Banking on hacks

A Tehelka SIT report exposes how cybercriminals hack personal bank accounts, target gaming platforms, and funnel stolen funds into borrowed accounts to mask their illicit activities, revealing critical gaps in banking security

Cybercriminals have now devised a new method to perpetrate online fraud—‘purchasing’ bank accounts lying in disuse. These accounts act as conduits for transferring and laundering money stolen through hacking and other fraudulent activities.

“I need bank accounts—savings accounts, current accounts, and even corporate accounts. Currently, I manage several such accounts. We acquire these accounts by paying commissions to their owners, who allow us to park money stolen from others’ accounts. This is done by hacking into the victims’ accounts. The people who provide us with their accounts receive a 10% commission,” said Jitu Singh, a Kolkata-based hacker, during an undercover operation by Tehelka.

“For stealing money, I procure the details of people’s bank accounts directly from the bank itself, often from government-owned banks. The manager of one such Kolkata branch is a close associate of mine. He provides me with sensitive customer information, including ATM pins, IFSC codes, account numbers, and more. Using this information, we steal money and deposit it into accounts we have borrowed from others,” Jitu Singh further revealed.

 “You provide us with bank accounts where we can deposit money stolen from other people’s accounts. Those who let us use their accounts receive a 10% commission,” Jitu told Tehelka’s undercover reporter, who approached him posing as a fictitious client.

Jitu Singh

“We are a gang of five based in Kolkata, led by Mohammed Imran. We not only hack personal bank accounts but also target online games like Dream11. In online games, we only hack the accounts of those who are on the losing side because it’s harder to detect the fraud. The losers assume they lost the money in the game itself rather than through hacking,” explained Mohammed Tausif, another hacker from Kolkata.

 “I have been hacking bank accounts for the past three years. So far, our group, which includes Shiraz and Aatif, has hacked 12–13 online gaming accounts and numerous personal bank accounts. All five of us live in Kolkata, near the airport, at a place called Majumder Pada,” added Tausif.

Mohammed Tausif

 With cases of digital fraud and bank account theft on the rise in India, Tehelka undertook a much-awaited investigation into the world of cybercrime. This probe led us to Mohammed Tausif and Jitu Singh, two members of a cyber fraud gang operating out of Kolkata with their activities extending to Delhi.

The investigation began with a meeting with Jitu in a five-star hotel in Delhi. Without hesitation, Jitu told our reporter that the gang needed bank accounts belonging to poor people to transfer money stolen through fraudulent activities, including hacking online gaming platforms like Dream11.

In the following conversation, Jitu explains the intricate operations of siphoning money through online gaming platforms. He reveals how the gang exploits economically disadvantaged individuals’ accounts to transfer stolen funds after targeting popular apps like Dream11 to defraud unsuspecting users.

Reporter- Bhai, bank account… matlab?

Jitu- Saving aur corporate dono..

Reporter- Saving aur corporate.. sirf account chahiye.?

Jitu- hmm.

Jitu (continues)- Accounts matlab ….account number hua ..sim hua.

Reporter- Sim..?

Jitu- Account mein hum log sim dete hain na…wo number wala sim.

Reporter- Kya karega uska ?

Jitu- Jo gaming paisa hota hai na, gaming paisa wo sab aisa hota hai…hum to apna account de nahi sakta, isliye jo bahut gareeb hai na.. jinko khane ka nahi hai, paisa nahi hai, jo gareeb hai kaam nahi kar sakta wo log ke account mein hum deta hai.

Jitu (continues)- Hum log gaming ka paisa maartey hain..aur yahan jama kartey hain. Ye sab account mein hota hai.

Reporter- Ye samjha mujhe detail mein.. mujhe samajh nahi aaya, mujhe pata hi nahi hai kuch. Ye mere liye nahi cheeez hai, mujhko samjha.

Jitu- Gaming matlab cricket, football…jitney bhi gaming apps hain.

Reporter- Jaise Dream 11 ho gaya ?

Jitu- Haan…Jitna bhi gaming app hain.. usmein to fund lagta hai.. roz ka aap pakad lo kitna fund lagta…lagane ko bahut hai. Croro admi hai, 10 rupiya bhi  lagata hai…is samay hum log betha rehta hai.

