Ahmedabad cyber police bust deepfake-enabled Aadhaar fraud racket, four arrested

In a significant breakthrough, the Cyber Cell of Crime Branch Ahmedabad has arrested four persons for allegedly orchestrating a sophisticated identity fraud racket in which they used deepfake technology and illegally accessed Aadhaar-linked biometric systems to alter victims’ registered mobile numbers, open bank accounts, and apply for loans.

The arrests were made in connection with a complaint filed by Ahmedabad-based businessman Amit Patel, who alleged that unknown persons had fraudulently changed the mobile number linked to his Aadhaar card and used his identity details to access DigiLocker, conduct KYC verification, open bank accounts and apply for personal loans.

According to the FIR registered at the Cyber Crime Police Station, the fraud came to light when Patel, a resident of Thaltej and director of Bonneville Foods Private Limited, attempted to access Aadhaar-linked services for business documentation and discovered that the mobile number linked to his Aadhaar had been changed without his knowledge.

Subsequent checks allegedly revealed that his Aadhaar profile had been altered and linked to another mobile number and email address. Police said the accused also used the compromised credentials to access DigiLocker, activate banking-related services and apply for personal loans through digital lending platforms, including RKBansal, True Credits and EarlySalary.

Deepfake videos used to bypass biometric verification

During the investigation, the cyber police found that the accused had allegedly bypassed Aadhaar’s facial authentication process by creating AI-generated deepfake videos from the complainant’s photograph.

Police said the accused used the manipulated videos to simulate blinking and facial movement, thereby fooling the facial authentication system during Aadhaar update procedures.

Investigators said the mobile number linked to the complainant’s Aadhaar was then changed using unauthorised Aadhaar update kits allegedly operated through Common Service Centre (CSC) operators.

The four arrested have been identified as:

Kanubhai Bahadursinh Parmar (32), a CSC operator from Anand district

Ashish Rajendrabhai Waland (27), a CSC operator based in Vadodara

Mohammad Kaif Iqbalbhai Patel (26), associated with a CSC centre in Bharuch district

Deep Maheshbhai Gupta (29), a machine operator from Ahmedabad, originally from Uttar Pradesh. All four accused are currently in judicial custody.

According to police,

Kanubhai Parmar allegedly supplied Aadhaar update kits to the co-accused in exchange for commission.

Ashish Waland allegedly passed on the Aadhaar kit used in the fraudulent mobile number update and earned commission for each transaction.

Mohammad Kaif Patel allegedly coordinated the use of the complainant’s Aadhaar number, target mobile number and photograph, and facilitated the creation of the deepfake facial authentication video.

Deep Gupta allegedly assisted in arranging and transmitting the victim’s Aadhaar details and photograph for the fraudulent operation.

Police said the Aadhaar update kit used to alter the complainant’s mobile number has been recovered. Investigators said one of the accused, Ashish Waland, was previously booked by Vadodara Rural Police in a separate case involving the alleged preparation of fake Aadhaar cards.

Modus operandi

Obtaining victims’ Aadhaar details and personal data through unauthorised means;

Illegally updating the mobile number linked to Aadhaar using Aadhaar update kits;

Using AI-generated deepfake videos to bypass biometric/facial authentication;

Gaining access to DigiLocker and Aadhaar-linked e-KYC systems;

Opening bank accounts and applying for digital loans in the victim’s name.

Ahmedabad Cyber Crime police said further investigation is underway to identify additional accused and determine whether more victims were targeted by the racket.

Police have booked the accused under relevant provisions of the Bharatiya Nyaya Sanhita, 2023, and the Information Technology Act for criminal conspiracy, forgery, identity theft, cheating and unauthorised access to computer resources.