Delhi Police bust cyber fraud syndicate under Cy-Hawk 5.0, block ₹9 lakh withdrawal
Synopsis
A bank alert in Jasola set off a chain of events that exposed an inter-state cybercrime syndicate stretching from Delhi to Mumbai. Five arrests, ₹9 lakh blocked, and a money trail that investigators say could top ₹10 crore — all tied to a CEO impersonation scam that drained a private company of ₹10.40 crore in under two weeks.
Key Takeaways
Delhi Police busted a cybercrime syndicate on 17 June 2026 under the Cy-Hawk 5.0 operation at PS Sarita Vihar, southeast Delhi .
Five accused — Vikash, Vansh, Faiyaz Alam, Amit, and Balvir Kumar — all Delhi residents, were arrested; several others remain absconding.
Approximately ₹9 lakh in suspected fraud proceeds was prevented from being withdrawn.
The syndicate is linked to a ₹10.40 crore CEO/WhatsApp impersonation fraud in Mumbai involving 63 transactions between 3–15 June .
The total financial trail under scrutiny may exceed ₹10 crore , suggesting a multi-state organised network.
The operation was triggered by an alert from the Branch Manager of IDFC FIRST Bank, Jasola .
Delhi Police's PS Sarita Vihar in southeast Delhi on Wednesday, 17 June 2026, dismantled an organised cybercrime syndicate operating on a commission-based model for withdrawing fraudulent funds, arresting five accused and preventing the withdrawal of approximately ₹9 lakh suspected to be proceeds of cyber fraud. The operation was conducted under the Cy-Hawk 5.0 framework, a targeted police initiative against cybercrime networks.
How the Operation Unfolded
The crackdown was triggered by an alert from the Branch Manager of IDFC FIRST Bank, Jasola, who flagged suspicious activity. Acting swiftly, the Sarita Vihar police team registered FIR No. 297/2026 under Sections 318(4), 338, 340(2), and 3(5) of the Bharatiya Nyaya Sanhita (BNS). The operation was led by Inspector Yudhveer Singh, Sub-Inspectors Vaibhav Singh and Satish Bhati, Head Constable Nitesh, and Constables Om Parkash and Manish, under the supervision of ACP Anil Sharma and the overall guidance of Additional DCP-II, South-East District, Jasbir Singh.
Link to Mumbai's ₹10.40 Crore CEO Fraud
Investigators established a direct link between the Delhi syndicate and a major CEO/WhatsApp impersonation fraud reported in Mumbai, in which ₹10.40 crore was allegedly siphoned from a private company through 63 transactions carried out between 3 June and 15 June. That case is registered as FIR No. 45/2025 at the South Cyber Police Station, Crime Branch, Mumbai, under relevant provisions of the BNS and the Information Technology Act. According to investigators, the financial trail under scrutiny may exceed ₹10 crore, pointing to a larger organised network operating across multiple states.
The Five Accused
The five individuals apprehended are Vikash, 22, Vansh, 21, Faiyaz Alam, 22, Amit, 28, and Balvir Kumar, 23 — all residents of Delhi. Police confirmed that several other members of the syndicate remain at large, and efforts to trace them are ongoing.
Broader Cybercrime Context
This is not an isolated incident. Organised cybercrime groups increasingly employ commission-based cash-out networks — recruiting local operatives to withdraw or transfer funds — making cross-state coordination essential for enforcement. Cy-Hawk 5.0 represents Delhi Police's structured response to this pattern, targeting the financial layer of cybercrime syndicates rather than just the originators.
What Comes Next
Further investigation is underway to identify additional beneficiaries, map the complete money trail, and determine the full scale of the syndicate's operations. Authorities are also coordinating with their Mumbai counterparts given the inter-state dimension of the case.
Point of View
Then laundered via a commission-based cash-out crew in Delhi. Cy-Hawk 5.0 deserves credit for intercepting the financial layer, but five arrests in a syndicate with 'several absconding members' and a trail potentially exceeding ₹10 crore suggests the operation caught the foot soldiers, not the architects. The real measure of success will be whether cross-state coordination with Mumbai's Crime Branch leads investigators upstream to whoever orchestrated the impersonation and directed the transactions.
NationPress
12 Aug 2026
Frequently Asked Questions
What is Cy-Hawk 5.0 and how did it lead to this bust?
Cy-Hawk 5.0 is a Delhi Police operational framework targeting organised cybercrime networks. The bust at PS Sarita Vihar on 17 June 2026 was initiated after an alert from the Branch Manager of IDFC FIRST Bank, Jasola, and was carried out under this framework, resulting in five arrests and the blocking of approximately ₹9 lakh in suspected fraud proceeds.
What is the Mumbai CEO fraud linked to this case?
Investigators linked the Delhi syndicate to a CEO/WhatsApp impersonation fraud in Mumbai in which ₹10.40 crore was allegedly siphoned from a private company through 63 transactions between 3 June and 15 June. That case is registered as FIR No. 45/2025 at the South Cyber Police Station, Crime Branch, Mumbai.
Who are the five accused arrested in the Delhi cyber fraud case?
The five accused are Vikash (22), Vansh (21), Faiyaz Alam (22), Amit (28), and Balvir Kumar (23), all residents of Delhi. They were allegedly involved in commission-based withdrawal of fraudulent funds on behalf of the syndicate. Several other members remain absconding.
How much money is under scrutiny in this cybercrime investigation?
According to investigators, the financial trail currently under scrutiny may exceed ₹10 crore, indicating the possibility of a larger organised cybercrime network operating across multiple states beyond the ₹9 lakh blocked in Delhi.
What charges have been filed in the Delhi cyber fraud case?
An FIR has been registered as FIR No. 297/2026 at PS Sarita Vihar under Sections 318(4), 338, 340(2), and 3(5) of the Bharatiya Nyaya Sanhita (BNS). Further investigation is ongoing to identify additional beneficiaries and map the full money trail.
