Delhi Police have arrested two individuals in connection with a UPI (Unified Payments Interface) hijacking scam that resulted in the theft of ₹20 lakh from victims’ bank accounts. The suspects allegedly used lost or stolen mobile phones to bypass security features and conduct unauthorized transactions, highlighting ongoing challenges with UPI payment security in India.
The arrested individuals have been identified as Gagan, a B.Tech dropout, and Ajit Sharma, who previously worked as a manager at an online food company. The suspects allegedly used technical expertise and online tutorials to reset UPI PINs and circumvent security protocols, accessing Aadhaar-linked authentication to conduct fraudulent transactions. The case comes as the National Payments Corporation of India (NPCI) works to strengthen security measures for UPI accounts, particularly those linked to inactive mobile numbers.
The investigation began following a complaint filed on the National Cyber Reporting Platform, part of India’s expanding digital crime reporting infrastructure that includes a searchable database of cyber scammers. Law enforcement officials gathered evidence confirming the suspects’ involvement in the scheme before making the arrests. During the operation, police recovered multiple devices used in the fraudulent activities and retrieved a portion of the stolen funds.
According to Delhi Police statements, the suspects specifically targeted lost or stolen mobile phones to execute their scheme, manipulating security features to gain unauthorized access to victims’ bank accounts through the UPI system. The method of attack has become increasingly concerning as India continues to expand its Aadhaar-based authentication systems for digital payments and mobile services.
In response to this incident, law enforcement officials have advised citizens to exercise caution when interacting with unknown individuals online and to protect their personal information. The case demonstrates the importance of implementing strong cybersecurity measures, including regular updates to PINs and consistent monitoring of bank account activities. The NPCI has recently announced plans to implement weekly mobile number verification processes for UPI apps starting in 2025, aimed at preventing similar security breaches.
Sources: Devdiscourse
Follow Us