Mumbai police arrest two in ₹48.60 lakh Boss scam linked to multiple cases
Mumbai cybercrime police say two suspects from Bihar and Jharkhand defrauded an accountant of ₹48.60 lakh by impersonating a CEO on WhatsApp. The case connects to at least seven similar incidents and a wider network across several states.
Key takeaways
- Two suspects from Bihar and Jharkhand are in police custody for a Boss scam fraud that netted ₹48.60 lakh from a Mumbai accountant.
- The incident is part of a broader set of cases involving CEO impersonation and similar fraud patterns across several Indian states.
- Investigators note links to eight earlier arrests and a total fraud tally of about ₹10.40 crore with some recovery already made.
What Happened
The cybercrime department of Mumbai Police arrested two individuals, one from Bihar and the other from Jharkhand, for allegedly defrauding an Mumbai-based accountant of ₹48.60 lakh. The fraud involved impersonating the complainant’s chief executive officer over WhatsApp between August 14 and August 16, 2026. Investigators say the accused are linked to roughly seven similar cases across the country.
The incident is described as a Boss scam or CEO impersonation fraud, where scammers pose as senior company officials to prompt employees to transfer funds from corporate accounts. An advisory from the Indian Cyber Crime Coordination Centre, issued on June 22, 2026, notes that attackers target high-ranking officials by sending malicious files via email or WhatsApp to gain access to executive devices and ongoing chats, enabling fraudulent transfers.
A case was registered on February 26, 2026, under sections of the Bharatiya Nyaya Sanhita and the Information Technology Act. The accused were produced before the Girgaon magistrate court on August 19, and were remanded to police custody from August 20 to August 25. Police say the two suspects are connected to eight other individuals who were arrested on July 25, 2026, in relation to Boss/CEO scams in Mumbai, with fraud totals around ₹10.40 crore and about ₹6 crore recovered so far.
Authorities say the complainant, an accountant at a Mumbai pipe company, was contacted by a number claiming to be the company’s CEO. The fraudster, using a bogus SIM and altered profile details, told the accountant the CEO was busy and needed money transferred. The amount transferred, ₹48.60 lakh, went to a mule bank account in Kolkata. Investigators traced the SIM used for the fraud to a source in Rukundi Pur, Bihar, which led to the arrests of Aamir Chand Mohammad Khan (a POS Airtel SIM vendor) on August 14, 2026, and his accomplice Suraj Kumar Pradeep Kumar Saw, also known as Vishal, near Jamtara, Jharkhand, on August 16, 2026. Authorities say the SIM involved in the scam belonged to an Army soldier from Bihar who had returned home on leave and attempted to port the number to Airtel. The accused allegedly activated the SIM, later sending it to the Jharkhand-based co-accused for the fraud, and also reportedly used misused documents and e-KYC to activate multiple SIMs for others. Police say 161 SIM cards were seized, along with a megaphone and a POC device.
Why It Matters
The case illustrates how impersonation at the executive level and compromised communications can enable large-scale financial fraud across multiple jurisdictions. The connection to eight other arrests and a broader network suggests a coordinated operation that spans several states, highlighting challenges in verification, SIM provisioning abuse, and cross-state investigations. The sustained spread of Boss scams underscores the need for heightened internal controls within companies and improved awareness among employees about executive fraud indicators.
Background
Defendants are said to have used a fake CEO identity on WhatsApp to contact the victim, a Mumbai-based accountant, prompting a funds transfer. The broader pattern discussed by investigators involves attackers delivering malicious content to executives to access devices and compromise ongoing communications, enabling further transfers. The investigation references an advisory published in June 2026 by the Indian Cyber Crime Coordination Centre about such tactics and target profiles, noting the emphasis on high-ranking officials and urgent regulatory-looking prompts.
Key Facts
- Arrests: Two individuals from Bihar and Jharkhand.
- Fraud amount: ₹48.60 lakh transferred to a mule account in Kolkata.
- Period of incident: August 14–16, 2026.
- Case context: Boss scam or CEO impersonation fraud via WhatsApp.
- Related activity: Linked to about seven similar cases across India; eight people arrested earlier in Mumbai on July 25, 2026; total fraud around ₹10.40 crore with ₹6 crore recovered to date.
- Legal action: Case registered February 26, 2026; accused produced in court August 19, remanded to custody August 20–25.
- Investigative details: SIM cards seized (161), a megaphone, and a POC device; accused allegedly used misused documents and e-KYC to activate SIMs; a soldier’s SIM reportedly involved in the case.
What Happens Next
Police custody for the two suspects is set to continue through August 25, 2026. Investigators will pursue the network connections linked to the eight related cases and continue tracing funds and SIM-based fraud infrastructure to determine the full scope of the operation and any additional accomplices. Further court actions, including potential charges and bail considerations, will follow based on ongoing evidence gathering.
Sources reviewed
Project Chintan independently synthesized and analyzed information cross-checked across the sources listed above.
