An Ahmedabad businessman allegedly lost ₹2.33 lakh from three bank accounts after his mobile phone suddenly became unresponsive during an unexpected software update, highlighting how one compromised device can expose multiple personal and business accounts linked to the same number.
The incident was reported by Kuldip Rajendrakumar Sharma, a businessman from Shahibaug, who told police that seven unauthorised transactions were carried out from three HDFC Bank accounts on October 24.
The affected accounts included his business current account, his personal account and an account belonging to his daughter. Police are now investigating how access to the handset and banking services was obtained.
Seven Transactions Drain Three Linked Accounts
According to the complaint, Sharma’s phone unexpectedly began showing what appeared to be a software update on October 24.
During the process, the device became unresponsive, preventing him from using it normally.
Soon afterwards, money began leaving bank accounts linked to the same mobile number.
Police records cited in the report show that ₹89,999 was withdrawn from Sharma’s business current account, ₹83,332 from his personal account and ₹60,000 from his daughter’s account.
The combined loss was ₹2,33,331.
The money was allegedly moved through seven separate transactions.
Shahibaug police have registered a case and are examining the digital and financial trail to determine how the transactions were authorised and whether malicious software or another form of device compromise was involved.
One Phone Became A Common Point Of Failure
The case is significant because the alleged compromise was not limited to a single bank account.
Multiple accounts were apparently connected through the same handset and mobile number, creating a common point through which several financial relationships could potentially be accessed.
Modern banking increasingly relies on mobile phones for authentication. Banking apps, payment platforms, OTP messages, transaction alerts and recovery processes are often tied to one registered number and one device.
This makes the phone convenient, but it also concentrates risk.
If criminals gain control of a device, its messages or banking sessions, the impact can extend beyond one savings account. Personal accounts, business accounts and even accounts belonging to family members may be exposed if they rely on the same device or number for authentication.
In Sharma’s case, the presence of both a business current account and family-linked accounts meant that the alleged compromise affected different pools of money through one device.
Fake Update Cases Show A Repeated Pattern
Ahmedabad has previously seen cyber-fraud cases in which victims reported suspicious software updates shortly before unauthorised withdrawals.
In such incidents, the apparent “update” may serve as a distraction or may involve malicious software designed to interfere with the phone.
However, investigators in the present case have not yet publicly established exactly how Sharma’s handset was compromised.
That distinction is important.
A genuine operating-system update, a malicious application, remote-access software or stolen credentials can produce very different technical trails. Police will need to examine the handset, installed applications, login records, transaction authentication and beneficiary accounts before determining the precise method.
The important warning for users is therefore broader than avoiding one particular type of update notification.
Unexpected device behaviour followed by banking problems should be treated as a possible security incident, especially where the same phone controls several financial accounts.
Why Linking Several Accounts To One Number Raises The Stakes
Using one mobile number across several financial services is common and often unavoidable. Banks depend on registered numbers for alerts, OTPs and account verification.
But the Ahmedabad case shows how that convenience can amplify losses when several accounts are connected to the same digital identity.
A business owner may have a current account for commercial transactions, a personal savings account and family accounts accessible from the same device. Once criminals gain sufficient access, they may attempt transactions across all available accounts rather than stopping after the first successful withdrawal.
The risk becomes greater when payment applications and banking apps are also installed on the same handset.
This does not mean users should necessarily maintain a different phone for every account. It does mean that one compromised phone should be treated as affecting every financial service linked to it.
Blocking only one debit card or checking only one account may not be enough.
Users who notice an unexplained software installation, loss of device control or suspicious banking activity should immediately contact all banks connected to the phone, block digital banking where necessary and report the incident through official cybercrime channels.
Investigation Focuses On How Access Was Obtained
Police are now expected to examine transaction records, beneficiary accounts and the affected handset to reconstruct what happened during the period when Sharma’s phone became unresponsive.
The seven transactions may also help investigators determine whether the money was routed through a common beneficiary network or divided across several mule accounts.
For cybercrime investigators, such financial trails can be critical in identifying the people who received, transferred or withdrew the stolen funds.
The case also shows why cyber-fraud investigations increasingly focus not only on the amount stolen, but on the wider digital environment surrounding a victim.
When banking, payments, authentication and family finances converge on a single smartphone, the compromise of that one device can create consequences across several accounts at once.
