A recent investigation by the Federal Investigation Agency (FIA) Lahore has revealed how criminals targeted bank accounts by obtaining confidential customer information, changing account credentials, and gaining control of banking facilities. The case highlighted how fraudsters managed to access accounts after modification requests were processed through banking systems, allowing them to create banking apps, obtain debit cards, and withdraw money without the account holders being aware.
According to FIA officials, the investigation started after a bank customer reported receiving an alert regarding changes to account credentials. The account holder informed authorities that they had not requested any modifications or attempted to change their confidential information. Following the complaint, FIA Lahore contacted the concerned bank and discovered that several similar complaints had been received where customers reported withdrawals from their accounts without receiving transaction alerts. The investigation included reviewing banking records and IT reports, which revealed that data of 178 account holders had been unofficially shared. Among these accounts, five customers had already suffered financial losses as their accounts were accessed by the suspects. Officials explained that the fraud method involved identifying accounts with large amounts of money but limited transaction activity. The suspects allegedly used leaked account information to submit modification requests, including changes to registered mobile numbers and other credentials. Once these details were updated, notifications that would normally alert account holders about transactions were redirected to the new contact details controlled by the suspects. This allowed them to operate accounts, create banking applications, request debit cards, and withdraw funds without immediate detection.
FIA Lahore officials said timely action prevented further losses, as the suspects had information related to 178 account holders and were gradually targeting inactive accounts. Around Rs. 15 million had reportedly been withdrawn from five accounts, while FIA recovered Rs. 9 million during the investigation. Officials said the involvement of an insider was identified as a key factor because access to confidential banking information required internal system exposure. The suspects reportedly filtered account information and selected accounts that contained significant balances but showed limited regular activity, reducing the chances of customers quickly noticing unauthorized transactions. The investigation also revealed how debit cards were obtained by using manipulated information. According to officials, after changing account credentials, the suspects requested new debit cards from banks. Since debit cards are generally delivered to registered residential addresses, the suspects monitored delivery schedules through their contacts and collected the cards during delivery. In one instance, they reportedly arranged for a person to appear as the account holder outside a residence so that the delivery process could be completed without suspicion.
During the investigation, FIA also recovered items connected to the case, including a cap allegedly used by one suspect during ATM transactions. Officials said CCTV footage showed a person wearing a mask and the same cap while withdrawing money from ATMs. The recovered items were preserved as evidence for further legal proceedings. FIA Lahore officials advised citizens to remain connected with their banks and regularly review account statements to identify unusual activity. They also advised users not to click on suspicious links, as compromised mobile devices can expose sensitive banking information. Customers were encouraged not to save banking application passwords and login details on their devices and to enter credentials manually whenever required. The agency further emphasized that regular monitoring of accounts, secure use of banking applications, and awareness about digital fraud methods can help customers reduce the risk of unauthorized access and financial losses.
Follow the SPIN IDG WhatsApp Channel for updates across the Smart Pakistan Insights Network covering all of Pakistan’s technology ecosystem.
