Daman Police have arrested a suspected cyber fraudster from Jharkhand for allegedly hacking a mobile phone through a fake RTO e-challan APK and siphoning money from the victim’s bank account. The accused has been identified as Mohammad Sagir Ansari. According to police, Ansari is allegedly linked to an interstate cyber fraud network that targeted people by sending malicious applications in the name of government services and using them to compromise mobile devices and access banking-related information.
Ansari was arrested in Giridih, Jharkhand, after a police team spent three to four days tracking him using technical leads. Following his arrest, he was brought to Daman after police obtained transit remand from a court. Investigators are questioning him to determine how many people the alleged network targeted in Daman and elsewhere and how much money may have been siphoned from victims’ accounts.
The case came to light on July 27, 2026, when a resident under the jurisdiction of Kachigam Coastal Police Station received an APK file from an unknown number. The message allegedly presented the file as an RTO e-challan-related application. Believing it to be connected to a government service, the victim installed the APK on his mobile phone.
After the installation, the victim’s mobile device was allegedly compromised. Shortly afterwards, he received a notification informing him that money had been withdrawn from his bank account. After noticing the unauthorised transaction, the victim approached the police and lodged a complaint.
Technical Analysis Leads Police to Jharkhand
Following the complaint, Kachigam Police launched a technical investigation into the alleged fraud. Investigators analysed the APK file that had been sent to the victim and examined the digital trail associated with it. The analysis reportedly provided an important lead connected to an interstate cyber fraud network.
According to police, the technical investigation indicated the alleged involvement of Mohammad Sagir Ansari. Acting on the information, a police team travelled to Giridih in Jharkhand and began searching for the suspect. After gathering information and conducting surveillance in the area for several days, the team arrested Ansari.
Police also seized a mobile phone from the accused. Investigators are examining the device to identify his contacts, digital activities, other suspected members of the alleged network and potential victims. The investigation is also focusing on whether other bank accounts or mobile devices were used in connection with the suspected fraud.
During custodial questioning, investigators are expected to examine how the fake APK was allegedly created and distributed, how victims were identified and how the fraudsters attempted to obtain access to mobile devices and banking information. Police are also tracing the movement of money allegedly withdrawn from victims’ accounts.
Warning Over Fake APK Files Sent Through WhatsApp and SMS
Daman Police have urged residents to exercise caution when receiving APK files through WhatsApp, SMS or other messaging platforms. People have been advised not to install unknown applications sent in the name of RTO e-challans or other government services.
Police have also advised residents to verify suspicious links or files through the concerned department’s official website or other authorised channels before opening or installing them. According to investigators, cyber fraudsters often use the names of government services and essential documents to make malicious applications appear legitimate and persuade victims to install them.
The police are now investigating the alleged network’s wider operations, including other potential accused persons, victims and financial transactions. Investigators are also examining whether Ansari is connected to similar cyber fraud cases in other locations.
The arrest is expected to help police establish the extent of the alleged operation and identify additional members of the network. The investigation remains underway, with technical evidence, seized devices, bank transactions and digital communications being examined to determine the full scope of the suspected fraud.
