A major mule account racket linked to cybercrime has been exposed in Ahmedabad, where more than 100 bank accounts were allegedly opened in the names of economically weaker and vulnerable individuals and later used for online frauds across India. The network was uncovered following an operation by the Ahmedabad Zone-1 Local Crime Branch (LCB), which led to the arrest of one accused, while five others are currently absconding.
FCRF’s Flagship Cyber Law Certification Returns With a New Four-Week Cohort
According to police investigations, the gang had been operating for nearly 14 months in a highly organised manner. Members of the syndicate targeted daily wage earners and financially distressed individuals by luring them with small monetary incentives to open bank accounts in their names. Once the accounts were activated, the banking kits—containing ATM cards, passbooks, and cheque books—were retained by the accused and subsequently passed on to cybercriminal networks.
The arrested accused has been identified as Neerav Shah, who was apprehended from the Naranpura area of Ahmedabad. Police recovered three ATM cards, one bank passbook, and two mobile phones from his possession. Initial interrogation revealed that Shah and his associate Vishal Kotak were key operators of the racket, managing the procurement and distribution of mule accounts.
Investigators further found that the gang operated in labour-dominated localities, identifying individuals in urgent need of money. These individuals were persuaded to open bank accounts in exchange for small payments. Once the accounts became operational, the entire banking kit was collected and routed through intermediaries to cyber fraud networks operating across the country.
Several other individuals have also been linked to the racket, including names such as Dev Modhera, Patelbhai, Gopal Panchal, and Vicky. These associates were reportedly involved in managing account operations, arranging SIM cards, and maintaining minimum balances required for account activity. Police stated that the network functioned in a structured and coordinated manner to ensure that transactions could not be directly traced back to the primary cybercriminals.
The investigation also revealed that these bank accounts were used in multiple online fraud cases registered across different states. Financial trails from various cybercrime incidents indicate that money was routed through these accounts, confirming that the network was not limited to Ahmedabad but operated on an inter-state scale.
Officials described the operation as a “human supply chain” model, where the identities of vulnerable individuals were exploited to breach banking systems. These accounts were then sold or transferred to cyber fraud operators, who used them for investment scams, online shopping frauds, and digital payment deception schemes.
A case has been officially registered at Naranpura Police Station, and further investigation is underway. Based on the interrogation of the arrested accused, police teams are actively working to trace the remaining links in the network and locate the absconding individuals.
Experts have noted that mule accounts have become one of the most critical enablers of cybercrime in recent years. Such networks continue to fuel large-scale digital fraud operations by providing anonymity and financial routing channels for criminals.
This case once again highlights the urgent need for stronger KYC verification systems and enhanced scrutiny of account ownership processes in the banking sector. With the rapid expansion of digital transactions, such organised networks pose a growing threat to both consumers and financial institutions.
Cyber agencies are now closely examining the financial trails, digital footprints, and inter-state connections of the racket to determine the total scale of fraud conducted through these accounts and to identify all individuals involved in the wider network.
