India’s cybercrime landscape is rapidly evolving, with investigations increasingly moving beyond individual complaints to uncover the wider financial, digital and technological infrastructure behind online fraud.
Recent developments involving mule accounts, gaming platforms, malicious mobile applications, fake websites, matrimonial scams and AI-driven threats highlight how cybercriminals are adopting increasingly complex methods. At the same time, police agencies and cybersecurity researchers are using data analytics, device forensics and behavioural research to identify these networks.
Here are 10 significant developments shaping the current cybercrime and cybersecurity landscape.
1. Lucknow Fraud Investigation Traces Money Through 903 Gaming Accounts
Investigators in Lucknow are examining a digital-arrest fraud involving approximately ₹95.65 lakh. According to the investigation, the money initially moved through accounts in Guwahati and Ranchi before being distributed across as many as 903 online gaming accounts.
Authorities have reportedly placed liens on around ₹44 lakh while continuing efforts to trace the remaining funds.
The case demonstrates how gaming accounts can potentially be used to divide and move fraudulent proceeds, making traditional bank-based investigations more complicated. Investigators may therefore need to connect banking records with gaming accounts, wallet information, KYC details, devices and IP addresses.
2. One Surat Account Allegedly Connected to 29 Fraud Complaints
Surat Cyber Crime Branch has arrested three people in connection with an alleged ₹1.10-crore share-market investment fraud.
Police say the current account involved in the investigation processed around ₹2.41 crore between October 2025 and January 2026. A search through the National Cybercrime Reporting Portal reportedly linked the same account to 29 complaints from different states involving alleged losses of about ₹16.13 crore.
Investigators also suspect that the account changed hands multiple times and was used for transactions ranging from ₹10,000 to ₹30,000.
Such cases demonstrate how a single mule account can potentially connect several apparently unrelated complaints and help investigators identify intermediaries and other people involved in the movement of funds.
3. Madhya Pradesh Police Investigate ₹11-Crore Matrimonial Fraud Network
Mandsaur Police say they have dismantled an interstate cybercrime network allegedly involved in more than ₹11 crore of fraud across over 100 cases.
Six suspects from Rajasthan and Bihar were arrested in the investigation. According to police, victims were approached through matrimonial websites by individuals pretending to be potential partners, including people claiming to be NRIs.
Authorities are also examining possible international connections.
Matrimonial scams can involve extended communication and identity manipulation before victims are persuaded to transfer money. Investigators are therefore examining information such as photographs, phone numbers, email addresses, devices, IP addresses and beneficiary accounts to identify recurring identities and infrastructure.
4. Fake APK Files Used in Deoghar Cyber Fraud Investigation
Deoghar cyber police have arrested five suspects in an alleged interstate fraud operation and seized five mobile phones and eight SIM cards.
Police allege that the accused used fake customer-care calls, cashback offers and malicious Android applications disguised as PM-Kisan-related information, electricity bills and RTO challans.
Once installed, such applications could potentially provide criminals with remote access to a victim's device and enable the capture of sensitive information such as SMS or OTP data.
The investigation highlights the importance of mobile-device forensics, including APK analysis, permission examination, device identifiers, network information and links between mobile numbers and reported cybercrime cases.
5. Purulia Emerges as a Cybercrime Hotspot in I4C Analysis
Purulia Cybercrime Police have reportedly identified a concentration of suspicious cyber-fraud activity using Pratibimb, the geospatial analysis system associated with the Indian Cybercrime Coordination Centre (I4C).
Investigators are examining transactions involving multiple accounts as well as withdrawals from 39 ATMs. Common account connections have also reportedly helped investigators identify patterns across different cases.
The development reflects a broader shift towards intelligence-led cybercrime investigations, where information from multiple complaints can be combined to identify geographic concentrations and suspected criminal infrastructure.
6. Fake Detective Website Highlights the Growing Risk of Typosquatting
Delhi Police Cyber East arrested a mother-son duo from Ghaziabad over allegations involving a fake detective-services website.
