International Cyber fraud gang busted, two suspects arrested

International Cyber fraud gang busted, two suspects arrested

LAHORE: Pakistan’s National Cyber Crime Investigation Agency (NCCIA) Punjab has dismantled a major international cyber fraud network and arrested two key suspects allegedly involved in a sophisticated phishing operation targeting victims in Pakistan and several countries around the world.

The operation took place under the special instructions and direct supervision of Punjab Director Operations Muhammad Ali Waseem. Investigators say the gang used advanced phishing infrastructure, fake digital platforms and deceptive online links to steal sensitive information from thousands of people and facilitate financial fraud worth millions of rupees.

According to preliminary findings, the suspects developed and operated an advanced phishing infrastructure known as **Tycoon2FA**. Investigators believe the network created more than **96,000 phishing applications, fake accounts and fraudulent links**. The gang allegedly supplied this infrastructure to cybercriminals operating in Pakistan, North and South America, Central Asia and various European countries.

The investigation revealed that the suspects used Telegram and other covert online platforms to manage their operations and communicate with other cybercriminals. They allegedly created fake banking websites and fraudulent web pages that closely imitated well-known companies, financial institutions and government departments.

The suspects then distributed malicious links through emails, SMS messages and WhatsApp. When victims clicked on these links and entered usernames, passwords, banking details or one-time passwords (OTPs), the attackers allegedly gained immediate access to the information. The criminals could then use the stolen credentials to withdraw money from bank accounts or take control of victims’ digital accounts.

Investigators have also traced suspected proceeds of the cyber fraud to valuable properties in Islamabad. According to the NCCIA, the suspects allegedly purchased these properties using money obtained through illegal cyber activities. Authorities have identified the properties and started legal proceedings to seize the suspected criminal assets and bring them under government control.

During coordinated raids in **Islamabad, Faisalabad and Sialkot**, NCCIA teams recovered computers, laptops, servers, mobile phones, digital storage devices and other electronic evidence. Investigators are examining the seized equipment to determine the full scale of the network and identify additional individuals involved in the operation.

The two arrested suspects allegedly played a central role in developing and running the phishing infrastructure. Meanwhile, four other key suspects have reportedly fled abroad. The authorities have initiated the process of seeking **Red Notices through Interpol** to facilitate their arrest and extradition. The NCCIA is also coordinating with law enforcement agencies in the countries where the suspects may have taken refuge.

Punjab Director Operations Muhammad Ali Waseem said the action demonstrates the government’s determination to prevent Pakistan from becoming a safe haven for cybercriminals. He stressed that law enforcement agencies would continue taking action against individuals involved in online fraud and the theft of citizens’ hard-earned money, regardless of their international connections.

Officials also confirmed that the investigation has an international dimension, with technical cooperation now underway with the **Singapore Police** and other relevant agencies. Authorities expect the ongoing investigation to uncover further details about the network’s international operations and financial transactions.

The NCCIA said the investigation remains active and that further arrests and significant revelations could follow as investigators analyze the digital evidence recovered during the raids. The case highlights the growing threat posed by sophisticated phishing networks, which increasingly exploit trusted digital platforms and social engineering techniques to target unsuspecting users and steal their financial and personal information.