Fraud Briefing

A curated intelligence snapshot of fraud incidents, regulatory actions, and emerging threat patterns detected in the past 24 hours across India's BFSI sector.

Regulatory and Compliance (3 items)

1. ED raids Vedanta Group offices in Delhi, Mumbai, and Rajasthan in FEMA probe over brand-fee payments

The Enforcement Directorate searched Vedanta Group offices under the Foreign Exchange Management Act (FEMA), investigating alleged irregular brand-fee payments made by Indian group entities to the overseas parent company. Company extended full cooperation.

Entity involved: Vedanta Group (Anil Agarwal-led mining conglomerate)

2. Bengaluru Police file FIRs against MobiKwik and Lendbox over Rs 5.93 crore P2P investor fund diversion

Bengaluru Police registered FIRs against listed fintech MobiKwik and its P2P lending partner Lendbox for allegedly blocking Rs 5.93 crore of investor funds from the MobiKwik Xtra scheme, charging them under IT Act 2000 and Bharatiya Nyaya Sanhita 2023. Over 420 investors with locked funds are pursuing legal action.

Entity involved: MobiKwik (listed fintech); Lendbox (P2P NBFC)

3. Gujarat Police Operation Mule Hunt 1.0 results: 638 arrests, 565 FIRs, 913 mule accounts, Rs 2,289 crore linked

Gujarat Police officially disclosed Operation Mule Hunt 1.0 outcomes: 638 arrests, 565 FIRs, and action against 913 mule bank accounts tied to Rs 2,289 crore in fraudulent transactions across 4,052 cybercrime cases nationwide. Post-crackdown, cheque-based fraud withdrawals fell 80% and ATM fraud withdrawals dropped 66%.

Entity involved: Multiple banks across India (mule account holders); Gujarat Cyber Centre of Excellence

New Fraud Typologies and Scams (3 items)

1. Delhi tea seller duped of Rs 90,000 in physical KYC scam; three interstate operatives arrested

High risk

A fraudster posed as a digital payment app employee, visited the victim's shop in South Patel Nagar (Delhi), gained physical access to his mobile under the pretext of assisting with KYC settings, and siphoned Rs 90,000. Delhi Police arrested three operatives from an interstate network (Haryana and Himachal Pradesh) supplying bank account kits, SIM cards, and ATM credentials.

2. AI-driven digital lending scams escalate with deepfake video calls and fake police pressure

High risk

Fraudsters deploy AI-generated voices, deepfake videos, and impersonation of law enforcement to pressure victims into paying upfront processing fees, GST, or insurance before disbursing fake loans. These tactics particularly target urgent borrowers on unverified lending apps.

3. MobiKwik Xtra P2P scheme: Rs 5.93 crore in investor funds diverted; 420+ investors blocked from withdrawals

High risk

The platform marketed MobiKwik Xtra as an FD-like product with guaranteed returns. Funds from investors were allegedly diverted to new borrowers without consent; when borrowers defaulted or became inactive, investor withdrawal requests were blocked. Over 420+ investors with approximately Rs 5.93 crore are now pursuing legal action.

Institutional Impact (3 items)

1. Gujarat banks see mule account fraud drop 80% after Operation Mule Hunt 1.0 enforcement

Monthly cheque-based fraud withdrawals fell 80% (from Rs 126 crore to Rs 25 crore) and ATM fraud withdrawals dropped 66% following the operation. First-layer mule accounts reduced by 30% between August and December 2025, demonstrating measurable reduction in fraud throughput across the banking system.

Impact: 80% cheque fraud drop and 66% ATM fraud drop post-enforcement; 30% reduction in first-layer mule accounts confirms that coordinated police action produces measurable fraud throughput reduction.

2. Vedanta Group extends full cooperation with ED FEMA probe; no arrest or attachment announced

Ongoing FEMA investigation into brand-fee remittances to overseas parent concluded ED searches with company cooperation. No attachment or arrest announced yet, but reputational and legal exposure remains elevated pending ED findings.

Impact: Elevated reputational and legal exposure pending ED findings; potential penalties and restrictions on cross-border transactions if violations are confirmed.

3. MobiKwik faces active FIRs, locked investor funds, and RBI scrutiny of P2P NBFC licence

Active FIRs under IT Act and BNS; approximately Rs 5.93 crore of investor funds locked; 630+ affected investors; ongoing RBI scrutiny of the P2P lending framework exploited by the scheme. High potential for regulatory action on MobiKwik's NBFC and P2P licence.

Impact: Active FIRs under IT Act and BNS; Rs 5.93 crore locked across 630+ investors; RBI scrutiny of P2P lending framework signals potential regulatory action on MobiKwik's NBFC licence.