The Economic Offences Unit (EOU) of Bihar has uncovered one of the most complex cybercrime networks detected in the state to date. The operation was allegedly led by 21-year-old Harshit Kumar from Supaul, whose activities extended far beyond local SIM fraud. Investigators found links connecting him to cyber criminal groups across China, Vietnam, Bangladesh and Thailand. The network’s scale, financial structure and global footprint prompted the EOU to recommend a full transfer of the case to the Central Bureau of Investigation.
Training in China and Acquisition of Sophisticated SIM Box Equipment
According to investigators, Harshit travelled to China specifically to learn advanced cyber fraud techniques. During this period, he established contact with experienced Chinese hackers who trained him in telecom bypassing, VoIP manipulation and SIM box deployment. He reportedly procured eight SIM box devices from China and Vietnam, smuggling them into India to create parallel call-routing exchanges that masked international VoIP traffic as local calls.
During raids, the EOU recovered a substantial cache of telecom hardware, including:
231 active mobile SIM cards
294 new Airtel SIM cards
800 used SIM cards
8 active SIM box devices
The collection illustrates a well-structured operation designed for continuous, large-volume call spoofing.
Mass Call Generation and Large-Scale Fraud Attempts
The scale of activity was significant. Investigators found that Harshit’s network generated 51,000 calls within 48 hours using 149 SIM cards obtained through fraudulent means. Earlier activity between June 21 and June 23, 2025 saw more than 10,000 calls pushed through another batch of 50 SIMs.
The calls were routed through international VoIP systems but appeared to originate from Indian numbers, making them difficult to trace. The network impersonated banking officials, support services and government helplines to execute phishing attempts and financial fraud.
Five Illegal Exchanges Uncovered Across States
The Supaul arrest triggered a statewide probe that uncovered five illegal telephone exchanges in three months. Locations included:
Gauspur, Supaul
Narayanpur, Bhojpur
Chariya, Baisi
Varanasi, Uttar Pradesh
A separate operator in Rosera, Samastipur remotely controlled certain exchanges, indicating a distributed operational model rather than a single localised cell.
Financial Networks Spread Across 10 Countries
The financial investigation deepened concerns about the network’s international links. Harshit had travelled to China, Nepal, Bangladesh, Vietnam and Thailand, building contacts and expanding operations. He held accounts on two overseas cryptocurrency exchanges with combined assets reportedly exceeding three crore rupees. Funds were dispersed across ten countries, indicating laundering and reinvestment in cybercrime infrastructure.
Use of Encrypted Platforms to Build Foreign Partnerships
Despite his age, Harshit used encrypted messaging platforms and social networks to connect with cybercriminals across Asia and Europe. He sourced equipment, obtained fraud SIM batches, and received technical support through Telegram, Facebook, Instagram and private forums.
Case Recommended to CBI for National-Level Probe
Given the cross-border nature of the operation, the EOU concluded that the investigation exceeded state jurisdiction. A formal request has been sent to the CBI, which is expected to take control of the case. Officials believe further layers of international involvement will surface as the central investigation expands.
