Faridabad police have arrested six men in connection with an alleged cyber fraud involving ₹50 lakh, in which a company employee was reportedly tricked into transferring money after receiving a WhatsApp message impersonating the organisation’s chairman and managing director (CMD).
According to the police investigation, the sender used the executive’s photograph as a WhatsApp profile picture to make the message appear genuine. The case highlights how impersonation tactics and bank accounts allegedly arranged through multiple intermediaries can be used to facilitate financial fraud.
The arrests followed a complaint filed by a 28-year-old Faridabad resident, who reported the incident to the Central Cyber Police Station.
How Did the WhatsApp Impersonation Fraud Happen?
According to the complaint, the employee received a WhatsApp message from an unknown mobile number on September 17, 2026. The sender used a photograph of the company’s CMD as the profile picture, creating the impression that the instruction had come from a senior company official.
The message reportedly directed the employee to transfer ₹1 crore to a specified bank account. Believing the request was genuine, the employee transferred ₹50 lakh from the company’s account.
The complainant subsequently realised that the communication was fraudulent and approached the police.
The incident demonstrates how criminals can exploit workplace hierarchies and the apparent authority of senior executives to pressure employees into making financial transactions without independent verification.
Who Are the Six Arrested Accused?
Police identified the six arrested men as Ajay and Adnan Khan, residents of Mumbai, and Avinash, Nasir, Jayarvan and Rizwan, residents of Gujarat.
Investigators allege that the individuals performed different roles in arranging, accessing or operating the bank account used to receive the money.
During questioning, police also examined the accused persons’ educational and professional backgrounds. According to the report, their occupations included hardware supply, medical supply and property dealing.
These details form part of the investigation into the alleged roles of the accused. The allegations have not, by themselves, established guilt, which must be determined through the legal process.
How Was the Bank Account Allegedly Used?
Investigators traced the ₹50 lakh transfer to a bank account associated with a firm named Ajay Manpower.
According to the police account, Ajay allegedly established the firm and opened an account in its name. The account was then reportedly passed to Nasir, who allegedly handed it over to Avinash. Investigators said Avinash subsequently transferred control to Jayarvan, who shared access with other individuals through Telegram.
Police further alleged that Adnan had opened the firm's current account and that Rizwan had access to it and operated it while staying at a hotel.
Investigators suspect that the account was used to receive the money obtained through the fraudulent WhatsApp instruction. The alleged chain of account access is now a central part of the case as police examine how the funds were handled and whether additional individuals were involved.
What Action Have Faridabad Police Taken?
Following the complaint, the Central Cyber Police Station investigated the alleged impersonation and traced the bank account that received the funds.
The investigation resulted in the arrest of all six suspects. Police also reported recovering five mobile phones during the operation.
The accused were produced before a local court and remanded to judicial custody. The information provided in the report does not confirm whether the ₹50 lakh has been recovered or whether further arrests will follow.
The investigation may help establish the movement of the transferred funds, the use of the communication platform and the extent of each accused person's alleged involvement.
How Can Companies Reduce the Risk of Executive Impersonation?
The incident underlines the importance of independent verification when employees receive urgent payment instructions through messaging applications.
Companies can strengthen their safeguards by adopting several practical measures:
Verify payment requests independently: Confirm unusual or high-value transfers through a known telephone number or an established internal approval channel.
Require multiple approvals: Apply dual authorisation and documented checks for significant payments.
Treat profile photographs cautiously: A familiar executive photograph does not establish the sender's identity.
Restrict account access: Review who can operate company bank accounts and maintain clear records of account permissions.
Train employees: Conduct regular awareness sessions on impersonation, social engineering and payment diversion scams.
Preserve evidence: Retain relevant messages, transaction references and bank details, and report suspected fraud promptly.
Businesses dealing with suspected financial misconduct may also consider financial investigation services when reviewing suspicious transactions and potential financial irregularities.
Conclusion
The alleged ₹50 lakh WhatsApp impersonation fraud in Faridabad shows how a message appearing to come from a senior executive can lead to a substantial financial loss when payment instructions are not independently verified.
Police have arrested six men, recovered five mobile phones and placed the accused in judicial custody, according to the supplied report. The recovery of the money, the precise roles of those arrested and the full extent of the alleged operation remain matters to be established through further investigation and legal proceedings.