cyber crime

Mahakumbh: 56 ‘cyber warriors’ deployed to safeguard devotees against online scams

“Cyber Crime Theory to Practice – A Comprehensive Guide for Law Enforcement. (4)

An action plan has been formulated to tackle cyber criminals as part of the security measures. A special cyber help desk is being set up in all the police stations of Mahakumbh Nagar where experts will be deployed for cyber patrolling. Mahakumbh Nagar: The Uttar Pradesh government on 26 December 2024 said it has made special cyber security arrangements to safeguard devotees attending the MahaKumbh, with a team of 56 “cyber warriors” being deployed. The Senior Superintendent of Police of Mahakumbh Nagar area, a dedicated district for the fair, will oversee the complete monitoring of the ‘Digital Mahakumbh’. An action plan has been formulated to tackle cyber criminals as part of the security measures. A special cyber help desk is being set up in all the police stations of Mahakumbh Nagar where experts will be deployed for cyber patrolling, the statement read. Awareness campaigns are also underway with information being shared through films on Variable Messaging Displays (VMD) and across various social media platforms in Prayagraj. For this, AI, X, Facebook, and Google are being effectively used, the government said. About 45 crore devotees are expected to visit Mahakumbh Nagar this year. “A total of 40 VMDs will be installed in both the fair area and the Commission rate’s where devotees will be informed about cybersecurity measures to help them stay vigilant against cyber criminals,” it added. The Mahakumbh cyber police station has been set up to protect devotees from cyber threats such as AI, fraudulent websites, and social media scammers. The primary goal is to provide robust online security for attendees, eliminating the risk posed by fake links used by cybercriminals, it said. “Currently, the state’s team of experts has identified around 50 suspicious websites, and action is underway against them. Additionally, a mobile cyber team has been deployed to raise awareness and address online threats on a large scale, it added,” Senior Superintendent of Police (SSP) Mahakumbh Rajesh Dwivedi said. He said a dedicated helpline number, 1920, has been issued for information related to the Mahakumbh mela. People are encouraged to use government websites with the “. gov.in” domain for reliable details. “Furthermore, cyber experts are actively monitoring and investigating gangs that exploit AI, Facebook, X and Instagram to scam people,” he said.

“SIM Swap Scams: A Growing Danger to Your Online Security”

“Cyber Crime Theory to Practice – A Comprehensive Guide for Law Enforcement. (2)

