Kanpur, Uttar Pradesh: A major breakthrough has emerged in the investigation into an alleged ₹250 crore cyber fraud case in Kanpur, with police identifying BTech graduate Sultan Mirza alias Abhay Shukla alias Jan Sena alias Valentine as the alleged mastermind behind the syndicate. According to investigators, Mirza is currently operating from Dubai, where he is allegedly managing a large cyber fraud network involving banned online gaming platforms and illegal IPL betting. Police believe the proceeds of the fraud were routed through hawala channels and dispersed across multiple locations in India and abroad. Authorities are now examining his suspected financial network, properties and associates in Mumbai, Delhi, Noida, Bihar and Kolkata.
The investigation gained momentum after the arrest of Rajveer Singh and Shivam Sinha, whose interrogation allegedly revealed that Sultan Mirza controlled the entire operation. Investigators claim he relied on an extensive network of mule accounts to rapidly move fraud proceeds through multiple bank accounts, making it difficult to trace the origin of the funds. Police further allege that individuals who supplied mule accounts to the syndicate were paid approximately ₹25,000 per month.
According to investigators, the gang had established seven centres in Kanpur where documents were prepared, bank accounts were opened and financial identities were arranged for use in cyber fraud operations. These accounts were allegedly used to receive large sums generated through fraudulent activities before the money was transferred through hawala channels to destinations across India and overseas. Investigators are now conducting a detailed examination of banking records, digital transactions and financial trails associated with the network.
Preliminary findings also suggest that Sultan Mirza maintained operational bases in Bihar, Noida, Delhi, Mumbai and Kolkata, where local associates allegedly managed various aspects of the operation. Police suspect that proceeds from the cyber fraud were invested in high-value properties across these locations. Investigators are currently verifying ownership records, financial documents and property transactions. A Look Out Circular (LOC) has also been issued against the accused to facilitate his detention if he returns to India.
Investigators are also examining a video circulating on social media that allegedly shows Sultan Mirza at a nightclub in Dubai, dancing with performers and throwing currency notes. Authorities are verifying the authenticity of the footage as part of the ongoing investigation. Meanwhile, police teams have carried out raids at suspected hideouts of his associates in Mumbai, Noida and other locations in an effort to identify additional members of the network.
Renowned cybercrime expert and former IPS officer Prof. Triveni Singh said that large-scale cybercrime operations today extend far beyond technical hacking and increasingly depend on organised financial infrastructure, including mule accounts, hawala channels and international safe havens. He noted that mule accounts are among the most critical components of such networks, enabling fraud proceeds to be layered through multiple transactions within minutes, thereby concealing their true origin. He emphasised that successful investigations require detailed analysis of banking trails, digital evidence, hawala transactions and international cooperation.
According to the Future Crime Research Foundation (FCRF), organised cybercrime groups are increasingly adopting multi-layered financial structures involving mule accounts, digital payment systems, hawala networks and cryptocurrencies to obscure illicit money flows. Meanwhile, a Researcher at Algoritha Security said that identifying such sophisticated networks requires AI-driven transaction monitoring, behavioural analytics and real-time surveillance of suspicious banking activity. Investigators are continuing to examine the syndicate’s financial operations and nationwide network, and officials say further arrests and asset seizure proceedings may follow if additional evidence is uncovered.
About the author — Suvedita Nath is a science student with a growing interest in cybercrime and digital safety. She writes on online activity, cyber threats, and technology-driven risks. Her work focuses on clarity, accuracy, and public awareness.
