DELHI CYBER POLICE BUSTED CHINA-LINKED WORK-FROM-HOME TASK BASED FRAUD SYNDICATE  

4 ACCUSED ARRESTED INCLUDING ACCOUNT SUPPLIER, ACCOUNT OPERATOR, AGENT & ACCOUNT HOLDER FROM HARYANA & UTTAR PRADESH. SYNDICATE SUPPLIED MULE BANK ACCOUNTS TO CHINA-BASED CYBER FRAUDSTERS THROUGH TELEGRAM AND LAUNDERED CYBER FRAUD PROCEEDS IN EXCHANGE FOR USDT (CRYPTOCURRENCY), 9 BANK PASSBOOKS, 05 SIM CARDS, 06 MOBILE PHONES & A RECORD REGISTER RECOVERED.  COMPLAINANT DUPED OF ₹12 LAKHS IN WORK-FROM-HOME TASK BASED FRAUD

Face2News/New Delhi

The staff of PS Cyber, South West District has busted a China-linked cyber fraud syndicate involved in supplying mule bank accounts to foreign fraudsters operating work-from-home task-based scams. Four accused persons, including the account supplier, account operator, agent and account holder, have been arrested. During investigation, substantial incriminating evidence including multiple bank passbooks, SIM cards, mobile phones and records of commission transactions were recovered.

An e-FIR No. 366/26, u/s 318(4)/319(2)/340/61(2) BNS, dated 17.07.2026 was received at PS Cyber, South West District regarding a cyber fraud of ₹12 lakhs. The complainant reported that he was contacted through Telegram and was offered a lucrative work-from-home task-based job. Initially, he was asked to deposit security money for completing various online tasks. Whenever he attempted to withdraw his earnings, the fraudsters induced him to deposit additional amounts on different pretexts. Believing the assurances given by the fraudsters, the complainant continued transferring money until he ultimately lost ₹12 lakhs.

INVESTIGATION & ARREST: Considering the gravity of the case and the loss incurred, a dedicated team led by SI Chetan Rana, comprising HC Vijaypal and HC Manender, was constituted under the leadership of Insp. Pravesh Kaushik, SHO/PS Cyber/SWD and under the overall supervision of Sh. Sandeep Ghai ACP/Ops South West District.

During investigation, technical analysis of Telegram records revealed that the Telegram IDs used by the fraudsters were linked to IP addresses geolocated to China. Detailed analysis of the money trail revealed that out of the cheated amount some amount was transferred into a bank account belonging to Gagan Yadav, which had been provided to the complainant by the China-based fraudsters.

Technical surveillance revealed the operator of the account was active in Gurugram, Haryana. On the basis of technical inputs, a raid was conducted and accused Geetam Singh was traced. During interrogation, it emerged that Geetam was engaged in supplying mule bank accounts to China-based cyber fraudsters and converting fraud proceeds into USDT, a type of cryptocurrency. Subsequent technical analysis of his mobile phone, WhatsApp and Telegram chats established his direct communication with China-based cyber fraudsters through Telegram.

Investigation further revealed that Geetam had supplied the alleged bank account of Gagan Yadav to China-based fraudsters. 3 Mobile phones were recovered from the possession of Geetam Singh.
Further, he disclosed that the bank account had been arranged through a person namely Dhruv. On the basis of his disclosure and technical evidence, a raid was conducted at Ghaziabad, leading to the arrest of Dhruv.

During the search, 09 passbooks of different account holders, including that of Gagan Yadav, 05 SIM Cards, 01 Mobile Phone, 01 Register containing records of commission received for supplying mule accounts were recovered. During sustained interrogation, Dhruv disclosed that a person named Anuj Sharma had assisted account holder Gagan Yadav in opening the bank account and that the SIM card linked with the account was registered in Anuj Sharma’s name. Acting upon this information, another raid was conducted in Noida, resulting in the arrest of Anuj Sharma. One mobile phone containing incriminating chats regarding payment of commission was recovered from his possession.

Further, a raid was conducted at Etawah, Uttar Pradesh, where account holder Gagan Yadav was traced and arrested. During interrogation, he disclosed that he had received commission for providing his bank account to the syndicate.

KNOW THE ACCUSED:

1. Geetam Singh R/o Meerut, Uttar Pradesh, aged 29 years, BBA Graduate, was involved in operating and subsequently supplying bank accounts to China-based cyber fraudsters.
2. Dhruv R/o Etawah, Uttar Pradesh, aged 21 years, B. Com Graduate, acted as an agent for arranging and supplying bank accounts.
3. Anuj Sharma R/o Etawah, Uttar Pradesh, aged 27 years, MBA Graduate, assisted in opening bank accounts and arranging SIM cards used in the syndicate.
4. Gagan Yadav R/o Etawah, Uttar Pradesh, aged 26 years, was the account holder whose bank account was provided to the syndicate for routing cyber fraud proceeds.

MODUS OPERANDI:

The accused were part of a cyber fraud syndicate working in coordination with China-based fraudsters operating through Telegram. The foreign fraudsters lured victims by offering lucrative work-from-home task-based jobs and induced them to deposit security amounts on the promise of higher returns. Once substantial amounts were collected, victims were prevented from withdrawing their money and were continuously asked to invest more.

The arrested accused facilitated the fraud by:

1. Procuring and supplying mule bank accounts to China-based cyber fraudsters.
2. Assisting in opening bank accounts and arranging SIM cards linked to those accounts.
3. Routing and layering cheated money through multiple accounts.
4. Receiving commission for providing bank accounts.
5. Converting fraud proceeds into USDT (Cryptocurrency) to conceal the trail of money and mislead banks and law enforcement agencies.

RECOVERY:
09 Bank Passbooks of different account holders.  05 SIM Cards.. 06 Mobile Phones.  01 Register containing commission records for supplied bank accounts.

CASE WORKED OUT: . e-FIR No. 366/26, PS Cyber, South West District.

Further investigation is in progress to identify additional associates, trace the cheated money and dismantle the remaining network of the interstate and international cyber fraud syndicate., said Amit Goel, IPS, DCP, South West Distt.