1. Executive Summary
According to police and media reports described in the supplied CyberRakshakLabs post, three siblings were arrested after allegedly cheating a victim of ₹25 lakh through a scheme involving a fake Facebook identity, relationship-building, a purported currency-printing or money-doubling machine and an in-person bag-switching operation.
The reported victim was a Rourkela-based private insurance company branch manager. The supplied post says the victim was contacted through a Facebook profile using the name “Disha Agrawal,” shown a purported money-doubling demonstration, withdrew ₹25 lakh from a home-loan account and later lost the cash during a distraction-based bag swap.
2. The Attack Didn't Start With Money
The supplied case description shows a progression from digital contact to financial loss rather than an immediate demand for ₹25 lakh.
This is the important cybersecurity lesson: the initial attack surface can be a social-media identity and conversation, while the final exploitation can occur in the physical world.
3. The Fake Facebook Identity
According to the supplied post, the victim was contacted through a fake Facebook profile named “Disha Agrawal,” which police allegedly said used the photograph of one of the accused.
What can look convincing?
A real-looking photograph, professional information, followers, a long conversation history and an apparently credible personal identity.
What it does not prove
A social-media profile does not independently establish that the person, opportunity or financial claim is legitimate.
4. Trust Was Built Before the Fraud
The supplied report describes a sequence in which contact was followed by conversation, trust-building, an opportunity and a demonstration before the victim committed financially.
The security lesson is broader than investment scams: attackers can first establish credibility and only later introduce the financial request.
5. The “Money-Doubling Machine”
The supplied post says the victim was shown a machine described as capable of printing or doubling currency. Police reportedly seized a Blu-ray machine that they said was allegedly used as the purported currency-printing or money-doubling machine.
6. The ₹25 Lakh Decision
According to the supplied article, the victim withdrew ₹25 lakh from a home-loan account and travelled to meet the accused. This is the point where online trust reportedly became a substantial financial commitment.
Digital trust
Trust developed through an online identity and conversation.
Physical trust
The interaction moved to an in-person meeting connected to the claimed opportunity.
7. The Bag-Switching Technique
The supplied report says the suspects allegedly distracted the victim by claiming that a USB drive and motorcycle keys had been left behind. During the distraction, they allegedly replaced the cash-filled bag with an identical bag containing bundles of notepads and fled.
8. Complete Attack Chain
Digital stage
Fake Facebook profile → victim engagement → trust building → fake opportunity → money-doubling demonstration.
Physical stage
₹25 lakh withdrawal → physical meeting → distraction → bag swap → reported cash theft.
Social engineering → financial fraud → physical deception.
9. Why This Case Matters to Cybersecurity
The supplied case description does not depend on malware, ransomware, an exploit, a zero-day or an account takeover. Instead, the reported chain relies on identity, trust, opportunity, demonstration and distraction.
That is why cybersecurity awareness needs to cover human decision-making and social-engineering narratives, not only suspicious links and malicious files.
10. Social Media Is an Attack Surface
The supplied post highlights the amount of information social media can expose or help an attacker infer: name, photograph, profession, location, family information, interests, relationship status, workplace, lifestyle, contact information and financial aspirations.
That information can be combined into a convincing story tailored to a target.
11. Red Flags
12. How to Protect Yourself
Friendly conversation is not financial credibility.
Do not rely only on profiles, photographs or documents sent over chat.
Ask why a stranger is offering an unusually profitable opportunity.
Discuss major financial decisions with someone you trust.
Pause and contact your bank before acting.
13. If You Suspect Fraud
The supplied post advises victims to call 1930 and report through the National Cyber Crime Reporting Portal, while also contacting the bank and preserving evidence.
14. CyberRakshakLabs Analysis
The most important feature of the reported case is the convergence of digital and physical deception.
Internet as the entry point
The reported fake Facebook identity was used to establish the initial relationship.
Social engineering as the bridge
Trust and an apparently profitable opportunity moved the victim toward a physical meeting.
Physical deception as the final step
The reported distraction and bag-switching operation converted the online setup into a physical theft.
Defence implication
Awareness programs should teach people to verify stories and identities, not only links and files.
A fake profile can create real trust. A staged demonstration can create real confidence. A fabricated opportunity can create a real financial loss.
VERIFY → CONSULT → INVESTIGATE → THEN DECIDE
Think Before You Click. Stay Aware. Stay Secure.