Follow us on Google News
Ahmedabad: A cyber fraud case involving the use of a malicious APK file under the pretext of checking an e-challan has come to light in Gujarat’s Ahmedabad, where a key accused has been arrested for allegedly facilitating the siphoning of ₹31.42 lakh. The case once again highlights how cybercriminals are blending malware with social engineering tactics to target unsuspecting users.
https://the420.in/fcrf-academy-launches-cpaml-anti-money-laundering-certification/
Surat Man Held as Alleged Financial Facilitator
According to investigators, the accused, identified as Dhanshyam Bhupatbhai Baraiya, 29, a resident of Hirabagh-Varachha in Surat, played the role of a “financial facilitator” in a larger cyber fraud network. His alleged involvement centered around enabling the movement and utilization of fraudulently obtained funds through various banking channels.
The incident began when the complainant received an APK file on WhatsApp from an unknown mobile number. The file was presented as a tool to check a pending RTO e-challan. Trusting the message, the victim downloaded and installed the application. This action, investigators say, effectively handed over control of the device to the cybercriminals.
Soon after installation, the victim was prompted to enter sensitive personal details, including Aadhaar and PAN information. Unaware of the risk, the complainant complied. Authorities later confirmed that the APK file contained malicious software designed to infiltrate the device, gain unauthorized access, and compromise both communication and financial applications.
Victim’s Bank Account Drained Through Online Transactions
Once inside the system, the attackers allegedly accessed the victim’s WhatsApp account and banking credentials. Using this access, they carried out multiple online transactions from the victim’s Yes Bank current/cash credit account, ultimately siphoning off ₹31.42 lakh.
Following the complaint, a case was registered under relevant provisions of the Bharatiya Nyaya Sanhita and the Information Technology Act. Investigators used technical analysis, digital forensics, and intelligence inputs to trace the flow of funds and identify individuals linked to the operation.
During the probe, Baraiya’s financial connections to the fraud network emerged. Authorities allege that he provided his credit card and related banking instruments to other members of the syndicate. These accounts were then used to route the defrauded money, effectively helping obscure the money trail.
Investigators further revealed that the siphoned funds were not merely transferred but also utilized strategically. A portion of the money was allegedly used to repay personal loans taken against credit cards linked to the accused, indicating direct financial benefit and active participation in the laundering process.
Organized Cyber Fraud Network Suspected
Officials believe that the arrested accused is not the mastermind but part of a broader, organized cyber fraud syndicate operating across multiple locations. The role of such “financial facilitators” is considered crucial, as they provide the banking infrastructure needed to move illicit funds without immediately attracting suspicion.
APK-based scams are rapidly increasing, particularly in cases where fraudsters impersonate government services or urgent notifications. By exploiting user trust and curiosity, attackers convince victims to install applications that appear legitimate but are embedded with spyware or remote access tools.
Commenting on the modus operandi, it should be noted that cybercriminals are increasingly combining technical exploits with psychological manipulation. Users are often tricked into acting quickly, downloading files or clicking links without verifying authenticity, which gives attackers complete control over their devices
