⚠️ DISCLAIMER: Ministry of Cyber Affairs is an independent news, guides and directory service on cybercrime and cybersecurity, for victims and investigators. It is NOT an official government or ministry portal.
Website Scam CheckerNew
Back to News

India’s mule SIM trade: UP Police arrest man for selling SIMs activated with stolen biometrics

5 October 2026
Source:UP Police
Share

Police in Sitapur, Uttar Pradesh, have arrested a man accused of misusing a point-of-sale agent ID and people’s biometrics to activate SIM cards in their names and sell them on. Officers seized 25 SIM cards, five phones and a motorcycle. Such “mule SIMs” hide the real user and are widely used in cyber fraud.

SITAPUR: Police in Sitapur, Uttar Pradesh, have arrested a man accused of activating SIM cards in other people’s names through biometric fraud and selling them on, the Uttar Pradesh Police said on 4 October 2026.

Biswan police recovered 25 SIM cards, five mobile phones and a two-wheeler.

Police said the accused misused a point-of-sale (PoS) agent ID and customers’ biometrics to issue connections in other people’s names.

How the mule SIMs were made

Sources say the accused, Ankit Rathore of Hardoi district, captured people’s thumbprints and iris scans and used them to activate extra SIMs without their knowledge.

He then sold the SIMs at a premium, travelling across districts to find buyers.

He was caught during a night patrol near the railway colony after trying to flee.

Why mule SIMs matter

A mule SIM is registered to one person but used by another.

Because the number traces back to an innocent subscriber, it hides the real user, making such SIMs useful for fraud calls, OTP theft and running mule bank accounts.

Sitapur police have uncovered several similar cases, including a gang that misused the Aadhaar and biometrics of 65 to 70 villagers to open SIMs and bank accounts.

DoT advisory

The Department of Telecommunications warned on 21 September 2026 that fraudulent SIM issuance and renting or “muling” of SIMs are offences under the Telecommunications Act, 2023, punishable by up to three years in jail and fines of up to ₹50 lakh, and that the original subscriber can be held liable if a SIM in their name is misused.

It urges citizens to check all numbers issued in their name on the Sanchar Saathi portal and block any they do not recognise.

More in Cybersecurity

Related articles

Cybersecurity

OpenAI Disclosed ChatGPT User Content, Including Prompts and Files, in 88 Government Requests

OpenAI disclosed user content, including text and files entered into or generated by its services, in response to 88 government requests in January–June 2026, covering 130 accounts. The company received 146 content requests, typically search warrants, and produced data in about 60 percent of them, plus 620 non-content requests for subscriber records. Ordinary requests more than doubled from late 2025. No country breakdown is given. U.S. national security demands totaled 250–499.

12 Nov 2026
Cybersecurity

CyberStrike AI - Detection for Defenders: Scripting, Tempo and Residue

CyberStrike is a free, open-source AI agent for offensive security that pairs any LLM with 56+ tools, including a 40,000-line Windows post-exploitation module. A source-code reading of commit a5ed1e0 (v1.1.16) shows every Windows action runs through five fixed wrappers after a hard-coded five-process capability probe, leaving default cs-* and CyberStrike* artefacts. Includes Sigma, Suricata, YARA and KQL detections and a response playbook.

4 Nov 2026
Cybersecurity

Cybersecurity Checklist in the Agentic Hacking Era

Google Threat Intelligence Group and Mandiant say threat actors are now using agentic offensive frameworks such as ARTEX and PentAGI in real intrusions, moving from first stolen account to deep access in hours, sometimes 15 minutes. With CERT-In already warning of AI-assisted payment API hijacking at Indian NBFCs and fintechs, here is a checklist built on Google's five defence layers and CERT-In's controls.

2 Nov 2026