Reporter- Kahan betha rehta hai ?

Jitu –Dekhtey hain ki ID mein kitna fund lagne wala hai.

Reporter- Id mein kitna fund laga hai, mein samjha nahi.?

Jitu- Jaisa aap cricket mein lagata hai…jaise India-pakistan match hua aap 10,000 hazar rupiya laga diya.

Reporter- Satta laga diya.?

Jitu- Jo ID hai na wo hum logo ke pass rehta hai…hum log dekhta hai kaunsi Id mein sabse zyada paisa laga hua hai….wo ID se paisa gayab karta hai.

Reporter- Kaise?..illegal tarike se.?

Jitu- Haan,  uska 2-4 Id hota hai…aap bethey bethey samajh hi nahi paogey, paisa gayab ho jayega.

Reporter- Account se paisa gayab ho jayega…hacking bhi kar rahe ho..?

Jitu- Hum nahi matlab, mera dost log karta hai..

Jitu (continues) – Wo log roz maarta hai, aur roz usko account chahiye.

Reporter- Usmein rakhne ke liye?

 [The conversation unveils how cybercriminals exploit gaming apps and hack accounts to drain funds. It emerges that the gang manipulates the vulnerability of marginalized individuals to sustain their illicit operations, revealing the exploitative underbelly of cyber fraud.]

Now, Jitu reveals that he needs savings accounts with an ATM withdrawal limit of Rs 50,000, offering a 10% commission to those who allow their accounts to be used for transferring fraudulently obtained money. While he lays bare the mechanics of how the gang exploits both savings and corporate accounts to execute their schemes, the discussion underscores the calculated and well-structured operations of cybercriminals.

Jitu- Saving account hota hai to usmein ATM ka limit kya hota.. 50K. Aur ek account mein 1.5 lakh tak ka kaam, 1.5 lakh ka humko 10 percent…jiska bhi account hoga usko mil jayega….Corporate account hota hai.. current account ke upper.. usmein hota hai crore ka.

Jitu (continues) – Usmein samajh lo humko 25 percent milta hai.

Reporter- To aapko basically account chahiye ?

Jitu- Kisi ka bhi…koi bhi ATM ka limit ho..corporate koi bhi ho.

Reporter- Matlab ATM se Rs 50,000 tak nikal saktey hain..ek din mein.

Jitu- Haan.

Reporter- Usko kya fayda jo account dega.?

Jitu- Roz  ka 1.5 lakh ka transfer hoga uske account mein…1.5 lakh ka 10 percent.. Rs 15,000 usko milta rahega.

Reporter- Matlab jo tumhare pass account hain usmein tum paisa daaltey ho.?

Jitu-Hmm.

Reporter- Phir usko nikaltey hogey apne use ke liye..to jiska account hai usko kitna paisa detey ho..?

Jitu- Usko 10 percent.

 [The exchange highlights how stolen money is channeled through compromised accounts, with account holders getting a share. It becomes clear that fraudsters use these accounts for both small and large transactions, revealing a disturbing level of precision in their methods.]

Now, Jitu made a startling revelation: his team is not only hacking online gaming platforms but also targeting personal bank accounts to steal money. He admitted to obtaining customer details—including ATM pins, IFSC codes, and account numbers—from a prestigious government bank in Kolkata. Shockingly, Jitu disclosed that a bank manager, who is his close friend, provides this sensitive information, enabling the gang to carry out these thefts.

Reporter- Kya- kya deta hai tu account ke detail ?

Jitu- Hum deta hai, ATM, account ka number aur pin.

Reporter- ATM ka pin wo kaise mil jayega tujhko.?

Jitu- Bank mein sab mil jata hai.

Reporter- Bank wale bata detey hain.?

Jitu- Haan usko account number, IFSC code, sab de deta hai.

Reporter- Kaun si bank ka abhi tak tune zyada diya hai..?

Jitu-XXXXX

Reporter- XXXXX, sarkari bank ka, kisne diya tujhe uski detail ?

Jitu- Aa jati hai.. XXXX bank to aisa hai ki wo mera ghar hai..

