Ludhiana | January 3, 2026: India’s Enforcement Directorate has exposed a highly organised, cross-border cyber-fraud and money-laundering network linked to the sensational ‘digital arrest’ and ₹7-crore extortion of Ludhiana-based industrialist S P Oswal. The breakthrough followed a targeted raid in Kanpur on New Year’s Eve, leading to the arrest of a key operative and the unravelling of a web involving over 200 mule bank accounts, shell firms and crypto-based fund transfers.
Officials from the ED’s Jalandhar zonal office said the arrested accused, Arpit Rathore, functioned as a crucial on-ground coordinator of the racket. Searches at his premises yielded ₹14 lakh in unexplained cash, along with digital devices, mobile phones and electronic transaction records. These materials, investigators said, helped reconstruct the syndicate’s layering techniques and fund-routing pathways.
Fake CBI officers, fear as a weapon
The case originated from an FIR registered at the Ludhiana cybercrime police station. According to the complaint, fraudsters impersonated officers of the Central Bureau of Investigation and placed the victim under a fabricated “digital arrest” via video calls and messaging apps. The industrialist was told he was under investigation for serious financial irregularities and warned of imminent arrest if he failed to cooperate.
Under intense psychological pressure, the victim transferred ₹7 crore to multiple accounts. ED officials described the modus operandi as a classic social-engineering scam, exploiting the authority and credibility of central agencies to coerce swift, unverified payments from high-net-worth individuals.
A corporate-style criminal enterprise
As the probe widened, investigators found that the syndicate operated with corporate-level precision. Roles were clearly demarcated—recruiters, mule account providers, tech handlers and foreign controllers worked in tandem. Extorted funds were first routed through shell companies, including Frozenman Warehousing and Logistics and Rigglo Ventures, before being dispersed across dozens of secondary and tertiary accounts.
This deliberate layering of transactions was designed to blur the money trail and evade bank alerts and law-enforcement scrutiny. The ED has also linked the group to nine additional FIRs, alleging that the same network defrauded other victims of around ₹1.7 crore through similar “digital arrest” tactics.
Foreign links and crypto payments
The investigation revealed that Rathore maintained regular contact with overseas associates, facilitating the transfer of illicit proceeds abroad. In return for arranging mule accounts and managing local logistics, he was allegedly compensated in Indian rupees as well as cryptocurrency, notably USDT (Tether)—favoured by cybercriminals for its speed, cross-border ease and perceived anonymity.
Officials said the focus has now shifted to identifying the final destinations of the funds, tracing the digital wallets used, and pinpointing the foreign nationals who allegedly directed the operation.
Earlier arrest, ED custody till January 5
Rathore’s arrest follows the December detention of another accused, Rumi Kalita, who remains in judicial custody. After being produced before a court in Kanpur, Rathore was granted transit remand and brought to Jalandhar, where a special court remanded him to ED custody until January 5. Investigators believe custodial interrogation will lead to the identification of more mule account operators and international conduits.
Warning on ‘digital arrest’ scams
The ED and police have reiterated that no law-enforcement agency conducts arrests or investigations over video calls, phone calls or messaging apps. Any such claim, officials stressed, should be immediately verified.
Authorities say the Oswal case could become a landmark investigation in cracking down on ‘digital arrest’ scams, a fast-growing cybercrime trend that weaponises fear, technology and financial manipulation. With digital evidence under analysis and international coordination underway, the ED has signalled that more arrests and asset seizures are likely in the coming weeks.
