Fraud Briefing

A curated intelligence snapshot of fraud incidents, regulatory actions, and emerging threat patterns detected in the past 24 hours across India's BFSI sector.

Regulatory and Compliance (1 item)

1. CBI Arrests Two Accused Under Operation Chakra-VI in Rs 11.42 Crore Digital Arrest Case

The CBI arrested Himanshu Prasad and Unis Biswas for their roles in a Rs 11.42 crore digital arrest fraud targeting a Gujarat victim, as part of the broader Operation Chakra-VI, which has executed 142 searches across 22 states and secured 17 arrests over 30 days.

Entity involved: CBI (Central Bureau of Investigation); M/s Hexaquest Global Private Limited (account used to route Rs 2.5 crore in fraud proceeds)

New Fraud Typologies and Scams (2 items)

1. WhatsApp APK-Based KYC Impersonation Scam Drains Rs 17.5 Lakh From Udupi Resident

High risk

A fraudster posed as a bank representative on WhatsApp, claimed a KYC update was required, and sent an APK file disguised as a banking tool. Once installed, the malware gave attackers access to banking credentials. The fraudsters raised the victim's daily transaction limit on a linked account and drained Rs 17.5 lakh across multiple transfers on September 2, 2026.

2. Digital Arrest Scheme Holds Victim Under Coerced Surveillance for Three Months, Extracts Rs 11.42 Crore

High risk

Cybercriminals impersonated police and TRAI officials, telling the victim they were under investigation. The victim was kept under a prolonged "digital arrest," monitored via video call and threatened with arrest, for approximately three months before being coerced into transferring Rs 11.42 crore. Proceeds were layered through shell company accounts, including M/s Hexaquest Global Pvt Ltd, and dispersed across multiple accounts to obscure the trail.

Institutional Impact (2 items)

1. Gujarat Victim Defrauded of Rs 11.42 Crore via Digital Arrest Scheme

The victim lost Rs 11.42 crore over a three-month digital detention period, with Rs 2.5 crore traced to M/s Hexaquest Global Pvt Ltd's account. CBI has initiated legal action, executing 22 search locations and arresting two accused.

Impact: Underscores how shell-company accounts continue to serve as laundering conduits for high-value digital arrest fraud.

2. Udupi Resident Loses Rs 17.5 Lakh in KYC Fraud, Criminal Case Filed Under IT Act

The victim lost Rs 17.5 lakh, drained via APK malware installed under the pretense of KYC compliance. Udupi CEN Police registered an FIR under the Information Technology Act and the Bharatiya Nyaya Sanhita's impersonation and fraud provisions.

Impact: Shows APK-based credential harvesting spreading through messaging platforms under a KYC-update pretext, a systemic risk to mobile banking users.