Background and Timeline: The Jodhpur Cybercrime Unit announced a critical breakthrough on Wednesday, February 4, 2026, involving the dismantling of a global hardware supply chain. The investigation was triggered by a high-value fraud case in Telangana where a victim lost ₹8.9 crore to a single scheme. Investigators traced the technical origin of the scam to a specific retail outlet in Ludhiana, Punjab, which was acting as a feeder for offshore mafias.
Modus Operandi: The accused utilized a “Double-Click Deception” at his telecommunications retail outlet to source active SIM cards illegally. When customers arrived for a new plan, the retailer would claim a biometric failure and photograph them twice, using the dual credentials to activate two separate SIM cards simultaneously. One card was given to the customer, while the second was diverted to a Chinese cyber mafia based in Cambodia for use in fraudulent calling and messaging campaigns.
Victims and Financial Impact: The retailer is accused of arranging at least 200 SIM cards for the Cambodian syndicate in 2024 alone, facilitating frauds worth an estimated ₹1,100 crore. Many of the victims were completely unaware that their identity documents had been used to power international crime rings. The financial toll on individual victims has been devastating, as seen in the ₹8.9 crore Telangana case which was enabled by the retailer’s hardware.
Investigation and Agencies Involved: Jodhpur Police Inspector Suresh Saran led the cross-border technical probe, coordinating with the Ludhiana Commissionerate. The investigation involved an audit of the retailer’s KYC logs and the technical fingerprints of the SIM cards roaming in Southeast Asia. Authorities found that the accused was a repeat offender who was already out on bail for an identical fraud scheme previously investigated by the Uttarakhand police.
Arrests and Suspects: One key suspect was arrested in Ludhiana: 27-year-old Sandeep Bhatt, a local telecommunications retailer. Bhatt is the sixth person arrested in connection with the wider ₹1,100-crore international nexus. He has been remanded to custody as investigators work to identify the specific “transporters” who physically moved the activated SIM cards from Ludhiana to Cambodia.
Broader Implications and Trends: This arrest exposes the “Interconnect Bypass Fraud” model where domestic retailers are the primary weak link in India’s cyber-sovereignty. It underscores the urgent need for a “One-Identity-One-SIM” audit where users are notified every time a SIM is activated against their Aadhaar. Authorities cautioned that handing over identity documents to unverified third-party retailers can inadvertently turn citizens into accessories to global syndicates.