The Cyber Police Station of Shahdara District has busted an expansive online investment syndicate, arresting two key operators from western Uttar Pradesh. According to Shahdara Deputy Commissioner of Police (DCP) Rajendra Prasad Meena, the specialized enforcement wing cracked open a multi-state network responsible for channeling at least ₹1.56 crore through highly active digital pipelines. The gang relied on premium message-routing software and identity masking to siphon life savings away from retail stock enthusiasts.
The initial breakthrough came after a resident of GTB Enclave in East Delhi lodged a formal cybercrime complaint. In April 2026, the victim stumbled across a professional-looking sponsor advertisement on social media promising high-yield stock market advisory programs. Clicking the embedded call-to-action link seamlessly transferred her into a private, high-density group on Telegram.
Registration Begins for FutureCrime Summit 2026, India’s Largest Cybercrime Conference
The Psychology of the Manipulated Profit Feed
Inside the closed Telegram community, individual account handles presenting themselves as institutional trading veterans and certified investment gurus kept up a non-stop feed of financial advisory updates. To break down the natural skepticism of new members, the channel operators utilized automated loops to pump out specific promotional materials like high-definition screenshots of fabricated massive trading profits, scripted testimonies from fake group members claiming guaranteed daily payouts, and forged authorization certifications bearing modified emblems of market regulators.
Manipulated by the constant illusion of risk-free market outperformance, the victim complied with the handlers’ instructions and transferred a cumulative total of ₹21 lakh across multiple rapid internet banking tranches.
The Sudden Account Exit and Block Loop
The illusion dissolved the moment the complainant attempted to cash out her massive apparent portfolio gains. The platform administrators immediately paused the transaction, citing fictitious compliance blockades, sudden capital-gains taxation requirements, and international routing fees.
When she refused to feed more out-of-pocket cash into the system and demanded her principal investment back, the fraudsters abruptly stopped answering her messages. Within hours, her access tokens were revoked, her account was completely blocked, and she was scrubbed from the Telegram channels. Realizing she had been targeted by a predatory syndicate, she immediately contacted the Delhi Police.
Raids in Amroha and Moradabad Dislodge Mule Rings
A dedicated technical task force tracked the digital footprints, internet protocol login logs, and financial destination metrics behind the ₹21 lakh transaction. The technical surveillance data pointed investigators straight to western Uttar Pradesh, where coordinated raids were launched in the districts of Amroha and Moradabad.
The enforcement team successfully arrested Mohammad Sadik, who was apprehended from his base in Moradabad, and Javed Ansari, who was picked up following a targeted raid in Amroha. The case was formally registered under sections 318(4), 319, and 340 of the Bharatiya Nyaya Sanhita at the Cyber Shahdara police station.
During intense police interrogation, both men admitted they were operating a highly organized ring of mule bank accounts specifically leased out to international cybercrime coordinators. The duo utilized end-to-end encrypted WhatsApp networks to stay in constant contact with the primary text handlers, providing them with real-time access to domestic retail banking portals. By utilizing these layered mule accounts, the fraudsters split the stolen ₹21 lakh into minor, dynamic fractions within seconds of arrival, routing it across a defensive banking maze to disrupt tracking. Technical forensic units have seized the operators’ mobile devices and are currently analyzing transaction ledgers to extract the identities of the cross-border masterminds.