ED raids 7 locations in Rajasthan, Punjab over SIM fraud linked to Malaysian nationals
Synopsis
Over 36,000 Indian SIM cards were allegedly activated by POS vendors in Rajasthan and routed to Malaysian nationals, then operated from Cambodia to defraud victims across India of hundreds of crores. The ED's raids across seven locations have now exposed a transnational fraud network with 30 bank accounts and properties already under the scanner.
Key Takeaways
The ED, Jaipur Zonal Office raided 7 locations in Kishangarh , Nagaur , Jodhpur , and Ludhiana on 5 June 2025 .
Of 2.3 lakh mobile numbers analysed, around 36,000 SIM cards were found active in Cambodia ; approximately 5,300 were linked to cyber fraud cases.
Financial losses from the fraud allegedly run into hundreds of crores of rupees .
Seven individuals — including Rahul Kumar Jha , Mohammad Sharif , Sandeep Bhatt , and four SIM vendors — are under investigation.
Telecom POS IDs of Airtel , Jio , and Vodafone Idea were allegedly misused to activate SIM cards.
Around 30 bank accounts and multiple movable and immovable properties have been identified and are under scrutiny.
The Directorate of Enforcement (ED), Jaipur Zonal Office, conducted search operations at seven locations across Kishangarh (Ajmer), Nagaur, Jodhpur, and Ludhiana (Punjab) on 5 June 2025, targeting a sprawling cyber fraud and money laundering network allegedly involving Malaysian nationals and Indian SIM card vendors. The raids were conducted under the provisions of the Prevention of Money Laundering Act (PMLA), 2002.
How the Fraud Allegedly Operated
According to the ED, the investigation originated from an FIR registered at the Cyber Police Station, DCP (Crime), Jodhpur, concerning the misuse of SIM cards by Point of Sale (POS) vendors. Investigators allege that thousands of Indian mobile numbers were activated fraudulently and subsequently operated from Cambodia to carry out cybercrime activities across multiple Indian states.
An analysis of nearly 2.3 lakh mobile numbers revealed that approximately 36,000 SIM cards were active in Cambodia. Of these, around 5,300 numbers were allegedly linked to cyber fraud cases, with financial losses reportedly running into hundreds of crores of rupees.
Key Accused and Their Alleged Roles
Evidence gathered during the searches allegedly implicates Rahul Kumar Jha, Mohammad Sharif, and Sandeep Bhatt as acting in collusion with SIM vendors Ashok Bheel, Ramavatar Rathi, Haresh Malakar, and Hemant Panwar. The group is accused of supplying hundreds of SIM cards to Malaysian nationals.
The vendors allegedly exploited the POS IDs of telecom operators Airtel, Jio, and Vodafone Idea (Vi) to issue and activate SIM cards. Unsuspecting individuals were reportedly targeted under the pretext of porting existing numbers or issuing new connections — a tactic that obscured the fraudulent activation trail.
What Was Seized and Traced
The ED said incriminating documents and materials were seized during the raids. Authorities have also identified approximately 30 bank accounts and traced various movable and immovable properties linked to the accused individuals.
Broader Context and What Comes Next
This case is part of a wider pattern of SIM-box fraud operations where Indian mobile numbers are bulk-activated and routed overseas for use in financial scams targeting domestic victims. The Cambodia connection is notable — the country has emerged as a hub for cyber fraud operations targeting South and Southeast Asian victims, according to multiple law enforcement agencies. Further investigation into the case is underway, the ED said.
Point of View
Apparently, bulk-activate numbers with limited oversight. The Cambodia angle is not incidental; it reflects an established transnational fraud corridor that Indian law enforcement has flagged repeatedly without a systemic fix. The ED's identification of 30 bank accounts suggests proceeds were layered domestically before moving offshore, which points to a money-mule network that likely extends beyond the seven named accused. The real question is whether telecom operators face any regulatory accountability for the misuse of their POS infrastructure — something neither the ED statement nor the originating FIR appears to address.
NationPress
5 Aug 2026
Frequently Asked Questions
What is the ED cyber fraud case involving Malaysian nationals?
The ED is investigating a case where Indian SIM cards were allegedly obtained fraudulently by POS vendors in Rajasthan and supplied to Malaysian nationals, who then operated them from Cambodia to commit cyber fraud across India. Financial losses are reportedly in the hundreds of crores of rupees.
Where did the ED conduct raids and when?
The ED raided seven locations across Kishangarh (Ajmer), Nagaur, Jodhpur, and Ludhiana (Punjab) on 5 June 2025, under provisions of the Prevention of Money Laundering Act (PMLA), 2002.
How many SIM cards were involved in the fraud?
Out of nearly 2.3 lakh mobile numbers analysed, approximately 36,000 SIM cards were found active in Cambodia. Of these, around 5,300 numbers were allegedly linked to specific cyber fraud cases.
Who are the accused in the case?
The ED has named Rahul Kumar Jha, Mohammad Sharif, and Sandeep Bhatt as allegedly colluding with SIM vendors Ashok Bheel, Ramavatar Rathi, Haresh Malakar, and Hemant Panwar to supply SIM cards to Malaysian nationals.
Which telecom operators were allegedly misused?
The accused vendors allegedly exploited POS IDs of Airtel, Jio, and Vodafone Idea (Vi) to issue and activate SIM cards that were subsequently diverted to Malaysian nationals.
