Mumbai Cyber Fraudsters Pose as Gas Company, Siphon Off ₹1 Crore

Mumbai (IANS): Cyber fraudsters are hitting Mumbai hard. Scammers are currently posing as Mahanagar Gas Limited (MGL) officials to dupe residents, emptying bank accounts within minutes using malicious APK files, police officials reported Sunday.

Exploiting Global Tension

Investigators say fraudsters are exploiting the nationwide gas shortage—exacerbated by U.S.-Iran tensions—to trigger consumer panic. This organized cybercrime network targets citizens with threats of gas disconnection, manipulating them into downloading harmful applications.

The city has seen a surge of these highly coordinated attacks in recent weeks. Victims typically make a small payment before losing total control of their mobile devices and bank accounts. Police data shows that these incidents occur almost daily; in the past month alone, scammers have stolen close to ₹1 crore.

Recent Victims and Tactics

On March 26, the syndicate targeted Mitul Doshi, a 20-year-old businessman from Mulund West. Doshi received a message claiming his gas bill was overdue. After he paid $₹1,150$, a caller posing as an MGL representative claimed the system had not updated the payment. The caller sent an APK file titled ‘Mahanagar gas bill update.apk’ to “complete the process.”

Once Doshi downloaded the file and entered his banking credentials, the fraudsters gained unrestricted access to his phone. They transferred $₹11.82$ lakh out of his account within minutes.

In Malad East, a 75-year-old retired man fell for a similar trap. He received a WhatsApp message featuring the official MGL logo and a disconnection warning. The message demanded a nominal $₹10$ “system update” fee. When the victim downloaded the APK file and entered his card details, the scammers withdrew $₹8.59$ lakh in just 20 minutes.

A Consistent Modus Operandi

Police emphasize that these are not isolated cases. The syndicate follows a precise script:

1. The Bait: An SMS or WhatsApp warns of imminent gas disconnection.

2. The Hook: A scammer calls, impersonating a company official.

3. The Payload: The scammer sends an APK file disguised as a “bill update” or “verification tool.”

4. The Theft: The malware grants the fraudsters access to OTPs and banking credentials, allowing them to drain accounts before the victim realizes what happened.

“No gas company sends APK files for payments, and no official will ever ask for OTPs or banking details over a phone call,” warned Cyber Police officials.

How to Protect Yourself

Authorities urge citizens to use only official websites or authorized apps for billing. They advise against clicking unknown links or downloading suspicious files.

If you fall victim to a scam, immediately call the National Cyber Helpline at 1930 and freeze your bank accounts to prevent further loss.