Reporter- Kaun si branch XXXX ki Kolkata mein?

Jitu- XXXXX

Reporter- XXXXX branch Kolkata ki.?

Reporter (continues) – Manager kaun hai ?

Jitu- XXXX hai koi…manager change hota rehta hai…wo aap mere saath jab bhi jayega,..koi bhi bank mein jayega aapko line mein lagna padega, magar mere saath jaiyega, to nahi.. manager bhi khada rahega.

Reporter- XXXX branch ?

Jitu- XXXX branch.

[Our investigation now delves into the clandestine world of bank account hacking, uncovering how fraudsters effortlessly obtain sensitive details, exposing the complicity of corrupt bank officials. The conversation reveals the alarming ease with which account numbers, ATM pins, and other critical information are accessed and exploited.]

We requested Jitu to arrange a meeting with Tausif, and he called Tausif to Delhi for the purpose. The meeting with the two took place at a prestigious restaurant in Noida. During the conversation, Tausif confessed to Tehelka’s reporter that he hacks online gaming accounts of those who lose in the games. He also explained why he targets only losing accounts and not the winning ones. The following discussion uncovers the sophisticated techniques used by fraudsters to hack online gaming accounts and steal funds.

Reporter- Kis tareeke se kaam karte ho aap?

Tausif- Hamara kaam to gaming ka hai, jaise ki gaming ka account hota hai…online game account usey mein hack karta hoon.

Reporter- Jaise Dream 11 hua?

Tausif- Dream 11 hua, Binjo mein jitney bhi..aur bhi online game hain..jaise aap khel rahe ho aapka naam show ho gaya, wahan se hum hack karke apne account mein le letey hain.

Reporter- Samjha nahi mein.?

Tausif- Jaise aap game khel rahe hain, aur aap game jeet gaye to wo paise aapke account mein aa jayega agar aap loss hotey ho, wahan se aapko pata nahi legega wahan se hum account ko hack kar letey hain  aur us paise ko apne account mein transfer kar letey hain.

Reporter- Loss wale ka kyun hack karte ho jeetne wale ka kyun nahi ?

Tausif- Nahi aisa nahi hota jo aapko jo win dikhayega wo aapke account mein dikhayega, jo loss money hoga wo aapko show nahi hoga, aapko to yehi lagega ki aap haar chuke ho, lekin usko hum hack karke apne account mein lete hain

[The conversation reveals how fraudsters hack online gaming accounts to transfer winnings to their accounts, unnoticed by the victims. This exposes a critical vulnerability in online gaming platforms, emphasizing the urgent need for stronger security measures to protect users’ funds.]

Tausif confessed that they are a gang of five, based in Kolkata’s Majumder Pada near the airport. He revealed that besides himself, the group consists of Aatif and Shiraj, and is led by Mohammed Imran. Tausif stated that his gang has hacked 12-13 online gaming accounts to date. A candid conversation reveals the methods and extent of their operations.

Reporter- To kitne account aap gaming ke heck kar chuke ho.?

Tausif- 12-13 kar diye hain.

Reporter- 12-13 aapne khud ne..?

Tausif- Nahi hamari ek team hai..

Reporter- Kitne log hain ?

Tausif- Hum 5 log hain..ek main hoon, ek Shiraz hai, Aatif hai, Mohd Imran hai.

Reporter- 5 logon ka group hai, usmein head kaun hai..?

Tausif- Head hamara Mohammed Imran hai..

Reporter- Mohd. Imran?

Tausif- Ji.

Reporter- Aap pancho Kolkata se ho, kis jagah rehte ho..?

Tausif- Airport ke pass hai.

Reporter- Kaunsi jagah kehlati hai

Tausif- Majumdar pada.

Reporter- Majumdar pada ?

[The activities of the five-member hacker team, led by Mohammed Imran, underscore critical gaps in online gaming security. This demonstrates the crucial need for strengthening cyber security measures on online gaming platforms.]

