New Delhi. A massive “digital arrest” cyber fraud case in the national capital has revealed the alarming scale and sophistication of organised cybercrime. In a case involving an elderly couple from Greater Kailash who were allegedly cheated of ₹14.85 crore, investigators have filed a chargesheet running over 600 pages, detailing a complex web of financial transactions, fake entities, and international connections.
Elderly Couple Trapped in Fear Tactics
According to the probe, fraudsters used at least eight bank accounts to route the stolen money, including accounts linked to two NGOs. The objective was to fragment the money trail and make it difficult for investigators to trace the funds’ origin and final destination. Authorities say the accused deliberately layered transactions across multiple entities to avoid detection.
Among the entities identified in the investigation are Shivansh Charitable Foundation and Floresta Foundation, along with several private firms such as Refine Alpha Metals and Recycles Pvt Ltd, Metison Tour and Travel Ltd, Nature Bio Agri Chem Pvt Ltd, Usha Tour & Travels, and RN Recruiters Pvt Ltd. Crores of rupees were moved through these accounts in a staggered manner, suggesting a well-planned laundering mechanism.
FCRF Academy Launches Premier Anti-Money Laundering Certification Program
NGO Accounts Used to Layer Money Trail
Investigators have found that some NGO operators were allegedly misled under the pretext of receiving legitimate Corporate Social Responsibility (CSR) funds. They were assured that the incoming money was legal and were offered commissions in return. In one instance, ₹2.1 crore was routed through an NGO account, with the understanding that 8% would be retained as commission, while the rest would be returned or transferred.
Hotel meetings played a crucial role in coordinating the operation. Evidence suggests that key accused met at different hotels to plan fund transfers and manage account logistics. In one such meeting held in Lucknow, funds were transferred to an NGO account shortly after discussions between the involved parties, indicating real-time execution of the fraud plan.
Remote Access APKs Became the Cyber Weapon
A critical technical component of the scam involved the use of APK files to gain unauthorised remote access to victims’ mobile devices. Once access was established, the accused could monitor emails, access banking apps, and execute transactions without the victims’ knowledge. This method allowed them to siphon off funds seamlessly while maintaining control over the accounts.
Authorities believe that the network extends beyond India, with links pointing to handlers based in countries such as China, Cambodia, Taiwan, and Dubai. These foreign-based operators allegedly used remote access tools to control compromised devices and facilitate cross-border fund transfers, complicating the investigation.
The fraud began when the accused impersonated telecom regulatory officials and contacted the elderly victim, claiming that her mobile number was linked to a money laundering case. Over several days, the couple was psychologically pressured and placed under what was described as “digital arrest.” Under the guise of verification and legal compliance, they were coerced into transferring money to multiple accounts.
Foreign Handler Angle Deepens Probe
The investigation has also revealed internal disputes within the network. Some individuals involved claimed they were promised commissions—typically around 2.5%—but were not paid, leading to friction among the accused. These disputes have provided additional leads to investigators.
Several arrests have been made so far, including individuals directly involved in handling accounts and executing transactions. However, key operatives and higher-level coordinators are still being traced. Authorities are analysing digital evidence, banking records, and communication trails to map the full extent of the network.
Investigators continue to expand the probe, focusing on dismantling the entire syndicate and identifying international collaborators. Officials believe more revelations are likely as the case progresses, shedding further light on one of the capital’s most sophisticated cyber fraud operations.