School dropout built AI scam network, arrested
A school dropout from Kanpur, Uttar Pradesh, created an AI-powered fraud network enabling scams worth over Rs 64 crore across India before being detected by the Surat City Cyber Crime Cell. Rohit Virendrasinh Shakya, who left school after Class 11, was arrested at a hotel in Kanpur. Police say he taught himself to code and became an expert programmer by age 16.
Shakya is accused of using AI tools and Telegram channels to make fake Android apps that looked like real banking and Government apps. Investigators say he developed two types of apps: a victim app that unsuspecting users installed and an admin app that let fraudsters monitor and steal OTPs, banking details, and other sensitive information in real time. The fake apps closely copied those from banks like SBI, PNB, Axis, ICICI, Union Bank, and UCO Bank, as well as services such as BigBasket, Aadhaar, PM Kisan, and RTO challan payment portals.
He ran a subscription service, charging cybercriminals Rs 15,000 per month to use these malicious apps. The package included regular updates, maintenance, and technical support. He mainly supplied apps to organised groups in Jamtara, Jharkhand, known for cyber fraud, as well as to networks in Haryana and Rajasthan. Most of the distribution and coordination took place through Telegram channels.
The operation was large in scale. Police say Shakya created 121 malicious APK files that were installed on 21,672 mobile phones across India.
Of these, 2,928 devices were fully compromised, resulting in 54,094 fraudulent banking transactions totaling about Rs 64.38 crore. Most cases involved fake RTO challan payment apps, followed by fake SBI and PNB apps.
The investigation started in May 2026 when a Surat resident lost `5 lakh. The victim got a malicious file on WhatsApp, installed it, and saw his money transferred to a Union Bank account. He quickly called the national cyber helpline 1930, which led Surat police to file an FIR and begin their investigation. Digital forensics on two mobile phones and a laptop revealed the full scale of the fraud.
Surat Police are continuing their investigation to identify other groups using Shakya’s software and anyone else involved. If you download apps from official stores, make sure to check app permissions and report any suspicious messages right away by calling 1930.