As Tausif disclosed the total amount he and his gang have stolen from online gaming apps, it points to the alarming rise in bank account hacking by fraudsters in recent times. Tausif revealed that his gang leader, Imran, is the one obtaining all the details needed to hack people’s accounts. As we delve into the mechanisms behind the hacking of online gaming accounts, through the conversation below, we uncover the methods used by fraudsters to identify and exploit the players involved in gaming.

Reporter –Apne abhi tak kitna paisa hack kiya logon ke gaming account se..?

Tausif- Gaming mein, jaise aapne 2500 lagaye hain, aap ki tarah auron ne bhi jaise 4-5 log.. ab hum 5 bande hain, hum sabhi 50k -50k bhi rakhtey hain to 2.5 lakh ho jaate hain..

Reporter- Accha matlab 5 log ho aap to sab alag alag karte ho..?

Tausif- Haan ji.. ye nahi k ek par.. alag alag sab karte hain..

Reporter- To aapko unki detail kaise pata lagti hai ?

Tausif – Aisa hai jo game kheltey hain online.. hum unko check karte hain..kaun jeet raha hai kaun haar raha hai

Reporter- Aap check kaise karte ho ?

Tausif- Hum nahi hum to hack karte hain, jo hamara boss hai na wo detail nikalta hai..

Reporter- Mohd Imran.. wo kaise nikaltey hain ?

Tausif- Wo sari baaten aapko aise thodi bata denge.

[The preceding exchange uncovers how these criminals exploit online gaming platforms to siphon off significant amounts of money. This highlights critical flaws in online gaming security and the urgent need to protect players from financial fraud.]

Tausif revealed that Jitu assists his gang in procuring customers’ bank account details to facilitate the theft of funds. This revelation sheds light on the hidden networks driving bank account hacking.

Tausif- Jeetu bhai actually hamare flat ke pass hi rehte they ye..neeche uper nikaltey baat cheet ho jaati hai na , to aise hi mulakat ho gayi. Ye madad karte hain hamari.

Reporter- Madad kaisi ?

Tausif- Ye hame account la kar detey hain.

Tausif (continues)- Jaise kisi ka account hai, bank account hai ye detail lakar detey hain.

[Through this revealing conversation, we uncover how fraudsters obtain detailed banking information with the help of insiders, exposing vulnerabilities in the system that facilitates these illicit activities.]

Tausif admitted that he has been hacking not only online gaming accounts but also personal bank accounts for the past three years. He disclosed that Jitu assists them in acquiring customers’ personal bank account details, for which they pay him a 10% commission.

Reporter- Haan ab batao.

Tausif-  Jitu bhai humko bank account lakar detey hain, jitney ye hame bank account lakar detey hain unke hum inko 10 percent detey hain

Reporter- Matlab paisa uda letey ho aap, aur ye kaam aap kabse kar rahe ho.

Tausif- 3 saal se.

 [As our investigation uncovers the dark world of bank account hacking, the preceding exchange reveals how fraudsters enlist insider’s help to gain access to banking details and to siphon off funds, illustrating the need for stricter security measures to protect consumers.]

Tausif confessed that his gang leader, Imran, had been hacking people’s bank accounts with four associates for a long time. He revealed that he became the fifth member of the gang after meeting Imran in the Dharmatala area of Kolkata.

Reporter- To aap Imran se kaise mile..?

Tausif- Actually aapne suna hoga Dharmatala ?

Reporter- Ye kya hai..?

Tausif- Ek jagah hai.. Kolkata ka main jagah hai.

Reporter- Dharmatala… kya hai wahan pe?

Tausif- Wahan pe market hai sabse badi, uske close aapka Eden Garden hai..

Reporter- To Dharmatala mein mile aap Imran se?

Tausif- Ji… mein to last mein mila kisi ke through mila.

Reporter- Matlab ye sab pehle se… 4 pehle se aur aap 5th aadmi they.

Tausif- Ji.

 [The discussion uncovers the shadowy connections facilitating bank account hacking. We also learn how key players in this network meet and operate, shedding light on their methods and the environments that foster such illicit activities.]

Now, Tausif admits that his accomplice, Jitu, had arranged bank account details of some customers from Uttar Pradesh for hacking. The exchange highlights the widespread nature of such operations.

Reporter- Kitne account dilwa diye Jitu bhai ne abhi tak?

