CYBERRAKSHAK LABS · RESEARCH #037

🚨 The ₹25 Lakh Money-Doubling Trap

How a reported fake Facebook identity, social engineering, a “currency machine” and a physical bag-switching operation were used in an Odisha fraud.

By Vivek Kumar · Published 19 September 2026
RESEARCH#037
CATEGORYCyber Fraud / Social Engineering
CRL ASSESSMENTHIGH
RESEARCH LEVELDeep Research
PUBLISHED2026-09-20
Source & social links: LinkedIn Post ↗WhatsApp ↗YouTube ↗
How CyberRakshakLabs researches threats →
The ₹25 lakh loss reportedly did not begin with a bank account. It began with a social-media identity, a conversation and a story designed to create trust. The reported case shows how a digital contact can move a victim from online trust to an in-person financial loss.
₹25LReported amount taken from the victim
FAKE IDReported Facebook identity used for contact
OFFLINEFraud chain moved into a physical meeting
1. Executive Summary

According to police and media reports described in the supplied CyberRakshakLabs post, three siblings were arrested after allegedly cheating a victim of ₹25 lakh through a scheme involving a fake Facebook identity, relationship-building, a purported currency-printing or money-doubling machine and an in-person bag-switching operation.

The reported victim was a Rourkela-based private insurance company branch manager. The supplied post says the victim was contacted through a Facebook profile using the name “Disha Agrawal,” shown a purported money-doubling demonstration, withdrew ₹25 lakh from a home-loan account and later lost the cash during a distraction-based bag swap.

Evidence boundary: The events above are presented as reported allegations from the supplied article. This Research page does not independently verify the police or media reporting.
2. The Attack Didn't Start With Money

The supplied case description shows a progression from digital contact to financial loss rather than an immediate demand for ₹25 lakh.

Fake IdentityEstablish ContactBuild TrustPresent OpportunityDemonstrate “Proof”Move OfflineObtain CashBag Switch

This is the important cybersecurity lesson: the initial attack surface can be a social-media identity and conversation, while the final exploitation can occur in the physical world.

3. The Fake Facebook Identity

According to the supplied post, the victim was contacted through a fake Facebook profile named “Disha Agrawal,” which police allegedly said used the photograph of one of the accused.

What can look convincing?

A real-looking photograph, professional information, followers, a long conversation history and an apparently credible personal identity.

What it does not prove

A social-media profile does not independently establish that the person, opportunity or financial claim is legitimate.

4. Trust Was Built Before the Fraud

The supplied report describes a sequence in which contact was followed by conversation, trust-building, an opportunity and a demonstration before the victim committed financially.

Contact
Conversation
Trust
Opportunity
Demonstration
Investment decision

The security lesson is broader than investment scams: attackers can first establish credibility and only later introduce the financial request.

5. The “Money-Doubling Machine”

The supplied post says the victim was shown a machine described as capable of printing or doubling currency. Police reportedly seized a Blu-ray machine that they said was allegedly used as the purported currency-printing or money-doubling machine.

Cybersecurity lesson: A demonstration is not independent proof. Fake demonstrations, documents, dashboards, testimonials or transaction records can be used to make an unsupported claim appear credible.
6. The ₹25 Lakh Decision

According to the supplied article, the victim withdrew ₹25 lakh from a home-loan account and travelled to meet the accused. This is the point where online trust reportedly became a substantial financial commitment.

Digital trust

Trust developed through an online identity and conversation.

Physical trust

The interaction moved to an in-person meeting connected to the claimed opportunity.

7. The Bag-Switching Technique

The supplied report says the suspects allegedly distracted the victim by claiming that a USB drive and motorcycle keys had been left behind. During the distraction, they allegedly replaced the cash-filled bag with an identical bag containing bundles of notepads and fled.

Key lesson: Cyber-enabled fraud can cross into physical-world deception. The digital contact may be only the first stage of the attack chain.
8. Complete Attack Chain

Digital stage

Fake Facebook profile → victim engagement → trust building → fake opportunity → money-doubling demonstration.

Physical stage

₹25 lakh withdrawal → physical meeting → distraction → bag swap → reported cash theft.

Social engineering → financial fraud → physical deception.

9. Why This Case Matters to Cybersecurity

The supplied case description does not depend on malware, ransomware, an exploit, a zero-day or an account takeover. Instead, the reported chain relies on identity, trust, opportunity, demonstration and distraction.

That is why cybersecurity awareness needs to cover human decision-making and social-engineering narratives, not only suspicious links and malicious files.

10. Social Media Is an Attack Surface

The supplied post highlights the amount of information social media can expose or help an attacker infer: name, photograph, profession, location, family information, interests, relationship status, workplace, lifestyle, contact information and financial aspirations.

That information can be combined into a convincing story tailored to a target.

11. Red Flags
🚩 Guaranteed or unrealistic returns
🚩 Money-doubling claims
🚩 Stranger contacting you through social media
🚩 Pressure to move to a private meeting
🚩 Requests to bring large amounts of cash
🚩 “Secret” opportunities
🚩 Demonstrations presented as proof
🚩 Pressure that discourages independent verification
12. How to Protect Yourself
1. Don't invest because of a social-media contact.
Friendly conversation is not financial credibility.
2. Verify independently.
Do not rely only on profiles, photographs or documents sent over chat.
3. Question unrealistic returns.
Ask why a stranger is offering an unusually profitable opportunity.
4. Use the two-person rule.
Discuss major financial decisions with someone you trust.
5. Don't withdraw large amounts under pressure.
Pause and contact your bank before acting.
13. If You Suspect Fraud

The supplied post advises victims to call 1930 and report through the National Cyber Crime Reporting Portal, while also contacting the bank and preserving evidence.

Preserve conversations
Save profile URLs
Save phone numbers
Preserve transaction records
Record dates and times
Preserve photographs/documents
Inform police
Do not delete evidence
14. CyberRakshakLabs Analysis

The most important feature of the reported case is the convergence of digital and physical deception.

Internet as the entry point

The reported fake Facebook identity was used to establish the initial relationship.

Social engineering as the bridge

Trust and an apparently profitable opportunity moved the victim toward a physical meeting.

Physical deception as the final step

The reported distraction and bag-switching operation converted the online setup into a physical theft.

Defence implication

Awareness programs should teach people to verify stories and identities, not only links and files.

Source & evidence note: This Research page is based on the CyberRakshakLabs post supplied for publication. The supplied post attributes the incident details to police and media reports. Allegations are presented as allegations and were not independently verified for this page.
CyberRakshakLabs View

A fake profile can create real trust. A staged demonstration can create real confidence. A fabricated opportunity can create a real financial loss.

VERIFY → CONSULT → INVESTIGATE → THEN DECIDE

Think Before You Click. Stay Aware. Stay Secure.