Kanpur. One of the biggest cyber fraud cases reported in Kanpur has been uncovered with the arrest of two accused allegedly linked to a network involved in a suspected ₹5,600 crore fraud. The arrested accused have been identified as Shahvez Waris, a resident of Bekanganj, and Salman, a resident of Chamanganj. The investigation indicates that the two were allegedly connected with a network targeting people through online gaming, cricket betting, investment schemes and digital arrest scams. A total of 86 cybercrime complaints have surfaced against the accused.
According to investigators, Shahvez was arrested in Hyderabad and brought to Kanpur on a 48-hour transit remand after being produced before a court there. Salman was subsequently arrested on the basis of information obtained during the investigation. Their bank accounts, companies, mobile numbers and digital transactions are being examined. Investigators are also trying to determine how many people were involved in the alleged ₹5,600 crore network and through how many accounts the money was routed.
Proposal for Conducting Cyber Crisis Drill, Tabletop Exercise (TTEx) & CCMP Readiness Exercise
₹170 Crore in Complaints Linked to 11 Shahvez Accounts
Investigators found 86 complaints related to the two accused on the National Cyber Crime Reporting Portal. Complaints linked to 11 bank accounts associated with Shahvez Waris mention alleged fraud of around ₹170 crore. Another 32 complaints have been found against two major accounts linked to Salman, involving around ₹16 crore in alleged fraudulent transactions. The complaints are being matched with bank records to establish the actual flow of funds.
76 Bogus Firms Allegedly Used to Move Money
The investigation has also identified around 76 suspected bogus firms. Investigators suspect that bank accounts opened in the names of these entities were used to move alleged fraud proceeds through multiple accounts. The cybercrime team is examining company registration documents, bank accounts, mobile numbers, transaction records and the individuals associated with these entities. Accounts allegedly opened using documents belonging to other people are also being investigated.
Victims Allegedly Lured With Promises of Quick Profits
The accused allegedly used several methods to lure victims. Investment schemes promised to multiply money within a short period, while online gaming and cricket betting were allegedly promoted as ways to earn quick profits. Investigators have also found indications that victims were allegedly threatened and pressured into transferring money through digital arrest scams. Authorities are now trying to determine how many people were targeted through these methods.
Cybercrime Expert Flags Signs of an Organised Financial Network
Renowned cybercrime expert and former IPS officer Prof. Triveni Singh said such cases, particularly when they involve extremely large transaction volumes, can indicate a multi-layered organised financial network rather than isolated fraud. The use of bogus companies, multiple bank accounts and rapid movement of money through different channels can make it difficult to identify the original source and ultimate beneficiaries of funds. He noted that investigators need to examine the entire transaction chain, including shell entities, account holders and the final destinations of the money, rather than limiting the investigation to the primary accused.
Hyderabad Arrest After Attempt to Travel to Dubai
Investigators said a case was registered against Shahvez on August 18, following which a lookout notice was issued against him. He subsequently travelled abroad and later returned to India. He was eventually intercepted at Hyderabad airport while attempting to travel to Dubai again. Investigators are examining his alleged overseas contacts and whether he had links with any cybercrime operations outside India.
Possible Links With Earlier Major Fraud Cases Under Probe
Investigators are also examining whether the network has links with earlier major cyber and financial fraud cases reported in Kanpur. In December 2025, an accused was arrested in connection with an alleged fraud of around ₹1,500 crore. In another case in May 2026, an accused was arrested in connection with an alleged ₹3,200 crore fraud. Bank accounts, bogus firms and transaction trails associated with Shahvez and Salman are now being compared with records from these earlier cases.
Links With Other Accused Also Being Examined
Investigators have also come across the names of Chand Siddiqui, a resident of Jajmau, and Mohammad Aman Khan of Bekanganj. Both were sent to jail on August 24 in connection with another alleged fraud case. Investigation in that case had found transactions of around ₹33.82 crore in one account linked to Chand and around ₹559 crore in an account linked to Aman. Authorities are now examining whether these accounts had any financial or operational connection with the alleged Shahvez-Salman network.
Investigation Focuses on Identifying More Members
The cybercrime team is now trying to identify other members of the alleged network, operators of the suspected bogus firms and people who helped move the money through different accounts. Bank records, cybercrime complaints and digital transaction trails are being matched. Investigators are also examining the identities of account holders and the final destinations of funds. Further questioning and financial analysis could reveal additional individuals allegedly connected to the network and provide a clearer picture of how the suspected ₹5,600 crore financial trail was operated.
About the author — Suvedita Nath is a science student with a growing interest in cybercrime and digital safety. She writes on online activity, cyber threats, and technology-driven risks. Her work focuses on clarity, accuracy, and public awareness.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
