Delhi Police’s Crime Branch has busted an organised cyber fraud gang that posed as officials of Indraprastha Gas Limited (IGL) to dupe unsuspecting consumers. The police have arrested three men who allegedly siphoned money from victims’ bank accounts by getting them to install malicious APK files under the pretext of updating gas bills or clearing pending dues.
The arrested accused have been identified as Bikky Mandal alias Vicky, a resident of Asansol in West Bengal; Sumit Kumar Singh from Jamtara in Jharkhand; and Rajiv Kumar Mandal. A case has been registered against them under Sections 318(4), 319 and 3(5) of the Bharatiya Nyaya Sanhita. According to investigators, the arrests followed a complaint by a retired Army officer, whose bank account was fraudulently debited by ₹91,449 after he was persuaded to install a fake application on his mobile phone.
Certified Cyber Crime Investigator Course Launched by Centre for Police Technology
How the fraud was executed
Investigations revealed that the accused would call potential victims, introducing themselves as IGL representatives. They would warn consumers about pending gas bills, account updates or possible disconnection, creating a sense of urgency. Victims were then asked to download an APK file, falsely projected as IGL’s official mobile application.
Once installed, the app secretly sought extensive permissions, allowing the accused to read OTPs, mirror phone screens, intercept messages and access banking applications. This enabled them to authorise transactions and transfer money from the victims’ bank accounts without their knowledge.
Fake apps mimicking trusted institutions
The Crime Branch said that nine mobile phones were recovered from the accused during the operation. A digital forensic analysis found that seven devices contained multiple fraudulent applications, designed using the names, logos and interfaces of reputed institutions such as IGL, State Bank of India, RTO challan services and Tata Power.
“These apps were not meant to provide any service. Their sole purpose was to gain the user’s trust and covertly steal sensitive financial information,” an investigator said, adding that the designs closely resembled genuine applications, making it difficult for ordinary users to detect the fraud.
Links to 35 cybercrime complaints
Further probe established that the gang was linked to 35 separate cyber fraud complaints registered on the National Cyber Crime Reporting Portal (NCRP). Records showed that Bikky Mandal had earlier been involved in cyber fraud cases in Asansol, while Sumit Kumar Singh had multiple criminal cases, including cheating and cyber offences, registered against him in Jharkhand. Rajiv Kumar Mandal, police said, played an active role in coordinating operations and managing fraudulent transactions.
What is an APK file
An APK (Android Package Kit) is the installation file used for Android applications, similar to an .exe file used to install software on computers. Cyber fraudsters often create tampered or malicious APK files and circulate them in the guise of KYC updates, bill payments, reward claims or government applications. Once installed, such apps can give fraudsters complete control over the device.
IGL issues warning to consumers
IGL, in an advisory, warned consumers against responding to suspicious calls related to bill payments or connection disconnection. The company said customers should verify any such communication through official IGL offices or customer care numbers and make payments only through authorised platforms. Consumers have also been advised not to download applications shared via calls or messages.
How to stay safe
- Do not install apps from outside the Google Play Store
- Avoid clicking on unknown links or APK files
- Keep the ‘Unknown Sources’ option disabled on your phone
- Do not grant unnecessary permissions to applications
- In case of suspicion or fraud, immediately report it by calling 1930
Police have urged citizens to remain vigilant and ignore unsolicited calls or messages seeking personal or financial information. Further investigation into the racket is underway.
About the author – Ayesha Aayat is a law student and contributor covering cybercrime, online frauds, and digital safety concerns. Her writing aims to raise awareness about evolving cyber threats and legal responses.
