A trail that the Directorate of Revenue Intelligence (DRI) picked up in the bylanes of Darbhanga district in Bihar during a discreet operation has uncovered shocking links between youths from Bihar and KK Park, the notorious Southeast Asian cyber scam centre, which is currently being stormed by Myanmar and US agencies.
Well-placed sources in the agency said that the magnitude of the case is so large, and the disclosures so sensitive, that the investigation has been prioritised, with Union Finance Minister Nirmala Sitharaman personally taking note of it.
The most shocking revelation is that the arrested mastermind, Roshan Kumar Jha (30), was being directed by his Chinese handlers operating from KK Park. A native of Balha village, he had also set up three spoofing centres—or “studios”—in Darbhanga, equipped with high-end communication systems and ready for operation.
The centres were located at the Matrichaya Building near Gyan Bharti Public School in Laxmi Sagar, another near J.P. Chowk, and a third at Sahu Niwas in Madarpur near Marwari College.
Even as the public and law-enforcement agencies in Bihar were preoccupied with elections and security arrangements, the Patna unit of the DRI quietly intercepted two mis-declared consignments sent from Thailand. Listed as “power amplifiers,” the parcels were received in New Delhi and Kolkata, both addressed to Bittu from Havi Bhouar village in Darbhanga district, a close associate of Roshan.
On October 31, the DRI laid a trap and arrested Bittu while he picked up the consignment. The parcel contained five VOIP devices, four 32-SIM-slot units and one 256-SIM-slot unit, all marked “Made in China.” The Kolkata parcel carried a similar set. Both were seized.
Bittu later disclosed that the consignment belonged to Roshan, described as his manager and the mastermind. The DRI subsequently arrested Roshan from Bihar. Originally from Balha village under Bahera Police Station, he allegedly confessed to being a bulk seller of fake SIM cards and working for a Chinese handler who instructed him to establish three spoofing centres equipped with WiFi-controlled smart sockets, high-efficiency inverter systems, internet-enabled cameras, SIM boxes, and other devices.
Also read: Cyber Cell busts multi-state fraud syndicates
Roshan had previously worked as an orchestra and bar singer in Mumbai, and had been part of the KK Park cyber network for over two years. Agency sources said a third accused, Boby Kalyan from Kurukshetra in Haryana, was also arrested from Darbhanga.
Sources further identified seven individuals under active surveillance, Vijay, Rishi Kumar and Ritesh Kumar, all from Havi Bhouar village under Bahera Police Station; Sujit Kumar Thakur (address not known); Abhishek Kumar Thakur and Manish Kumar, both from Korthu village under Ghanshyampur Police Station; and Nirmala Kulpati, wife of Roshan and native of Malegaon in Maharashtra.
“This is the first case of its kind in North India cracked by any law-enforcement agency, where the world’s most egregious cybercrime compound, KK Park, has expanded its criminal network even into rural areas. The links of this gang with KK Park and their Chinese handlers are very clear. These VOIP devices seized by DRI were meant to set up high-tech spoofing centres, or studios, to execute cybercrimes. Once operational, they were to be remotely controlled by Chinese handlers sitting inside KK Park. They were in the process of setting fourth spoofing centre in Darbhanga but they were arrested. Investigation has disclosed that they had set up one such spoofing centre at Janakpuri in New Delhi. Roshan came in touch with international cyber criminals in Mumbai,” agency sources told NAI.
“What you see in the form of digital arrests, gambling scams, and sextortion cases across the globe, a majority of them originate from KK Park,” the sources added.
Subsequent raids by the DRI and Bihar Police led to the recovery of sophisticated communication devices. The accused allegedly lured people with free SIM cards offering unlimited data for unlimited periods, along with free power banks and hair trimmers. They procured multiple SIM cards from different service providers, later used in cyber fraud.
Meanwhile, Bihar Cyber Police have registered an FIR at the Cyber Police Station in Darbhanga (PS Case No. 72/25) under Sections 111(12), 111(3), 318(4), 319(2), 336(3), 337, 338, 339, 340(20), and 3(5) of the BNS, along with Sections 66(C) and 66(D) of the IT Act. The Economic Offences Unit of the Bihar Police is leading the investigation.
Follow us
