The victim’s mobile number remained the same, but it was control of it shifted to cyber fraudsters. Using fake KYC documents, the accused obtained a SIM linked to the number through an e-SIM swapping fraud. They monitored the victim’s bank transactions for months before striking over a weekend. Within three days, Rs 9.88 crore was transferred through RTGS transactions. The money was then routed through more than 1,000 bank accounts and several finnacial companies to conceal its trail. Nagpur Rural Police have busted the inter-state network and arrested six persons, including an advocate practising before Mumbai and Delhi High Courts. Police managed to freeze and recover Rs 4.21 crore after the fraud was reported promptly. According to investigators, the accused studied the victim’s banking pattern before carrying out the fraud.

 

The account reportedly recorded frequent and high-value transactions. This helped the accused understand that it was a business account capable of handling large sums. The accused watched account’s transactions for seven to eight months. They learnt about its regular financial activity and the movement of large amounts. This long preparation helped them plan the fraud around a period when they could move the money quickly. Money passed through 1,000 accounts: The investigation has revealed a complex money trail. The accused routed the stolen funds through more than 1,000 bank accounts.

 

They used financial service companies, payment gateways and fintech platforms to move the money in multiple stages. Police suspect that the accused used companies, including Datasha Private Limited, Shree Fintech and Raktover Private Limited, to facilitate the movement of funds. The money was withdrawn in cash, transferred through hawala channels and used to purchase gold at different locations in Mumbai and Uttar Pradesh. The use of multiple accounts and financial platforms made it difficult to trace the original source and final destination of the money. Investigators are examining the accounts and virtual wallets linked to the companies. Role of Angadia operators and hawala networks in Mumbai and Delhi is also under scrutiny.

 

Police suspect that the operation involved organised layering of funds and money laundering. Advocate among six arrested: The arrested accused are Hanuman Kumar Khakhanu Ram (26) and Ravikumar Ramvriksha Yadav (24), both from Uttar Pradesh; Azim Rafique Mithani (26), from Mumbai; Mukeshkumar Shamshankar Mishra (41), from Mira Road in Thane district; Rakesh Sailesh Singh (44), from Jharkhand; and Ankur Ashokkumar Goswami (30), from Ghaziabad in Uttar Pradesh. Mishra is an advocate who practises before the Mumbai and Delhi High Courts. He also runs a Mumbai-based law firm, Lawmetics. Police allege that he used his knowledge of cybercrime cases to guide the other accused. The police have also found that some of the accused had worked in the banking sector for six to seven years. Some had worked in 2024 at Raynet Technology Private Limited, which is facing a separate financial fraud case involving around Rs 3,400 crore in Indore. Local Crime Branch, Cyber Police Station and Wadoda police jointly investigated the case. Teams were sent to Delhi, Mumbai and Uttar Pradesh to trace the accused. Preliminary checks have pointed to bank accounts that may be linked to other victims. Coordination with the Enforcement Directorate is also underway. The recovered amount is being transferred to the victim’s account. The arrest was made under the guidance of Senior SP Dr Harssh Poddar and Addl SP Anil Mhaske. Nagpur Rural Police have urged citizens to report cyber fraud immediately and remain alert to suspicious SIM replacement requests, unauthorised e-SIM activation and unusual banking alerts.

 

 

The accused used fake Know Your Customer (KYC) documents to obtain control of the mobile number linked to the victim’s bank account. The e-SIM swapping allowed them to receive calls and messages meant for the original user, including banking alerts and OTPs. The victim did not click on any link or share an OTP, according to the complaint. Police are examining how the accused gained control of the number and accessed Mobile number taken over using fake KYC the banking channel. Investigators suspect that the accused planned the operation around the weekend. The SIM takeover was arranged before the transactions began. The fraudsters then carried out large RTGS transfers between July 4 and 6, 2026. The timing was crucial. By targeting the account over Saturday and Sunday, the accused attempted to move the money before the fraud could be detected and stopped. Police managed to block the account on Monday which helped to prevent the entire amount from being lost. The victim approached Cyber Police Station, Nagpur Rural, and filed an online complaint. Wadoda police registered a case on July 8. The complaint helped police freeze and recover Rs 4,20,61,162.