In today’s digital world, smartphones are not just tools for communication—they hold the keys to our personal information, finances, and online identities. Unfortunately, this also makes them targets for fraudsters. One of the most dangerous types of fraud is SIM swapping—a scam that can leave you vulnerable to identity theft, account takeovers, and financial loss. What is SIM Swap Fraud? A SIM swap scam, also known as SIM hijacking, occurs when a fraudster transfers your phone number from your legitimate SIM card to one they control. Once they have access to your number, they can intercept texts, calls, and, most importantly, One-Time Passcodes (OTPs) used for securing your accounts. This means that if your bank or social media account sends a 2FA code via SMS, the scammer can intercept it and take control of your accounts. In 2021, SIM swap scams cost victims an astonishing $68 million, with over 1,600 complaints in the US alone in 2022. And this threat is not limited to the United States—it is a global problem that continues to grow as more people rely on mobile devices for securing their digital lives. How SIM Swap Scams Work To pull off a SIM swap, fraudsters need to gather personal information about you. They usually do this through social engineering, phishing, or data breaches. Social Engineering: Scammers manipulate victims into revealing sensitive personal information, often by pretending to be customer service representatives from a mobile carrier. They may call, email, or message you, asking for account details. Phishing: This type of scam involves sending fake emails or messages that look like they’re from trusted sources, such as your bank or phone provider. These messages often include malicious links or requests for personal details. Data Breaches: When organizations experience data breaches, personal information—like your name, address, and phone number—can end up in the hands of criminals. Scammers can use this stolen information to impersonate you when attempting a SIM swap. Once the fraudster has gathered enough personal data, they contact your mobile network provider, pretending to be you. They claim they’ve lost their phone or need a new SIM, and provide the stolen information to convince the carrier to transfer your phone number to a new SIM card. After the transfer is complete, the scammer has full control over your phone number. The Dangers of SIM Swap Fraud SIM swapping can lead to devastating consequences. The main risk comes from Two-Factor Authentication (2FA), which is used by most online services to protect your accounts. Many services send a one-time passcode (OTP) to your phone number when logging in, and if a fraudster has hijacked your phone number, they can intercept these OTPs and access your accounts. Once a fraudster has access to your phone number, they can: Access your online banking accounts by resetting your password with the OTP. Take over your social media profiles and cause reputational damage or blackmail. Steal your personal information and use it for identity theft. Given that so many services now rely on SMS-based 2FA, the risk of SIM swapping is more dangerous than ever. The FBI reported that SIM swapping scams resulted in a loss of $12 million between 2018 and 2020. How to Protect Yourself from SIM Swap Scams There are several steps you can take to protect yourself from SIM swap fraud: Enable Stronger 2FA Methods: Where possible, use app-based 2FA (like Google Authenticator or Authy) instead of SMS-based 2FA. These apps are harder to hijack because they don’t rely on your phone number. Use a PIN or Password with Your Carrier: Many mobile carriers allow you to set a PIN or password on your account. This adds an extra layer of security and makes it harder for fraudsters to convince your carrier to transfer your number. Monitor Your Accounts: Regularly check your bank accounts, email, and social media for unusual activity. If you notice something suspicious, report it to the service provider immediately. Be Careful with Personal Information: Avoid sharing sensitive details like your full name, date of birth, or address on social media or public forums. Scammers often use this information to gather the data they need for SIM swaps. Notify Your Carrier if You Suspect Fraud: If you think your phone number has been hijacked, call your mobile carrier immediately. They can lock your account to prevent further damage. eSIM Technology: A Step Toward Better Security? One promising development in mobile security is the rise of eSIM technology. Unlike traditional SIM cards, eSIMs are embedded directly into the device and don’t require a physical SIM card. This makes them harder for fraudsters to manipulate and swap out. Advantages of eSIMs: Convenience: No need to physically swap SIM cards when changing carriers. Increased Security: Since eSIMs are harder to tamper with, they make it more difficult for fraudsters to carry out SIM swap attacks. Space-saving: eSIMs free up space in devices, allowing for slimmer, lighter designs. Though not yet widespread, eSIMs are an exciting development that could significantly reduce the risk of SIM swap fraud in the future. SIM Swap vs. Porting Attacks You might hear the terms SIM swapping and porting attacks used interchangeably, but they refer to different methods of fraud. SIM Swapping: This is when fraudsters hijack your phone number and transfer it to a new SIM card that they control. Porting: Porting involves transferring your phone number to a different mobile provider. While porting doesn’t require the fraudster to physically swap your SIM card, it can still result in account takeovers. Both SIM swapping and porting attacks are methods used by fraudsters to gain access to sensitive accounts, and they are often the first step in account takeover fraud. How Does SIM Swapping Lead to Account Takeovers? Fraudsters don’t just want to hijack your phone number—they want access to your online accounts. Here’s how it works: Once the fraudster has your phone number, they can reset passwords for your bank accounts, social media profiles, and email accounts. Most online services use two-factor

Amid ongoing digital law reforms, govt proposes new central cybercrime forensics agency

