A Pune-based sugar trader fell victim to a massive ₹3 crore whale phishing attack after hackers compromised his accountant's phone. The fraudsters mimicked the trader's identity via WhatsApp to authorize fraudulent transfers.

  • A Pune sugar trader lost ₹3 crore in a single hour via a targeted attack.
  • Hackers used malware to compromise the accountant's smartphone.
  • The attackers impersonated the trader using WhatsApp to issue transfer orders.
  • Funds were diverted to 'mule accounts' located in Rewa, Madhya Pradesh.

In a staggering display of cybercriminal sophistication, a prominent sugar trader based in Pune's Market Yard lost ₹3 crore on Monday. The attack, categorized as a high-level 'Whale Phishing' scam, was executed with such precision that the firm's accountant believed he was following direct instructions from the business owner himself.

According to the FIR filed at the Pune City Cyber Police Station, the fraud unfolded rapidly on the morning of August 31. The accountant, a veteran with nine years of service at the firm, received a WhatsApp message from an unknown number that had been surreptitiously saved under the trader's name. The message queried the firm's internet banking balance, which the accountant promptly provided, stating an approximate balance of ₹8.50 crore.

Read Also:Bengaluru Hotel Murder: Father Left Suicide Note in Daughter's Notebook Before Killing Twins

Why This Matters

BozokMedia analysis shows that 'Whale Phishing'—also known as a CEO scam—represents an evolving threat landscape where attackers move beyond mass-spamming to highly personalized social engineering. By gaining access to a device, criminals can study communication patterns, making their fraudulent messages nearly indistinguishable from legitimate business correspondence.

Whale phishing is uniquely dangerous because it exploits the established trust between employees and senior executives.

The investigation revealed that the breach began two days prior when the accountant received a malicious file titled "Transaction_Details_31/08/2026 img". This malware allowed the attackers to hijack the device, access contacts, and monitor conversations. Using this leverage, the hackers instructed the accountant to make three separate transfers of ₹1 crore each to a Bank of Baroda account, which was later traced to mule accounts in Rewa, Madhya Pradesh.

The scam only came to light when the trader was asked for a GST number related to the transactions. Upon realizing no such instruction had been issued, the trader discovered that the WhatsApp conversation and the fraudulent contact had been remotely wiped from the accountant's phone to conceal the evidence.

Did You Know?: Mule accounts are bank accounts used by criminals to receive and quickly move stolen funds, often making it difficult for law enforcement to trace the ultimate beneficiary.

Frequently Asked Questions

1. How does Whale Phishing differ from regular Phishing?
While regular phishing targets large groups, whale phishing targets high-value individuals (the 'whales') with customized, highly convincing messages.

2. What steps should businesses take to prevent this?
Companies should implement dual-approval mechanisms for large transfers and mandate verbal verification through a known phone number for all financial instructions.