Scammers in Mumbai pose as gas company officials, steal nearly Rs 1 crore in a month

Mumbai: The city is witnessing a sharp rise in cyber fraud cases, with scammers impersonating officials from Mahanagar Gas Limited (MGL) to trick residents into losing money from their bank accounts. Police officials reported that fraudsters are using malicious APK files to gain access to victims’ mobile devices and financial information.

Exploiting gas shortages and geopolitical tensions

Investigators said the cybercriminals are taking advantage of the ongoing gas shortage across India, which has been further intensified by tensions arising from the United States-Iran conflict. Using this situation, organised fraud networks create panic among consumers and manipulate them into downloading harmful applications under the threat of gas disconnection.

Several such cases have emerged across Mumbai over the past few weeks, showing a highly coordinated pattern in which victims are first asked to make small payments before losing control of their devices and bank accounts. Police officials noted that these incidents are reported almost daily, with nearly Rs 1 crore siphoned off collectively in the last month.

Case examples highlight the modus operandi

One victim, Mitul Doshi, a 20-year-old businessman from Mulund West, received a message on March 26 claiming his gas bill was overdue and warning of imminent disconnection. Believing the message to be genuine, he paid Rs 1,150. Later that day, he received a call from a person claiming to be an MGL representative. The caller sent him an APK file titled ‘Mahanagar gas bill update.apk’ and instructed him to complete the process.

After downloading the file and entering his banking credentials, Doshi’s phone and accounts were compromised. Within minutes, Rs 11.82 lakh was transferred out through multiple transactions, leaving him with no control over his funds.

A similar incident occurred in Malad East, where a 75-year-old retired man received a WhatsApp message bearing the MGL logo, warning him of disconnection and asking for a nominal ‘system update’ fee of Rs 10. After entering his card details into the APK file, Rs 8.59 lakh was withdrawn from his account within 20 minutes.

How the fraudsters operate

Police officials said these cases are part of a larger organised cybercrime racket. In many instances, scammers start with small amounts to lower suspicion and encourage victims to download the malicious file without hesitation.

Investigations reveal a consistent pattern: victims first receive SMS or WhatsApp messages claiming their gas bill is pending, followed by a call from someone impersonating a company official. They then send an APK file disguised as a ‘bill update’ or ‘system verification’.

The malware contained in the file allows fraudsters to access OTPs, banking credentials, and even remotely control the victim’s mobile device. Funds are transferred out within minutes, often before the victim notices any irregularity.

Police advisory and public warning

Cyber Police officials warned, “No gas company or authorised agency will ever send APK files for payments or updates, nor will any official ask for OTPs, passwords, or banking details over a phone call.”

Authorities urged citizens to use only official websites or authorised mobile applications for gas-related payments and information. People should avoid clicking on unknown links or downloading suspicious files.

Victims of such fraud are advised to immediately report the incident by calling the National Cyber Helpline at 1930 and ensure their bank accounts are frozen to prevent further financial loss.

IANS inputs