Muzaffarnagar: Cyber fraudsters allegedly exploited a trader’s WhatsApp identity to induce his company to transfer ₹2 crore to a bank account in Hyderabad. The fraudsters reportedly used the trader’s previous chat history to gain the confidence of an employee and send payment instructions. After the fraud was detected, cyber police traced the flow of the money across multiple states and managed to block around ₹1.23 crore in more than 24 bank accounts. Following the required legal and banking procedures, ₹1.04 crore was subsequently recovered and returned to the victim.
The case involves Kushagra Agrawal, a resident of Patel Nagar under New Mandi police station. He is a partner in Future Mobile LLP, a company involved in wholesale distribution of mobile phones and electronic products as well as online supply operations. According to police, on July 20, 2025, cyber fraudsters allegedly cloned or misused the trader’s WhatsApp profile and subsequently contacted an employee through messages containing payment instructions.
The fraudsters reportedly used old conversations between the trader and the employee to make the messages appear genuine. The familiar communication style and references to earlier conversations helped create the impression that the instructions had actually come from the trader. Taking advantage of this trust, the employee was asked to transfer ₹2 crore to an account in the name of Subramanyam Impex Private Limited with ICICI Bank in Hyderabad.
Believing the instructions to be genuine, the employee transferred the money. Once the amount reached the account, the fraudsters allegedly began moving it through multiple bank accounts in an attempt to make tracing and recovery difficult.
After receiving the complaint, the cyber crime police began tracking the financial trail. The investigation reportedly showed that the fraud proceeds moved through accounts linked to Andhra Pradesh, Hyderabad, West Bengal, Lucknow and other locations. Police coordinated with banks and identified accounts through which the money had been transferred. As part of the immediate intervention, around ₹1.23 crore was placed on hold across more than 24 bank accounts.
The police then initiated the necessary banking and judicial procedures to facilitate recovery of the blocked funds. Their efforts resulted in ₹1.04 crore being returned to the victim. The investigation into the remaining amount and the complete financial trail is continuing. Investigators are also examining how the fraudsters gained access to or misused the trader’s WhatsApp identity and what information about the trader and his business they had obtained before approaching the employee.
Cybersecurity experts say such frauds often rely more heavily on social engineering than conventional technical hacking. Fraudsters first gather information about a target’s digital identity, contacts, previous conversations and business relationships. They then use that information to impersonate a trusted individual and persuade an employee, family member or associate to make a payment or disclose sensitive information.
Renowned cyber crime expert and former IPS officer Prof. Triveni Singh said businesses should not treat a familiar digital identity as sufficient proof for authorising a financial transaction. According to him, even when a message appears genuine and contains references to previous conversations, high-value payments should always be verified through a separate communication channel. Familiar language, a profile photograph or details from earlier chats cannot by themselves establish that the person issuing the instruction is genuine.
Experts recommend that companies introduce a two-level verification system for high-value transactions. Payment instructions received through WhatsApp or other messaging platforms should not be acted upon solely on the basis of the sender’s identity. Employees should independently contact the concerned authorised person, verify the transaction and follow a defined approval process before transferring large amounts.
The incident highlights how cybercriminals are increasingly exploiting existing digital information to create convincing impersonation scams. Instead of relying only on fake links, one-time passwords or malicious applications, fraudsters can use old conversations and business details to create the appearance of an authentic relationship.
In this case, swift intervention by the cyber police helped prevent a substantial portion of the defrauded money from being withdrawn or moved beyond recovery. Investigators are continuing to examine the movement of the remaining funds, the bank accounts involved and the method used to compromise or misuse the trader’s digital identity. The case also underlines the importance of reporting financial cyber fraud immediately, as early intervention can significantly improve the chances of freezing and recovering the stolen funds.
https://www.linkedin.com/company/policetechnology
About the author — Suvedita Nath is a science student with a growing interest in cybercrime and digital safety. She writes on online activity, cyber threats, and technology-driven risks. Her work focuses on clarity, accuracy, and public awareness.
