The Central Bureau of Investigation (CBI) apprehended 43 alleged cyber criminals on July 26 during raids at a Gurugram-based call center. This call center had been operational since 2022 and was involved in defrauding people in other countries under the guise of repairing their computer software.
In an effort to dismantle the cyber-enabled financial crime network, the CBI executed the third round of a crackdown, code-named ‘Chakra-III,’ in collaboration with international law enforcement agencies, including the United States’ Federal Bureau of Investigation and Interpol.
The operation commenced after the CBI’s International Operations Division registered a first information report (FIR) on July 22, alleging offences under various provisions of the Indian Penal Code and the Information Technology Act.
“Searches were conducted at seven locations across Delhi, Gurugram, and Noida…The transnational cyber-enabled financial crimes in this network were being coordinated across distributed centres mainly directed from a call centre operating from DLF Cyber City, Gurugram,” said an agency official.
Phones, laptops seized
The searches were carried out while the accused individuals were in the process of defrauding some foreigners. The CBI team confiscated 130 computer hard disks, 65 mobile phones, five laptops, incriminating documents, financial transaction details, call recordings, details of victims, and the transcripts used to deceive them.
The victims were tricked into clicking “pop-up” messages that permitted the download of malicious software onto their computer systems. Pretending to be representatives of software companies, the gang members would then charge the victims for restoring their systems. The agency discovered that the proceeds were being funneled from multiple countries to Hong Kong.
Second phase
In October 2023, during the ‘Chakra-II’ operation, the CBI made significant strides in two cases involving an international online investment scam worth hundreds of crores. This scam targeted Indians under the pretext of investment, loans, and job opportunities. Additionally, a cyber-enabled impersonation racket had defrauded Singaporean citizens.
In the first case, the agency alleged that the funds raised were laundered through a complex network of UPI accounts, eventually converging into cryptocurrency or gold purchases using forged credentials. The CBI identified 137 shell companies, many registered with the Registrar of Companies in Bengaluru, involved in these fraudulent activities. The second case involved over 300 cyber-enabled frauds linked to more than 100 Indian bank accounts across 10 States/Union Territories. Social engineering tactics such as phishing, vishing, smishing, and fraudulent tech support were employed to cheat over 400 Singaporean citizens.
Regarding five other cases covered under ‘Chakra-II,’ the identified illegal call centers had affected over 2,000 Amazon and Microsoft customers, primarily in the United States, but also in Australia, Canada, Germany, Spain, and the United Kingdom.
The first edition of the operation, named ‘Chakra-I,’ was launched in October 2022 when two call centers run by cyber criminals since 2014-15 were discovered in Pune and Ahmedabad. The perpetrators made clandestine calls to potential targets in the U.S., luring them into making payments on various pretexts. These masked calls were made using Voice over Internet Protocol technology to avoid detection. The FBI had provided the initial information about the scam.
