Label: Confirmed case. The arrest, the frozen amount and the look-out circular are reported by the police and reported by the press. The accused have not been tried and have not been found guilty; this article reports the police account.

Navi Mumbai cyber police have arrested a 30-year-old man from Delhi for allegedly duping a Vashi homemaker of Rs 61.46 lakh in an insurance fraud, and have issued a look-out circular against the alleged mastermind who is suspected to have fled to Dubai. Senior inspector Vishal Patil identified the arrested man as Shahrukh Mehtab Khan, a cloth merchant, who was tracked using technical surveillance and mobile tower location analysis to Ambedkar Nagar in Faridabad and arrested on May 22. The money was traced to multiple bank accounts, Rs 25 lakh has been frozen, and a court order has been obtained to revert that amount to the complainant's account.

How the fraud was built

The mechanism is more instructive than the amount. The accused contacted the victim on July 1 last year, posing as "Sanjay Kumar Ambasta" from the NPCI office, a detail chosen to sound like a real senior official at a real payments institution. Claiming she had four insurance policies in her name, he established credibility by quoting an old policy number back to her and offering reimbursement if she surrendered them. Under the pretext of processing the surrender, he sent forged documents: an Insurance Ombudsman agent code deactivation form bearing the IRDAI logo, and an NPCI NEFT mandate form. The woman submitted those forms along with her bank details, and between August 18 last year and April 8 this year she transferred Rs 61.46 lakh as processing charges. She filed on the cybercrime portal after the promised reimbursement never arrived, and an FIR followed under the Bharatiya Nyaya Sanhita and the IT Act.

Why this is different from the usual fake-policy call

Most insurance impersonation fraud asks a person to buy a policy that does not exist, or to hand over an OTP. This one runs the opposite direction. It assumed a genuine, valuable policy, then manufactured paperwork that made surrendering it look like a routine administrative act. A forged agent code deactivation form is a particularly clever choice of instrument, because it tells a victim something that is true in general terms: a selling agent's code can indeed be deactivated, and surrendering a policy with an agent attached is a real process. The forgery does not need to invent a policy. It only needs to borrow a real procedure and attach the wrong logos to it.

What you should take from it

  • No real insurer or intermediary asks you to sign a deactivation form to process a surrender. Surrender is initiated by you, through the insurer's own channel, and it is usually settled to your registered account or as you direct in writing through the insurer. A form arriving by WhatsApp that asks you to "deactivate the agent code" so that a third party can process your surrender is not a procedure. It is the fraud.
  • An official-sounding name and a real policy number are the whole trick. He had no access to the insurer's system and did not need one. A partial policy number and a plausible-sounding official title were enough to pass. The lesson is that a caller who seems to know details about you has still told you nothing that cannot be obtained from a leaked database or a guess.
  • Authority figures from a recognised institution are the intended lever. Naming NPCI, and borrowing the Ombudsman, made the approach feel procedural rather than criminal. When a caller identifies the institution they claim to represent, treat that claim as the thing to verify, not as reassurance. Verify by using the number on the institution's own website, never the number in the message.
  • Insurance Ombudsman and IRDAI logos on a form do not make it genuine. Two separate cases this season involve forged documents carrying those marks, alongside fake grievance portals that misuse the regulator's emblem. A logo is a design, not an authentication.

What to do if you are in this situation

Call 1930 and the cybercrime helpline immediately, and tell your bank at once, because the recall of a transfer is far more likely in the first hours than later. Then verify at the insurer's own portal whether the policy still exists and whether any surrender has been recorded, because that single check tells you whether you are a fraud victim or a genuine surrender. Report on the Insurance Ombudsman's portal as well, and keep the FIR number: a frozen-account order that returns money to you depends on it. This case also shows the value of the trail, since Rs 25 lakh of the Rs 61.46 lakh was frozen and ordered reverted, which is worth following up rather than assuming the loss is total.