Follow us on Google News
Actor Aaishvary Thackeray, grandson of Shiv Sena founder Balasaheb Thackeray, has fallen victim to cyber fraud after unidentified criminals siphoned ₹19,638 from his Axis Bank savings account through multiple unauthorized transactions. The breach occurred despite the actor neither clicking any suspicious links, answering unknown calls, nor sharing a One-Time Password with anyone, raising fresh concerns over evolving techniques deployed by digital fraudsters to bypass standard banking safeguards.
Rapid Transactions Trace to International Servers
According to police accounts, the incident unfolded around 1.30 am on October 30, 2026, when Thackeray, 30, received a phone alert indicating that ₹307.82 had been debited from his account. Over the following ten minutes, a succession of six unauthorized debits took place, culminating in a single largest withdrawal of ₹15,511.98. By the end of the brief window, the fraudsters had successfully extracted ₹19,638 from the savings balance.
Initial inquiries by investigators revealed that the funds were routed through foreign online portals, with electronic footprints pointing toward international servers tied to Papa John’s and Jollibee. The Mumbai Cyber Cell and local authorities are currently probing how the offenders skirted secondary verification protocols, analyzing IP addresses, digital transaction records, and cross-border server traffic to establish the origin of the attack.
Thackeray, who resides with his mother Smita Thackeray in Mumbai’s Andheri area, lodged a formal complaint following the unauthorized debits. The Oshiwara police subsequently registered a First Information Report against unknown individuals under relevant sections of the Bharatiya Nyaya Sanhita and the Information Technology Act.
Shifting Methods Behind Card-Not-Present Fraud
The incident demonstrates a persistent risk wherein bank accounts are compromised without direct account-holder collaboration. In card-not-present fraud, perpetrators exploit compromised payment details to execute transactions across international platforms that may not enforce domestic two-factor authentication or OTP requirements.
To mitigate such vulnerabilities, financial consumers are advised to deactivate international transaction permissions on mobile banking applications when not required. Setting modest daily online expenditure ceilings, temporarily disabling debit and credit cards between uses, or utilizing in-app card locking tools provide vital supplementary defenses against automated unauthorized withdrawals.
Cybersecurity practices also caution internet users against downloading remote screen-sharing tools such as AnyDesk or TeamViewer based on directions from unidentified callers. Users are similarly advised to avoid opening unsolicited web links that prompt the installation of APK files, which can secretly place spyware on mobile operating systems.
Protocol for Reporting and Limiting Account Exposure
To verify customer care details, account holders should consult official banking portals, licensed applications, or the contact information printed directly on the physical payment card rather than relying on search engine results. Citizens are also encouraged to lock their biometrics via the official portal and audit mobile numbers registered against their identification documents to prevent unauthorized SIM card issuance.
Victims of unauthorized electronic withdrawals are urged to contact their banking institutions immediately to freeze payment instruments and disable digital channels. Prompt reporting through the national cybercrime helpline on 1930 or the official cybercrime reporting portal remains critical, as rapid alerts significantly improve the likelihood that financial institutions can intercept and halt fund transfers before the amounts are permanently dispersed.
