Global Trends

External Affairs Minister S. Jaishankar signed the UN Convention against Cybercrime on the sidelines of UNGA 81. India’s domestic cybercrime architecture — I4C, TAU, NCRP, CFCFRMS, Sahyog and related platforms — already maps closely to the Convention’s criminalization, evidence, cooperation and victim-support pillars; ratification is still required for entry into force as a State Party.

CBI has arrested Ankit Satishchandra Pandey, a key accused in a transnational cyber fraud case in which illegal call centres in Ahmedabad allegedly defrauded U.S. nationals of more than US$ 7.21 million since 2024 by impersonating U.S. federal agencies over VoIP and coercing victims into cash and gold handovers.

India ordered Google to block 216 Firebase Realtime Databases in a single day via five I4C notices dated 20 September, the largest one-day Firebase takedown disclosed so far. Criminals misuse free Firebase projects as C2 for Android banking malware and OTP theft. Notices went through the Sahyog Portal under IT Act Section 79(3)(b).

Oxygen Forensics markets itself as having a presence in over 150 countries having among nearly 10,000 customers

CBI arrested Abhishek Kumar, a wanted kingpin in the Mahadev Online Betting App case, on arrival from Dubai at Hyderabad’s RGIA on 24 September 2026. He allegedly ran Mahadev Book operations, coordinated panels and acquired Dubai assets from betting proceeds. India has also hardened rules under the Promotion and Regulation of Online Gaming Act, 2025, banning online money games.

Pakistan’s NCCIA Lahore Circle raided an illegal call centre and arrested nine suspects, including two masterminds. Investigators seized eight laptops, eight Android phones, nine mobile phones and one computer system. The agency announced the crackdown via its official X account on 24 September 2026.

Kerala Police CCSE arrested 8 people in statewide Operation P-Hunt 26.3 against online CSEAM, starting 7:00 AM IST on 21 September 2026. Officers registered 135 FIRs, confiscated 212 electronic devices including mobiles, and generated 9 SBR reports. The drive reflects India’s strong stance on CSEAM; Meta and Google have agreed to report such material directly to Indian authorities in a first-of-its-kind arrangement.

According to the spokesperson, the operation led to the recovery of 306 mobile phones, 383 computers, CPUs, 299 monitors and laptops. The authorities declared the call centre building a sub-jail and kept all the detainees there.

Mongolia is seeing a smishing wave that impersonates SmartCar (smartcar.mn). Fake SMS messages claim an unpaid traffic fine, push a 24-hour deadline and a 10× penalty threat, then send victims to https://zqyzn.com/mn/ to steal bank usernames, passwords and OTPs. TV5 Mongolia has marked the message as false information.

The Singapore Police Force has warned of a renewed phishing scam that uses fake SPF-branded browser pop-ups to claim devices are locked for illegal browsing, then pressure victims into paying purported fines and handing over bank card details.

NCCIA Karachi has dismantled an international scam call centre at Business Avenue, Shahrah-e-Faisal, arresting 27 suspects — including alleged owners Ali Siddiqui, Fawad Ahmed and Farooq — accused of impersonating US banks and debt-settlement agencies to defraud foreign nationals.

Delhi Police announced the arrest of 23 people running illegal international call centers in West Delhi that impersonated Apple and Microsoft tech support to scam victims in the USA and Canada using social engineering.