Mumbai Police have uncovered an alleged cybercrime network involving a 36-year-old software developer from Indore who is accused of creating 2,805 malicious Android applications and supplying them to cybercrime groups across India.
The accused, Pankaj Avhdesh Gupta, allegedly developed APK files disguised as services including senior citizen cards, life certificates, pension verification, traffic challans and credit-card updates. Police suspect these applications may have been used in frauds exceeding ₹150 crore nationwide.
The investigation began after a 72-year-old Byculla resident allegedly lost ₹5.62 lakh. On August 13, he was reportedly contacted by a fraudster posing as a senior Bank of India manager, who offered help with a senior citizen card and sent a file named “Senior Citizen Card Verification.apk” through WhatsApp. The victim allegedly installed it and entered personal and debit-card details, after which ₹5.62 lakh was withdrawn from his account.
The case was initially registered by Byculla Police and later transferred to the Mumbai Crime Branch Property Cell. Technical analysis of the malicious application reportedly led investigators to Gupta in Madhya Pradesh.
Police allege Gupta created and supplied 2,805 APK files to cybercrime groups. The applications were designed to resemble legitimate services and encourage victims to install them. Depending on their permissions, such apps can potentially capture information entered by users, monitor notifications or help criminals obtain banking credentials. The exact capabilities of the identified applications are still being examined.
Investigators allege Gupta initially provided regular website and app-development services before becoming involved in malicious APK development. Police believe he later built connections with fraud groups across India and acted as a technical service provider within the wider cybercrime network.
Police also allege that Gupta rented server infrastructure used in the operation. Investigators are examining the servers to determine how stolen information was transferred and to identify the groups that purchased the applications.
Police analysis reportedly linked the APK network to at least 9,673 people across India. Complaints from 1,074 victims were registered through the 1930 helpline, including 143 from Maharashtra and 36 from Mumbai. Investigators have identified 88 cases linked to the applications, including 8 in Maharashtra and 5 in Mumbai.
Current complaints and transactions indicate losses of around ₹15.75 crore. However, police suspect the overall fraud linked to the applications could exceed ₹150 crore. This is an investigative estimate and does not represent money directly earned by Gupta.
During a raid at Gupta’s Indore office, police seized a pen drive, CPU, 3 hard disks, a Wi-Fi router and 3 mobile phones. The devices are being examined for source code, customer details, communications, payment records and links to other cybercrime operators.
Police say Gupta allegedly took steps to hide his identity, but investigators traced him through technical evidence connected to 1 APK. They are now examining app signatures, server records and communication logs to map the wider network.
The case highlights how fraudsters can misuse familiar public-service names to gain victims’ trust. Users should avoid installing APK files received through WhatsApp, SMS or unknown links. Government and banking services should be accessed through official websites or trusted app stores.
Police are questioning Gupta to identify the alleged gangs and individuals who purchased the applications. The investigation is ongoing, and Gupta has not been convicted. The allegations remain subject to investigation and court proceedings.
Also read: Viksit Workforce for a Viksit Bharat
Do Follow: The Mainstream LinkedIn | The Mainstream Facebook | The Mainstream Youtube | The Mainstream Twitter
About us:
The Mainstream is a premier platform delivering the latest updates and informed perspectives across the technology business and cyber landscape. Built on research-driven, thought leadership and original intellectual property, The Mainstream also curates summits & conferences that convene decision makers to explore how technology reshapes industries and leadership. With a growing presence in India and globally across the Middle East, Africa, ASEAN, the USA, the UK and Australia, The Mainstream carries a vision to bring the latest happenings and insights to 8.2 billion people and to place technology at the centre of conversation for leaders navigating the future.