Jharkhand-Based Gang Arrested After ₹6 Lakh APK Fraud In Gujarat

A major cybercrime racket has been busted by the Ahmedabad City Cyber Crime Branch after a resident lost over ₹6 lakh in an “APK file” fraud involving a fake mobile application and a coordinated digital scam network. Police officials said the operation uncovered a Jharkhand-based gang that used malicious Android application packages (APKs) to infiltrate victims’ smartphones and siphon money from their bank accounts.

The case came to light after a complaint was filed by Naresh Devanand Sabnani, a resident of Hansol in Ahmedabad, who reported a financial loss of ₹6,68,914. According to officials, Sabnani received a WhatsApp message impersonating Sabarmati Gas Limited, warning him that his gas connection would be disconnected unless he immediately updated his bill details. Believing the message to be genuine, he was tricked into downloading a fake application titled “Sabarmati Gas Bill Update.apk”, which ultimately gave fraudsters remote access to his device.

Once the malicious application was installed, cybercriminals allegedly gained control over the victim’s phone and accessed sensitive banking information, enabling them to transfer funds from his HDFC Bank account. Investigators said the gang operated a highly organised system that allowed them to quickly exploit compromised devices and expand their reach through social messaging platforms.

Also Read: Vadodara To Host Vibrant Gujarat Exhibition For MSMEs, Startups And Industry Leaders

Police said the main APK developer, identified as Purnanand alias Mukesh Tiwari, was arrested from a moving train travelling from Kolkata to Sairang with assistance from the Railway Protection Force. Two other key members of the syndicate, Vikas Das and Sitaram Mandal, were also arrested in Jharkhand for their roles in distributing malicious links and facilitating financial transactions linked to the fraud.

According to investigators, the gang used a sophisticated mechanism involving fake apps disguised as utility services such as bank KYC updates, electricity bill notifications, and transport department alerts. Once installed, these apps reportedly extracted sensitive user data, including banking credentials and OTPs, while also automatically forwarding malicious links to the victim’s contacts on WhatsApp and Telegram, enabling rapid viral spread of the scam.

Officials further revealed that the group relied on Telegram-based automation tools to generate and distribute fake applications at scale. Stolen funds were allegedly routed through multiple channels, including cashless ATM withdrawal systems, in an attempt to obscure the money trail. Authorities said the investigation is ongoing as they work to identify additional victims and trace the wider network behind the cyber fraud operation.

Also Read: Gujarat Announces Large-Scale Participation Plan For International Yoga Day Events