OTPs to food orders: The digital clues helping police, Pg17

Key Highlights:

• Ravindra Soni, who allegedly ran the Rs 1,000-crore BlueChip Group con, was arrested in Dehradun after being traced through a food delivery order.
• Investigators are increasingly using digital residue like OTPs, food-delivery logs, and e-commerce histories to track suspects.
• In a Rs 5,300-crore GST fraud case, OTPs and FASTag data were used to track suspects who constantly switched phones and SIM cards.
• The Department of Telecommunications (DoT) is enforcing SIM-to-device binding for messaging platforms to strengthen digital identification.
• Cybersecurity incidents in India have surged from 10.29 lakh in 2022 to 22.68 lakh in 2024, highlighting the growing scale of digital threats.

Detailed Insights:

• Ravindra Soni established the BlueChip Group in Dubai in 2021, attracting investors from various countries for forex and commodity trading, before disappearing with millions.
• Law enforcement agencies are leveraging the fine print in online applications' privacy policies, which allows them to share user data with the police for investigations.
• The Telecommunication Cybersecurity Amendment Rules, 2025, introduce the concept of Telecommunication Identifier User Entity (TIUE), potentially covering apps like Swiggy and Zomato.
• The SIM binding directive aims to link messaging services continuously to the SIM card used for registration, enhancing traceability and accountability.
• Analysis of WhatsApp data and digital footprints from delivery platforms aided in dismantling a cyber fraud network spanning multiple states and international locations.

Key Concepts Involved:

• OTP (One-Time Password): A password that is valid for only one login session or transaction.
• FASTag: An electronic toll collection system in India, operated by the National Highway Authority of India (NHAI).
• SIM Binding: Linking a software application to a specific SIM card in a mobile device.
• Telecommunication Identifier User Entity (TIUE): An entity that uses telecommunication identifiers to identify its users.