According to a draft law seen by Dawn.com on 12/12/2024, the government has proposed the National Forensics and Cybercrime Agency (NFCA) to tackle cyber and digital crimes and investigations related to them amid ongoing efforts to change the country’s digital laws. The development comes amid ongoing efforts to reform the country’s cybercrime laws. A day earlier, newly surfaced proposed changes to the country’s cybercrime laws specified that violations could result in a seven-year prison term, with fines hiked up to Rs2 million. Last week, Dawn reported that the government was planning ‘wholesale’ changes to the Prevention of Electronic Crimes Act 2016 (Peca). These changes would see the formation of a new authority with powers to block online content and access to social media and prosecute those propagating ‘fake news’. State minister for IT and Telecom Shaza Fatima Khawaja had confirmed the plan to “address concerns regarding misinformation”, saying that the amendments were under review. Meanwhile, the draft for the NFCA Act, 2024, said it would apply to the whole country and placed the proposed agency under the interior ministry in Islamabad, adding that it could set up its offices in other places in the country. The draft explained that the NFCA comes as an upgrade to the existing National Forensic Science Authority from a project to a regular department that would act as a central coordinating agency for conventional, digital and cyber forensics across the country. It defined cybercrime as criminal activities conducted over the internet or using digital technologies that involved the use of computers, networks and electronic devices to commit offences. “Main branches include cyber fraud, hacking, cyber espionage, terrorism, online harassment and cyberbullying, cyber extortion and cyber warfare etc,” the draft said. The draft also defined deepfakes as audio, video, picture or any other form of fabricated digital media using artificial intelligence deep learning algorithms to impersonate or malign any real or imaginary person It further said that the NFCA would be the “supreme agency providing intimate conventional, digital and cyber forensics support to Islamabad Capital Territory, Azad Jammu and Kashmir and Gilgit-Baltistan as first-tier and to act as a second-tier re-examination agency for all forensics agencies/ labs in the country, including law enforcing agencies”. It would also establish a law department to “ascertain weakness in the legal system affecting conventional, digital and cyber forensics and propose amendments in laws/devise new laws”. Another main task of the agency would be to collect conventional, digital and cyber forensics material from crime scenes for examination and to provide opinions to the courts or other authorities. The draft said the agency would be headed by a director general who must be a citizen with a qualification in cyber security, artificial intelligence, information security, forensics and information technology. It outlined the proposed agency’s board of governors as the interior minister in the role of chairperson, the interior secretary as vice chairperson, the NFCA director general or director as the secretary and the other members being the chairman of the also proposed Digital Rights Protection Authority; the directors general of the National Cyber Crime & Investigation Authority (which has now been disbanded), Inter-Services Intelligence, Military Intelligence and Intelligence Bureau; the police chiefs of Islamabad, AJK and GBl; the law and justice secretary and the additional secretaries of the establishment and finance divisions. The draft said that no action taken under the proposed act would be called into question in any court and no civil or criminal proceedings would be instituted against anyone, including the government, any provincial government or any local authority, for anything done in good faith or purported to have been done under the act.

Cyber-crimes, climate change new threats to human rights: President Murmu

In her address at an event hosted by the (NHRC) National Human Rights Commission here to mark Human Rights Day, the President also underlined that cyber-crimes and climate change are new threats to human rights The human rights discourse so far has been centred on the “human agency” as the violator is assumed to be a human but with AI entering our lives, the “culprit could be a non-human” but an intelligent agent, President Droupadi Murmu said on 10/12/2024. In her address at an event hosted by the NHRC here to mark Human Rights Day, the President also underlined that cyber-crimes and climate change are “new threats” to human rights. Human Rights Day is observed on December 10 every year to commemorate the Universal Declaration of Human Rights Universal Declaration of Human Rights (UDHR), which was adopted and proclaimed by the United Nations General Assembly in 1948. As we progress into the future, we are confronted with emerging challenges. Cybercrimes and climate change are new threats to human rights. The digital era, while transformative, has brought with it complex issues such as cyberbullying, deep fake, privacy concerns, and the spread… pic.twitter.com/9iLGjCLHM6 — President of India (@rashtrapatibhvn) December 10, 2024 The UDHR serves as a global benchmark for the protection and promotion of human rights. “As we progress into the future, we are confronted with emerging challenges. Cyber-crimes and climate change are new threats to human rights,” Murmu said. She added that while the digital era was transformative, it also brought with it complex issues such as cyberbullying, deep fakery, privacy concerns, and the spread of misinformation. “These challenges underscore the importance of fostering a safe, secure and equitable digital environment that protects every individual’s rights and dignity,” the President said. In her address, she also touched upon the aspect of AI and its impact on human lives. “Artificial intelligence has now entered our day-to-day life, solving many problems, and creating several new ones too,” Murmu said. The human rights discourse so far has been “centred on the human agency”, that is the violator is assumed to be a human being, who would have a “range of human emotions such as compassion and guilt,” she said. “With AI, however, the culprit could be a non-human but intelligent agent. I leave the matter for you to ponder over,” the President said. She said in her address that climate change also forces us to review human rights thinking at a global level.

