6.80 Crore Boss Scam Exposed: BTech, Physiotherapy Students Behind Masterminds

Post Views: 10

A sophisticated cyber fraud has been uncovered in Rajasthan, involving the impersonation of a company director to deceive an employee into transferring ₹6.80 crore.

The Fraud Unveiled

A sophisticated cyber fraud has been uncovered in Rajasthan, involving the impersonation of a company director to deceive an employee into transferring ₹6.80 crore. The incident occurred when an accounts department employee at a Jaipur-based organization followed instructions from what they believed to be a senior executive, only to later discover the communication had been orchestrated by cybercriminals.

How the Scam Was Executed

The fraudsters gained unauthorized access to the employee’s device through a web-based platform that was already logged in. They subsequently extracted the company director’s contact information, including their name and profile picture, and replaced the genuine contact details with their own. This manipulation created a deceptive communication channel that mimicked legitimate corporate interactions.

Employee’s Role in the Deception

The gang further exploited the situation by replicating an existing conversation between the director and the head of accounts. This tactic minimized the employee’s suspicion, as the messages appeared to align with routine internal communications. Acting on the fabricated instructions, the employee transferred the funds to three bank accounts.

The Investigation Unfolds

Upon realizing the deception, the victim immediately reported the incident to the cybercrime helpline 1930 and local authorities. Law enforcement swiftly intervened, placing a hold on approximately ₹3.50 crore across multiple accounts before the funds could be fully withdrawn. During the investigation, eight individuals were apprehended in operations conducted on September 2, 3, and 4.

Key Accused Individuals

The accused included individuals with diverse educational backgrounds, such as BTech and BSc graduates, a second-year physiotherapy student, and a BSc Nursing candidate. A businessman from Punjab was also implicated.

The Accused and Their Roles

Brijmohan Dron, known as Lucky, a BSc graduate from Bhadwa village in Jaipur’s Renwal area, played a critical role in managing the illicit proceeds. Investigators allege he facilitated the transfer of funds through multiple accounts before converting them into cryptocurrency, including USDT. Dron maintained communication with overseas gang members via Telegram, monitoring transactions and coordinating the digital currency conversion.

Sandeep’s Involvement

Sandeep from Haryana’s Adampur area, an MA graduate, was linked to a corporate bank account that received ₹2 crore of the illicit funds. The account was opened 15 days prior to the incident, and Sandeep allegedly provided access to the account’s cheque book, ATM card, Aadhaar card, PAN card, and SIM card in exchange for a commission.

The Money Trail

The stolen funds were reportedly routed to cryptocurrency accounts controlled by foreign operatives. The initial transfer of ₹6.80 crore was subsequently distributed through over 250 bank accounts, many of which were used as intermediaries to obscure the money trail. Investigators suspect that individuals operating from Singapore and Hong Kong utilized internet banking to move funds between accounts.

Cybersecurity Experts’ Insights

Cybersecurity experts highlighted the case as an example of how fraudsters combine technical exploits with social engineering tactics. The incident underscores the vulnerability of employees who may trust messages bearing familiar names and images, even when the underlying communication is compromised. The scheme demonstrates the evolving sophistication of cybercriminal networks, which increasingly rely on layered financial maneuvers and cross-border coordination to evade detection.

Conclusion

The ₹6.80 crore boss scam highlights the growing threat of cyber fraud, where technical expertise and social engineering converge to defraud organizations. The case underscores the need for heightened cybersecurity measures, employee training, and cross-border collaboration to combat such sophisticated schemes.