In the national capital, Delhi Police on 24 October arrested five employees of CSB Bank and an additional suspect in a probe that began after multiple complaints flagged suspect accounts at two branches. Investigators say they identified about 20 suspected mule accounts at the Tri Nagar branch and 17 at Saraswati Vihar, with linked transactions totalling approximately ₹7.36 crore.
During searches, police seized electronic devices, Aadhaar and PAN documents, SIM cards, cheque books and other materials, according to the CPT summary. The inquiry reportedly centres on allegations that labourers’ identity documents were procured through false promises of loans and then used — with the alleged assistance of bank staff — to open accounts that were later used for fraudulent transactions. The CPT emphasised that the alleged role of bank employees is subject to further investigation and judicial processes.
Surat case highlights cross‑border networks
Also detailed in the CPT briefing, Surat Police arrested two suspects on 24 October in connection with what began as a complaint of a ₹23.28‑lakh fraudulent investment. Subsequent casework tied the suspects to a much broader operation linked to operators based in Dubai and China, and investigators say the network is associated with 338 complaints involving roughly ₹410 crore in alleged losses.
The CPT categorised the Surat matter as organised cybercrime involving cryptocurrency and alleged money‑laundering, and noted the role of financial intelligence in tracing the network. Specific operational details of the arrests were not disclosed in the public summary.
Controls and implications for banks and customers
The CPT briefing underlines systemic vulnerabilities that recur across such cases: weak onboarding (know‑your‑customer or KYC) procedures, insider collusion, poor controls for detecting mule accounts, and gaps in transaction monitoring. The summary listed key control areas that banks and regulators should prioritise:
- Employee integrity checks and continuous monitoring
- Robust KYC verification at account opening
- Mule‑account detection and timely closure
- Maker‑checker controls for account authorisations
- Transaction monitoring tuned for anomalous patterns
- Forensic audit capability to reconstruct complex schemes
For customers, the cases are a reminder that identity documents can be misused and that lenders and banks must ensure rigorous verification at onboarding. For banks, the Delhi arrests are a stark illustration of the damage that alleged insider collusion can cause to customers and institutional trust.
Why this matters nationally
Both matters in the CPT digest show two common trends in India’s cybercrime landscape. First, frauds often exploit legitimate financial infrastructure — accounts, payment rails and KYC processes — rather than purely technical vulnerabilities. Second, many large schemes have cross‑border elements involving foreign facilitators or exit channels such as cryptocurrencies, complicating investigations and recoveries.
Law enforcement has stepped up cooperation with financial regulators and tech partners in recent years, but the CPT advisory suggests enforcement must be matched by continuous investment in bank controls, staff oversight and public awareness. Strengthening these areas will reduce the risk that ordinary workers’ documents are used to create mule accounts and that large networks move illicit proceeds through multiple jurisdictions.
The CPT compilation, prepared in association with cybersecurity firm Algoritha Security, is intended as a daily alert to police, banks and security teams. It collates items the Centre considers high priority across cybercrime, AI‑related threats, financial fraud and national security. Further details on the individual cases will emerge as probing agencies file charge sheets and courts consider the evidence.
