Therefore, the users would contact the number given in the spoofed website which would eventually connect them to the calls managed by Tomar and his associates.

Once the fraudsters gained access to the victim’s accounts, the fraudsters quickly transferred the victim’s cryptocurrency holdings to crypto currency wallets under their control. The stolen crypto currency would then be sold on various P2P crypto platforms and converted to Indian rupees.

Subsequently the money was transferred in the bank accounts of Tomar, his family members and his associates accounts and used to buy immovable properties.

The agency has cautioned Indian citizens to remain vigilant against phishing scams and fraudulent communications. Such scams aim to steal personal and financial information through fake websites, emails, messages or calls.

The agency said that spoofed web address looks similar to an official site but contains extra letters, symbols, or spelling errors. Legitimate websites use secure connections (https://) and spoofed sites often use http:// or show “Not Secure.” Fake sites may have low-quality images, blurry logos, mismatched fonts, or irregular page layouts.

Pop-ups asking you to download software, share information, or click on links are a red flag.

Official websites never ask for passwords, OTPs, bank details, or Aadhaar numbers through pop-up forms or emails. Internal links on the website does not work, or some pages redirect to unrelated or suspicious sites.

Offers or claims that seem unusually generous or urgent (e.g., “Get free benefits” or “Claim now” or “Get High Returns”) are common phishing tactics. “The total attachment in the case so far stands at Rs. 64.15 crore,” the agency said.