An international cyber fraud network operating out of Delhi has been busted, with suspected links to China-based operators. Investigating agencies have arrested eight individuals in connection with the case. So far, the network has been linked to over 600 cybercrime complaints across India and nearly ₹15 crore worth of suspicious financial transactions.
Mule accounts at the heart of the operation
According to officials, the network was active not only in Delhi but also in Moradabad and Bareilly. The accused ran mule bank accounts, which were used to collect and transfer stolen funds. The money was moved either as cash or digitally, making it difficult to trace the original source.
Certified Cyber Crime Investigator Course Launched by Centre for Police Technology
Investigation triggered by a minor complaint
The probe began with a cyber fraud complaint in September 2025, when a woman reported unauthorised withdrawal of ₹6,000 from her bank account. Tracing the transaction led investigators to a private bank account in East Delhi. Further scrutiny of accounts linked to this case revealed dozens of complaints and suspicious transactions.
A formal case was registered at the relevant police station in November 2025, setting in motion a detailed investigation that eventually uncovered the international dimensions of the syndicate.
SMS-forwarding malware enabled account takeovers
Investigators found that the gang employed SMS-forwarding malware to hijack accounts. Using this technology, OTP codes and alerts from victims’ and mule account holders’ mobile phones were intercepted and sent to China-based operators. The handlers then used these credentials to withdraw funds or transfer them through multiple layers of accounts.
Funds routed to China via cryptocurrency
The stolen funds were first moved across various accounts to obscure their origin, and later converted into USDT or other cryptocurrencies. The cryptocurrency was then sent through international digital platforms to China. Indian operatives involved in the network received their commissions in crypto as well.
Seizures and digital evidence
During raids and arrests, authorities recovered 14 mobile phones, 20 SIM cards, seven bank debit cards, and ₹4.70 lakh in cash, all of which were allegedly used to operate the network. Bank account documents and digital transaction logs were also seized for analysis.
Distinct roles within the network
The probe revealed that each member of the syndicate had a clearly defined role. Some were responsible for sourcing mule account holders, others for handling banking credentials and SIM cards, while a few managed the conversion of funds into cryptocurrency. One accused is suspected to have shared details of over 60 bank accounts, while another was linked to more than 80 complaints.
International angle under investigation
Officials noted that this is not merely a local cyber fraud case but forms part of a broader international cybercrime syndicate. Investigators are now examining transactions connected to China-based handlers and foreign digital platforms. Efforts to identify victims and make further arrests are ongoing.
Signal for stricter cybercrime monitoring
The case underscores the growing sophistication and reach of international cybercrime networks targeting India. Authorities emphasized the need for enhanced technical surveillance and cross-border cooperation to prevent misuse of digital banking and cryptocurrency platforms.
This operation is seen as part of a coordinated and strict crackdown on cyber fraud, aimed not only at apprehending the accused but also at dismantling such networks to prevent future exploitation.
About the author – Ayesha Aayat is a law student and contributor covering cybercrime, online frauds, and digital safety concerns. Her writing aims to raise awareness about evolving cyber threats and legal responses.
