Amid the rapid rise of e-commerce and digital payment-related cybercrime in India, the Delhi Police have busted a major e-commerce fraud network under ‘Operation Cy Hawk’. Investigators said the syndicate was allegedly carrying out organized financial fraud using online shopping platforms, digital payment systems, and fake identities. The operation is being viewed as a significant breakthrough in the fight against increasingly sophisticated cybercrime networks.
The action was conducted as part of the Delhi Police’s ongoing cybercrime enforcement initiative, Operation Cy Hawk, which focuses on identifying and dismantling organized groups involved in technology-enabled financial crimes. According to investigators, digital evidence and the analysis of financial transactions played a crucial role in tracing the network and uncovering its operations.
Registration Begins for FutureCrime Summit 2026, India’s Largest Cybercrime Conference
Exploiting Loopholes in Return Policies
Preliminary findings suggest that the accused exploited weaknesses in e-commerce processes to carry out fraudulent orders, manipulate payment mechanisms, and misuse delivery systems. The syndicate specifically targeted the automated return-and-refund algorithms of major online marketplaces. By ordering high-end electronics and subsequently filing fraudulent return requests, they managed to ship back counterfeit or cheap substitute items while successfully triggering full automated refunds from the e-commerce platforms.
Investigators believe members of the network operated in a coordinated manner, with different individuals handling separate stages of the fraud, making detection and enforcement more challenging. The gang also utilized compromised delivery partner applications to alter destination coordinates in mid-transit, allowing them to intercept valuable shipments under proxy identities.
Mule Account Grids and Layered Routing
Officials said the syndicate relied on multiple online accounts, mobile connections, and banking channels to complicate transaction trails. In several instances, bank accounts were allegedly used solely to receive and transfer illicit funds. Such accounts are commonly referred to as “mule accounts” in cybercrime investigations. These accounts help criminals move money through multiple layers in an attempt to conceal the origin and destination of funds.
During the operation, Delhi Police conducted raids at several locations and arrested multiple suspects. Authorities also seized mobile phones, laptops, banking documents, SIM cards, and other electronic devices believed to be linked to the fraudulent activities. The seized materials are currently undergoing forensic examination to identify additional members of the network, financial beneficiaries, and potential associates.
Expanding the Inter-State Crackdown
Investigators suspect that the syndicate’s activities extended beyond a single city or state. Early evidence indicates possible links with cybercriminals operating in different parts of the country. As a result, the scope of the investigation has been expanded, and coordination with law enforcement agencies in other states is underway. Police are now working to determine the total number of victims affected by the scheme and the overall financial losses caused by the network. Officials said a detailed review of digital financial records and online activities is being conducted to map the organization’s complete operational and financial structure.
Cyber fraud linked to e-commerce platforms has grown significantly in recent years. Criminals increasingly use fake refund offers, counterfeit delivery notifications, fraudulent payment links, bogus customer service calls, and identity theft techniques to target unsuspecting consumers. The growing popularity of online shopping has also created new opportunities for organized cybercriminal groups.
Technological Evolution of Digital Syndicates
Renowned cybercrime expert and former IPS officer Prof. Triveni Singh said that organized cyber fraud syndicates are now operating with greater technical sophistication than many traditional financial criminals. According to him, such networks frequently employ social engineering tactics, fake digital identities, and mule bank accounts to obscure the movement of illicit funds. He emphasized that consumers should use only official websites and mobile applications while shopping online and remain cautious of suspicious links, unsolicited payment requests, and fake customer support communications.
Delhi Police has urged citizens to immediately report any suspicious online activity, fraudulent shopping offers, or digital payment scams through the National Cyber Crime Reporting Portal or the nearest cyber police unit. Officials stated that operations under Cy Hawk will continue in the coming months with the objective of dismantling the financial and technological infrastructure that supports organized cybercrime networks across the country.