Beware of Digital Arrests: PIB Uncovers Fake Cybercrime Letters Used To Trap Victims

Recently, a fake letter claiming to be from the Indian Cyber Crime Coordination Centre (I4C) has been making the rounds. To raise awareness about “digital arrest,” the Press Information Bureau (PIB) fact-checked and exposed the modus operandi of the digital arrest gang that uses fake cybercrime letters to arrest people digitally. Digital crimes are rapidly increasing across the country. The gang, suspected to be operating from outside India, frames individuals in false cases such as child pornography, money laundering, and drug use to digitally arrest them. Reports indicate that the gang contacts people via WhatsApp, posing as representatives of a courier company. They then transfer the call to someone pretending to be a police officer. Subsequently, they put the victim under digital arrest by presenting a fake “letter of arrest” allegedly issued by higher authorities. To expose this scam, the PIB fact-check team uploaded a copy of the fake letter on the X platform on 09/12/2024. “A #fake letter allegedly issued by the Indian Cyber Crime Coordination Centre (I4C) has been received by people with several allegations leveled against them, and a reply is sought to avoid arrest. No such letter has been issued by I4C or any organization under the Government of India,” the PIB said in a tweet. What Should You Do If You Receive This Letter? If you receive a letter like this, it is important to stay calm and take the following steps: Do Not Respond – Ignore any instructions in the letter, especially if it asks for personal details, money, or immediate action. Check the Source – Official letters from the Indian government or any legitimate agencies do not demand urgent responses or personal information without prior communication. Report It – If you receive such a letter, report it to your local police or the Cyber Crime Cell. This helps authorities track and stop these scams from spreading further. Verify with Authorities – If you are unsure whether the letter is real, contact the Indian Cyber Crime Coordination Centre directly. You can visit their official website or call the official helpline for clarification. Recently, former Femina Miss India winner Shivankita Dixit was allegedly digitally arrested for around two hours and duped out of Rs 99,000 in Agra, according to the police. Shivankita Dixit, who won Femina Miss India 2017, resides with her family in Agra, Uttar Pradesh.

CA arrested with 16 others for alleged involvement in Rs 1.13 crore investment fraud

Accused include a private bank official in the Nagerbazar branch who allegedly helped the racketeers open mule accounts. A chartered accountant (CA) from Siliguri who had recently shifted to Dubai and was allegedly running an investment fraud from there has been arrested with 16 others, police said. The accused include a private bank official in the Nagerbazar branch who allegedly helped the racketeers open mule accounts. The chartered accountant (CA) and six others were arrested at a star hotel in the city, another six at an office in south Calcutta and two others in Bihar, said officers in the state cyber-crime wing. Additional director-general of police, cyber-crime, H.K. Kusumakar, said 17 persons were arrested in Calcutta and Muzaffarpur as part of an investigation into a ₹1.13 crore investment fraud reported by a city doctor to the Bidhannangar commissionerate. The complainant was persuaded to download a fake app from a phishing website replicating the site of a wealth management company. The police said the swindlers would lure people through phishing emails and convince them to invest in “lucrative” schemes. “The money would be transferred through multiple bank accounts opened across the country using fake documents. So far, we have obtained details of more than 700 mule accounts used by the gang in 1,530 cases reported from 29 states involving a fraud amount of ₹250 crore,” said an officer.

Shocking Cyber Slavery Expose Shakes India, Govt Vows To Crack Down

The ground-breaking investigation has uncovered a chilling web of cyber-crime syndicates operating out of Southeast Asia, exploiting thousands of Indian men and women. Lured by fake job offers, these victims are trafficked, tortured, and coerced into committing cybercrimes under duress. The report revealed the harrowing accounts of individuals who were enslaved and forced to target fellow citizens, deceiving them through fraudulent activities on platforms like WhatsApp. Operating from remote locations in Cambodia, Myanmar, and Laos, the syndicates use isolated beachside casinos and gated complexes to carry out their illegal operations. Victims, including Pradeep Kushwaha, were subjected to severe torture, including electric shocks and beatings, leaving them with no option but to comply. The investigation has sparked a swift response from the Indian government. The Home Ministry’s Cyber Security Wing (I4C) has initiated a nationwide effort to gather information on cyber slavery victims, while the Ministry of External Affairs has promised to take-action by collaborating with authorities in Cambodia and other countries involved. The Centre has also advised Indian citizens seeking overseas employment to avoid non-credible agents and only use those registered in the government portal. The hard-hitting expose has not only raised awareness about this dangerous global crime but also pushed the Modi government to take immediate action to protect India’s digital safety and curb the growing menace of cyber slavery.

