Jamtara Cyber Fraud Hub

The Ahmedabad Cyber Crime Branch arrested three men from the Giridih-Jamtara belt of Jharkhand for allegedly operating an inter-state cyber fraud syndicate. The network allegedly created and distributed malicious Android application package (APK) files to steal banking credentials and siphon money from victims across India. Police stated that the syndicate used disguised messaging techniques, such as fake utility bills and transport notices sent via WhatsApp, to trick victims into downloading the malware.

The investigation began after complaints from residents who lost money after installing malicious apps impersonating entities like Sabarmati Gas Limited and RTO e-challan systems. According to investigators, the alleged mastermind developed custom malware and marketed it through a Telegram bot, charging a monthly subscription fee to hundreds of fraudsters. Accomplices allegedly managed malware distribution, bank accounts, and cash withdrawals using cardless ATM systems to launder the stolen funds.

Authorities tracked and arrested the alleged mastermind on a moving train with the assistance of the Railway Protection Force, identifying him partly by a hand tattoo after he fled Mumbai. Police seized digital infrastructure, including domains, servers, and email accounts, while linking the suspects to multiple FIRs and dozens of national cybercrime complaints involving significant financial losses.

Not yet reported: The articles do not mention any final court sentencing or the total number of nationwide victims affected by the syndicate's malware.