CBI arrests five in Nashik call-centre cyber fraud case

The Enforcement Action

The Central Bureau of Investigation has registered a cyber-fraud case and moved against an illegal call centre said to have been run out of a rented resort in Igatpuri, Nashik, Maharashtra. According to the agency's press release, the CBI registered the case on 8 August 2026 against six accused private persons, all residents of Mumbai, along with unknown private persons and bank officials. Five of the six accused have so far been arrested, and the agency has said the investigation is continuing.

The FIR alleges that the accused persons entered into a criminal conspiracy and committed financial fraud by impersonation, running an illegal call centre that posed as an "Amazon Support Services Call Centre". Per the release, the operation targeted citizens of the United States, Canada and other countries, with the proceeds of crime collected through gift cards and cryptocurrency. The agency describes the premises as the Rainforest Resort in Igatpuri, where searches were carried out.

During those searches, the CBI says it recovered 44 laptops and 71 mobile phones along with other digital evidence, unaccounted cash of Rs 1.20 crore, 500 grams of gold and seven luxury cars worth about Rs 1 crore. Investigators also detected transactions of roughly 5,000 USDT in cryptocurrency (about Rs 5 lakh) and gift vouchers worth 2,000 Canadian dollars (about Rs 1.26 lakh). The release states that 62 employees were found operating live at the centre when the searches took place, with the process of cheating foreign nationals said to be in progress.

The press release does not name the individual accused, and it does not put a single figure on the total sum allegedly defrauded. The named parties have not publicly responded to the case, and at this stage these remain allegations under investigation rather than proven findings.

How the Scheme Worked

The mechanism the CBI describes follows a pattern that has become familiar in cross-border cyber fraud. According to the FIR, the accused persons made phishing and deceptive calls from the illegal call centre while posing as an Amazon support service. Rather than a single fraudulent transaction, the alleged operation was set up as an industrialised process: the agency says around 60 operators were recruited and organised into roles described as dialers, verifiers and closers, each handling a different stage of the conversation with a targeted victim.

That division of labour is what distinguishes an organised call-centre operation from an opportunistic one. In the model the CBI outlines, dialers make first contact under a trusted brand name, verifiers build credibility and extract detail, and closers push the target towards payment. Because the accused allegedly impersonated a well-known technology brand's support desk, the initial approach would have carried the appearance of legitimacy, which is central to how such schemes secure compliance.

The release says the proceeds were collected through gift cards and cryptocurrency rather than direct bank transfers. That choice matters. Gift-card codes and crypto wallet transfers are fast, hard to reverse and difficult to trace back to a named beneficiary, which is why they recur in impersonation frauds. The detection of USDT transactions and Canadian-dollar gift vouchers among the seized material, per the agency, points to how value is said to have been moved out of reach once a victim paid.

On procedure, the sequence on the public record is straightforward. The CBI registered the FIR on 8 August 2026, conducted searches at the Igatpuri premises, recovered the digital and physical material listed above, and arrested five of the six accused. The presence of bank officials among the unknown accused named in the FIR indicates the agency is examining how payments and accounts were handled, though the release does not elaborate on that line of inquiry. The agency has stated only that further investigation is underway.

The Law Invoked

The press release does not enumerate the specific statutory provisions under which the CBI has registered the case, and this report will not supply section numbers that the official document does not state. What the release does set out is the substance of the alleged offences: criminal conspiracy, cheating by impersonation, phishing and deceptive calls, and financial fraud carried out through an organised call-centre operation.

In plain terms, this is a first-information report at the investigation stage. A CBI FIR of this kind records the agency's allegations and authorises it to investigate, search and arrest; it is not a court's finding of guilt. The offences described - conspiracy, impersonation and cheating - are ordinarily prosecuted under India's general criminal law, while the use of computers, spoofed calls and digital payment rails typically brings information-technology law into play. The precise provisions will appear when the agency files its charge sheet before the competent court.

Because the alleged proceeds moved through cryptocurrency and gift cards, financial-investigation agencies can, in principle, examine such matters separately under anti-money-laundering law. The CBI release makes no mention of any such parallel action, and none should be assumed here.

