Cyber Incident Victim: State Bank of India
Date:
Dec 2022
Location:
India
Summary
A fraudster impersonating the director of a Pune-based jewelry firm contacted State Bank of India officials, falsely claiming a medical emergency to induce an unauthorized RTGS transfer of ₹19 lakh to two accounts. The bank discovered the deception after the transaction and filed a police complaint, leading to charges under the Indian Penal Code and Information Technology Act against the impersonator and recipients. Law enforcement initiated an investigation into the incident.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On December 20, 2022, State Bank of India (SBI) officials at the main branch near Pune’s district collectorate received a phone call from an individual fraudulently claiming to be Kishorkumar Shah, director of Chandukaka Saraf & Sons Private Limited Company, a prominent Pune-based jewellery firm. The impostor asserted an urgent need to transfer funds due to a medical emergency, directing Ashish Javkhedkar and another SBI officer to execute an immediate RTGS transfer of ₹19 lakh. Complying with the instructions, the bank officials transferred the sum into two unspecified bank accounts via the Real-Time Gross Settlement system. The transaction was processed under the pretext of legitimate authorization from the company director. Subsequent verification revealed the caller had no affiliation with Chandukaka Saraf & Sons, exposing the transaction as fraudulent.
SBI officials filed a formal complaint of cheating at Pune’s Bundgarden police station on December 23, 2022, three days after the unauthorized transfer. Police registered a case against the unidentified caller and the recipients of the funds under relevant sections of the Indian Penal Code and the Information Technology Act. The incident resulted in a direct financial loss of ₹19 lakh to the bank or the jeweller’s account, though the article does not specify whether the funds belonged to the bank or the corporate client. Senior Police Inspector Pratap Mankar led the investigation to trace the perpetrators and recover the stolen funds. The fraud exploited procedural vulnerabilities in SBI’s verification process for high-value transactions initiated via phone instructions, highlighting operational risks associated with social engineering tactics targeting financial institutions. No additional technical compromises or system breaches were reported in connection with the incident.