Delhi Police have arrested 18 people in connection with a massive fraud that siphoned off ₹2.60 crore from State Bank of India (SBI) credit card holders. The fraud, which ran for nearly six months, came to light after investigators traced the source of leaked banking information to a call centre in Gurugram.
How the Fraud Worked
The accused gained access to confidential customer details, including one-time passwords (OTPs) and CVV numbers, through insiders working at a Teleperformance call centre. Using these details, the fraudsters posed as SBI representatives and convinced unsuspecting customers to share sensitive information. The stolen data was then used to generate electronic gift cards. These cards were sold to travel agents for cash or converted into Tether (USDT) cryptocurrency to launder the proceeds.
Masterminds and Arrests
The investigation revealed that the scam was orchestrated by Ankit Rathi, Waseem, and Vishal Bhardwaj, with significant help from call centre employees Vishesh Lahori and Durgesh Dhakad. During raids, police seized 52 mobile phones, several SIM cards, and detailed records of compromised bank accounts. Officials noted that the organised network had structured roles ranging from data suppliers to money launderers.
Data Security Concerns
The case has raised serious questions about the security practices of Teleperformance and other outsourcing firms handling sensitive banking data. Experts have urged stronger monitoring systems and stricter accountability to prevent employees from exploiting internal access. The breach highlights the urgent need for financial institutions and service providers to strengthen their cybersecurity measures.
