Ahmedabad Police have uncovered an alleged international cybercrime network linked to the so-called “Boss Scam”, with investigators finding connections to Pakistan and China and identifying 251 complaints across 26 states. Two alleged members of the network have been arrested from West Bengal, while the investigation is being expanded to trace overseas operators, local associates and the financial infrastructure used to facilitate cyber fraud.
According to investigators, the accused had allegedly been operating for the past four to five years and were providing digital infrastructure, SIM cards and one-time passwords (OTPs) to cybercriminals operating from outside India. Police said the network had access to nearly 10,000 devices, including mobile phones and laptops, which have now been deactivated as part of the crackdown.
SIM cards supplied to overseas cybercriminals
The investigation has allegedly revealed that members of the network procured large numbers of SIM cards and supplied them to people operating from other countries. Police said around 4,500 SIM cards were procured for use in cyber fraud.
Investigators also found devices capable of operating multiple SIM cards simultaneously. According to the probe, the infrastructure was connected to cybercrime operations allegedly being run from Islamabad, while Chinese malware was also used in parts of the network.
The alleged arrangement enabled overseas cybercriminals to communicate with victims, distribute malicious links and facilitate unauthorised money transfers. Investigators are now examining how the SIM cards were activated, who controlled the associated accounts and how the proceeds of fraud were moved.
21,000 OTPs allegedly provided
A major part of the alleged operation involved supplying OTPs to cybercriminals. Investigators said the arrested suspects had allegedly provided around 21,000 OTPs and charged approximately ₹100 for each OTP.
Police said the group initially used Telegram to coordinate its activities but later shifted to WhatsApp groups, allegedly to avoid detection. The large volume of OTPs indicates that the network was not limited to isolated fraud attempts but may have functioned as a support layer for multiple cybercrime operations.
The investigation is also examining whether the same infrastructure was used in different types of scams and whether additional operators were involved in collecting and distributing victim data.
251 complaints across 26 states
The scale of the alleged network became apparent during the investigation, with 251 complaints already linked to the group across 26 states. Investigators are now working to establish whether the complaints are connected to a single organised operation or to multiple cybercrime modules using the same infrastructure.
The arrested suspects were reportedly traced to West Bengal, where police conducted raids and recovered mobile phones, SIM-related equipment and other digital evidence. Investigators are analysing the seized devices to identify communication channels, transaction details and links with overseas operators.
The deactivation of nearly 10,000 connected devices is being viewed as a significant disruption to the network’s operational infrastructure. Further forensic examination is expected to reveal additional accounts, phone numbers and communication channels associated with the alleged syndicate.
Expert warns against unverified links
Renowned cybercrime expert and former IPS officer Prof. Triveni Singh said such networks demonstrate how cybercriminal groups increasingly operate through specialised layers, with separate individuals supplying SIM cards, OTPs, digital access and other infrastructure. He said the combination of social engineering, malware and remotely controlled communication channels makes these frauds difficult to detect unless users and organisations verify digital requests independently.
The case also comes amid regulatory warnings about the growing “Boss Scam”, in which fraudsters impersonate senior executives or officials and use compromised messaging accounts or malicious files to induce financial transfers.
Investigation continues into international links
Police are now investigating the alleged Pakistan-China links and identifying possible local accomplices who supplied SIM cards, devices and OTPs. Financial transactions connected with the network are also being examined to determine where the proceeds of fraud were ultimately transferred.
Authorities have urged people not to open unknown files or click on suspicious links without verification. The investigation remains underway, and the final extent of the alleged international cybercrime network will depend on analysis of digital evidence, financial trails and communications recovered from the suspects.
