CBI arrests Airtel distributor in Bihar SIM Box cyber fraud probe

The Enforcement Action

The Central Bureau of Investigation (CBI) has arrested an Airtel area distributor in Bihar in its investigation into an illegal SIM Box operation that, the agency says, was used to carry out cyber-enabled frauds. In a press release dated 12 September 2026, the CBI said it had searched 10 locations in Vaishali district of Bihar and Jagatsinghpur district of Odisha and arrested one person.

According to the CBI, the arrested man is the area distributor of Airtel for Mahua in Vaishali, held for his alleged role in issuing a large number of SIM cards fraudulently and passing them on for use in illegal SIM Box operations. The release identifies him only by that role, and this report does the same.

The CBI says the searches turned up incriminating material in digital devices, and that mobile phones, laptops and SIM cards were seized. It links the wider operation to more than 1,300 SIM cards and at least 73 cybercrime cases across India, including 'Digital Arrest' cases. The release states no monetary figure and no case registration number.

The release does not describe the telecom operator itself as an accused. It records no response from the arrested distributor, and none was reported in the coverage that surfaced this story.

How the Scheme Worked

The CBI's account begins with an illegal SIM Box operation detected in Supaul district of Bihar last year. More than 1,300 SIM cards were found in the house where the SIM Box was being operated, according to the release, and the Government of Bihar later transferred the case to the CBI. The release does not describe the equipment; The Pioneer, whose report surfaced the case, describes SIM boxes as a way to route large numbers of calls while hiding the caller's location and identity.

The CBI says it analysed data on those SIM cards and identified some suspected Points of Sale, the retail outlets through which SIM cards are issued. The bulk of the cards, it found, had been issued from Bihar and Odisha. More than 700 of them, the agency alleges, were issued by the Airtel area distributor, who is accused of misusing the credentials of more than a dozen Points of Sale in Vaishali district.

Many subscribers told investigators they had no idea a SIM card had been issued in their name. According to the CBI, this was done in one of two ways: people who went to a SIM card provider for a genuine purpose were deceived into authenticating themselves several times for e-KYC, or biometric data collected from them for some other purpose was misused.

The CBI says the data it collated indicates that the SIM Box operation was connected to at least 73 cybercrime cases across India, including cases that followed the 'Digital Arrest' modus operandi. In sequence, the matter has moved from detection in Supaul, to the case's transfer to the CBI, to analysis of the SIM data, and now to searches in two states and one arrest. The release does not mention a chargesheet.

The Law Invoked

The CBI says it is investigating the case, after its transfer by the Government of Bihar, for offences of cheating, forgery and extortion under the Bharatiya Nyaya Sanhita (BNS), identity theft and computer-related offences under the Information Technology Act, and other offences under what the release calls the Telecommunication Act 2022. The offences are listed for the case as a whole; the release gives no section numbers and does not say which are alleged against the arrested distributor.

In plain terms:

• Cheating (BNS): deceiving a person and thereby dishonestly inducing them to hand over property, or to do or omit something they otherwise would not, in a way that harms or is likely to harm them.
• Forgery (BNS): making a false document or electronic record with intent, among other things, to cause damage, support a claim or commit fraud.
• Extortion (BNS): intentionally putting a person in fear of injury to dishonestly induce them to deliver property.
• Identity theft (IT Act): fraudulently or dishonestly using another person's electronic signature, password or other unique identification feature.
• Computer-related offences (IT Act): dishonestly or fraudulently accessing, copying data from, damaging or disrupting a computer system without permission, among other acts.
• Telecom law: the release names no provisions; the Department of Telecommunications' caution on SIM misuse, discussed below, cites the Telecommunications Act, 2023.

The BNS, which replaced the Indian Penal Code, is available as gazetted text from the Ministry of Home Affairs.

What Happens Next

The case remains at the investigation stage, and the release mentions no chargesheet or court finding. An arrest and the case behind it rest on allegations, not findings of guilt; the accused is presumed innocent until proven guilty, and due process continues.