What Happens Next

From here the matter follows the standard criminal process. The CBI will continue its investigation, and the five arrested accused will pass through the usual stages of remand and bail applications before the designated court. Where the agency believes it has sufficient material, it files a charge sheet; the court then decides whether to take cognizance, after which a trial can begin. A charge sheet, when filed, will again contain allegations to be tested in court, not conclusions.

The unknown persons and bank officials named in the FIR may be identified and added as the inquiry progresses, and the seized cash, gold, vehicles and digital devices will be examined as evidence. Any recovered cryptocurrency or gift-card value would be dealt with through the court process.

At every step before a conviction, the people named remain accused, not guilty. Bail decisions, arrests and searches are procedural steps in an active investigation; they do not settle the question of guilt, which only a trial can determine. Readers should treat the agency's account as its case, subject to due process and to whatever defence the accused choose to put forward.

What It Means

For an Indian audience, the value of this action is not that the victims were overseas but that the playbook is the same one used against Indian consumers every day. Calls or pop-ups claiming to be from Amazon, Microsoft, a bank or a government agency, followed by urgency and a demand for payment in gift cards or cryptocurrency, are the defining signature of an impersonation scam. No genuine support desk, bank or law-enforcement body asks to be paid in gift-card codes or crypto. That single rule filters out the overwhelming majority of these approaches.

The case also shows how these operations are staffed. The alleged recruitment of around 60 operators is a reminder that fraudulent call centres often advertise ordinary-sounding jobs. Anyone offered a "customer support" or "process" role that involves reading scripts to foreign callers, being told never to reveal the employer's real name, or being paid in cash should treat it as a serious warning sign. Working in such a centre can carry criminal exposure, not just reputational risk.

Practically, if you receive one of these calls, do not engage, do not install any software you are asked to, and never share one-time passwords or card details. Suspected cyber fraud in India can be reported on the national helpline 1930 or at cybercrime.gov.in, and the sooner a payment is reported, the better the chance of freezing it. Verifying a caller independently, using a number from the company's official website rather than one the caller provides, defeats almost every version of this scheme.

FAQ

Are the accused presumed innocent at this stage?

Yes. A first-information report and the arrests that follow it contain allegations, not findings of guilt; the accused are presumed innocent until proven guilty, and due process continues. The CBI's press release sets out its case at the investigation stage. Guilt can only be established by a competent court after a trial in which the accused have the opportunity to defend themselves.

What exactly did the CBI do?

According to its release, the CBI registered a cyber-fraud case on 8 August 2026 against six accused and others, searched an illegal call centre at a resort in Igatpuri, Nashik, and recovered laptops, mobile phones, cash, gold, luxury cars and evidence of cryptocurrency and gift-card transactions. Five of the six accused have been arrested and the investigation continues.

How did the alleged scheme work?

Per the FIR, operators posed as an Amazon support service and made phishing and deceptive calls to citizens of the US, Canada and other countries, collecting the proceeds through gift cards and cryptocurrency. The agency says around 60 staff were organised as dialers, verifiers and closers to run the operation.

How can I protect myself from impersonation calls?

Treat any unsolicited call or pop-up claiming to be Amazon, Microsoft, a bank or a government agency with suspicion, especially if it creates urgency. Never pay in gift cards or cryptocurrency, never install software a caller requests, and never share one-time passwords. Verify independently using an official website number.

What should I do if I have already paid a scam call centre?

Report it immediately. In India, call the cyber-crime helpline 1930 or file a complaint at cybercrime.gov.in, and inform your bank so it can attempt to freeze or reverse the transaction. Fast reporting materially improves the chance of recovering funds before they are moved on.

Where can I read the official record?

The action is set out in the CBI's own press release, published through the Press Information Bureau. It is the primary source for every figure and allegation in this report, and it should be read directly for the agency's exact wording.

This report is based on the official CBI press release published via the Press Information Bureau on 8 August 2026. It was surfaced via coverage aggregated on Google News.