⚠️ DISCLAIMER: Ministry of Cyber Affairs is an independent news, guides and directory service on cybercrime and cybersecurity, for victims and investigators. It is NOT an official government or ministry portal.
Website Scam CheckerNew
Back to News

Civil Registration system (CRS) portal abuse foiled by UP Police, 3 arrested

29 September 2026
Share
Civil Registration system (CRS) portal abuse foiled by UP Police, 3 arrested

UP Police say Bhadohi Police arrested three people accused of forging birth certificates by misusing officials’ CRS portal logins — allegedly via OTPs, email takeover, and uploads of fake data or blank papers. The force claims about 200–250 fake certificates were produced for illegal gain. Official post names no FIR or accused; local press same day aligns on the CRS/OTP modus.

Bhadohi / Lucknow: Uttar Pradesh Police say Bhadohi Police have arrested three accused in a racket that allegedly forged birth certificates by misusing officials’ login credentials on the government’s Civil Registration System (CRS) portal, a classic identity-and-access abuse case dressed up as paperwork.

The statewide force flagged the arrests on its official X account on 28 September 2026, under a zero tolerance towards crime” banner and the cyber-themed line Taking a Byte Out of Cyber Crime.

How the Alleged Scheme Worked

According to @Uppolice, the accused collected illegal payments from people seeking birth certificates and harvested their personal data.

The main accused allegedly obtained OTPs from officials, then took over those officials’ email IDs and portal logins.

With a live CRS session in hand, the gang allegedly uploaded fake data and blank papers, abused the login window, generated forged birth certificates, and downloaded them, converting a trusted civil-registration workflow into a forgery factory.

Scale Claimed by Police

UP Police say the group prepared roughly 200–250 fake birth certificates and earned illegal gains from the operation.

The official post does not name the accused, cite an FIR number, or detail seizures; those particulars, if any, sit with the investigating unit.

Local Hindi press covering the same Bhadohi action the same evening describes a Suriyawan police-station probe and a briefing by district officers consistent with the CRS / OTP-misuse narrative.

MoCA treats those reports as corroboration only and does not add unstated case numbers or charges.

Why CRS and OTP Abuse Matter

Birth certificates are foundational identity documents.

When forged through a live government portal rather than a printer-and-stamp scam, the fraud rides on credential theft, social-engineered OTPs, and session hijacking, cyber-enabled document crime that can feed downstream identity misuse, admissions, and services fraud.

The Bhadohi arrests underline a recurring enforcement lesson: portal security is only as strong as how officials handle OTPs and shared logins.

Once a secretary or panchayat login is opened for “legitimate” work, a compromised operator can slip forged entries into the same session.

Enforcement Signal

UP Police framed the bust as part of a broader zero-tolerance push (#UPPAgainstCrime / #GoodWorkUPP), crediting @bhadohipolice.

Investigation and court process will determine the final factual and legal picture; the public account so far is the official allegation of CRS-portal ID misuse to mint forged birth certificates at scale.

Source: UP Police (@Uppolice) X post, 28 September 2026, https://x.com/uppolice/status/2104630178639167846. Allegations remain subject to investigation and judicial process.

More in Cybersecurity

Related articles

Cybersecurity

OpenAI Disclosed ChatGPT User Content, Including Prompts and Files, in 88 Government Requests

OpenAI disclosed user content, including text and files entered into or generated by its services, in response to 88 government requests in January–June 2026, covering 130 accounts. The company received 146 content requests, typically search warrants, and produced data in about 60 percent of them, plus 620 non-content requests for subscriber records. Ordinary requests more than doubled from late 2025. No country breakdown is given. U.S. national security demands totaled 250–499.

12 Nov 2026
Cybersecurity

CyberStrike AI - Detection for Defenders: Scripting, Tempo and Residue

CyberStrike is a free, open-source AI agent for offensive security that pairs any LLM with 56+ tools, including a 40,000-line Windows post-exploitation module. A source-code reading of commit a5ed1e0 (v1.1.16) shows every Windows action runs through five fixed wrappers after a hard-coded five-process capability probe, leaving default cs-* and CyberStrike* artefacts. Includes Sigma, Suricata, YARA and KQL detections and a response playbook.

4 Nov 2026
Cybersecurity

Cybersecurity Checklist in the Agentic Hacking Era

Google Threat Intelligence Group and Mandiant say threat actors are now using agentic offensive frameworks such as ARTEX and PentAGI in real intrusions, moving from first stolen account to deep access in hours, sometimes 15 minutes. With CERT-In already warning of AI-assisted payment API hijacking at Indian NBFCs and fintechs, here is a checklist built on Google's five defence layers and CERT-In's controls.

2 Nov 2026