‘Malicious App’ Sent in the Name of Courier Update, Nearly Rs 4 Lakh Stolen

New Delhi: A small message received on a mobile phone in the name of updating a courier delivery address turned into a massive loss of nearly Rs 4 lakh for a man. Cyber fraudsters first sent a malicious APK file to his mobile phone and then obtained his banking details under the pretext of making a payment of just Rs 2. Within moments, nearly Rs 4 lakh was withdrawn from his bank account. However, this time, the cyber fraudsters’ operation did not continue for long. The Cyber Police Station team of Southeast District Police has busted an alleged interstate cyber fraud network and arrested three accused.

Southeast District DCP Vineet Kumar said the arrested accused have been identified as Nasir Hussain, Sokeen and Ashish Arya. The investigation has revealed an alleged network in which money obtained through cyber fraud was routed and converted into cash through fraudulently created HPCL DriveTrack Plus fuel cards. Police have so far identified more than 113 suspicious fuel cards. During interrogation, it also emerged that around 150 to 200 fake fuel cards had allegedly been created. Suspicious financial transactions linked to these cards are estimated to have reached around Rs 10 crore, and the investigation is still underway.

Rs 2 Payment Opened the Door to Fraud

The incident dates back to May 7, 2026. The complainant, Jitendra Kumar Gupta, received a WhatsApp message on his mobile phone asking him to update his address for courier delivery. An APK file was sent along with the message. After opening the file, the complainant was prompted to enter his HDFC NetBanking details to make a payment of Rs 2.

Following this, unauthorised withdrawals of Rs 1,99,009.44 and Rs 1,98,009.44 were made from his account, amounting to a total of Rs 3,97,018.88. An e-FIR was registered at Cyber Police Station, Southeast District, and an investigation was launched.

Fraud Money Led Police to Fake Fuel Cards

During the investigation, police examined banking and payment records and found that around Rs 3.97 lakh withdrawn from the complainant’s account had been used through an HPCL DriveTrack Plus customer ID, 4002211199. Two truck numbers were found linked to this customer ID.

Further investigation revealed transactions worth around Rs 15 lakh through the associated fuel cards. Police then began a detailed examination of mobile numbers, SIM-issuing centres, telecom records, points of sale and documents related to the registration of the fuel cards.

Video KYC Led Police to Sokeen

During the investigation, police traced the video KYC of a suspicious fuel card, which helped them identify Sokeen. Technical and manual investigations were subsequently conducted at several locations, including Nuh, Nagina, Pahari and Bharatpur in the Mewat region.

After sustained efforts, police traced Nasir Hussain to Dhiriyawas village in Tapukara, in Rajasthan’s Khairthal-Tijara district. Nasir and Sokeen were arrested on September 28.

Former Employee Also Under Investigation

As the investigation progressed, the name of Ashish Arya emerged. He had previously worked as a Retail Business Executive with TriStar Management Services Limited.

According to police, during questioning, he admitted that he had registered the concerned fuel card without physically verifying the documents. He also identified Sokeen as the person whose video KYC had been conducted.

Police further alleged that vehicle registration certificates, Aadhaar and PAN-related information were obtained from truck owners through the BlackBuck transport platform in the name of vehicle bookings. The information was allegedly used to create forged documents by altering photographs and addresses with the help of artificial intelligence-based tools.

Fuel Pumps Used to Move Fraud Proceeds

According to the investigation, fuel cards were registered using forged documents and SIM cards obtained in the names of other people. After completion of video KYC, money obtained through cyber fraud was loaded onto these cards.

The cards were then allegedly used at petrol pumps through collusion, with the amount loaded on the cards being utilised for fuel purchases. Police also alleged that cash or online payments received from other customers were subsequently transferred to bank accounts specified by the accused.

Mobiles and SIM Cards Recovered

Police recovered three mobile phones from Nasir Hussain and two from Sokeen. Seven SIM cards were found in the seized mobile phones, while five additional SIM cards were also recovered from Sokeen’s possession.

According to police, Nasir Hussain is also named in two other e-FIRs registered at Cyber Police Station in Southeast District. He is also facing a case related to cheating and forgery at Lakhanmajra Police Station in Rohtak, Haryana, and another case related to an alleged attack on a police team at Nuh’s Nagina Police Station. Information has also emerged about a case registered against him in Maharashtra.

Investigation Into Suspected Rs 10-Crore Network Underway

Police are now tracing the entire chain of financial transactions estimated at around Rs 10 crore. Investigators are also examining other fuel cards, APK operators, other individuals allegedly involved in cyber fraud and possible cases linked to other states.

The entire operation was carried out by the Cyber Police Station, Southeast District team under the leadership of Inspector Pankaj Kumar, SHO Cyber, and under the supervision of ACP Operations Mihir Sakariya.

The team included Sub-Inspector Rakesh Sharma, Woman Sub-Inspector M. Thiamanela, Head Constable Suresh Mehla and Head Constable Sagar Yadav.