Pakistan’s National Cyber Crime Investigation Agency has arrested three men in Lahore for their alleged involvement in an international cyber fraud syndicate that used artificial intelligence to fabricate identities and target Canadian financial institutions. Investigators stated that the cross-border network linked three Pakistani operatives with four Indian nationals residing in Canada. The syndicate allegedly manufactured counterfeit passports and synthetic photographs to bypass digital banking verification procedures, successfully opening fraudulent online accounts and running up credit card balances.
Synthetic Documents Used to Defeat Bank Verification Systems
According to the investigating agency, the Pakistani suspects were taken into custody on October 19 in Lahore and have been identified as Subhan Butt, Gulrez Butt, and Muhammad Noman. Law enforcement authorities identified the four associates based in Canada as Deep Singh, Parjeet Singh, Harpreet Singh, and Gurleen Singh. The current legal status of the four men in Canada remains unconfirmed, with no formal indication yet of whether Canadian authorities have initiated arrests or filed charges against them.
Investigators stated that the suspects in Canada generated fraudulent passports and corresponding portraits using artificial intelligence tools before transmitting the files to their collaborators in Pakistan. The Pakistani operatives then utilised the fabricated credentials to submit online account applications at major Canadian banks. To evade security detection, the syndicate allegedly deployed an anti-detect browser application called Dolphin Anty to alter and mask hardware configurations and browser fingerprints. This digital camouflage helped conceal their physical locations and made it considerably harder for automated fraud detection platforms to link multiple illicit accounts to a single source.
Credit Cards Exhausted and Discarded Across Canada
Once the financial accounts were approved and established online, the associated credit cards were issued and delivered to the syndicate members living in Canada. Investigators allege that the Canadian-based operators systematically spent up to the maximum allowable credit limits on each card before discarding them, leaving the issuing lending institutions to absorb the resulting bad debts.
The fraudulent scheme came to light after compliance teams detected suspicious financial transactions linked to irregular identity documents. While the scheme caused notable financial losses to Canadian lenders, the agency has not yet made public the identities of the targeted banks, the overall number of accounts compromised, or the aggregate monetary sum extracted through the credit lines. Digital forensics teams are currently auditing transactional records to establish the full scope of financial exposure.
Digital Devices Seized as Cross-Border Inquiry Expands
During the enforcement operation in Lahore, investigators seized four laptops, four mobile phones, and a printed physical copy of a counterfeit Canadian passport. Cyber forensic specialists are examining communication logs, browser caches, and digital files retrieved from the confiscated hardware to chart the network’s operational structure and trace the final destination of the stolen funds.
The agency noted that the Lahore raids were conducted alongside three other operations against separate cybercrime groups, culminating in 10 total arrests across the city, though not all detainees were linked to the Canadian bank fraud. The inquiry remains ongoing as Pakistani authorities seek to verify the full network hierarchy, identify further co-conspirators, and clarify the roles played by their counterparts abroad.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
