CBI unearths international tech-support fraud racket, four arrested

The Enforcement Action

The Central Bureau of Investigation (CBI) has announced that it unearthed an international tech-support fraud and extortion racket run out of fake call centres in Punjab and Delhi, arresting the main accused along with three accomplices after searches on the intervening night of 5-6 August 2026. According to the Government of India's News On Air account of the action, the agency searched ten locations, including a fake call centre at Mohali in Punjab, before taking the four persons into custody.

The CBI's account describes a syndicate that targeted nationals of the United States by posing online as representatives of Microsoft, of financial institutions and of law enforcement agencies. Investigators say the operation combined technical deception with extortion, moving victims from fake security warnings to coerced payments, including payments demanded in cryptocurrency.

From the searched premises, the agency says it seized more than 20 mobile phones, 15 laptops and tablets, several hard drives, pen drives and memory cards, along with cash, documents and cryptocurrency wallets. These items, the agency indicates, will be examined as part of a continuing investigation into the scale of the operation.

At this stage the matter rests on the CBI's own account of an investigation it has opened. The persons arrested have not, on the public record, responded to the allegations, and nothing set out here has yet been tested in court.

How the Scheme Worked

Per the CBI's description, the racket began with counterfeit pop-up messages engineered to look like genuine Microsoft security alerts. These pop-ups, the agency says, appeared to freeze or lock a victim's computer and displayed a toll-free number, steering the user to call what they believed was official Microsoft support.

The call, according to the agency, connected instead to one of the syndicate's fake call centres. Operators posing as Microsoft technicians would tell the victim that their device was compromised and charge fees for bogus "system repairs", the CBI alleges. In a second and more aggressive stage described in the account, the operators impersonated staff of financial institutions and then of law enforcement agencies, telling victims that their identity or accounts had been linked to serious crimes.

The agency says victims were then coerced into paying, including through cryptocurrency, under the threat of fabricated criminal allegations. By framing the demand as a way to avoid prosecution, the operators allegedly pushed frightened victims towards irreversible crypto transfers that are difficult to trace and recover once made.

The CBI indicates the network was organised around a principal accused who, per the account, oversaw the call-centre infrastructure, with three others assisting in running the operation. The searches on 5-6 August 2026 spanned ten locations across the two states, which the agency links both to the call-centre operations in Punjab and to the handling of the proceeds.

The procedural history, as it stands on the public record, is at an early stage. The CBI has registered a case, conducted searches and made arrests. Analysis of the seized devices and wallets, the agency signals, is expected to establish the true scale of the operation and the sums involved. No total figure for the alleged proceeds has been placed on the public record in the announcement itself, and this report does not attribute one.

The Law Invoked

A CBI action of this kind proceeds from a case the agency registers, followed by searches, arrests and, in due course, a chargesheet placed before the competent court. It is an investigation, not an adjudication: the agency gathers and tests evidence, and the question of guilt is for a trial court to decide.

The public announcement of this action does not enumerate the specific statutory sections the CBI has invoked, so this report does not attribute particular provisions to the case. In general terms, cyber-enabled cheating and impersonation offences in India are prosecuted under the country's penal law and the Information Technology Act, 2000, which addresses identity theft and cheating by personation using a computer resource. Where proceeds of crime are laundered or moved abroad, separate money-laundering provisions can be engaged by other agencies. The precise charges in this matter will become clear only when the CBI files its chargesheet.

Because this is a criminal-investigation-stage action, every characterisation of wrongdoing set out above is an allegation by the investigating agency, and not a finding of guilt.

What Happens Next

From here, the CBI will continue its investigation, examine the seized electronic devices and cryptocurrency wallets, and seek to trace the flow of funds. If the agency concludes that it has sufficient evidence, it will file a chargesheet before the designated court, which will then decide whether to take cognizance and frame charges. A trial follows, at which the prosecution must prove its case and the accused are entitled to defend themselves.

Arrested persons may apply for bail, and a court weighs such applications on their own merits. Any assets identified as proceeds of the alleged offence may become the subject of separate attachment proceedings by the appropriate authority. Cross-border matters of this nature often involve cooperation with foreign agencies for evidence and victim information, though the extent of any such cooperation here is not part of the public record.

Throughout this process the presumption of innocence applies. A First Information Report, arrest or chargesheet contains allegations, not findings of guilt; the accused are presumed innocent until proven guilty, and due process continues.

What It Means

For readers in India, this action is a reminder that the tools used against victims abroad are the same ones used against Indian consumers every day: fake security pop-ups, callers impersonating a well-known company or the police, and demands for urgent, irreversible payment. The single most useful takeaway is that no genuine technology company displays a pop-up with a telephone number to call, and no real police force or financial institution asks for payment in cryptocurrency or gift vouchers to make a "case" go away.

If a screen suddenly warns that your computer is locked or infected and offers a number, do not call it. Close the browser, and restart the device if needed. Never grant remote access to an unknown caller, and never move money because a stranger on the phone claims that you are under investigation. India's cybercrime helpline 1930 and the portal at cybercrime.gov.in exist precisely so that such approaches can be reported quickly, which improves the chance of freezing a transfer before the money is gone.

The action also shows that call centres operating from Indian cities remain a live enforcement priority. That is protective for consumers, but it also means ordinary jobseekers should be wary of roles at opaque "international process" outfits that coach staff to read impersonation scripts. If the script involves frightening a stranger into paying, the job itself may be part of an offence.

FAQ

Does this CBI action mean the arrested persons are guilty?

No. As the CBI itself is at the investigation stage, its action carries allegations, not findings of guilt: a First Information Report, arrest or chargesheet contains allegations only, the accused are presumed innocent until proven guilty, and due process continues. Only a trial court can determine guilt.

What exactly did the CBI announce?

The CBI said it unearthed an international tech-support fraud and extortion racket run from fake call centres in Punjab and Delhi. It searched ten locations, including a call centre at Mohali, on the night of 5-6 August 2026, arrested the main accused and three others, and seized phones, laptops, storage devices, cash and cryptocurrency wallets.

Can the arrested persons seek bail or challenge the case?

Yes. Arrested persons can apply for bail, which a court decides on the facts before it. If a chargesheet is later filed, the accused can contest the charges at trial, where the prosecution must prove its case. These are ordinary features of criminal due process, available to every accused person.

How can I tell a tech-support call is fake?

Genuine companies such as Microsoft do not lock your screen and display a support number, do not cold-call you about "viruses", and never ask for payment in cryptocurrency or gift vouchers. Any caller demanding remote access to your device, or urgent payment to avoid arrest, should be treated as an impersonation attempt.

What should I do if I am targeted?

Do not call numbers shown in pop-ups, do not grant remote access, and do not transfer money. Disconnect, and report the approach to the national cybercrime helpline 1930 or at cybercrime.gov.in as soon as you can. Prompt reporting improves the chance of stopping a transfer while it can still be reversed.

Where can I read the official account?

The Government of India's News On Air carried the CBI's account of this action. This report links that official source in the paragraph below.

This report is based on the official Government of India News On Air account of the CBI action, "CBI unearths international tech support fraud and extortion racket in Punjab", dated 6 August 2026. It was surfaced via aggregated coverage on Google News.