Secretariat

Spain's National Police have arrested 43 people accused of posing as bank antifraud departments in a smishing and vishing scheme that defrauded more than 130 victims of over $1.26 million (€1.14 million). Officers said they had clarified 134 offences. The suspects face charges of belonging to a criminal group, fraud and money laundering. A further 13 people were questioned without being detained, and 95 have been formally accused in all. The year-long inquiry is continuing.

Police in Bhadohi, in India's Uttar Pradesh state, have arrested a 27-year-old man accused of creating multiple Telegram groups to collect and share child sexual abuse material (CSAM). The case began with a CyberTipline report received at Koirauna police station. An FIR was registered under India's IT Act, the POCSO Act and the Bharatiya Nyaya Sanhita. Officers recovered a Redmi (Xiaomi 15) phone said to have been used in the offence. The arrest was made on 10 November 2026.

OpenAI disclosed user content, including text and files entered into or generated by its services, in response to 88 government requests in January–June 2026, covering 130 accounts. The company received 146 content requests, typically search warrants, and produced data in about 60 percent of them, plus 620 non-content requests for subscriber records. Ordinary requests more than doubled from late 2025. No country breakdown is given. U.S. national security demands totaled 250–499.

India's Enforcement Directorate has arrested Sagar Dash, founder of Armstrong Exchange Pvt Ltd, in its money laundering probe into the All Panel Exchange (APX) betting platform. ED alleges victims' money moved through mule accounts at Jubilee Hills Mercantile Co-operative Bank, Hyderabad, and shell firms into an account at Nagarbhavi Credit Co-operative Society, Bengaluru, and that Dash used the society's KYC and forged papers to open a crypto account. About $960,000 is frozen.

India's Enforcement Directorate has provisionally attached assets worth about $1.5 million (Rs 14.16 crore) in the HashPe cryptocurrency investment case and filed charges before a special money laundering court in Puducherry. Run through hashpe.io and a multi-level marketing network, the scheme raised about $12 million by promising 1% daily returns, trading fictitious coins and paying earlier investors with new money. Four accused are in judicial custody.

India's I4C asked Google on 5 Nov 2026 to remove eight Play Store loan apps. Victims report 7-day terms instead of the 91-365 days advertised, about 40% deducted upfront, contact harvesting and extortion with morphed photos. The apps belong to three separate operations, one with Chinese-language code and a hidden silent-photo function. Four look-alikes still on Play request SMS access, and FlexiBee's replacement uses Beijing-made SDKs despite claiming it collects no data.

The United Nations Office on Drugs and Crime (UNODC) is recruiting a temporary P-3 Programme Officer (Migrant Smuggling and Cybercrime Investigation) in Rabat, Morocco, for 11 months. The officer will deliver cyber-investigation training and technical assistance to African law enforcement and justice agencies under an EU-funded project. Applicants need a Master's degree in a relevant field and five years of cybercrime experience. Applications close on 23 November 2026.

The Unique Identification Authority of India (UIDAI) has issued its amended Internship Policy, 2025, opening internships of six weeks to 12 months at its Head Office, Technology Centre in Bengaluru, and Regional and State Offices. Students and recent graduates with at least 60% marks in technology, law, commerce, management and other fields, plus PhD scholars, are eligible, with monthly stipends from Rs 20,000 to Rs 50,000.

Thailand arrested eight Chinese nationals on 9 November 2026 in a Nong Prue, Pattaya, villa raid over a Douyin romance-and-investment scam targeting Chinese victims, with operators posing as army generals. All eight had entered illegally; four were wanted in China. Two Myanmar housekeepers were also detained. Seizures included two laptops, 32 phones and 178-plus SIM cards. Loss figures conflict: a still-unverified 300-million-baht estimate, or about 350 million baht in recorded transfers.

The RCMP said on 9 November 2026 that Maple Disruption 2.0, organized by its National Cybercrime Coordination Centre and the Canadian Anti-Fraud Centre from 2 to 6 November, saw partners from more than 50 organizations carry out 10,987 disruptive actions against fraud and cybercrime tools. Officials said 4,264 fraud reports were actioned and $1,063,809 was recovered. The release named no accused and announced no charges.

SG Finserve Limited told BSE and NSE on 3 November 2026 that it had detected 15 unauthorized debit transactions totalling Rs 5,10,00,000 (51 million rupees, about $540,000) from two Yes Bank current accounts at the South Extension II branch, New Delhi, executed through the bank’s payment API. The company said it notified the Cyber Crime Cell, the RBI and CERT-In, engaged an independent investigating agency, and that core operations and customer data were unaffected.

Navi Mumbai Cyber Police registered a case after Mirae Asset Financial Services (India) alleged Rs 8,92,56,160 was siphoned in four hours on 28 Oct 2026 via 583 fictitious loans and 438 disbursements, with product code PLNMAKS linked to partner Kissht. FIR number not published.