Police say the website, SleuthIndia.com, was designed to resemble the legitimate SleuthsIndia.com website. A person looking online for investigative services allegedly reached the imitation site and transferred ₹1.15 lakh.
The case highlights the risks created by typosquatting, where fraudulent websites use domain names that closely resemble genuine businesses.
Investigators examining such cases may need to analyse domain-registration information, DNS records, hosting details, payment accounts, advertisements, phone numbers and device or IP evidence.
7. Kaveri Engine Development Reportedly Advances Ghatak Programme
India’s indigenous Kaveri dry engine, developed by the DRDO’s Gas Turbine Research Establishment, has reportedly undergone high-altitude and flight-related testing in Russia.
The reported progress is linked to the broader development of India’s Ghatak stealth unmanned combat aerial vehicle programme.
However, successful engine testing alone does not mean that an operational UCAV has been completed. Further integration and flight-development stages remain relevant.
The programme also illustrates how modern autonomous aircraft increasingly depend on the combined development of propulsion, sensors, secure communications, artificial intelligence, electronic warfare and cybersecurity.
8. IIT Madras Research Examines Why Cyber Fraud Victims Freeze Under Pressure
Research from IIT Madras has examined how cybercriminals exploit psychological pressure during financial scams.
The study involved interviews with 33 victims of cyber-financial fraud, including technically qualified professionals such as IT specialists, bankers and doctors.
Researchers found that criminals can deliberately create conditions involving urgency, fear and stress, potentially making victims less capable of carefully evaluating what is happening. The research describes this phenomenon as an “engineered brain freeze.”
The findings suggest that cybersecurity awareness alone may not be sufficient. Banks and other institutions could also consider behavioural safeguards, transaction pauses, contextual warnings and additional verification mechanisms for high-risk situations.
9. Visa Raises Concerns Over Autonomous AI-Powered Cyberattacks
The growing use of autonomous artificial intelligence is creating a new challenge for financial-sector cybersecurity.
Visa has reportedly made part of its AI-powered cyber-defence technology available as open-source technology as concerns increase about AI systems being capable of carrying out cyber operations at machine speed.
Visa President of Technology Rajat Taneja has also discussed the potential risks associated with increasingly autonomous cyber threats. The company is simultaneously preparing its payment infrastructure for longer-term risks associated with quantum computing.
The development points towards a future in which defensive systems may increasingly need to detect and respond to automated attacks without relying entirely on manual intervention.
For financial organisations, robust Financial Investigation capabilities may also become increasingly important when cyber incidents involve suspicious transactions, asset movement and complex digital trails.
10. Major AI Companies Sign Voluntary US Safety Agreement
Several major artificial intelligence companies, including OpenAI, Google, Meta, NVIDIA and Anthropic, have reportedly signed a voluntary AI-safety agreement announced in the United States on September 29.
The commitments reportedly include cooperation with independent auditors, stronger safeguards and measures intended to reduce the possibility of AI systems obtaining unauthorised access to systems.
The development comes amid growing attention to autonomous AI agents capable of interacting with external systems. Anthropic has separately raised concerns about the legal uncertainty that could arise if autonomous systems gain extensive access to customer environments and perform unauthorised actions.
This has created increasing interest in a new area of cybersecurity: AI agent governance.
The Bigger Cybersecurity Picture
The developments across India and abroad point to a significant change in the way cybercrime is being investigated.
Cases are no longer limited to identifying the person who directly contacted a victim. Investigators are increasingly looking at the entire infrastructure behind a fraud — from bank and mule accounts to gaming platforms, mobile devices, SIM cards, malicious applications, domains, IP addresses and digital wallets.
At the same time, artificial intelligence is becoming part of both sides of the cybersecurity equation.
For law-enforcement agencies, financial institutions and businesses, the emerging approach increasingly involves connecting multiple data points to identify criminal networks and respond to threats faster.
As cybercriminal methods become more sophisticated, investigations will increasingly depend on the combination of financial analysis, digital forensics, behavioural research, geospatial intelligence and AI-assisted threat detection.