Rajasthan Police have arrested four people in connection with an alleged ₹6.80 crore “Boss Scam” cyber fraud in which criminals allegedly hacked a company’s computer system, impersonated its director and tricked the accounts head into transferring money to three bank accounts. Police said ₹3.50 crore of the defrauded amount has been placed on hold.
Algoritha Security Launches ‘Make in India’ Cyber Lab for Educational Institutions
How did the ₹6.80 crore Boss Scam happen?
According to police, cybercriminals targeted the private firm’s computer system on August 26 using “Tarzan” malware. They allegedly gained access to the company director’s WhatsApp Web session through the AnyDesk application.
The fraudsters then allegedly created a replica of the director’s chat history and saved a new number under his name. Using that identity, they messaged the company’s accounts head and induced him to transfer ₹6.80 crore into three separate bank accounts. Police said the transaction had not been authorised by any director.
Who has been arrested in the case?
Additional Director General of Police, Cyber Crime, V.K. Singh said the arrests followed a complaint lodged by Sunil Joshi, the accounts head of the private limited firm. The State Cyber Crime Police Station acted on a complaint received through the National Cyber Crime Helpline 1930.
Police identified the arrested suspects as Jaipur residents Mayank Kasotia and Brijmohan Dron alias “Lucky”, Samanaram of Deedwana-Kuchaman and Moti Yadav of Sikar.
Where did the stolen money go?
The initial investigation found that the fraud proceeds were allegedly distributed through mule accounts, digital wallets, QR codes and cryptocurrency.
How were Telegram and cryptocurrency used in the fraud?
Police said the fraudsters monitored the movement of funds through a Telegram channel. Bank accounts, ATM cards, SIM cards and passbook kits were allegedly purchased from individuals for between ₹10,000 and ₹15,000.
The money was then transferred into these accounts before being moved further. Police said masterminds operating from Singapore and Hong Kong used internet banking to route funds into various other accounts.
Kasotia allegedly provided his bank account for receiving proceeds from cyber fraud. After money reached the account, he allegedly withdrew cash through cheque and handed it to Ashish and Brijmohan. Police said some of the money was also transferred through QR codes and digital wallets.
Brijmohan allegedly arranged bank accounts for the cyber fraud network and facilitated transfers through mule accounts. Police said he used Telegram and Binance to convert illicit funds into USDT before forwarding them to the alleged mastermind.
Investigators said Samanaram connected Brijmohan with cryptocurrency transactions through Telegram. Yadav allegedly helped arrange bank accounts, transfer money to mule accounts, facilitate cash withdrawals and manage subsequent transfers. He was also allegedly involved in converting funds into USDT and transferring the cryptocurrency.
Police said ₹3.50 crore out of the ₹6.80 crore allegedly defrauded has been placed on hold, and efforts are underway to secure a refund.
How can businesses protect themselves from Boss Scams?
Companies should independently verify unusual or high-value payment instructions before transferring funds, even when a message appears to come from a senior executive.
Employees should also treat unexpected remote-access requests, changed phone numbers and urgent payment instructions with caution and immediately report suspected cyber fraud through official channels.
About the author — Ayesha Aayat writes on cybercrime, digital safety, and emerging online threats. Her work focuses on public awareness, legal clarity, and technology-driven risks.
