KYCKART

Feed / Daily Brief

Monday, 21 September 2026

Fraud Briefing

A curated intelligence snapshot of fraud incidents, regulatory actions, and emerging threat patterns detected in the past 24 hours across India's BFSI sector.

Regulatory and Compliance (0 items)

New Fraud Typologies and Scams (1 item)

1. Delhi Police Bust Malicious APK Syndicate With IDBI Bank Insider Facilitating Credit Cards

High risk

Fraudsters sent phishing SMS links to install remote-access APKs on victim phones, harvesting bank credentials. A contractual IDBI Bank employee provided credit cards to receive and layer stolen funds in exchange for commissions, with communication coordinated through US-linked numbers on WhatsApp and Telegram.

Institutional Impact (1 item)

1. Bengaluru Cyber Police Trace 507 Mule Accounts Across Commercial Banks in Rs 93.58 Lakh Scam

A victim was defrauded of Rs 93.58 lakh through a WhatsApp trading group scam where operators installed ZNPAY and 51 malicious APKs to forward banking OTPs from mule phones. Investigators traced funds flowing through accounts in state-owned and private commercial banks before conversion to USDT on Binance, with network nodes identified in Kolkata, Hong Kong, and California.

Impact: Major institutional exposure across public and private banks used for transaction layering prior to overseas crypto conversion.

Sources

  1. Delhi Police bust APK-based cyber fraud syndicate; three arrested from Ahmedabad
  2. Bengaluru police in India arrest 3 after INR 93.58 lakh crypto scam, find 507 mule accounts