⚠️ DISCLAIMER: Ministry of Cyber Affairs is an independent news, guides and directory service on cybercrime and cybersecurity, for victims and investigators. It is NOT an official government or ministry portal.
Website Scam CheckerNew
Back to News

Cyber Criminals Use High-limit Credit Cards to Launder cybercrime proceeds, new money layering method exposed

29 May 2026
Source:Official Press Release, Mumbai Police
Share
  Cyber Criminals Use High-limit Credit Cards to Launder cybercrime proceeds, new money layering method exposed

Mumbai Police have arrested two men from Jharkhand who used credit cards with huge outstanding balances to hide and move stolen money. This method has made it harder for victims to get their money back quickly. GR No. 43/2026 was linked to android malware case - GasBill Update.apk

29 May 2026 | Mumbai, India

In the past, cyber criminals transferred stolen money into “mule” bank accounts. But if victims complained fast by calling 1930, the money would get blocked. Withdrawing large amounts from ATMs also left traces through CCTV, and online purchases could be cancelled.

Now, the criminals have found a new way. They search for people who have very high dues on their credit cards. They contact these people, offer them a commission, and use the fraud money to clear the credit card bills. Once the bill is paid, the card holder gives the same amount in cash to the criminals, keeping a small commission for themselves. This way, the stolen money quickly turns into clean cash, and it becomes very difficult for victims to stop the transaction even in the “golden hour” after the fraud.

The case was registered at Cuffe Parade Police Station, Mumbai on 23 February 2026. The victim lost Rs 5,44,827. The fraudsters called the victim pretending to be from Mahanagar Gas Agency. They sent a file named “GasBill Update.apk” on WhatsApp and convinced the victim to install the APK file on his phone.

Once installed, the criminals got full unauthorised access to the victim’s mobile. They stole sensitive details of:

  • HDFC Credit Card
  • ICICI Credit Card
  • Axis Bank Debit Card
  • IndusInd Bank Debit Card

Using these details, the fraudsters transferred a total of Rs 5,44,827 from the victim’s accounts to different places. They transferred the money to different places. During investigation, police found that the stolen money was used to pay off pending credit card bills of several people, including Vicky Thakkar and Shubham Kumar Shaw. Police contacted the credit card companies, traced these people, and followed the leads.

Arrests

On 18 May 2026, Mumbai Police arrested two men:

  1. Govind Shyamlal Mandal, 42 years old, from Badki Chidri, Jarkunda, Konardam, Bokaro, Jharkhand. He received cash from the credit card holders.
  2. Madan Jaylal Sav alias Sahu, 40 years old, from the same village in Bokaro, Jharkhand.

Both accused are now in judicial custody. Police also recovered mobile phones from them that contained photos of many credit cards, transaction chats, audio clips, and other evidence. Two more people, Pradeep Mandal and Dinesh Mandal from Jamtara, Jharkhand, have been named as wanted accused along with their associates.

Investigation Team

The case was cracked by a team led by Senior Police Inspector Satish Gaikwad of Cuffe Parade Police Station, under the guidance of senior officers including Deputy Commissioner Manish Kalwaniya.

Investigation Officers

  • M.P.O. Ashwini Patil
  • S.P.O. Amit Devkar
  • P.O. Rupesh Kumar Bhagwat
  • And other staff: Anil Udage, Wasim Sheikh, Amar Deshmukh, Sachin Patil

Suggestions for Card Companies

Transaction monitoring systems of credit card may be strengthened, keeping in mind this new technique of fraud proceeds. "Source" of bill payment may be verified before processing with the bill payment. If repayments are made from same IP or sources, alert mechanism may be implemented to counter this scam.

Been targeted or lost money? Acting in the first hour matters most — see our step-by-step guides on how to report cybercrime and recover your money, by country. In India, call 1930 or file at cybercrime.gov.in.
More in Cybercrime Trends

Related articles

Cybercrime Trends (News)

Singapore Police and Four Banks Disrupt Over 900 Scam Attempts, Averting S$35 Million in Losses in a Two-Month Drive

Singapore's Anti-Scam Centre and four banks disrupted more than 900 scam attempts between 1 September and 31 October 2026, the police said, averting over S$35 million (about $27.2 million) in potential losses. The centre operates year-round, with bank staff on site. India, by contrast, runs a standing national system: the Citizen Financial Cyber Fraud Reporting and Management System, which since 2021 has saved more than Rs 11,158 crore (about $1.19 billion) in over 3.28 million complaints.

12 Nov 2026
Cybercrime Trends (News)

Spain's National Police Arrest 43 Over Bank Antifraud SMS Scam That Took More Than $1.26 Million

Spain's National Police have arrested 43 people accused of posing as bank antifraud departments in a smishing and vishing scheme that defrauded more than 130 victims of over $1.26 million (€1.14 million). Officers said they had clarified 134 offences. The suspects face charges of belonging to a criminal group, fraud and money laundering. A further 13 people were questioned without being detained, and 95 have been formally accused in all. The year-long inquiry is continuing.

12 Nov 2026
Cybercrime Trends (News)

India's UP Police Arrest Man Accused of Running Telegram Groups to Share Child Sexual Abuse Material, Acting on NCMEC CyberTipline Alert

Police in Bhadohi, in India's Uttar Pradesh state, have arrested a 27-year-old man accused of creating multiple Telegram groups to collect and share child sexual abuse material (CSAM). The case began with a CyberTipline report received at Koirauna police station. An FIR was registered under India's IT Act, the POCSO Act and the Bharatiya Nyaya Sanhita. Officers recovered a Redmi (Xiaomi 15) phone said to have been used in the offence. The arrest was made on 10 November 2026.

12 Nov 2026