Lucknow Police have arrested a 45-year-old Mumbai woman for her alleged role in a cyber fraud network accused of impersonating Green Gas Ltd employees and tricking consumers into installing a malicious APK file. Police said the investigation has linked the accused to 34 cyber fraud cases.
How Did the Green Gas Scam Work?
Investigators said members of the gang contacted Green Gas Ltd consumers while posing as company representatives through WhatsApp messages and phone calls.
Victims were allegedly told that their gas connection details or information needed to be updated. To complete the supposed process, they were persuaded to download an APK file and make a small payment, generally around Rs 10.
According to police, the APK was designed to capture sensitive banking information. Once a person entered debit card details and other credentials, the fraudsters allegedly gained access to financial information and one-time passwords, allowing unauthorised withdrawals and transfers from accounts.
How Did a Rs 23.5 Lakh Complaint Lead to the Arrest?
The investigation began after a senior citizen in Lucknow filed a complaint stating that he had lost Rs 23.5 lakh in a cyber fraud.
Police analysed mobile numbers, bank accounts and transaction trails during the investigation. Technical assistance from telecom operators and banks helped investigators trace leads to Mumbai, where the woman, identified as Saloni Kumari, was located and taken into custody.
Police said Kumari was apprehended by the cybercrime police under Operation CYBARA, an initiative against cybercriminals.
What Role Did Police Allege the Woman Played?
Police suspect Kumari had been associated with the cyber fraud network for nearly five years. Investigators alleged that her involvement went beyond receiving proceeds and included helping route money through a mechanism involving credit card bill payments.
According to officers, she allegedly offered acquaintances a 10% commission for allowing her to pay their credit card bills.
She would collect their credit card details and pass them to other members of the gang. Funds siphoned from bank accounts were allegedly used to clear those credit card dues through online platforms.
After the bills were paid, police said the cardholders would hand over an equivalent amount in cash. The cash was then allegedly deposited into accounts specified by the gang.
What Evidence Are Police Examining?
Officials said they obtained CCTV footage that allegedly shows Kumari visiting a shop and facilitating one such credit card payment transaction.
The footage is being examined as part of the investigation.
Police are also investigating the financial trail behind the transactions and the alleged movement of fraud proceeds through bank accounts and credit card payments.
How Did Fraudsters Target Green Gas Customers?
Police suspect the gang had access to Green Gas consumer data, which allegedly enabled its members to make more convincing calls and messages.
By appearing to know details connected with a customer’s gas service, the fraudsters could pose as legitimate company representatives while asking victims to follow instructions sent through WhatsApp or over the phone.
The scam then relied on persuading customers to install an APK file and make a nominal payment. The apparent small value of the requested transaction could make the process appear routine, while the malicious application allegedly captured information that could later be used for much larger unauthorised transactions.
What Should Consumers Watch For?
Police advised residents not to download APK files received through WhatsApp or other platforms and to verify bill-related communication directly with service providers.
Consumers should be particularly cautious when an unsolicited caller or message claims that a gas connection requires an urgent update and then asks them to install an application outside official channels. Requests for debit card details, banking credentials, OTPs or small payments through an unfamiliar application should also be treated with suspicion.
People who encounter suspected cyber fraud can contact the national cybercrime helpline at 1930 or report incidents through the National Cyber Crime Reporting Portal.
The420 Takeaway
The case shows how a seemingly routine service message and a payment of only around Rs 10 can allegedly be used as the entry point for a much larger financial fraud. Consumers should not treat a caller as genuine merely because the person appears to know details about their service account.
APK files received through WhatsApp or unsolicited messages should not be installed, and any request involving banking credentials or payments should be independently verified with the service provider.
About the author — Ayesha Aayat writes on cybercrime, digital safety, and emerging online threats. Her work focuses on public awareness, legal clarity, and technology-driven risks.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
