Cybercrime Crackdown: Police Expose Mule Networks, APK Scams and Fake Officer Impersonation

 

Cybercrime investigations across India have uncovered the sophisticated networks powering online fraud, from fake police officers and malicious mobile apps to mule bank accounts and ghost SIM cards. Recent cases from Gurugram, Chandigarh, Varanasi, Mumbai and Delhi reveal how cybercriminals exploit technology, identity theft and social engineering to target unsuspecting victims.

The incidents highlight that modern cyber fraud extends far beyond phishing messages, relying on organised criminal networks that enable scams worth crores of rupees.

Delhi man arrested for impersonating Himachal Pradesh SP

In Gurugram, police arrested a Delhi resident for allegedly impersonating a senior police officer from Himachal Pradesh in an attempt to influence local authorities.

According to investigators, the accused identified himself as Superintendent of Police Chandan Singh and contacted a Gurugram police station, seeking restoration of electricity to his wife's shop located in Mega Mall.

Police officials became suspicious after the caller invoked the name of the state's Director General of Police (DGP). Verification with Himachal Pradesh Police confirmed that no such request had been made by the officer, exposing the alleged impersonation.

Investigators are now examining whether the accused had used similar tactics in previous cases to obtain personal favours by misusing the identity of senior government officials.

APK scams cost Chandigarh residents over ₹4 lakh

In Chandigarh, two separate cyber fraud cases demonstrate the dangers of downloading applications from unverified sources.

Police said two victims lost a combined ₹4.14 lakh after installing malicious Android Package Kit (APK) files disguised as legitimate mobile applications.

One victim reportedly downloaded an app called "ReeLoop", while another installed "Maripivahan APK." Investigators believe the applications granted fraudsters remote access to the victims' smartphones, allowing them to authorise multiple unauthorised UPI transactions and transfer money from linked bank accounts.

Authorities are working to identify those behind the fraudulent applications and trace the stolen funds.

Mule accounts and ghost SIM cards fuel organised cybercrime

Investigations in multiple states have also exposed the hidden infrastructure supporting large-scale cyber fraud.

In Varanasi, police arrested six individuals, including an alleged female kingpin, accused of forging Aadhaar documents to open bank accounts used for cybercrime across at least nine states.

Meanwhile, Mumbai Cyber Police registered a case against a point-of-sale (POS) operator accused of issuing SIM cards using forged identity documents. Such "ghost" SIM cards allow fraudsters to operate anonymously and avoid detection during cyber investigations.

In Delhi, investigators tracking a ₹1.2 lakh UPI fraud traced the money trail to a mule bank account allegedly operated from Rajasthan, highlighting how criminals use third-party accounts to receive and quickly transfer stolen money.

What are mule accounts?

A mule bank account is an account used to receive, transfer or withdraw money obtained through cybercrime.

Sometimes the account holder knowingly participates in the fraud in exchange for a commission. In other cases, individuals are tricked into sharing banking credentials or opening accounts that criminals later misuse.

Law enforcement agencies say dismantling these networks is essential because mule accounts form the financial backbone of organised cybercrime.

Understanding the 'digital arrest' scam

Police and cybersecurity experts have also warned about the growing number of "digital arrest" scams.

In these frauds, criminals impersonate police officers, CBI officials, customs authorities or other government agencies and falsely claim that the victim is involved in a criminal investigation.

Victims are intimidated through video or voice calls and pressured into transferring money, sharing sensitive information or remaining isolated while the so-called "investigation" is conducted.

Authorities have repeatedly clarified that no legal process called a "digital arrest" exists in India, and genuine law enforcement agencies never demand payments or confidential financial information over phone or video calls.

How to protect yourself

Cybersecurity experts recommend a few simple precautions:

• Never download APK files from unknown links or messaging apps.
• Install applications only through official app stores.
• Do not share OTPs, UPI PINs or banking credentials with anyone.
• Verify the identity of callers claiming to represent government agencies.
• Disconnect suspicious calls immediately and contact the organisation through official channels.
• Report cyber fraud promptly through the national cybercrime helpline or police.

As cybercriminals continue to refine their tactics, investigators say public awareness remains one of the strongest defences against financial fraud, identity theft and digital deception.