Tausif- Abhi to UP se dilwaye hain..

Reporter- UP se ?

[Through this revealing conversation, we learn how insiders like Jeetu facilitate fraud by providing account details, showcasing the extensive reach of these operations and highlighting significant security flaws.]

Tausif then made us an offer, asking for the details of poor people’s bank accounts where his gang could transfer the ill-gotten money. In return, he promised to pay us a 10% commission. So, we uncover how they hack bank accounts and siphon money, promising a share of the profits.

Reporter- Accha mujhe ye batao hum aur aap milkar kaise kaam kar saktey hai ?

Tausif- Aap hamko account do gareeb ka..hum hack karenge….aapke jo account mein jayega aapko bhi 10 percent milega..jo ki gareeb ke account mein jayega.

Reporter- Ek din mein kitni kamai ho jayegi..?

Tausif- Ho jayegi 1-2 lakh ki.

Reporter- Ek din mein..?

[The conversation reveals how fraudsters hack accounts, who promise a 10% cut of the stolen money to their collaborators. This also highlights severe security vulnerability in banking systems.]

Tausif admitted that his boss, Imran, provides them with bank account details to hack, usually two to three times a week. Once they receive the details, all five gang members work together to carry out the hacking. This unveils the organized efforts of fraudsters hacking bank accounts.

Tausif- Hack karna padta hai is cheez ko, akela thodi na kar raha hai, 5-5 bande lage pade hain.

Reporter- Roz karte ho aap ?

Tausif- Roz ka nahi , ek hafte mein kabhi kabhi 2 baar ho gaya.. 3 baar ho gaya.

Reporter- To phir roz aamdani kaise hogi ?

Tausif- Jaise uper se order aata hai MD ki taraf se, usi din hum baith jaate hain.

 [The conversation shows that a team of five fraudsters, led by instructions from an ‘MD’, collaborates to hack bank accounts multiple times a week. The exchange reveals their collaborative operations and the structured hierarchy involved.]

Tausif stated that he only needed poor people’s bank accounts from us to park the stolen money. For hacking wealthy individuals’ bank accounts, he revealed that their account details were already available with their gang leader, Imran. This conversation uncovers why they prefer using accounts of the economically disadvantaged, shedding light on their tactics.

Reporter- Accha aapko jo mujhse chahiye wo gareebon ke account chahiye ?

Tausif-Haan.

Reporter- Ameeron ke nahi chahiye?

Tausif- Nahi.

Reporter- Agar mein kisi ameer ka bhi de du account.. phir ?

Tausif- Actually hame in kaamo ke liye gareebo ke account hi chahiye, ab ek ke account mein to sara paisa daal nahi saktey..is liye.

[The conversation reveals that fraudsters prefer using poor individuals’ accounts to distribute the hacked money, avoiding wealthier accounts to mitigate risk. This highlights a calculated approach to defrauding people.]

Tausif explained how he and his gang members call unsuspecting individuals as part of their strategy to hack bank accounts. The following exchange reveals how fraudsters make use of laptops and SIM cards to extract OTPs from the targeted victims.

Reporter- To aap kis tareeke se hack kartey ho wo tareeka batao…aap call kaise kartey ho wo to batao.?

Tausif- Yehi laptop par kaam ho jata hai.

Reporter- Kis tareeke se call kartey ho ye to batao.?

Tausif- Hum sab ke alag alag laptop hain aur sari jankari MD Imran nikaltey hain..

Reporter- Theek hai..wo aapko de detey hain..phir…?

Tausif- Wo detail nikal kar rakhtey hain.

Reporter- Sim ka istemaal kab kartey ho..?

Tausif- Apni sim, apni sim istemaal nahi hoti. Wo to MD Imran lata hai.

Reporter- Us sim se kaise phone kartey ho wo to batao tareeka.?

Tausif- Customer ko call kartey hain.. jo hamare bande hain.. ye jo OTP aata hai na..OTP jo hota hai na usi ke through karte hain hum.

Reporter- To aap call kartey ho.?

Tausif- Hamare log karte hain.

Reporter- Accha call karne wale alag bande hain.. kitne hain wo.?

