Cybercrime Trends

Hackers who planted malware on an Indian NBFC's server drained about ₹3.93 crore from its loan-disbursal bank account in 149 transfers on 5 October 2026, Delhi Police said. The money moved through mule accounts and was converted to USDT. The IFSO unit has frozen about ₹1.80 crore and arrested seven people in Rajasthan who allegedly ran the cash-out network. Police have not named the NBFC or the malware.

Karnataka's Cyber Command Unit has dismantled an illegal SIM box network run from two apartments in Bengaluru's Whitefield area, seizing 10 GSM gateways with 320 SIM slots, some running e-SIM connections, and arresting four people in Tiroda, Maharashtra, over the alleged supply of SIM cards converted to e-SIMs. Police suspect links to digital-arrest scams, sextortion and fraud.

For one Platinum Reactor user with its add-ons, training and support, a reasonable price on public benchmarks is about ₹0.5–2 crore a year before GST. That range runs from Uttar Pradesh Police at ₹53 lakh, through the US Justice Department and FDA at about ₹1.35 crore, to about ₹1.9 crore per Romanian Platinum licence including training.

Pakistan's NCCIA received 5,176 cybercrime complaints in the first month after Director General Syed Ali Nasir Rizvi took charge, registering 4,491 inquiries but only 272 FIRs, about 5.3 per cent of complaints. It reported 1,129 arrests and PKR 10.53 million returned to victims.

Pakistan's NCCIA Lahore says it has busted a cross-border synthetic identity fraud ring. Three suspects in Pakistan used AI-generated fake passports and photos, made by four Canada-based partners, to open accounts at major Canadian banks online. They got past photo verification with an anti-detect browser and ordered credit cards, which were delivered in Canada and maxed out before being dumped.

A Yes Bank deputy manager in Jodhpur stopped an elderly customer from sending ₹31 lakh by RTGS to fraudsters posing as Mumbai Crime Branch officers, who had kept him under a three-day "digital arrest" over WhatsApp video calls. She spotted a misspelt beneficiary name and alerted the Jodhpur Cyber Thana, whose officers reached the victim and saved the money.

Deoghar Cyber Police in Jharkhand have arrested nine people accused of posing as customer care for Google Pay, PhonePe, Paytm, Flipkart, Amazon Pay and Airtel Payments Bank, and of sending victims malicious APK files disguised as PM-Kisan, electricity-bill and RTO e-challan apps. Police seized 12 phones and 12 SIM cards whose numbers and IMEIs are linked to fraud complaints in several states.

Kalamassery Police in Kochi have arrested Shahid Suleiman, 31, of Chembrassery in Malappuram, the main accused in a case where cyber fraud money was used to buy Rs 62 lakh worth of gold from a leading jewellery store. He had been hiding in Bengaluru, Wayanad and Kozhikode for about a month and a half. Police seized a BMW car and a fake Aadhaar card.

Fake overseas job and visa offers cost workers thousands. Red flags, how to verify a recruiter by country, what to do if you paid, and where to report.

Told to pay a tax, fee or deposit to withdraw your money? That is a scam. How the release-fee trap works, warning signs, and what to do if you've paid.

After storms and wildfires, scammers pose as FEMA staff, charities and contractors. The FTC's warning signs, how to verify help, and where to report fraud.

DentaQuest says at least 15 million people were hit by a breach claimed by ShinyHunters. How to guard against medical identity theft and fraud right now.