Zero Mule Accounts: Hyderabad Top Cop's Major Push Against Cyber Fraud

Share:
Audio Loading voice…
Zero Mule Accounts: Hyderabad Top Cop's Major Push Against Cyber Fraud

Synopsis

Hyderabad Police Commissioner V.S. Sajjanar has ordered 45 banks to embed 'zero mule accounts' and 'zero cybercrime victims' as formal branch-level KPIs following Operation Octopus — a landmark move that could redefine how Indian banks are held accountable for enabling digital financial fraud.

Key Takeaways

Hyderabad Police Commissioner V.S.
Sajjanar convened a conclave on April 23, 2025 , attended by 75 representatives from 45 banks to combat cyber fraud through mule account elimination.
Operation Octopus , Hyderabad City Police's two-phase cyber fraud crackdown, triggered the meeting after bank officials were arrested for complicity in opening mule accounts.
A twin-challenge KPI framework — targeting zero mule accounts and zero cybercrime victims per branch — has been proposed as a formal performance metric for all bank branches.
Bank employees found complicit with cyber criminals will face blacklisting across the entire banking and financial services ecosystem , alongside forensic audits of flagged KYC verifiers.
Advanced tools including Mule Hunter must be adopted by banks for real-time detection and prevention of mule account activity.
Cyber fraud syndicates behind these networks operate primarily from Cambodia, Vietnam, and the UAE , relying on insider banking complicity to steal funds from Indian victims.

Hyderabad Police Commissioner V. S. Sajjanar on Thursday, April 23, convened a high-level conclave of senior banking officials in Hyderabad, issuing a firm directive to eliminate mule accounts and dramatically curb cyber fraud losses affecting Indian citizens. The meeting brought together 75 representatives from 45 public and private sector banks and marked a decisive escalation in the city police's war against organised digital financial crime.

Operation Octopus: The Trigger Behind the Conclave

The conclave was convened in the direct aftermath of Operation OctopusHyderabad City Police's coordinated two-phase crackdown designed to dismantle organised cyber fraud networks operating across India. The operation resulted in the arrest of several bank officials found potentially complicit in the opening of mule accounts, sending a strong signal that insider banking collusion would no longer be tolerated.

The meeting was co-chaired by Additional Commissioner of Police (Crimes & SIT) M. Srinivasulu and attended by Reserve Bank of India Regional Director Chinmoy Kumar, underscoring the multi-institutional seriousness of the threat.

Twin-Challenge Framework and New KPI Mandate

Commissioner Sajjanar proposed a twin-challenge framework that would fundamentally reorient bank branch priorities — shifting focus away from account-opening volume targets and towards citizen safety and institutional integrity. He strongly advocated embedding both challenges as formal Key Performance Indicators (KPIs) at the branch level.

Branches achieving compliance with these KPIs are to be formally recognised and rewarded by senior bank management. Conversely, branches that continue to prioritise account-opening numbers over due diligence will be identified as primary entry points for fraud networks.

"No mule account should be opened at the branch. Strict KYC compliance, enhanced due diligence, and real-time monitoring are the operational requirements underlying this target," Sajjanar stated at the conclave.

Zero Tolerance Policy: What Banks Are Now Expected to Do

The Commissioner outlined a comprehensive set of directives for all participating banks. Every institution must adopt a zero tolerance policy towards cybercrime at every organisational level — from frontline staff to senior management.

Branch-level KPIs must incorporate monitoring of NCRP (National Cybercrime Reporting Portal) complaints directly linked to the branch, with proactive remediation expected as a standard operating procedure. Bank staff must also demonstrate empathy towards cyber fraud victims and actively guide them to the national helpline 1930 and the portal cybercrime.gov.in.

Advanced technological tools — including solutions such as Mule Hunter — must be adopted to detect and prevent mule account activity in real time. Banks were also instructed that customers seeking to prematurely close Fixed Deposits must be proactively cautioned and verified, particularly where fund transfers are involved, to intercept cyber fraud as it unfolds.

