From SIM boxes to fake warrants: the hidden machinery of cybercrime rackets

First hook: mass calling through machines

Scams start with automated IVR (interactive voice response) calls, usually in a robotic voice, claiming to be from law enforcement, telecom authorities or a bank. These calls are powered by SIM boxes — small yet powerful devices that can hold dozens of SIM cards and generate thousands of calls daily. By routing internet-based VoIP (Voice over Internet Protocol) calls through these boxes, criminals disguise foreign calls as local mobile numbers, instantly adding credibility.

According to Cybercrime police station SHO Inspector Eram Rizvi, “Each SIM card is often fraudulently activated, using stolen or duplicate IDs through compromised point-of-sale outlets. Hundreds of SIMs may be pushed into circulation this way, ensuring call centres never run dry.”

Escalation: fake officials and forged paperwork

Once a target responds, the pressure escalates. Victims are shifted to WhatsApp or Skype video calls where they meet purported “investigating officers.” These fraudsters, often dressed formally, back up their claims with forged documents — arrest warrants, RBI notices, and even fake police IDs — which are flashed on screen. The aim is simple: create enough panic to override rational thinking. “Victims are told they could face arrest within hours unless they cooperate by transferring money for verification or safekeeping,” Inspector Rizvi said.

Toolkit of Cyber Criminals

– Dinstar SIM boxes capable of hosting multiple SIMs

– Hundreds of SIM cards obtained with fake or misused identities

– Routers, modems and laptops to manage VoIP traffic and records

– Dozens of mobile phones to handle victim interactions

– Forged templates and stamps used to generate fake warrants and IDs

Inspector Rizvi said, “On the surface, these setups resemble small call centres, often just rented flats with routers and laptops, but with this modest hardware, gangs can bombard thousands of phones each day.”

Human chain behind the calls

According to police, these scams run like “organised businesses with distinct layers”. Investigating a case, the Chandigarh Cyber Police learnt that “at the top are handlers sitting abroad, often in Southeast Asia, who script the operations and control the money flow. Below them are local recruits, mostly young men hired through social media platforms, who keep SIM boxes running with internet and power backup. Middlemen and point-of-sale agents are the lifeline of the racket, bulk SIM cards activated with fake KYCs. At the base of the chain are money mules, who move stolen funds through multiple bank accounts or into cryptocurrency, ensuring the trail goes cold quickly”.

Why victims fall for it

DSP (Cybercrime)A Venkatesh said, “The success of these scams lies in exploiting human psychology. By combining the authority of law enforcement with the urgency of a looming arrest, criminals trigger fear that overrides logic. The sudden shift from an automated voice to a personalised video call, complete with official-looking documents, deepens the illusion.”

Senior citizens are particularly vulnerable, but police have seen professionals, students and even banking staff falling prey.

“The stolen funds don’t stay put. Victims are asked to transfer money into accounts allegedly under court supervision. From there, the funds are layered, bounced across multiple bank accounts, withdrawn in cash or converted into cryptocurrency such as USDT, before vanishing overseas. This rapid movement is deliberately designed to outrun freezing orders,” DSP Venkatesh said.

Five red flags of digital arrest scam

– Robotic or pre-recorded call claiming your number or bank account is linked to money laundering or drug trafficking

– Caller impersonates police, CBI, TRAI or bank officials and demands “urgent cooperation”

– Shift to WhatsApp/Skype video call where fake officers show arrest warrants, ID cards or court documents on screen

– Pressure to transfer money immediately into “safe custody” or “verification” accounts

– Threats of arrest, suspension of bank account or blocking of SIM if instructions are not followed

DSP Venkatesh said, “No genuine authority will ever demand money over the phone or video call.”

Faces of cybercrime: how fraudsters prey on everyday digital habits

Cybercrime is no longer about shadowy hackers in dark rooms. It has now slipped into daily life through calls, links, apps and social media feeds. Police data shows that out of nearly 5,000 cases this year, ten fraud categories dominate, each with its own crafty modus operandi.

Digital arrests

Fraudsters impersonate law enforcement agencies or courts, claiming victims are involved in crimes like money laundering or drug cases. They pressure people into transferring money under the threat of digital arrest during fake video calls. Victims are manipulated into believing they are under official investigation.

Money traps

Scammers target elderly citizens or those living alone, pretending to be bank officials. By tricking victims into pressing numbers on their phone, fraudsters activate call forwarding. They then intercept OTPs (One-Time Passwords) and clean out the victim’s bank accounts.

WhatsApp image trap

Through a technique called steganography, hackers embed malicious code inside images sent on WhatsApp. Once downloaded, the malware secretly installs itself, granting criminals access to banking apps, OTPs and personal data.

OLX & QR code scams

Fraudsters pose as fake buyers or sellers on platforms like OLX. They trick victims into scanning QR codes, claiming it’s for “receiving money”. Instead, money gets deducted instantly. Many victims fall prey due to the urgency created by scammers.

Impersonation frauds

Cybercriminals misuse names of agencies like the CBI, ED or local police to scare people. Fake notices citing the high courts or the Supreme Court are sent, demanding money transfers to “settle cases”. Citizens are warned not to transfer money to anyone claiming such authority.

Fake job offers

Scammers pose as recruiters, luring job seekers with promises of high-paying positions. Victims are asked to pay registration fees or processing charges. Most communications happen via WhatsApp using generic email IDs, without official interviews or verifications.

Stock/investment scams

Fraudsters promote fake investment schemes with “guaranteed returns”. They use high-pressure tactics, unusual payment methods, and claims of “too good to be true” profits to lure victims into transferring money.

Dating & matrimonial scams

Exploiting emotions, criminals create fake profiles to trap individuals seeking companionship. They quickly profess love, share inconsistent details, and eventually request money, citing urgent needs or personal tragedies.

How to Stay Safe

– Never share OTPs or bank account details

– Avoid downloading files or images from unknown contacts

– Verify QR codes and credentials before making any transactions

– Be sceptical of offers that seem too good to be true

– Report any suspicious activity at cybercrime.gov.in or dial 1930