Tausif- 2 hi to hain…5 bande hain hamara group.

Tausif (continues) – Hum ek cheez poochtey hain unse OTP ki. Hamare jo bande hotey hain na wo call karke OTP poochtey hain..

Reporter- Kisi aadmi ko phone to kartey ho na, to mein wahi pooch raha hoon kya karte ho aap.?

Tausif- Jaise bank se call aata hai ye ATM card chahiye aap ko..aap kehtey ho nahi…usi mein jo chahta hai hum ussey OTP maangtey hain, koi koi bata deta hai aur koi koi phone kaat deta hai.

Reporter- To uska aap paisa nahi nikal paatey jo OTP nahin batata  hai.. usi ka nikal paatey ho jo batata hai..

Tausif- Haan.

Reporter- To aap kya bol kar unko phone kartey ho ?

Tausif- Bank se.

Reporter- Bank se, sab ko bank se boltey ho..?

Tausif- Jo bande call kartey hain wo boltey hain..

Reporter- Matlab OTP milna zaroori hai..?

Tausif- Haan.

Reporter- OTP na mile to aap paise nahi nikal paatey.

Tausif- Paise to nahi nikal paatey OTP ke bagair. Gaming mein kar letey hain.

Reporter- Accha gaming mein bina OTP ke ho jaata hai kaam. Usmein OTP ki zaroorat nahi hoti.?

Tausif- Haan.

[The exchange sheds light on the intricate methods used by fraudsters, underlining the organised nature of their operations. This also underscores the need for stronger security measures in banking systems.]

As we delve into the scale of hacking activities carried out by fraudsters, Tausif revealed the number of gaming and bank accounts he has hacked so far highlighting the pervasive nature of their illicit activities.

Reporter- Acha ye batao kitne bank account aapne abhi tak hack kar diye aur kitne gaming account.?

Tausif- Ab tak maine bataya tha gaming ke 12-13 kar diye. Aur bank ke hamne abhi tak 8-9 kar diye honge.

[The conversation reveals that fraudsters have hacked 12-13 gaming accounts and 8-9 bank accounts so far. This underlines the significant reach and impact of their activities.]

Tausif went on to reveal his family background and education. He claimed to be a graduate from Kolkata and shared that his late father had worked in a government job. Disinterested in traditional employment, he chose instead to enter the business of stealing money from people’s bank accounts. Through the following exchange, we try to provide a deeper understanding of the individual behind these illicit activities.

Reporter- Aap kahan tak padhe ho Tausif..?

Tausif- Mein BA pass hoon.

Reporter- BA pass ho.. naukri nahi ki kahin.

Tausif- Naukri mein aisa hai na sir.. naukri mein mann nahi lagta..

Reporter- Rehne wale kahan ke ho aap..?

Tausif- Wahin.. Kolkata..

Reporter- Wahin paida hue wahi padhe…father kya karte hain?

Tausif- Ji father govt job mein they.

Reporter- They, ab hain nahi wo..?

Reporter (continues) – Kaunse department mein they father?

Tausif- Papa they Hindustan Paper Mill mein, Dharmatala.

 [Through a detailed conversation, we uncover insights into Tausif’s education, employment preferences, and family background, providing a deeper understanding of the individual behind these illicit activities]

The Tehelka investigation has uncovered how fraudsters lure ordinary people into opening current accounts or granting access to their existing accounts, enabling the transfer of stolen money. These fraudsters offer tempting incentives, promising monthly commissions of approximately Rs 50,000. Recently, the Kerala police exposed a similar cyber scam, and arrested individuals who sold their bank accounts to cybercriminals. Worryingly, such accounts serve not only as conduits for stolen funds but can also be exploited for terrorism-related activities, posing a grave threat to national security. This investigation underscores the urgent need for stricter regulations and increased public awareness to counter this escalating menace. Moreover, the alarming ease with which fraudsters claim to obtain sensitive information from banks highlights a critical weakness in banking security systems. Strengthening authentication protocols is imperative to curb such fraud. Safeguarding personal data has never been more crucial, as designs of these fraudsters have far-reaching and devastating consequences for both individuals and society.