NCCIA busts two members of international phishing syndicate

LAHORE, Jul 21 (APP): Punjab National Cyber Crime Investigation Agency (NCCIA) has busted a notorious international cyber fraud syndicate involved in large-scale online financial scams targeting citizens in Pakistan and several other countries, arresting two of its key members.

According to the NCCIA spokesperson on Tuesday, the operation exposed a highly organised cybercrime network that used sophisticated phishing infrastructure, fake digital platforms and advanced cyber technologies to steal victims’ banking credentials, social media accounts, one-time passwords (OTPs) and other sensitive digital information before carrying out financial fraud worth millions of rupees.

Initial investigations revealed that the suspects had developed an advanced phishing infrastructure known as Tycoon2FA, through which they created more than 96,000 phishing applications, fake accounts and fraudulent links. The infrastructure was allegedly supplied to cybercriminals operating in Pakistan as well as North America, South America, Central Asia and Europe to facilitate large-scale online financial fraud.

Investigators found that the suspects operated the network through Telegram and other encrypted online platforms. They allegedly designed fake banking websites and web pages resembling those of well-known companies and government institutions before sending phishing links to victims via email, SMS and WhatsApp. Once victims entered their usernames, passwords, banking details or OTPs, the information was instantly transmitted to the suspects, enabling them to withdraw funds or gain complete control of the victims’ bank accounts.

The investigation further revealed that the suspects had allegedly invested proceeds of the cyber fraud in high-value properties in Islamabad. The NCCIA said the properties had been identified and legal proceedings were underway to confiscate them and transfer them into state custody as proceeds of crime.

During coordinated raids in Islamabad, Faisalabad and Sialkot, the agency seized computers, laptops, servers, mobile phones, digital storage devices and other forensic evidence. The spokesperson said the two arrested suspects played a central role in developing and operating the phishing infrastructure, while four other key suspects had fled abroad.

The NCCIA said the process of obtaining Interpol Red Notices against the absconding suspects had been initiated, while liaison with law enforcement agencies in the relevant countries was continuing to secure their arrest.