Mumbai: A lodge room in Vasai East, Maharashtra, was allegedly being used as an operating base for a cyber fraud network. Police have arrested three Gujarat-based men following a raid and alleged that the gang targeted victims across nine states, causing losses of more than ₹20 crore. Officers recovered 20 mobile phones, five laptops and fake Aadhaar and PAN cards from the accused. The investigation has also found that around ₹1.5 crore of the suspected fraud proceeds was deposited into two bank accounts linked to the arrested men.
According to police, the activities of the three men staying at the lodge had raised suspicion among an employee. The trio had allegedly been staying there for about a month. They reportedly remained inside their room during the day and made frequent phone calls, while spending their nights inside the room drinking alcohol. The employee eventually alerted the Waliv police after becoming suspicious of their activities.
Acting on the information, Waliv police raided the lodge room on Wednesday and found all three accused inside. During questioning, the police allegedly learned that the room was being used to operate cyber fraud activities. A search of the premises led to the recovery of several electronic devices and fake identity documents. The three men were subsequently arrested and the investigation was expanded to identify other members of the alleged network.
The arrested accused have been identified as Sheikh Aftab Ahmed, 28, Sheikh Mohammad Saif, 21, and Shahrukh Pathan, 30, all residents of Vadodara, Gujarat. Police said Aftab works as a driver, while Pathan is a delivery agent. The three have allegedly been involved in sextortion, digital arrest scams and other forms of cyber fraud.
Investigators found that the gang allegedly targeted people in different states using multiple methods. According to police, the accused sent malicious APK files to potential victims and used digital arrest calls to intimidate them. Victims were allegedly threatened with legal action and other consequences and pressured into transferring money.
Police also found links between the accused and alleged mule bank account holders operating in different parts of the country. These accounts were reportedly used to receive and move lakhs of rupees every day. Investigators are now attempting to identify the actual operators of these accounts and determine whether they knowingly participated in the alleged fraud or had allowed their accounts to be misused.
Two bank accounts linked to the arrested men have emerged as a key part of the investigation. Police said around ₹1.5 crore in suspected proceeds was deposited into these accounts. As many as 25 complaints have reportedly been registered at different locations in connection with the accounts. Investigators suspect that the network was therefore not limited to Vasai or Gujarat but had links across multiple states.
Police are examining the complete transaction trail of the bank accounts, mobile numbers, electronic devices and communication records associated with the accused. The five laptops and 20 mobile phones recovered during the raid are expected to provide crucial digital evidence about the alleged operation, including details of potential victims, payment records, contacts and other members of the network.
The recovery of fake Aadhaar and PAN cards has also become an important part of the investigation. Police are examining whether the documents were allegedly used to open bank accounts, obtain mobile connections or access other financial and digital services. Investigators are also trying to establish how the identities of different individuals were allegedly used in the operation.
Police have registered a case against the three accused under relevant provisions of the Information Technology Act. Investigators are now searching for four other alleged members of the gang. At the same time, efforts are underway to identify additional mule account holders and victims who may have been linked to the network.
The immediate focus of the investigation is to determine the complete structure of the alleged cyber fraud operation and establish the actual amount involved. Investigators are tracing digital devices, bank transactions and communication networks to determine the role played by each accused. The probe will also seek to establish how the suspected proceeds were collected, transferred through different accounts and moved across the network. The findings could help investigators identify the wider network allegedly operating across nine states.
