Kanpur: Surat police has arrested an 18-year-old youth from Kanpur for allegedly using artificial intelligence to create fake banking APK files and selling them to cyber fraudsters operating in Jamtara and other parts of the country for Rs 10,000 each. The Kasganj resident, who had studied up to Class XI, was arrested while hiding in a hotel.According to police, he created APK files of banking applications, including one resembling the ‘PNB One’ app, using AI. Investigators said the accused, Rohit Virendra Singh Shakya, had sold 121 such files, which were installed on 21,672 mobile phones. Of these, cybercriminals allegedly gained access to 2,928 devices and committed cyber fraud worth about Rs 64.50 crore.Investigators said the accused began creating malicious APK files using AI tools and Telegram at the age of 16. The applications were allegedly capable of compromising mobile devices and stealing sensitive data. The racket came to light during the investigation of a cyber fraud case registered in Surat.In May 2026, a victim received an APK file via WhatsApp that closely resembled the official PNB One app. Believing it to be genuine, the victim downloaded and installed the application. Shortly after installation, his mobile phone was allegedly compromised, and Rs 5 lakh was transferred from his Prime Co-operative Bank account to a Union Bank account within minutes.On Wednesday, DCP Vishakha Jain of the Surat Cyber Crime Branch said that between May 15 and 18, 2026, an APK file was sent to a person in Surat, resulting in the transfer of Rs 5 lakh from his account to a Union Bank account. During the investigation, Rohit’s role came to light. After tracing his location, he was arrested from a hotel near PPN College in Kanpur.Police seized a laptop, a mobile phone and other digital devices from his possession.During the investigation, police found that apart from several cybercriminal gangs operating in Jamtara, Jharkhand, some groups in Haryana and Rajasthan had also allegedly procured virus-infected applications from him.Police said the accused allegedly developed two types of applications. One was installed on the victim’s device, while the other functioned as an administrator application. The admin app allegedly enabled cybercriminals to access one-time passwords (OTPs), banking details and other sensitive information from the victim’s mobile phone in real time.The investigation also revealed the alleged business model. According to police, the accused operated on a subscription basis, charging Rs 15,000 for the initial software installation and an additional Rs 15,000 per month for continued services.Investigating officials said he created customised fake applications that mimicked those of banks, government agencies and major companies based on client requirements. These included counterfeit applications and payment links resembling those of PNB, SBI, Axis Bank, UCO Bank, BigBasket, American Express and RTO challan services, which were allegedly supplied to cybercrime syndicates.Authorities said efforts are underway to identify and arrest others linked to the network.
