Pune Employee Arrested for 2.45 Crore Fake Invoice Scandal, Email Fraud
Pune police have filed a case against an employee accused of siphoning ₹2.45 crore from a private company through forged invoices, fabricated vouchers, and spoofed internal communications.
Pune Employee Booked for ₹2.45 Crore Fake Invoice, Fraud
The incident occurred at a firm located in the Balewadi area of Pune, where an employee exploited vulnerabilities in the organization’s financial processes to divert funds over a two-year period. The accused, Kaustubh Shivkumar Vibhute, a 34-year-old resident of Mundhwa, allegedly manipulated the company’s payment systems between June 2024 and July 2026.
Details of the Fraud
Investigators claim he altered bank account details of legitimate suppliers listed in the company’s records, redirecting approved payments into an account under his control. The fraudulent transactions were disguised as routine operations because the accompanying invoices and reimbursement requests appeared authentic, allowing the scheme to remain undetected for an extended duration.
Methods Used
A critical component of the fraud involved the creation of email addresses and domains that closely mirrored the company’s official communication channels. This tactic enabled Vibhute to issue payment instructions that appeared to originate from internal sources, aligning with tactics seen in Business Email Compromise (BEC) schemes. Such methods rely on social engineering rather than direct cyberattacks, making them difficult to identify through conventional security measures.
Discovery of the Fraud
The fraud was uncovered during an internal financial audit, when discrepancies in multiple transactions prompted the finance team to investigate further. A detailed examination of banking records, payment instructions, and correspondence confirmed the pattern of fund diversion. The company subsequently reported the incident to law enforcement, opting for a formal investigation rather than addressing the matter internally.
Investigation and Next Steps
Authorities are currently analyzing Vibhute’s financial accounts, digital devices, and transaction logs to trace the flow of the diverted funds. Investigators are also exploring whether other employees, external parties, or service providers were involved in the scheme. Determining the final destination of the ₹2.45 crore—whether it was deposited into additional accounts, invested, or converted into assets—remains a priority.
Experts in financial crime highlight that such cases reflect a growing trend in corporate fraud, where internal actors exploit administrative trust rather than external cyberattacks. Techniques like fake invoices, unauthorized changes to supplier banking details, and BEC tactics are becoming increasingly prevalent due to their ability to bypass traditional cybersecurity defenses.
Expert Recommendations
A renowned cybercrime specialist and former IPS officer, Prof. Triveni Singh, emphasized that modern fraud cases often combine physical document forgery with digital deception. He recommended that organizations implement multi-factor authentication for high-value transactions, independently verify any changes to supplier bank details, and deploy AI-driven fraud detection systems. Regular cybersecurity audits and staff training were also cited as critical measures to prevent similar incidents.
Conclusion
The case underscores the evolving nature of corporate fraud, where internal access and procedural weaknesses pose significant risks. Early detection of irregular transactions, according to experts, is the most effective way to mitigate large-scale financial losses.
