Fake RTO E-Challan: Another Accused Nabbed In Jamtara APK Fraud Case

The Gujarat Police have arrested another accused allegedly linked to the Jamtara-based APK fraud network recently busted by the Ahmedabad Cyber Crime Cell. Sitaram Mandal, 26, who was already lodged in Ahmedabad’s Sabarmati Jail, has been arrested by the Surat Cyber Crime Cell in connection with a separate fake RTO e-challan APK fraud case.

Mandal was among the three accused earlier arrested in the wider investigation into the alleged cyber fraud syndicate. Ahmedabad Cyber Crime had arrested him along with alleged mastermind Purnanand alias Mukesh Tiwari and Vikas Das, who were accused of developing, distributing and using malicious APK files to steal banking credentials and siphon money from victims.

The latest investigation relates to a ₹5.02 lakh cyber fraud in Surat, in which a victim allegedly lost ₹5,02,562 after downloading a fake RTO e-challan APK sent through WhatsApp.

Victim loses ₹5 lakh through fake e-challan APK

According to police, the incident began on November 20, 2025, when an unknown WhatsApp number sent the malicious APK to the phone of the victim’s friend, Rakesh Sharma. The compromised account was allegedly then used to circulate the file in a WhatsApp group involving the victim’s son and his friends.

After the APK was installed, the phone was allegedly compromised and ₹5,02,562 was transferred from the victim’s bank account through multiple transactions.

The family contacted the national cybercrime helpline and later approached the Surat Cyber Crime Cell on December 14, 2025. A case was registered under provisions of the Bharatiya Nyaya Sanhita and the Information Technology Act.

Money trail leads police to Mandal

During the technical investigation and scrutiny of banking transactions, police traced part of the fraud money to Mandal.

Police alleged that ₹1,47,954 from the victim’s account was used for a credit bill payment arranged through another accused, Nishit Nathwani. Nathwani allegedly retained a 15-20 %commission and deposited the remaining amount through a cash deposit machine into Mandal’s bank account.

Mandal allegedly deducted another 5-10%commission before handing the remaining cash to absconding members of the Jamtara gang in Jharkhand.

Police also found ₹2.72 lakh linked to cyber fraud involving this and other victims deposited through cash deposit machines into Mandal’s Axis Bank account between November 21 and December 18, 2025. His account recorded credit transactions totalling ₹15,87,400 between September 19, 2025 and January 8, 2026.

Mandal’s alleged role in the Jamtara network

Mandal’s arrest also adds to the earlier Ahmedabad Cyber Crime investigation into the alleged APK fraud syndicate. Police had alleged that mastermind Purnanand alias Mukesh Tiwari developed malicious APK files and operated a Telegram bot through which cybercriminals could purchase customised malware disguised as apps of banks, utility providers and government agencies.

Investigators had also alleged that Vikas Das supplied malicious APK files to nearly 400 cyber fraudsters, while Mandal arranged bank cards and distributed malware to other members of the network.

Police said Mandal has previous criminal cases registered against him, including a 2017 Giridih case involving cheating, forgery and provisions of the IT Act. He is also named in five Ahmedabad City Cyber Crime cases registered in 2026.

Investigation continues

Police are now investigating Mandal’s alleged role in the wider network and checking whether the accused are connected to other cyber fraud cases reported through the national cybercrime helpline.

Officials have urged people not to download APK files received through WhatsApp, SMS or other unknown sources, even if they appear to be related to RTO challans, banks, KYC updates, government services or utility bills.