On October 27, 2025, hackers stole INR 490 million from the Moneyview app within three hours, breaching its Application Programming Interface (API) – the digital link that connects apps with banks and servers. Bengaluru’s Central Crime Branch (CCB) revealed that an international syndicate operating from Dubai, China, Hong Kong, and the Philippines exploited the app’s API key to divert funds into 653 fake and mule accounts. The operation was allegedly masterminded by an Indian-origin man in Dubai, using virtual private servers (VPS) rented through Ismail Attar of Belagavi, each linked to France-based IPs. The CCB arrested Attar and a Maharashtra resident named Patel, who owned one of the mule accounts, and froze about INR 100 million. Laptops and pen drives were seized, and police are pursuing suspects in Dubai and Hong Kong.
Just four days earlier, Rajasthan Police dismantled an inter-state cybercrime network siphoning money from government welfare schemes in Jhalawar District. Thirty suspects, including mastermind Ramavatar Saini, were arrested. Authorities recovered INR 5.2 million in cash, luxury cars, biometric devices, SIM cards, and documents tied to over 11,000 bank accounts. The gang had manipulated portals such as PM-Kisan Samman Nidhi and the Disaster Management Information System, diverting 50 to 75 per cent of welfare funds.
The Union Ministry of Home Affairs reported on October 8, 2025, that cyber security incidents in India more than doubled from 1.03 million in 2022 to 2.27 million in 2024, underscoring the growing scale and sophistication of digital threats. With around 806 million internet users-second only to China-and internet access in over 86 per cent of households, India’s rapid digitalisation has created vast opportunities but also immense vulnerabilities.
The most common cybercrimes include hacking, malware and ransomware attacks, phishing, online fraud, identity theft, and data breaches. The dark web amplifies these risks by facilitating the trade of stolen data, weapons, drugs, and hacker-for-hire services. Newer threats – AI-generated fraud, deepfakes, UPI scams, sextortion, and Distributed Denial of Service attacks – are spreading rapidly, often originating from gamers or small groups testing cyber weapons.
Cyberattacks today stem from both individual hackers and organised crime groups such as REvil, as well as state-sponsored actors. Criminals increasingly target online gaming and betting platforms, illegal crypto exchanges, and financial apps. Many operations rely on networks of shell companies and mule accounts to launder money, converting proceeds into cryptocurrency and moving them across borders. Critical sectors such as finance, healthcare, telecommunications, and energy have also been found to be particularly vulnerable.
Some cases blur the line between cybercrime and national security. In June 2025, a Navy clerk in Rajasthan’s Jaipur District was arrested for receiving cryptocurrency payments to spy for Pakistan’s Inter-Services Intelligence. Investigators linked his transactions to illegal crypto channels already being probed.
Equally alarming is the human dimension of cybercrime. The border town of Myawaddy in Myanmar has emerged as the epicentre of “cyber slavery compounds,” fortified enclaves run by Chinese syndicates and protected by local militias like the Karen Border Guard Force. Thousands of foreign nationals – including an estimated 2,000 Indians – are trapped there, coerced into running global online scams that generate billions of dollars annually. These rackets have flourished amid Myanmar’s post-coup lawlessness, where armed groups operate with impunity.
In March 2025, India’s Ministry of External Affairs confirmed the rescue of nearly 300 Indian nationals from such compounds across Myanmar, with over 540 more repatriated via Thailand in subsequent phases. Parallel operations led to the return of 5,400 Chinese suspects to China as part of a joint crackdown by Myanmar, China, and Thailand. Similar scam hubs now proliferate in Cambodia, Laos, and Thailand, luring young IT graduates and unemployed youth from Indian states such as Maharashtra, Telangana, Andhra Pradesh, Gujarat, and Kerala, with fake job offers. The United States, the United Kingdom, and other nations have imposed sanctions on a Cambodia-based network orchestrating large-scale online scams. At the individual level, protection begins with simple cyber hygiene – using strong and unique passwords via trusted password managers, enabling two-factor authentication, avoiding suspicious links or attachments, updating software regularly, and employing antivirus tools and VPNs on public Wi-Fi. Yet cybersecurity has evolved far beyond personal responsibility. It is now a national and global imperative.
On October 25, 2025, 72 countries, including India, signed the United Nations Convention Against Cybercrime – the first global agreement for cross-border cooperation in investigating digital offences and exchanging electronic evidence. But treaties alone cannot stem the tide. Effective defence requires a proactive, prevention-first approach that integrates security systems across institutions and sectors.
As cybercriminals deploy artificial intelligence, automation, and advanced obfuscation techniques, governments and corporations must respond in kind. The future of cybersecurity will depend not only on technology but on international coordination, real-time intelligence sharing, and public awareness. The digital revolution that empowered billions now demands an equally determined global coalition to defend it.
