Security Bearish 7

Mumbai Immigration Officer Defrauded of Rs 78 Lakh in Sophisticated Crypto Scam

A 41-year-old official at the Malaysian Consulate in Mumbai lost Rs 78.85 lakh to a multi-stage cryptocurrency investment fraud. The scam utilized social engineering on Instagram and WhatsApp, involving a fraudulent trading platform and a complex network of 18 mule bank accounts.

· 3 min read · Verified by 2 sources · By Cyber Intelligence Brief Editorial
Share

Key Takeaways

  • A 41-year-old official at the Malaysian Consulate in Mumbai lost Rs 78.85 lakh to a multi-stage cryptocurrency investment fraud.
  • The scam utilized social engineering on Instagram and WhatsApp, involving a fraudulent trading platform and a complex network of 18 mule bank accounts.

Mentioned

Instagram product WhatsApp product Mayati Gupta person Arjun Singh person Malaysian Consulate organization SEBI organization

Key Intelligence

Key Facts

  1. 1Total financial loss amounted to Rs 78.85 lakh over a three-month period
  2. 2Victim was an immigration staffer at the Malaysian Consulate in Mumbai
  3. 3Funds were laundered through 18 different beneficiary accounts in nationalized banks
  4. 4Initial 'bait' profit of Rs 1.69 lakh was paid out to gain the victim's trust
  5. 5Scam originated on Instagram and migrated to a WhatsApp group named 'EG Plan'
  6. 6Fraudulent trading was conducted via the website www.senxaxaa.com

Who's Affected

Consulate Staffer
personNegative
Nationalized Banks
companyNegative
Cybercrime Police
organizationNeutral

Analysis

The recent defrauding of a 41-year-old immigration staffer at the Malaysian Consulate in Mumbai highlights a sophisticated evolution in 'pig butchering' scams currently targeting high-profile professionals in India. This case is not merely a story of individual loss but a blueprint of how organized cybercriminal syndicates are leveraging social media funnels and the Indian banking infrastructure to siphon large sums of capital with surgical precision. The operation began with a classic social engineering hook on Instagram, which transitioned the victim to a controlled environment on WhatsApp—a tactic designed to build intimacy and bypass the automated fraud detection systems of larger social platforms.

Central to the success of this fraud was the psychological manipulation of the victim through a 'proof of concept' payout. By allowing the complainant to withdraw an initial profit of Rs 1.69 lakh shortly after registering on the fraudulent website, www.senxaxaa.com, the attackers effectively dismantled the victim's skepticism. This 'bait' is a hallmark of modern investment scams, where criminals sacrifice a small amount of capital to secure a much larger 'investment' later. In this instance, that trust led to the transfer of Rs 78.85 lakh over a three-month period between April and June 2024. This period of sustained engagement suggests a high level of confidence by the perpetrators in their ability to maintain the illusion of a legitimate trading platform.

The recent defrauding of a 41-year-old immigration staffer at the Malaysian Consulate in Mumbai highlights a sophisticated evolution in 'pig butchering' scams currently targeting high-profile professionals in India.

The technical and logistical execution of the money laundering phase reveals a deeply entrenched network of mule accounts. The Mumbai police identified that the funds were routed through 18 different beneficiary accounts across various nationalized banks. These accounts were not registered to individuals but to a diverse array of front entities, including construction firms, gem traders, catering services, and travel agencies. This layering technique is specifically designed to frustrate law enforcement efforts; by the time a victim realizes they have been cheated, the money has already been fragmented and moved through multiple layers of the financial system, making recovery nearly impossible without immediate intervention.

What to Watch

Furthermore, the scam reached its 'exit' phase when the victim attempted to withdraw his purported profits on June 20, 2024. The demand for an additional Rs 18 lakh as a 'processing fee' is a common secondary extortion tactic used by these syndicates to squeeze the final remains of a victim's liquidity. The delay in reporting the crime—driven by the victim's fear of social embarrassment and professional stigma—is a critical factor that benefits the attackers. In the cybersecurity landscape, the 'time-to-report' is often the difference between freezing funds and a total loss. The victim's eventual outreach to the national cybercrime helpline underscores the importance of centralized reporting mechanisms, yet it also highlights the need for better public awareness to reduce the stigma associated with falling for such sophisticated schemes.

