Agra Man Scammed ₹30 Lakh via WhatsApp RTGS Fraud

Post Views: 11

Indian Cyber Crime Coordination Centre identifies a rising trend of identity fraud targeting individuals and corporations through RTGS transactions.

Overview of the Agra Case

Fake Identity Costs Agra Man ₹30 Lakh via RTGS Fraud Criminals exploited a fabricated identity linked to an Agra resident to siphon ₹30 lakh through RTGS transactions. The scheme involved creating a mobile number and associated documentation bearing the victim’s name, enabling unauthorized access to financial systems. The funds were transferred to a Bank of India account under the business entity Jai Durga Enterprises. Agra Cyber Crime Police Station is investigating the case, which highlights vulnerabilities in digital identity verification processes.

Expanding Fraud Tactics

A tactic now expanding beyond individual targets into corporate environments involves impersonating high-level executives to manipulate finance teams. Recent incidents include a Delhi-based garment business owned by former Rajya Sabha MP Naresh Gujral, which lost ₹7.8 crore after fraudsters used a cloned profile to initiate four RTGS transfers over four days. Similarly, a Kolhapur automobile company suffered ₹80.50 lakh in losses when criminals mimicked its CEO’s identity to direct urgent payments.

Corporate Targets

These cases align with a pattern identified by the Indian Cyber Crime Coordination Centre as the “Boss Scam,” characterized by the integration of malware, social engineering, and executive impersonation to bypass financial safeguards.

The “Boss Scam” Pattern

The success of this fraud model hinges on exploiting trust rather than technical vulnerabilities. Employees handling financial transactions are often trained to act swiftly on instructions from perceived authority figures, making them susceptible to manipulated communications. Fraudsters leverage publicly available data to replicate profile details, including photographs and chat histories, creating convincing but entirely fabricated identities.

How the Fraud Works

Investigators in the Agra case are tracing the mobile number used to generate the fake identity and cross-referencing KYC documents linked to the recipient account to determine the scope of the operation.

Defense Mechanisms

A critical defense mechanism across all documented cases is the implementation of out-of-band verification. In every instance where the fraud was detected, individuals bypassed digital communication channels to confirm requests through independent, verified methods—typically a direct phone call to a known number rather than the one used in the initial contact. Financial institutions and corporate entities are increasingly mandating this step for high-value transactions, as no automated system can reliably distinguish between a legitimate and cloned identity in real time.

Out-of-Band Verification

For individual users, verifying beneficiary details through a separate channel before initiating RTGS transfers remains the most effective preventive measure.

Current Investigation

Agra police are reviewing banking records and the call detail records of the suspect mobile number. No arrests have been reported in the case as of the latest update.

“The success of this fraud model hinges on exploiting trust rather than technical vulnerabilities.”