The Delhi Police have busted a major multi-state cyber fraud syndicate allegedly involved in cheating bank customers on the pretext of updating their KYC details, officials said on Saturday. Four men were arrested from Jharkhand and West Bengal in connection with the case.
The arrested accused have been identified as Shiv Kumar Ravidas (22), Sanjay Ravidas (33), Dinesh Ravidas (29) and Shubham Kumar Barnwal (25). Police said the gang members posed as bank officials and created a false sense of urgency among victims regarding KYC updates.
According to investigators, the accused persuaded victims to install malicious APK files on their mobile phones. These files enabled unauthorised remote access to banking applications and allowed the fraudsters to steal sensitive financial data. Using the compromised credentials, the gang allegedly availed loans, transferred money into mule accounts, and withdrew funds through ATMs, point-of-sale (POS) machines and other banking channels.
The case surfaced after a Sagarpur resident lodged a complaint in December 2025, stating that she received calls and messages from individuals impersonating bank officials. She was induced to click on a malicious link shared via an online messaging platform. Soon after, she received alerts about a Rs8.33 lakh loan being processed on her credit card, along with unauthorised transactions of Rs5 lakh and Rs3.3 lakh. She denied authorising any such transactions, prompting the registration of a case.
Police investigations revealed that the accused were operating from areas near Jamtara in Jharkhand, a region notorious for cyber crimes, and frequently shifted locations between Jharkhand and West Bengal to evade arrest.
In coordinated raids, three accused were apprehended from the Nirsa area of Dhanbad district in Jharkhand while they were allegedly targeting victims. The fourth accused was arrested from Hooghly district in West Bengal.
During the operation, police seized 10 mobile phones, 13 SIM cards, clothes allegedly worn during ATM withdrawals, and extensive digital evidence, including malicious APK files, mobile data, Excel sheets containing bank details, and transaction messages.
Preliminary interrogation revealed that the syndicate operated in a structured manner, with different members assigned specific roles such as procuring APK files and mule accounts, calling victims, managing bank transactions, and withdrawing cash. Further investigation is underway.
