A suspected interstate cyber fraud operation has come under investigation in Daman after police arrested a man from Jharkhand for allegedly using a fake RTO e-challan APK to compromise a mobile phone and withdraw money from a victim’s bank account.
The accused has been identified as Mohammad Sagir Ansari. Police said he is allegedly linked to a wider cyber fraud network that used malicious applications disguised as government services to compromise mobile devices and access banking-related information.
Ansari was arrested in Giridih, Jharkhand, after a Daman Police team tracked him using technical leads over 3 to 4 days. He was later brought to Daman after police obtained transit remand from a court. Investigators are questioning him to determine the number of people allegedly targeted by the network and the amount of money potentially withdrawn from their accounts.
The case was reported on July 27, 2026, when a resident under Kachigam Coastal Police Station received an APK file from an unknown number. The file was presented as an RTO e-challan application. Believing it to be linked to a government service, the victim installed it on the phone.
Following the installation, the mobile device was allegedly compromised. The victim soon received a notification stating that money had been withdrawn from the bank account. After noticing the unauthorised transaction, the victim approached the police and filed a complaint.
Kachigam Police then began a technical investigation and analysed the APK and its associated digital trail. The investigation reportedly led to information pointing to Ansari and an interstate cyber fraud network.
A police team travelled to Giridih, conducted surveillance and arrested the accused. A mobile phone was also seized from him. Investigators are examining the device for contacts, digital activity, possible associates and other potential victims. They are also checking whether additional bank accounts or mobile devices were used in the alleged operation.
Investigators are examining how the fake APK was created and distributed, how victims were identified and how the accused allegedly obtained access to mobile devices and banking information. The movement of money withdrawn from victims’ accounts is also being traced.
Daman Police have advised residents not to install APK files received through WhatsApp, SMS or other messaging platforms, especially those claiming to be RTO e-challan or other government-service applications.
Residents have also been advised to verify suspicious files and links through official government websites or authorised channels before opening or installing them.
The investigation remains underway, with police examining technical evidence, the seized device, bank transactions and digital communications to identify other accused persons, victims and the wider scope of the alleged network.
Also read: Viksit Workforce for a Viksit Bharat
Do Follow: The Mainstream LinkedIn | The Mainstream Facebook | The Mainstream Youtube | The Mainstream Twitter
About us:
The Mainstream is a premier platform delivering the latest updates and informed perspectives across the technology business and cyber landscape. Built on research-driven, thought leadership and original intellectual property, The Mainstream also curates summits & conferences that convene decision makers to explore how technology reshapes industries and leadership. With a growing presence in India and globally across the Middle East, Africa, ASEAN, the USA, the UK and Australia, The Mainstream carries a vision to bring the latest happenings and insights to 8.2 billion people and to place technology at the centre of conversation for leaders navigating the future.