Varanasi Police Uncover Massive Cyber Fraud Network Allegedly Hijacking OTP Messages

The420.in Staff
5 Min Read

Varanasi police have busted a large cyber fraud network allegedly operating across the country and arrested four people, including the suspected kingpin. Preliminary investigation has revealed suspicious transactions worth around ₹116.86 crore across 41 bank accounts linked to the accused. According to police, the gang allegedly used an application called ‘Expe App’ to gain access to account holders’ mobile messages and obtain one-time passwords (OTPs) sent by banks before rapidly transferring the fraud proceeds through multiple bank accounts.

The operation was carried out jointly by the Cyber Crime Cell and Chetganj police. One of those arrested has been identified as Nitish Kumar Pandey, a resident of Sasaram in Bihar’s Rohtas district. Police are now questioning the accused to identify other members of the network, trace the bank accounts involved and establish the complete flow of the allegedly defrauded money.

FCRF Launches Flagship Certified Cyber Security Auditor (CCSA) Program for Next-Generation Cyber Auditors

Suspicious Transactions Worth ₹116.86 Crore Found in 41 Accounts

According to police, members of the gang allegedly lured people with promises of high returns or commissions within a short period. They then allegedly opened fake firms and bank accounts in their names and used these accounts to receive and transfer proceeds linked to cybercrime.

Investigators have found that money allegedly generated through investment fraud, betting applications and other forms of online cybercrime was routed through these accounts. Police are examining bank statements and transaction records to determine the sources of the ₹116.86 crore in suspicious transactions and identify the accounts to which the money was subsequently transferred.

‘Expe App’ Allegedly Used to Access Mobile Messages

Police claim that the accused used the ‘Expe App’ to activate message-forwarding functionality on the mobile phones of account holders. This allegedly enabled bank messages, including OTPs, to reach the accused.

Once the OTPs were obtained, the accused allegedly transferred money from the affected bank accounts to other accounts. Investigators suspect that the rapid movement of funds through multiple accounts was intended to make it difficult to trace the original source of the money and identify its ultimate beneficiaries.

Police are also examining how many mobile numbers, bank accounts and digital devices were used in the alleged operation.

143 Complaints Reveal Wider Network

During verification through the National Cyber Crime Reporting Portal, police found 143 complaints registered across the country against 41 bank accounts linked to the accused. The complaints indicate that the alleged network was not confined to Varanasi or Uttar Pradesh.

Investigators are now matching the complaints with specific bank accounts and transaction records. The focus is on determining where money from individual cyber fraud cases was deposited, who withdrew or transferred it and what role each accused allegedly played in the network.

Seven Mobile Phones, Laptop and 40 Debit Cards Recovered

Police have recovered seven smartphones, one laptop, 19 cheque books, 40 debit cards, 48 QR scanners and two vehicles from the accused.

The seized electronic devices and banking materials are being subjected to technical examination. Investigators are also checking which bank accounts are connected to the recovered debit cards and documents and whether they were allegedly used to withdraw or transfer cyber fraud proceeds.

OTP Alone Is Not the Only Layer of Banking Security

Renowned cyber crime expert and former IPS officer Prof. Triveni Singh said such cases show why banking security cannot be viewed only through the lens of OTP protection. According to him, if criminals gain unauthorised access to mobile messages or other digital channels linked to a bank account, they may be able to misuse critical parts of the banking process. A comprehensive investigation should therefore examine the device, banking logs, SIM-related activity and the complete financial trail.

Efforts Underway to Freeze Suspected Funds

Police said efforts have been initiated to freeze suspected funds lying in accounts linked to the accused. Investigators are also searching for other members of the alleged network and examining banking records, digital devices and complaints registered on the National Cyber Crime Reporting Portal.

Following the arrest of four accused, the next stage of the investigation is focused on identifying those who allegedly arranged the bank accounts, facilitated fund transfers or operated the wider network. Analysis of the seized digital and banking material is expected to help investigators establish the complete picture behind the ₹116.86 crore in suspicious transactions and determine the actual scale of the alleged cyber fraud.

Stay Connected