Hyderabad. In a major crackdown on cybercrime, authorities have busted a well-organised interstate online banking fraud racket operating across multiple states, arresting six accused individuals involved in large-scale financial deception using advanced social engineering and telecom manipulation techniques.
The gang allegedly targeted victims by impersonating bank and telecom department officials, tricking them into surrendering sensitive mobile and banking access under the guise of security upgrades and account verification procedures. Investigators revealed that the accused used vishing (voice phishing), SIM manipulation, OTP diversion, and fraudulent banking transactions to gain unauthorised access to victims’ financial accounts.
Registration Begins for FutureCrime Summit 2026, India’s Largest Cybercrime Conference
The Mechanics of SIM Exploitation
According to findings from the investigation, the accused posed as executives from a reputed credit card division and contacted victims under the pretext of urgent security alerts. They convinced users that their e-SIM needed to be converted into a physical SIM for security reasons. During this process, victims were guided into actions that effectively transferred control of their mobile services to the fraudsters.
Once access was established, the gang systematically escalated control over the victims’ digital banking ecosystem. In several instances, the accused allegedly sent mobile devices preloaded with malicious applications. As soon as victims inserted their SIM cards into these compromised devices, OTPs and banking alerts were silently redirected to the fraud network, allowing unrestricted access to online banking portals.
With full control over authentication systems, the fraudsters proceeded to initiate unauthorised fund transfers, draining bank accounts through a series of digital transactions. Authorities noted that in multiple cases, victims remained unaware for extended periods, as transactions were executed in a manner that avoided immediate detection. In some instances, complete banking control was reportedly seized, enabling large-scale monetary theft.
A Structured Interstate Operation
Preliminary investigation suggests that victims from several states across the country were targeted over the past few months. The operation was highly structured, with different members assigned specific roles including calling targets, managing device distribution, handling malware operations, and executing financial transfers.
Cybersecurity experts have highlighted that social engineering has become one of the most powerful tools in modern cyber fraud. Commenting on the case, renowned cybercrime expert and former IPS officer Prof. Triveni Singh said, “Today’s cybercriminals rely more on human psychology than on technology. They build trust by impersonating banks and government institutions. Once a user is convinced, the entire digital ecosystem becomes vulnerable. Attacks such as OTP theft and SIM swap clearly show that cybersecurity is not only about technology, but equally about awareness.”
He further noted that with the rapid adoption of e-SIM technology and digital banking services, such attacks are becoming increasingly sophisticated and harder to detect. Users who fail to remain vigilant may face significant financial losses even without making any technical mistakes themselves.
Preventative Measures and Next Steps
Authorities have urged citizens to remain cautious and avoid responding to unknown calls, links, or requests related to SIM upgrades or banking verification. It has been reiterated that legitimate banks and telecom operators never request OTPs or SIM changes over phone calls.
Investigating teams are now tracing the financial trail of the racket and examining its links in other states to identify additional members involved in the network. Efforts are ongoing to dismantle the entire syndicate and recover diverted funds as part of a wider crackdown on organised cyber-enabled financial crimes.
