By Shrikant Ardhapurkar and Nandini Paunikar

Gurugram cybercrime police have struck again, this time cracking a fraud network with links stretching all the way to China. Five people have been taken into custody in connection with a scam that cheated victims out of roughly Rs 13.80 crore, according to police.

The Case at a Glance

Investigators say the accused first made contact with the larger cyber-fraud syndicate through Telegram. Once inside the network, their role was to supply bank accounts – accounts that were then used as pass-through points to receive fraud proceeds from victims and quickly move the money onward, making it harder to trace. This “mule account” model has become a familiar backbone of organized cyber fraud operating out of India: the masterminds and call-centre operators often sit overseas, while a domestic network of recruits supplies the banking infrastructure needed toactually collect and launder the stolen money. Each mule account typically gets tied to multiple victim complaints before it’s flagged and frozen, which is usually how police work backward to the people behind it.

Why the “China-Linked” Label Matters:

The reporting on this specific case is thin on detail -beyond the headline, the only substantive fact confirmed by police is that the accused connected with the fraud syndicate via Telegram and supplied bank accounts to receive and move the money. Exactly what makes this particular network “China-linked” -a handler based there, a money trail leading back to it, or something else – hasn’t been spelled out in the reporting available so far. What can be said is that Chinese-linked cyber fraud networks have become a recurring feature in cases coming out of the Delhi-NCR region over the past couple of years, generally relying on a similar toolkit:

• Telegram and other encrypted apps for recruitment and coordination, since they’re harder for investigators to monitor in real time
• Rented bank accounts bought or rented from ordinary people, often for a few thousand rupees, to receive and layer stolen funds
• Cross-border money movement, sometimes via cryptocurrency conversion, to get proceeds out of reach of Indian banking regulators
• Cheap, disposable hardware – burner phones and multiple SIM cards – to run high volumes of fraudulent calls and transactions

The Bigger Pattern

This latest arrest fits into a much larger trend. Over the past year and a half, Gurugram cyber police have repeatedly broken up rings of similar size and structure – sometimes catching a handful of accused, sometimes dozens at once – with fraud amounts ranging from a few crore to well over a hundred crore rupees. Common threads across these cases include:

• Victims lured through fake investment schemes, “digital arrest” scams, task based fraud, or impersonation of officials
• Networks pieced together from Indian Cyber Crime Coordination Centre (I4C) data, which lets police connect a single SIM card or bank account to hundreds or thousands of complaints filed across the country
• A supply chain of low-level recruits – students, unemployed youth, and in some cases even bank employees – providing the accounts and SIM cards that keep the fraud machinery running, often for a small one-time payment

What Happens Next:

As with most such cases, the current five arrests are likely just the visible edge of a much larger operation. Police typically use recovered phones, SIM cards, and financial trails to identify additional mule-account holders and, where possible, trace links back to the overseas handlers running the scheme. Further arrests and additional charges often follow as the investigation expands.

Staying Safe:

Cases like this are a reminder of how cyber fraud networks actually operate in practice – not as a single scammer, but as a distributed supply chain where ordinary bank accounts and SIM cards become tools of the trade. A few precautions worth
keeping in mind:

• Never rent, sell, or hand over your bank account or SIM card to anyone, even for a quick payment – you can be held liable if it’s used for fraud
• Be wary of unsolicited investment tips, “task-based” earning offers, or calls claiming to be from law enforcement or courier companies
• If you’re contacted by someone claiming your identity is linked to a crime, don’t panic-transfer money – verify independently before acting
• If you’ve been defrauded, report immediately via the national cyber crime helpline (1930) or at cybercrime.gov.in – fast reporting significantly improves the odds of freezing the funds before they’re moved further For individuals or businesses that need deeper support after an incident – recovering compromised data, tracing digital evidence, or preparing findings for a legal case – specialist digital forensic firms can help.
• Legal Data Forensic, a Nagpur-based cybersecurity and digital forensics firm, offers services spanning incident response, evidence examination across devices and cloud accounts, and
  court-ready forensic reporting.
• The firm says it has handled 300+ forensic case engagements and 250+ data recovery operations, and holds ISO certification for its investigation and evidence-management processes. More details are available at legaldataforensic.com. This report is based on early police statements; further details on the identities of the accused and the scale of the network may emerge as the investigation continues.