A resident of south east Delhi was asked to update his courier delivery address by opening an APK file and making a payment of just Rs 2. New Delhi: It started with a message that appeared harmless. He did not know that the seemingly routine process would give cybercriminals access to his banking credentials.
The team arrested three men, Nasir Hussain (34), Sokeen (27) and Ashish Arya (33), in connection with the case. Police identified Nasir as the alleged mastermind and are probing a suspected financial trail of around Rs 10 crore. The account was linked to two trucks, while further scrutiny revealed transactions worth around Rs 15 lakh through the associated fuel cards. He and Sokeen were arrested on Sept 28. More than 100 suspected fuel cards have since been identified. Police said questioning indicated that around 150-200 fraudulent cards may have been prepared, each reportedly carrying a limit of Rs 7.5 lakh.
A woman whose identity was allegedly used to obtain a mobile connection told police she had never taken the number and suspected her identity had been misused during SIM porting. DCP (Southeast) Vineet Kumar formed a team under the supervision of Additional DCP Utkarsha. Subsequently, police registered an e-FIR and began tracing the transactions. The payment used to recharge the fuel-card customer ID became the crucial lead. The video KYC conducted for the fuel card helped investigators identify Sokeen. The probe took police through several locations in the Mewat region, including Nuh, Nagina and Pahadi, as well as Bharatpur. Nasir was eventually traced to Rajasthan. The trail eventually led police to Ashish Arya, a former retail business executive. Police alleged that Arya had enrolled the fuel card without physically verifying the documents. During questioning, he identified Sokeen as the person whose video KYC he had conducted and admitted that he had not properly matched the submitted photograph with the individual appearing on camera. Police are also probing Nasir’s allegation that he paid Arya for arranging the fuel-card enrolment.
The investigation began on May 7, when Jitender Kumar Gupta received the APK file disguised as a courier address update request. After he entered his banking credentials while making a Rs 2 payment, unauthorised transactions were carried out from his account.

