The Mumbai Crime Branch has dismantled a highly organized cyber-fraud syndicate that used WhatsApp executive impersonation to siphon off more than ₹10.40 crore from a single corporate bank account. Operating across Maharashtra, Delhi, and Bihar, the criminal network manipulated senior corporate personnel before laundering the stolen wealth through physical bullion markets. Local detectives have taken six suspects into custody, while rapid-response coordination with compliance officers successfully intercepted and froze a major portion of the siphoned capital.
Registration Begins for FutureCrime Summit 2026, India’s Largest Cybercrime Conference
Executive Impersonation and the 63-Transaction Drain
The sophisticated social engineering attack unraveled over a twelve-day period between June 3 and June 15, targeting a 63-year-old corporate representative. The victim received urgent communications on WhatsApp from an account displaying the name and profile picture of his company’s internal director. Claiming to be locked in highly confidential, back-to-back international business meetings, the faux executive instructed the employee to clear immediate capital disbursements to finalize critical strategic partnerships.
Relying entirely on the psychological authority of the executive’s digital profile, the employee bypassed secondary validation channels. Over the course of nearly two weeks, the victim executed a staggering 63 consecutive real-time gross settlement (RTGS) transactions from the company’s central account, routing an aggregate total of ₹10,40,40,000 directly into the syndicate’s layered banking network. The structural deception collapsed on June 16, when the employee finally established direct voice contact with the actual director, who confirmed that no such financial mandates had ever been authorized.
Multi-State Raid Networks and Tihar Jail Interceptions
Upon receiving the formal complaint, the Mumbai Crime Branch and specialized Cyber Cells launched an immediate digital asset tracking run. By monitoring the real-time velocity of the transferred capital, cyber investigators traced the initial incoming funds as they split across dozens of regional proxy accounts. Rapid-response teams carried out synchronized raids at multiple locations, apprehending key immediate fund handlers and account mules across Jalna in Maharashtra, Bihar, and Delhi.
Among the primary operatives intercepted was 22-year-old Vikas Upendra Bind, whom Mumbai detectives took into custody directly from Tihar Jail in New Delhi after digital logs proved his personal accounts had swallowed an immediate layer of ₹9.90 lakh. During the physical containment sweeps, investigators seized high-value evidence matrices consisting of specialized mobile communication terminals, active bank passbooks, and commercial ATM cards used to execute rapid local cash liquidations.
Bullion Laundering Matrices and Sovereign Interventions
The deep-dive financial audit revealed a highly strategic laundering pattern designed to neutralize standard electronic tracing protocols. Rather than attempting to hold the stolen capital within digital wallets or web interfaces, the syndicate systematically converted the electronic balances into untraceable physical assets. The network utilized localized couriers to purchase high-volume gold bars and luxury ornaments from premium jewelry showrooms spread across Uttar Pradesh, Bihar, West Bengal, Delhi, and Maharashtra.
The Mumbai Police have officially booked the arrested individuals under relevant punitive sections of the Bharatiya Nyay Sanhita (BNS) and the Information Technology Act. While the initial swift interventions successfully blocked and froze ₹5.63 crore before it could be converted into bullion, special operation teams are continuing aggressive tracking maneuvers across Uttar Pradesh and Bihar to capture the absconding kingpin and secondary structural architects. Cyber enforcement commands have issued an immediate alert to corporate accounting desks nationwide, mandating that any high-value fund transfers requested via messaging applications must undergo strict, independent multi-factor voice or physical authorization before any capital is cleared.
