​A Pune-based IT and dry fruit import firm was defrauded of ₹6.5 crore in a sophisticated Man-in-the-Middle (MitM) cyber attack on March 27, 2025. The company’s 39-year-old director received an email on the company ID, seemingly from a trusted U.S. business partner, requesting a payment for imported almonds. Believing the request was legitimate, he initiated the transfer, which was carried out in five installments. However, upon contacting the U.S. firm, he discovered that the email had been altered—fraudsters had changed a single letter in the sender’s email address and modified the bank account details. The victim had failed to notice these subtle changes, leading to the substantial financial loss.

The Pune Cyber Police have registered an FIR and are investigating the case, which is considered one of the city’s most significant cyber fraud incidents to date.

communications between parties to facilitate fraud. It highlights the importance of vigilance and verification in financial transactions, especially when dealing with international partners.

Sources