KYCKART

Feed / Daily Brief

Wednesday, 28 October 2026

Fraud Briefing

A curated intelligence snapshot of fraud incidents, regulatory actions, and emerging threat patterns detected in the past 24 hours across India's BFSI sector.

Regulatory and Compliance (1 item)

1. ED Attaches Mohammad Ali Jauhar University Assets Under PMLA Over Public Fund Diversion

The Enforcement Directorate provisionally attached land and buildings of Mohammad Ali Jauhar University in Rampur, valued at approximately Rs 1,170 crore market value and Rs 426.46 crore registered value. The agency alleges public works funds were routed back to the controlling trust as donations, with only Rs 72.63 crore of the Rs 499.09 crore campus construction cost explained by legitimate sources.

Entity involved: Enforcement Directorate, Maulana Mohammad Ali Jauhar Trust, Mohammad Ali Jauhar University

New Fraud Typologies and Scams (2 items)

1. Automated Account Takeover Drains Rs 3.93 Crore From NBFC Disbursal Account

High risk

Malware installed on an NBFC server allegedly enabled an automated account takeover, triggering 149 debit transactions in minutes. The stolen funds were moved through layered mule accounts (including accounts held by 19-year-olds), withdrawn as cash, and converted to USDT through hawala operators before being transferred abroad. Delhi Police arrested four individuals and seized 45 cheque books, 25 passbooks, 45 ATM cards, and 13 mobile devices.

2. Mule Account Intermediary Syndicate Recruits Account Holders Under Loan Pretext

Medium risk

Four individuals were arrested in Delhi for operating a mule account supply chain. An account holder surrendered banking credentials under the false pretext of loan processing. The banking credentials moved through three intermediaries before being sold to cyber fraud operators for a commission, routing Rs 44,000 defrauded from a victim in Tamil Nadu.

Institutional Impact (1 item)

1. Server Malware and Automated Debits Siphon Rs 3.93 Crore From NBFC Lending Channel

An automated account takeover against an NBFC loan-disbursal account led to a Rs 3.93 crore loss across 149 unauthorized debits, with investigators freezing Rs 1.80 crore to date.

Impact: Critical operational risk alert for non-banking financial companies and partner banks, demanding enhanced server integrity monitoring, automated debit-velocity throttling, and real-time behavioral anomaly detection on corporate disbursal APIs.

Sources

  1. ED Attaches Azam Khan's Jauhar University Assets Worth Rs 1,170 Crore (ThePrint)
  2. Delhi Police Bust Cyber Fraud Nexus: Rs 3.93 Crore Mule Account and Crypto Hawala Trail (ThePrint)
  3. Malware Attack on NBFC Server Drains Rs 3.93 Crore in 149 Transfers (Ministry of Cyber Affairs)
  4. Four Arrested for Allegedly Sharing Mule Bank Account Linked to Cyber Fraud in Delhi (ThePrint)