A 74-year-old retired HMT officer from Ajmer was allegedly cheated of ₹21.37 lakh in a fake stock market investment scam. Fraudsters posed as SEBI-registered advisors and Kotak Securities representatives, used WhatsApp groups, paid small initial returns, and later shut communication after receiving larger transfers.

How a Simple Delivery Inquiry Can Lead to Full Bank Account Takeover

The420.in Staff
6 Min Read

A seemingly routine attempt to track a delayed parcel ended in a major financial setback for a retired government employee in Nagpur, highlighting the growing sophistication of cybercriminals who exploit everyday situations to target unsuspecting citizens. In the latest incident, fraudsters posing as customer care representatives of a courier company allegedly gained access to the victim’s mobile phone and siphoned off nearly ₹2 lakh from his bank accounts.

The victim, identified as Ramesh Darvhekar, a 74-year-old resident of Swavalambi Nagar in Nagpur, had dispatched a parcel to his daughter in Gujarat on May 27. When the package failed to reach its destination within the expected time, he decided to contact the courier company’s customer support service to inquire about the delay.

Fake Customer Care Trap via WhatsApp

According to information available so far, what appeared to be a routine customer service interaction soon turned into a carefully orchestrated cyber fraud. After Darvhekar reached out for assistance, individuals claiming to be customer care executives contacted him through WhatsApp and assured him that they would help resolve the delivery issue.

The fraudsters allegedly convinced him that certain technical steps were required to track the parcel and process the complaint. During the interaction, they reportedly sought information and permissions under the guise of providing customer support. Investigators suspect that the accused exploited this communication to gain access to the victim’s mobile device.

Mobile Access Breach and Bank Drain

Once access was obtained, the criminals allegedly took control of financial applications and other sensitive functions linked to the phone. Authorities believe that they then carried out multiple unauthorised transactions from accounts maintained in two nationalised banks. Within a short period, approximately ₹2 lakh was withdrawn or transferred without the victim’s knowledge or approval.

The fraud came to light only after Darvhekar reviewed his bank account details and discovered that substantial funds had disappeared. A closer examination of the transaction records revealed several transfers that he had never authorised. Realising that he had become a victim of cybercrime, he immediately approached the police and lodged a formal complaint.

Police Case Registered, Digital Trail Under Probe

Based on the complaint, a case was registered at the Pratap Nagar police station on June 1 under relevant provisions of the Information Technology Act and other applicable legal sections. Investigators have since begun examining digital evidence, banking records and communication trails to determine how the fraud was executed and where the money was transferred.

Awareness Alert

Cybersecurity experts say such incidents are becoming increasingly common as criminals impersonate customer care agents, bank officials, delivery executives and government representatives to gain the trust of victims. Rather than directly asking for money, many fraudsters now focus on obtaining remote access to devices or persuading victims to share information that can later be used to compromise financial accounts.

Renowned cybercrime expert and former IPS officer Prof. Triveni Singh said that modern cyber frauds are heavily dependent on social engineering techniques. According to him, criminals carefully exploit situations in which victims are already anxious or seeking assistance, making them more likely to trust unknown callers. He noted that fraudsters often use parcel tracking issues, banking complaints, KYC updates and refund requests as entry points to gain control over devices and steal money.

He advised citizens never to share OTPs, banking credentials, screen-sharing permissions or device access with anyone claiming to offer technical support. Even when a caller appears genuine, users should independently verify contact details through official company websites or customer support channels.

Police have urged the public to remain cautious when dealing with unsolicited calls, messages or WhatsApp communications related to banking, courier deliveries or technical assistance. Citizens have been advised to verify the identity of customer care representatives before sharing any information and to avoid installing unknown applications or granting remote access permissions.

Authorities also reiterated that victims of cyber fraud should immediately report incidents to the national cybercrime helpline 1930 and file complaints through official cybercrime channels. Prompt reporting can significantly improve the chances of tracing transactions and freezing funds before they are withdrawn.

Investigators are now working to identify the individuals behind the fraud and determine whether the operation is linked to a larger organised cybercrime network. Officials believe that analysis of digital footprints and banking trails may help uncover additional suspects and potentially prevent similar crimes targeting other citizens.

Stay Connected