The Cyber Crime Police Station in Sector 17 has launched an intensive technical investigation following a targeted phishing attack that drained the savings of an elderly couple residing in Sector 23-C. The digital extraction resulted in a cumulative direct loss of ₹2,26,563, targeting the senior citizens by weaponizing lookalike corporate service representations and artificial banking validation routines. Enforcement teams have successfully frozen one primary destination account as they track the movement of the stolen capital across multi-state proxy channels.
Registration Begins for FutureCrime Summit 2026, India’s Largest Cybercrime Conference
The Home-Service Bait and Multi-Account Drain
The structural deception was initiated when the primary complainant, Harish Chander Madan, received an unsolicited voice call from an operative presenting himself as a customer representative for Urban Company (formerly UrbanClap). The caller, identifying himself under the alias Amit Kumar, offered immediate, discounted assistance with domestic air-conditioner servicing ahead of seasonal peak loads.
The syndicate executed its fraudulent asset extraction through three heavily synchronized operational phases. The operation began with corporate personation onboarding, where the calling agent deployed a highly polished technical script to establish absolute institutional legitimacy, convincing the couple that they were communicating with a verified service desk. Once psychological trust was established, the scheme transitioned into the artificial transaction validation phase; under the false pretext of completing a mandatory service-related digital banking enrollment procedure, the caller persuaded the couple to initiate a series of online security links. Finally, the sequence culminated in a complete multi-account liquidation lockout; the hidden operators harvested the input authentication codes to bypass primary banking protection blocks, executing consecutive unauthorized withdrawals between May 11 and May 12. The attackers systematically siphoned ₹1,74,149 across two accounts held by Harish Chander at Punjab National Bank and Bank of India, while simultaneously drawing ₹52,414 from three separate accounts belonging to his wife, Madhu Madan.
Technical Trailing and Account Containment
The multi-lakh financial drain collapsed when the couple audited their central banking mobile alerts and discovered the extensive unauthorized account activities. After registering an immediate alert with the national cybercrime helpline grid, specialized forensic squads isolated the incoming transactional paths and digital endpoints.
Preliminary engineering audits mapped the electronic trail directly to three separate destination accounts registered under the identities of Sachin, Sajit Ahmed, and Akhtar Khan. Moving rapidly to exploit the early notification window, Chandigarh detectives successfully enforced a hard debit-freeze constraint on the UCO Bank repository linked to Akhtar Khan, trapping the residual balances before they could be liquidated through localized ATM units. Specialized tracing teams are currently analyzing associated mobile numbers, IP login signatures, and terminal logs to pinpoint the absolute geographic origin of the phishing cell.
Institutional Verification and Legal Enforcement Protocols
The Sector 17 Cyber Crime Police have formally registered a criminal case under the relevant punitive provisions of the Bharatiya Nyaya Sanhita (BNS) covering cheating, cheating by personation, and criminal conspiracy. Investigators are deploying advanced data-carving tools to trace parallel communication links and determine whether the same proxy accounts have been utilized to execute high-volume digital extractions targeting other vulnerable households across the region.
The severe nature of this home-service phishing compromise has prompted union territory safety commands and digital consumer boards to issue immediate protective directives for senior citizens. Residents are strongly cautioned against executing banking transactions, entering electronic account PINs, or interacting with digital links provided over phone calls by unverified service callers. Security architects emphasize that legitimate, on-demand maintenance platforms manage all billing allocations, booking updates, and technician profiles strictly inside their official, end-to-end encrypted mobile applications, advising consumers to permanently disregard unsolicited phone calls offering remote maintenance updates and report high-pressure financial solicitations directly to the central cybercrime helpline (1930).
