Cyber gangs have adopted different methods to target people across Gujarat's four major cities, with Ahmedabad and Surat seeing boss scams, Vadodara reporting call-forwarding frauds and Rajkot witnessing investment scams.

An investigation by Bhaskar into the source of data used by these gangs found that personal information is reportedly being sold in bulk through Telegram channels and websites, with prices ranging from around ₹10 to ₹10,000 depending on the category and volume of data.

Personal data sold like products online

When Bhaskar contacted one such data-selling website, a female employee reportedly offered to provide the latest data, including information related to doctors.

The data was being offered at different prices depending on the profession. Doctors' data was quoted at around ₹3,600, while information related to industrialists was offered for nearly ₹5,000. Data linked to online shopping activity was also reportedly available.

Phone number can expose sensitive information

Investigators found that certain Telegram bots and accounts can allegedly provide detailed personal information using a phone number.

The information reportedly includes government identity documents, email IDs, residential addresses, details of other SIM cards linked to the number and purchase records from various online platforms.

When Bhaskar tested a random number on a Telegram channel, sensitive personal information was reportedly displayed almost instantly.

Ahmedabad and Surat see boss scam cases

In Ahmedabad, a recent complaint involved a real estate agent and travel operator who allegedly lost ₹6.52 crore in a boss scam.

In Surat, a company owner reportedly lost ₹28 lakh through a similar method. Cyber gangs allegedly use information about their targets to make fraud calls and create the impression that the caller is a senior official or employer.

Different cities, different fraud methods

Cyber gangs are using different modus operandi in the four major cities.

In Ahmedabad and Surat, victims are being targeted through boss scams. In Vadodara, fraudsters are reportedly using call forwarding to gain control over communications, while in Rajkot, investment schemes promoted through Telegram are being used to trap victims.

Doctors, school principals, teachers, industrialists and traders are among the groups being specifically targeted.

Investment scams spread through Telegram

In Rajkot, cyber criminals allegedly approach people through Telegram and show them fake investment websites promising high returns.

Victims are encouraged to transfer money after being shown fabricated profits or investment opportunities. Once larger amounts are deposited, the fraudsters allegedly cut off access to the accounts or demand additional payments.

Rajkot records 35 investment fraud complaints

Rajkot Cyber Crime PI S.G. Fultariya said 35 complaints related to investment fraud had been received in the city over the past seven months.

The investigation indicates that access to targeted personal data is making it easier for cyber gangs to identify potential victims and tailor their fraud accordingly.

Data sellers offer profession-wise databases

When Bhaskar contacted a data-selling website, its representative claimed that the latest databases were available. The quoted prices included around ₹3,599 for doctors' data, ₹4,999 for industrialists and ₹1,299 for principals.

When asked about the source of the data, the representative reportedly refused to provide details, saying that leads would not be generated if the website's name was disclosed. The representative claimed the data was obtained through various sources.

The findings raise concerns beyond financial fraud, as the alleged sale of personal information exposes individuals to identity theft, targeted scams and wider security risks.

The use of such databases by organised cyber gangs also raises serious questions about data privacy and the protection of sensitive personal information.

Bots on Telegram provide all data just by entering a number

Bots are available on Telegram which, upon just providing a mobile number, give all information including address, Aadhaar card number, email, how many mobile numbers are linked, etc.

Initially, this information is provided based on 5 free credits, later credit limits ranging from ₹50 to ₹5,000 are made available.

Cyber fraudsters turn call forwarding into new weapon

Selling or sharing a person's personal data without their consent is illegal, and cyber criminals are increasingly exploiting such information to design targeted frauds. Experts say, “Personal databases are being used to identify professionals and approach them with convincing stories.”

Selling personal data without consent can attract penalty

Advocate Hitesh Gupta said, “The Digital Personal Data Protection Act, 2023, provides a legal framework for protecting citizens' personal information.”

According to him, “If a company or website sells personal data without the user's permission, it can face a penalty of up to ₹250 crore.”

'Your parcel has arrived' scam targets professionals

Cyber fraudsters have now changed their modus operandi by posing as delivery agents. Victims are told that a parcel has arrived but the address cannot be located.

They are then instructed to call a so-called delivery executive's number using a specific code. By following the instructions, victims may unknowingly activate call forwarding on their mobile numbers.

Fraudsters gain access to WhatsApp contacts

Once call forwarding is activated, fraudsters can attempt to take control of the victim's WhatsApp account and send messages to their contacts.

Doctors and school principals are among those reportedly being targeted because cyber criminals can obtain their professional details from data available online.

Fake bank alerts used to install malicious files

Another method involves sending messages claiming that suspicious transactions have been detected in a bank account and warning that the account could be blocked.

Victims are allegedly directed to download ZIP files or other attachments to verify their transactions. These files can be used to compromise the device and facilitate further financial fraud.

Ahmedabad and Surat record recent complaints

Ahmedabad Cyber Crime ACP Hardik Mankadiya said, “Three complaints related to this type of fraud have been received recently.”

Surat Cyber Crime PI R.G. Chaudhary said, “Three such complaints were registered in the city over the past three months.”

Vadodara records 10 call-forwarding complaints

Vadodara has also seen a rise in call-forwarding fraud. Cyber Crime ACP Mayursinh Rajput said, “10 complaints were received within one month.”

Police managed to stop most of the money involved in these cases, but officials have advised people not to dial unknown numbers or enter codes provided by unsolicited callers.