In the ordinary course, an arrested person is produced before a magistrate, who decides questions of custody and bail. If the CBI concludes that its evidence supports prosecution, it files a chargesheet in the competent court, which then decides whether to take cognizance and frame charges. Guilt can be established only at trial.

The release says some suspected Points of Sale were identified during the data analysis, but not whether action has been taken against any of them or whether further arrests are expected. This report does not speculate.

For subscribers, a separate process applies. Sanchar Saathi, the Department of Telecommunications' portal, says connections a subscriber reports as not theirs are flagged for re-verification by the service provider: outgoing services are suspended within 30 days, incoming services within 45 days, and a connection that fails re-verification is disconnected within 60 days.

What It Means

The case shows the CBI targeting the supply of SIM cards behind cyber frauds, not only the callers; the agency frames it as action against those who enable cyber fraud by misusing telecom infrastructure.

The Department of Telecommunications has made the same point. In a caution dated 4 March 2025, it said that obtaining SIM cards through fake documents, fraud, cheating or personation is an offence under the Telecommunications Act, 2023, punishable with up to three years' imprisonment, a fine of up to fifty lakh rupees, or both; that a Point of Sale facilitating such procurement amounts to abetting the offence; and that people who hand SIM cards taken in their own name to others can become offenders too if those cards are misused for cyber frauds.

Three practical steps follow:

• Check what is registered in your name. Sanchar Saathi's 'Know Mobile Connections in Your Name' facility shows how many connections have been taken in your name and lets you report any that are not yours. The limit is 9 connections per person across all operators, or 6 in Jammu and Kashmir, Assam and the North Eastern states.
• Be careful at the counter. Given the CBI's account of repeated e-KYC authentications, ask why if a retailer wants you to authenticate more than once.
• Do not pay a caller who threatens arrest. The CBI says "there is no such concept as a 'digital arrest.'" Suspected fraud calls or messages can be reported on Sanchar Saathi's Chakshu facility; if money has already been lost, the portal directs victims to the cyber-crime helpline 1930 or cybercrime.gov.in.

FAQ

Does the CBI's arrest mean the distributor is guilty?

No. An arrest and the case behind it rest on allegations, not findings of guilt; the accused is presumed innocent until proven guilty, and due process continues. The CBI says it is still investigating, and its release mentions no chargesheet or court finding. Only a trial can establish guilt.

How could a SIM card be issued in my name without my knowledge?

The CBI's release describes two routes. Some subscribers who visited a SIM card provider for a genuine purpose were deceived into authenticating themselves several times for e-KYC. In other cases, biometric data collected from them for an unrelated purpose was misused. Many told investigators they had no idea a card had been issued in their name.

How can I check which mobile connections are registered in my name?

Use the 'Know Mobile Connections in Your Name' facility on the Department of Telecommunications' Sanchar Saathi portal or app. Log in with the OTP sent to your mobile number, mark any connection 'This is not my number' or 'Not required', and submit the report. Flagged connections are re-verified by the service provider and disconnected if they fail.

What should I do if I get a 'digital arrest' call or lose money?

Do not pay. The CBI cautions that there is no such thing as a 'digital arrest', and asks the public to ignore callers demanding money in the name of law enforcement agencies. Report suspected fraud calls and messages on Sanchar Saathi's Chakshu facility. If money has already been lost, call the cyber-crime helpline 1930 or complain at cybercrime.gov.in.

Where can I read the official CBI release?

The CBI's press release, titled "CBI Arrests Airtel Distributor for Illegal Sale of SIM Cards Used in Cyber Frauds" and dated 12 September 2026, is on the agency's website. The Department of Telecommunications' caution on SIM misuse, dated 4 March 2025, is published by the Press Information Bureau. Both are linked below.

This report is based on the official CBI press release dated 12 September 2026 and the Department of Telecommunications' caution dated 4 March 2025. It was surfaced via coverage in The Pioneer.