Mumbai Police’s Property Cell arrested a 36-year-old software developer from Madhya Pradesh after tracing a malicious Android package from a Byculla complaint to what investigators described as a pension-card verification scam ring built from 2,805 APK variants, according to a statement read at a Monday briefing and reporting by The Hindu.
How the case started
Officers registered a case at Byculla police station under Sections 318(4) and 319(2) of the Bharatiya Nyaya Sanhita and Sections 66(C) and 66(D) of the Information Technology Act after a fraud report involving fake verification apps. Technical analysis of the APK led detectives to Indore, where they raided an office and seized storage devices, police said.
The accused, identified in court papers as Pankaj Avhdesh Gupta, dropped out of a B.Tech programme in 2011 and allegedly sold APK templates to cybercrime gangs, police said. Templates mimicked senior-citizen card checks, pension confirmations, and life-insurance lures, according to the charge summary reviewed by reporters.
Scale police cited
Investigators linked the applications to 9,673 victims and 1,930 complaints on the national cybercrime helpline, including 1,074 from outside Maharashtra, police said. Estimated losses tied to the APK family stood at about ₹15.75 crore across 88 registered cases, eight of them in Maharashtra, according to the Crime Branch.
Modus operandi
Victims typically received SMS or WhatsApp links urging them to install verification software. The apps requested permissions to read messages and contacts, then steered users toward UPI collect requests or card phishing pages, officers said. Because each scam used a lightly modified APK, takedown efforts by app stores lagged behind deployment.
Seizures
Police said they confiscated CPUs, hard disks, a pen drive, a router, and phones from the Indore premises. Servers rented from commercial hosts are under analysis to identify buyers who paid for custom APK builds.
Legal process
Gupta remained in police custody pending remand hearings. Investigators said they are mapping payment flows through mule accounts identified on the National Cybercrime Reporting Portal. No charges have been framed in court; the accused is entitled to contest the allegations.
Broader enforcement
The arrest lands amid a week of digital-arrest headlines in Delhi and credit-card phishing busts in Mumbai. Police commanders have urged residents to avoid installing sideloaded banking or pension apps and to verify government messages through official portals.
Platform response
Google and telecom operators have tightened sideload warnings, but APK markets outside Play Store still circulate in rural areas. CERT-In advisories on fake finance apps remain in force; this case shows enforcement shifting toward developers upstream of call-centre scripts.
What victims should do
Helpline 1930 and the cybercrime.gov.in portal accept reports with APK hashes and UPI transaction IDs. Mumbai Police asked prior victims of pension-themed scams to file supplemental statements if their complaints match the Indore developer’s templates.