In a First for India, Karnataka Cyber Command Busts Illegal eSIM Box Syndicate; 4 Held After 55-Day Hunt ​Bengaluru In a landmark operation marking the first such case cracked anywhere in the country, the #Karnataka State Police #CyberCommand Unit has busted an illegal embedded SIM (#eSIM) box network operating clandestinely out of two residential apartments in the Whitefield tech corridor, officials confirmed on Thursday. ​The breakthrough came after an arduous, nearly 55-day technical pursuit. Unlike conventional physical SIM cards that leave direct point-of-sale footprints and visible hardware trails, tracking virtual eSIM profiles across encrypted networks presented severe investigative challenges. Investigators had to pierce through layered digital provisioning pipelines before finally closing in on the syndicate's infrastructure and supply chain. ​Four key operatives linked to the illicit procurement and conversion of eSIMs have been arrested from Tiroda in #Maharashtra’s Gondia district. ​The 55-Day Investigation and Bust ​The probe began after the Chief Circle Nodal Officer of Bharti #Airtel Limited, #Bengaluru, lodged a complaint on August 26, 2026, flagging suspicious, unauthorized routing over Airtel connections in the Whitefield and Kadugodi pockets. The #Whitefield #CyberCrime Police Station (CCPS) registered and set the technical hunt in motion. ​Because the syndicate deployed virtual eSIM profiles rather than traditional physical SIM cards, pinpointing the hardware locations and device identities required extensive cyber forensics and telemetry analysis in close coordination with the Department of Telecommunications (#DoT), Karnataka. ​Following nearly two months of sustained tracking, joint teams raided two high-density operational hubs functioning in separate apartments within the Whitefield division: 1. ​Kadugodi Facility: Six SIM Box (GSM gateway) units housing 32 slots each, totaling 192 slots active with provisioned eSIM connections across multiple telecom service providers. 2. ​Pattandur Agrahara Facility: Four SIM Box units with 32 slots each, accounting for 128 active slots. ​Operating in tandem, the dual facilities wielded a combined capacity of 320 live lines running through a single coordinated network. The setup functioned as an illicit domestic exchange, masking international originations and routing unauthorized traffic to bypass telecom firewalls and lawful interception systems. ​Tracing the digital breadcrumbs behind the virtual profiles led cyber investigators to Tiroda in Maharashtra’s Gondia district, where operatives were procuring SIM credentials and converting them into activated eSIM profiles to feed the Bengaluru gateways remotely.​Four accused persons, all residents of #Tiroda, were tracked down and arrested; however, police have withheld their identities citing the ongoing investigation. ​According to police, the country-first eSIM box setup served as the core telecommunications backbone for widespread cyber intimidation schemes nationwide, including infamous "#DigitalArrest" scams, sextortion rackets and high-value financial fraud. ​"Preliminary leads suggest the possibility of substantial financial exposure, potentially running into hundreds of crores of rupees across the wider network," said Dr. Pronab Mohanty, IPS, Director General of Police, Cyber Command. "The actual number of victims, financial losses, and the full extent of the network remain subject to verification through continuing investigation and inter-agency coordination." ​Forensic analysis of the seized gateway hardware and cloud logs is underway to map out every call routed through the hub and uncover the masterminds directing the syndicate. @KarnatakaCops @DgpKarnataka @PriyankKharge @DoT_India @airtelindia @PIBHomeAffairs