Bengaluru Businessman Loses Rs 10 Lakh in Cyber Attack via SMS OTP Fraud
Bengaluru Man Loses Rs 10 Lakh in SMS OTP Cyber Fraud

Bengaluru Businessman Defrauded of Rs 10 Lakh in Sophisticated Cyber Attack

A 56-year-old businessman from Bengaluru was left in a state of shock and disbelief after his mobile phone was bombarded with more than 200 SMS alerts in a short span of time. Upon checking the messages, he discovered to his horror that multiple unauthorized transactions had been executed from his two separate bank accounts without his knowledge or consent.

Immediate Bank Visit Reveals Cybercrime Operation

The distressed victim, whose identity has been concealed as Bhuvan for privacy reasons, immediately rushed to his bank to report the suspicious activity. Bank officials conducted a preliminary investigation and confirmed that cybercriminals had successfully hacked into his accounts and siphoned off approximately Rs 10 lakh in total. Bhuvan, a resident of HRBR Layout in Bengaluru, subsequently filed a formal complaint with the East Cybercrime Police Station, providing detailed information about the fraudulent transactions.

Timeline and Details of the Financial Heist

According to the police complaint, the unauthorized transactions occurred within a specific timeframe, starting from 5 PM on February 4 and continuing until 1 PM on February 5. The over 200 SMS alerts received by the businessman were primarily related to One-Time Passwords (OTPs) and notifications of money being debited from his accounts. A detailed breakdown of the losses reveals that Rs 26,000 was illicitly withdrawn from one of his bank accounts, while a staggering sum of over Rs 9.6 lakh was drained in multiple transactions from the other account.

Police Investigation Points to Malicious APK File

A senior police officer involved in the case indicated that the businessman may have inadvertently clicked on a malicious APK (Android Package Kit) file sent by the fraudsters. This action likely provided the cybercriminals with unauthorized access to his device and banking credentials, enabling them to execute the fraudulent transactions. The incident underscores the growing sophistication of cyber fraud schemes targeting individuals through seemingly innocuous digital interactions.

The case highlights the critical importance of cybersecurity vigilance, especially in an era where digital banking and mobile transactions are prevalent. Authorities are urging the public to exercise extreme caution when receiving unsolicited files or links, and to immediately report any suspicious banking activity to their financial institutions and law enforcement agencies.