Strict Action Against Complicit Bank Officials

Commissioner Sajjanar made it unequivocally clear that strict disciplinary action must be taken against KYC verifiers found involved in fraudulent account openings. This must be accompanied by periodic forensic audits of accounts opened by flagged officials.

Any bank employee found complicit with cyber criminals is to be blacklisted across the entire banking and financial services ecosystem — a sweeping consequence that signals a new era of accountability for India's banking sector.

Transnational Cyber Fraud Networks: The Bigger Picture

Sajjanar provided a detailed briefing on the operating methods of cyber fraud syndicates currently active across India. These networks are primarily headquartered in countries including Cambodia, Vietnam, and the UAE, and engage intermediaries within India to procure bank accounts by colluding with bank officials — particularly KYC verifiers — to facilitate the siphoning of funds from Indian victims.

This transnational dimension is critical context. India has seen a sharp rise in cyber fraud cases routed through Southeast Asian crime hubs, with the Ministry of Home Affairs reporting thousands of crores lost annually to digital financial fraud. The Hyderabad model — combining law enforcement crackdowns like Operation Octopus with institutional reform through banking KPIs — could serve as a national blueprint.

Notably, the RBI's presence at this conclave signals that India's banking regulator is now actively aligned with law enforcement on the mule account crisis — a convergence that could accelerate regulatory action at the national level. With Hyderabad Police setting a measurable, data-linked accountability standard for branches, other metropolitan police forces and state governments are likely to watch closely and potentially replicate this model.

As Operation Octopus continues and its findings are processed through the judicial system, further arrests — including of more bank insiders — remain a strong possibility. The banking sector now faces a moment of reckoning: adapt to the new accountability framework or face both legal consequences and reputational damage in one of India's most digitally active cities.

Point of View

Enabled by KYC verifiers who treat fraud facilitation as a side income. Commissioner Sajjanar's move to link branch performance metrics to cybercrime complaint data is precisely the kind of systemic accountability that the RBI and MHA have historically failed to enforce. The irony is stark — banks that pride themselves on financial inclusion targets have inadvertently become the infrastructure of exclusion for fraud victims. If this KPI model scales nationally, it could do more to curb cyber fraud than a dozen awareness campaigns.
NationPress
1 May 2026

Frequently Asked Questions

What is a mule account and why is it dangerous?
A mule account is a bank account opened or used by an intermediary to receive and transfer stolen funds on behalf of cyber criminals. These accounts are dangerous because they obscure the money trail, making it harder for law enforcement to trace and recover funds stolen from fraud victims.
What is Operation Octopus by Hyderabad City Police?
Operation Octopus is a two-phase coordinated initiative by Hyderabad City Police to dismantle organised cyber fraud networks operating in India. The operation led to the arrest of bank officials found potentially complicit in opening mule accounts for fraud syndicates.
What new rules has Hyderabad Police set for banks to prevent cyber fraud?
Hyderabad Police Commissioner V.S. Sajjanar has directed banks to embed 'zero mule accounts' and 'zero cybercrime victims' as formal KPIs at the branch level. Banks must also adopt real-time monitoring tools like Mule Hunter, conduct forensic audits of flagged officials, and blacklist any employee found complicit with cyber criminals.
Which countries are cyber fraud syndicates targeting Indian banks from?
According to the Hyderabad Police briefing, cyber fraud syndicates targeting Indian victims are primarily headquartered in Cambodia, Vietnam, and the UAE. They recruit Indian intermediaries who collude with bank officials — particularly KYC verifiers — to procure accounts used to siphon funds.
What should I do if I am a victim of cyber fraud in India?
Victims of cyber fraud in India should immediately call the national helpline number 1930 and file a complaint on the official portal cybercrime.gov.in. Prompt reporting increases the chances of freezing fraudulent transactions and recovering lost funds.
Nation Press
Google Prefer NP
On Google