The North Cyber Police of Mumbai Police have busted a multi-layered cyber fraud network operating across the country and arrested a 23-year-old man from Surat. Investigators say the gang was simultaneously running malware distribution, fake investment schemes and social media “like-and-share” scams.
The arrested accused has been identified as Narayan Shankar Mali, a native of Rajasthan’s Bhilwara district. He was residing in Surat, Gujarat, where he managed his brother-in-law’s ice cream shop. Police claim the shop was being used as a cover while he actively assisted cyber fraudsters behind the scenes.
Certified Cyber Crime Investigator Course Launched by Centre for Police Technology
Technical Probe Unravels the Network
According to police officials, the accused was traced through bank KYC records, digital trails and technical analysis carried out by the cyber team. He was apprehended in Surat last week and brought to Mumbai for further interrogation.
Preliminary investigations suggest that Mali acted as a financial coordinator and digital distributor within the network. He allegedly facilitated the routing of defrauded funds through multiple bank accounts and circulated fraudulent application links used in various scams.
E-Challan Malware Attack on Bank Accounts
During questioning, investigators uncovered his alleged involvement in an e-challan malware racket. The gang reportedly sent fake e-challan APK files to thousands of mobile numbers across India.
Once downloaded, the malicious APK granted remote access to victims’ phones. This enabled fraudsters to access banking details, intercept OTPs and extract sensitive personal data, leading to unauthorised financial transactions.
Police said Mali worked in coordination with four associates based in Rajasthan’s Bhilwara district to operate this module and earned commissions for each successful malware installation.
Investment and ‘Like-and-Share’ Scams Also Active
The investigation further revealed that the network was running fake investment and share trading schemes, luring victims with promises of high returns. Through fraudulent apps and websites, investors were shown fabricated profits while the actual funds were siphoned off into multiple accounts.
In the “like-and-review” social media scam, individuals were initially offered small payments for liking or reviewing online content. Later, they were persuaded to deposit larger sums under various pretexts, ultimately resulting in financial loss.
Interstate Links Under Scanner
Police have begun analysing seized digital devices, bank records and transaction trails to identify additional suspects and beneficiaries. The possible involvement of associates in Gujarat and Rajasthan is also under investigation.
Officials believe the network may have operated across multiple states, though the total amount siphoned off is still being assessed. The accused remains in police custody as further questioning continues.
Advisory to Citizens
Cyber police have urged citizens not to download APK files received through unknown links or messages. They advised verifying e-challan notifications only through official government portals and exercising caution against schemes promising guaranteed returns or easy earnings via social media.
The case underscores the growing sophistication of cybercrime networks that use legitimate-looking businesses as fronts while running coordinated digital fraud operations nationwide.
About the author – Ayesha Aayat is a law student and contributor covering cybercrime, online frauds, and digital safety concerns. Her writing aims to raise awareness about evolving cyber threats and legal responses.
