Delhi Police have arrested three Ahmedabad residents for allegedly routing proceeds from an APK-based cyber fraud network.
How did the case come to light?
The case surfaced after a man complained that he had been cheated of ₹6.57 lakh after receiving an SMS containing a fraudulent link. An e-FIR was subsequently registered at Cyber Police Station, South, under Section 318(4) of the Bharatiya Nyaya Sanhita.
Police identified the arrested men as Mohd Ismail Ansari, Shaikh Mohammed Nuren and Tarique Ahmad, all residents of Ahmedabad. Investigators recovered 11 credit cards and three mobile phones following the arrests.
During the investigation, police analysed the money trail, banking records and technical evidence. Around ₹4 lakh of the alleged proceeds was traced through two transactions to two credit cards linked to the accused.
Proposal for Conducting Cyber Crisis Drill, Tabletop Exercise (TTEx) & CCMP Readiness Exercise
How was the money allegedly routed?
Police said the investigation indicated that the accused were allegedly supplying multiple credit cards to route proceeds from fraudulent transactions through banking channels in exchange for commission.
Ansari, described by police as a contractual employee of IDBI Bank, allegedly provided multiple credit cards for routing cyber fraud proceeds. Nuren and Ahmad allegedly supplied or arranged credit cards for commission-based routing of fraudulent transactions.
The investigation is continuing into the broader movement of funds and the role of other people allegedly connected with the operation.
How did the APK fraud allegedly work?
According to police, victims were induced to install malicious APK files sent through fraudulent messages. The applications allegedly enabled unauthorised access to victims’ mobile devices and banking-related information. The complaint that triggered the investigation involved an SMS carrying a fraudulent link, after which the victim allegedly lost ₹6.57 lakh.
Police said the financial and technical investigation helped them trace a substantial part of the alleged proceeds to credit cards connected with the accused. The recovery of 11 credit cards is also being examined as part of the investigation into how the network allegedly moved fraudulent funds.
What international links are being investigated?
Police said the accused were allegedly connected with other handlers through WhatsApp and Telegram groups. Technical investigation further indicated that certain WhatsApp numbers associated with the network were linked to the United States.
Investigators are now examining the identities and precise roles of the alleged USA-based handlers, as well as the complete structure of what police described as an international network.
The arrests were made in Ahmedabad as part of the investigation by the Cyber Police Station of Delhi Police’s South District. Police have not disclosed the identities of the alleged overseas handlers or provided further details about their suspected role.
The investigation remains underway as police examine the alleged network, its financial channels and the people suspected of facilitating the movement of cyber fraud proceeds.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
