The Nagpur Police have uncovered a large-scale cyber fraud network that deceived job seekers across 21 states through fake business partnerships and investment schemes. So far, 23 individuals have been arrested, while five others remain absconding. Investigators have traced transactions exceeding ₹21 crore, allegedly laundered through online betting, hawala channels, and digital money-muling systems.
The investigation began after a complaint from 28-year-old Gondia resident, Deepak Gaidhane. He was introduced to Nagpur-based Sumit Patle, who offered him a partnership in a “machinery tools business.” Enticed by the proposal, Gaidhane handed over his Aadhaar and PAN cards for registration. Shortly after, a fake company named “Deepak Enterprises” was created under the Small Scale Industries Act, with a current account opened in Gaidhane’s name at a Hingna branch bank. Between October 13 and 27, 2025, transactions worth ₹1.73 crore were routed through this account without his knowledge.
Further investigation revealed that the syndicate managed more than 80 mule bank accounts across India. The funds were transferred in multiple layers before being converted into dollars and sent abroad through hawala networks.
Chinese apps, encrypted channels, and digital deception
Police Commissioner Ravinder Singhal stated that the syndicate relied heavily on digital tools and cross-border coordination. Fraudsters targeted victims with false job and investment advertisements and sent them malicious APK files that contained Chinese code. Once installed, these files captured sensitive bank details and OTPs.
“The masterminds are believed to be operating from China and Cambodia. We are tracing the international money trail with help from central agencies,” said Singhal.
In police investigations found that the group used illegal trading and betting applications such as RPMTA and AFMHNW to disguise and transfer illicit funds. Communication within the network took place over Telegram and WhatsApp using coded language.
Pan-India network and seizures
According to data from the National Cybercrime Reporting Portal, 174 complaints have been linked to this syndicate, including 25 from Maharashtra—particularly from Mumbai, Thane, Pimpri-Chinchwad, Navi Mumbai, Pune, and Nagpur.
Police have filed seven FIRs, including two each in Mumbai, Navi Mumbai, and Nagpur, and one in Thane. Raids led to the recovery of crucial evidence, including:
- 8 shop and establishment registration certificates
- 9 fake rental agreements
- 61 cheque books
- 50 SIM cards
- 38 mobile phones
- 14 banners, rubber stamps, and forged seals
In addition, ₹53 lakh was frozen across multiple bank accounts, a BMW car was seized, and assets worth ₹17.47 lakh were confiscated.
Police Commissioner Singhal described the operation as “a sophisticated blend of trust manipulation and technology misuse.” He added, “The accused exploited unemployed youth by promising business opportunities. Using their documents, they created fake firms and routed crores through mule accounts. Freezing these accounts and arresting the operators has crippled a major part of their network.”
Police authorities have advised citizens to remain cautious, avoid sharing personal or financial details with unknown entities, and verify the authenticity of any online job or business offer.
The investigation suggests possible links to larger cybercrime networks operating from Southeast Asia. The police continue to track five absconding suspects believed to be connected to foreign handlers.
Also read: Viksit Workforce for a Viksit Bharat
Do Follow: The Mainstream formerly known as CIO News LinkedIn Account | The Mainstream formerly known as CIO News Facebook | The Mainstream formerly known as CIO News Youtube | The Mainstream formerly known as CIO News Twitter
About us:
The Mainstream formerly known as CIO News is a premier platform dedicated to delivering latest news, updates, and insights from the tech industry. With its strong foundation of intellectual property and thought leadership, the platform is well-positioned to stay ahead of the curve and lead conversations about how technology shapes our world. From its early days as CIO News to its rebranding as The Mainstream on November 28, 2024, it has been expanding its global reach, targeting key markets in the Middle East & Africa, ASEAN, the USA, and the UK. The Mainstream is a vision to put technology at the center of every conversation, inspiring professionals and organizations to embrace the future of tech.