Looking ahead, this incident serves as a stark warning for the financial sector and regulatory bodies like SEBI. The ease with which 18 different bank accounts were utilized for fraudulent transfers suggests a systemic vulnerability in the Know Your Customer (KYC) and Anti-Money Laundering (AML) monitoring of nationalized banks. As cybercriminals continue to refine their social engineering tactics and exploit the speed of digital banking, the industry must move toward real-time anomaly detection that can flag suspicious 'layering' patterns before the funds are withdrawn from the banking ecosystem entirely.

Timeline

Timeline

  1. Capital Infusion

  2. Initial Contact

  3. Platform Registration

  4. The Exit Scam

Sources

Sources

Based on 2 source articles

Cite This Page

"Mumbai Immigration Officer Defrauded of Rs 78 Lakh in Sophisticated Crypto Scam." Cyber Intelligence Brief, February 19, 2026. https://getcyberbrief.com/story/mumbai-immigration-officer-crypto-fraud-78-lakh

Related Stories

Security

TSMC’s $100B US bet: a $22B profit propels chip supply chain security

By channeling a record $22B profit into a $100B Arizona expansion, TSMC is fortifying the semiconductor supply chain against geopolitical and cyber threats, reducing the risk of a single-point-of-failure on Taiwan.

Security

Sentra’s $50M Bet: Small AI Models Secure Data Classification

Sentra’s use of small language models that run locally could revolutionize data classification by eliminating the need to export sensitive data, slashing costs and privacy risks while maintaining high accuracy. This shift, backed by $50M in fresh funding, promises stronger data protection without breaking security budgets.

Security

Keeper Security hits $225M ARR as identity becomes the new security perimeter in AI era

Keeper’s AI-native identity security platform reaches $225M ARR, underscoring the urgent need to secure non-human identities and privileged access as AI agents proliferate.

Security

ODNI Purge: Hundreds of Firings Threaten Cyber Threat Intelligence

The mass dismissal of ODNI staff, likely including personnel from the National Counterintelligence and Security Center, could degrade the U.S. government’s ability to track foreign cyber threats and share crucial threat intelligence with the private sector. The purge raises fears of a brain drain in counter-cyber espionage at a critical time.

How we covered this story

Every story in our cybersecurity coverage is assembled from multiple primary sources, cross-referenced for factual consistency, and scored along three independent dimensions: sentiment, operational impact, and source-cluster confidence. Single-source rumors and unverifiable claims do not pass our editorial gate. When a story shows "Verified by N sources" with N≥2, the development is independently corroborated; when N=1, we mark it explicitly so readers can weigh the signal accordingly.

Impact scoring uses a 1-10 scale weighted toward regulatory, financial, and operational consequence rather than coverage volume. A topic that runs in every outlet but moves no real decisions ranks lower than a niche regulatory filing that reshapes how operators in the cybersecurity space have to behave. Read our full methodology for the scoring rubric, our glossary for term definitions, and our trends index for the longitudinal view across the beat.

Sources are only linked to a story once they clear our classification pipeline at a minimum 35 percent relevance threshold. According to that methodology, reviewed July 2026, this follows multi-source corroboration standards recommended by journalism research bodies such as the Reuters Institute for the Study of Journalism.

See something wrong in this story — a wrong fact, a broken source link, a misattributed entity? Report a data issue.

Signal on this pageWhat it tells you
Verified by N sourcesIndependent corroboration count. N≥2 is our confidence floor; N=1 is marked explicitly.
Impact score (1-10)Regulatory + financial + operational weight. 8+ signals an experienced-operator action item.
SentimentFive-tier classification trained on labeled cybersecurity-specific corpora.
TimelineWhere applicable, the related-events sequence that contextualizes today's development.