Cybercriminals are adopting a new form of fraud that combines mobile phone theft with social engineering, putting senior citizens and people with limited knowledge of technology at particular risk. Investigations by the Hyderabad Police cybercrime wing have uncovered organised gangs that allegedly steal mobile phones in public places, then attempt to access victims' banking accounts using screen locks, banking information, and OTPs. Three suspects have so far been arrested, with five mobile phones recovered from them.
How Criminals Turn a Stolen Phone Into a Banking Fraud Tool
According to police, members of these gangs identify potential victims at bus stations, railway stations, crowded RTC buses, and other public places. They observe senior citizens using smartphones and carefully watch them entering screen-lock patterns, PINs, or passwords. Once they've memorised this information, they allegedly wait for an opportunity to steal the phone.
If the stolen device remains locked, the criminals allegedly turn to social engineering. When victims call their stolen phones, one of the gang members may pose as a bus conductor, driver, or Good Samaritan, claiming the device has been found. Under the pretext of verifying ownership, the criminals allegedly try to persuade victims into disclosing their screen-lock passwords.
Once the device is unlocked, the suspects search through applications and folders like Gallery, Notes, Messages, and WhatsApp for sensitive personal and financial information. Photographs of debit and credit cards, Aadhaar and PAN documents, banking records, passwords, and PINs can potentially provide criminals with everything they need for further financial fraud.
How a Stolen SIM and OTPs Put Bank Accounts at Risk
The stolen SIM card and intercepted OTPs may then be used to reset banking credentials and UPI PINs. Once the criminals gain access to digital banking services, they can transfer funds to other accounts. Police said the stolen money is subsequently routed through digital wallets, online gaming platforms, and mule accounts, deliberately making transactions harder to trace.
Cybercrime expert and former IPS officer Prof. Triveni Singh said such frauds demonstrate that criminals are exploiting human behaviour alongside technological vulnerabilities. According to him, a smartphone has effectively become a gateway to banking, identity documents, and communication, making immediate action after a phone theft absolutely critical. Senior citizens, in particular, should never disclose their screen-lock passwords, OTPs, or UPI PINs to unknown individuals, even if the caller claims to be helping recover a lost device.
Police said these gangs often operate through specialised teams, with different members responsible for identifying victims, stealing phones, obtaining passwords, facilitating banking transactions, and withdrawing proceeds. This division of responsibilities allows the fraud operation to function as an organised network, making it considerably harder to trace everyone involved.
What to Do Immediately If Your Phone Is Stolen
Authorities have urged citizens to never share screen-lock passwords, OTPs, or UPI PINs with anyone under any circumstances. They've also advised people to avoid storing photographs of bank cards, Aadhaar, PAN cards, passbooks, and other sensitive documents in their phone's Gallery or Notes applications, keeping such information away from smartphones can significantly reduce the consequences of device theft.
If a mobile phone is stolen, users should immediately contact their telecom operator and block the SIM card. They should also inform their bank and request the temporary blocking or freezing of mobile banking, UPI, and other digital banking services linked to the device.
Police have further advised victims to block the stolen handset through the Central Equipment Identity Register (CEIR) portal. Blocking the device can prevent it from being used on mobile networks and may also assist authorities in tracing the handset later.
Experts said the hybrid nature of this fraud makes it particularly dangerous, because the stolen smartphone itself can become a gateway to financial accounts. A criminal who obtains both the device and the information needed to unlock it may gain access to a significant amount of personal and financial data all at once.
This incident really highlights the importance of using strong and private screen-lock credentials, avoiding the storage of sensitive financial documents on mobile phones, and taking immediate action following theft. Victims should contact their telecom provider, bank, and law enforcement authorities directly, rather than relying on unknown individuals claiming to have recovered the device.
With cybercriminals increasingly combining physical theft with digital manipulation, awareness remains a critical line of defence. A stolen phone should be treated not merely as a lost device, but as a potential security threat requiring immediate action to protect banking accounts, identity documents, and personal information.
FAQs
Q1. How do criminals unlock a stolen phone if it's locked?
Criminals often pose as a bus conductor, driver, or Good Samaritan when the victim calls their stolen phone, claiming the device has been found and persuading the victim to disclose their screen-lock password under the pretext of verifying ownership.
Q2. What should someone do immediately if their phone is stolen?
They should immediately contact their telecom operator to block the SIM card, inform their bank to freeze mobile banking and UPI services, and block the device through the Central Equipment Identity Register (CEIR) portal.
Q3. Why are senior citizens particularly targeted in this scam?
Criminals often observe senior citizens entering screen-lock patterns or PINs in public places, and their limited familiarity with technology can make them more susceptible to social engineering tactics used to recover the password.