accounts without proper verification and to report cyber fraud immediately through the National Cyber Crime Helpline 1930 or the National Cyber Crime Reporting Portal, as timely reporting significantly improves the chances of tracing and freezing stolen funds.
The investigation remains ongoing, and authorities have indicated that further legal action will be initiated if additional evidence establishes the involvement of other individuals or reveals violations of regulatory obligations. Investigators believe the findings could lead to broader reforms in banking surveillance, compliance, and fraud detection systems to curb the growing misuse of financial channels by organised cybercrime networks.