Indians Are Loosing Rs 41 Crore Every Day To Cyber Crimes

As per the data from the Indian Cyber Crime Coordination Centre (I4C), a division of the Ministry of Home Affairs, India suffered cyber fraud losses amounting to Rs 11,333 crore in the first nine months of 2024. India Faces Rising Cyber Fraud Losses – Stock Trading and Investment Scams Lead the Way With Rs 4,636 crore reported across 2,28,094 complaints, stock trading scams accounted for the highest losses among all. Second to that is the investment-related scams, which amount to Rs 3,216 crore from 1,00,360 cases, while “digital arrest” frauds led to losses of Rs 1,616 crore from 63,481 complaints. According to Citizen Financial Cyber Fraud Reporting and Management System (CFCFRMS) data, there were nearly 12 lakh cyber fraud complaints in 2024. Of these, 45% originated from Southeast Asian countries, including Cambodia, Myanmar, and Laos. Since its inception in 2021, it has recorded 30.05 lakh complaints, with total losses reaching Rs 27,914 crore. The yearly breakdown shows 11,31,221 complaints in 2023, 5,14,741 in 2022, and 1,35,242 in 2021. PM Modi Addresses ‘Digital Arrest’ Frauds and Urges Vigilance Amid Rising Cybercrime Prime Minister Narendra Modi recently addressed the issue of “digital arrest” frauds during the 115th episode of his Mann Ki Baat radio program, wherein he emphasized that no government agency contacts individuals via phone or video calls for investigations and clarified, “There is no system like digital arrest under the law.” He later urged the citizens to remain vigilant against such scams, after Indians lost Rs 120.3 crore in digital arrest frauds in the first quarter of this year. As per the analysis of such fraud cases, the stolen funds are often withdrawn via methods such as cheques, central bank digital currencies (CBDCs), fintech crypto platforms, ATMs, merchant payments, and e-wallets. The I4C has frozen approximately 4.5 lakh mule bank accounts in the past year to disrupt the laundering of cybercrime proceeds. I4C, at an anti-terror conference, also highlighted key challenges in investigating cyber fraud cases. These included the anonymity offered by digital wallets, foreign money exchanges, insufficient KYC protocols, VPN access, and cryptocurrency-related fraud originating from abroad. As many as 17,000 WhatsApp accounts linked to cybercriminals operating out of Southeast Asia have been blocked by I4C, in collaboration with the Ministry of Telecommunications. This move aims to disrupt offshore criminal networks, even as social engineering, deepfakes, ransomware, zero-day exploits, and supply chain attacks emerge as new forms of cybercrime.

Razorpay joins MHA to enhance cybersecurity in India

has collaborated with the Ministry of Home Affairs (MHA) and the Indian Cyber Crime Coordination Centre (I4C) to enhance cybersecurity in the digital payments sector in India. This partnership focuses on equipping businesses and consumers with crucial knowledge to safeguard themselves, while also raising nationwide awareness about cybersecurity challenges. Alarmingly, 85% of reported cybercrime cases involve financial fraud, highlighting the increasing risks in online transactions. Between January and April of 2024, victims collectively lost over USD 21.2 million to such crimes. Officials from the I4C, emphasized the initiative’s significance, stating that the partnership with Razor Pay combines their technological expertise with I4C’s strategic initiatives to strengthen the digital economy in India. Strengthening digital security As part of the collaboration, Razor Pay will spearhead an extensive awareness campaign, educating businesses and consumers on essential cybersecurity topics. According to the announcement, the platform has already established connections with more than 1,600 cybercrime stations across 25 states and union territories, creating robust communication networks to combat cybercrime. It has also conducted specialized workshops to share strategies for fraud prevention and showcase its capabilities. Officials from Razor Pay highlighted India’s rapid growth in digital payments, noting that the nation has a responsibility to ensure safe digital experiences for its growing population of new digital users. Cybersecurity is integral to national progress, especially in a country like India, which accounts for 46% of global digital payment volumes. The rise in digital transactions has been accompanied by increased risks, as seen in recent data from the National Cybercrime Reporting Portal, which recorded over 7,000 complaints daily from January to April 2024.