Hyderabad firm loses Rs 1 crore in WhatsApp impersonation fraud

A Hyderabad-based firm has been defrauded of Rs 1 crore after cybercriminals impersonated its director on WhatsApp, police said on Thursday. The incident came to light when the company's accounts department realised the money had been transferred to an unknown account following a fraudulent message.

According to officials, the fraudsters contacted an employee through WhatsApp, posing as the company director. They instructed the employee to urgently transfer Rs 1 crore to a specified bank account, citing a business requirement. The employee, believing the message was genuine, complied without verifying the request through an official channel.

How the fraud unfolded

The scam began when the employee received a WhatsApp message from a number saved with the director's name and profile picture. The message appeared urgent, pressuring the employee to act quickly. Such impersonation tactics are increasingly common, experts say, as fraudsters exploit the trust employees place in their superiors.

After the transfer, the firm's management discovered the discrepancy during a routine financial review. They immediately contacted their bank and local police, but the money had already been moved. The cybercrime cell of the Hyderabad police has registered a case and initiated an investigation.

Police probe and digital trail

Investigators are now tracing the recipient bank account and the mobile number used for the fraudulent WhatsApp message. They are also examining call detail records and IP logs to identify the perpetrators. Police have not yet confirmed whether the money has been frozen or recovered.

This is not an isolated incident. Hyderabad has seen a surge in such digital frauds in recent months, with multiple cases reported across the city. In many instances, fraudsters use publicly available information, such as company leadership details, to craft convincing messages.

Experts warn businesses to stay vigilant

Cyber security analysts advise firms to implement strict verification protocols for fund transfers, especially those requested via messaging apps. A simple phone call to the director or a secondary approval from another authorised person could have prevented the loss, they note. Banks also recommend enabling transaction alerts and using secure channels for financial approvals.

WhatsApp, owned by Meta, has not commented on the incident. The platform has previously introduced features to combat spam and fraud, but scammers continue to adapt. Telangana police have urged the public to report suspicious messages and to verify identities before acting on financial instructions.

What to watch next

As the investigation progresses, police are expected to share more details about the money trail and any arrests. The case also highlights the need for businesses across India to review their internal financial controls. With digital fraud on the rise, companies may need to adopt multi-factor authentication for high-value transfers as a standard practice.