Understanding 'Courier Scam' After BMC Commissioner Ashwini Bhide's WhatsApp Account Hacked

Brihanmumbai Municipal Corporation (BMC) Commissioner Ashwini Bhide recently became the latest high-profile public figure to fall victim to the pervasive "courier scam" after fraudsters briefly hijacked her WhatsApp account over the weekend and solicited funds from her contacts. While swift action restored the account before any financial transactions were completed, the incident highlights a sophisticated call-forwarding exploit increasingly targeting public officials and citizens alike.

How the Cyberattack Unfolded

According to Mumbai Police, the breach began when Bhide received a phone call regarding an unexpected parcel delivery. "In the case of the BMC Commissioner, she received a call from a person who claimed that he had come to deliver a parcel on Saturday," a senior police official stated. Ashwini Bhide’s WhatsApp Account Hacked: BMC Commissioner Cautions Public Against Fraudulent Money Requests.

BMC Commissioner Ashwini Bhide's WhatsApp Account Hacked

When Bhide questioned the origin of the parcel, the caller instructed her to dial a specific sequence sent via text message to verify the delivery details. That sequence - beginning with *21* followed by a mobile number and ending with # -  served as a stealth command. "The *21*  followed by a mobile number and # in the end is actually an instruction for activating call forwarding from her number to the mobile number mentioned in the message," the official explained, reports Indian Express.

Bypassing OTP Verification

By tricking the victim into activating unconditional call forwarding, the perpetrators successfully intercepted all incoming telephone calls and voice traffic destined for Bhide's mobile device. Armed with this diversion, the fraudsters initiated a WhatsApp account login on a secondary device and bypassed traditional SMS verification. "The accused then logged into Bhide’s WhatsApp number from another phone and activated it by opting for a voice call instead of getting an OTP. The call for activating WhatsApp was now received by the fraudsters as they had diverted Bhide’s call to their own number," investigators noted.

Once inside the application, the threat actors browsed her contact directory and transmitted urgent requests for money. The scheme was quickly flagged, allowing Bhide to disable the diverted feature and restore her profile. Authorities confirmed that no First Information Report (FIR) has been filed thus far.

What Is the 'Courier Scam'?

The "courier scam" is a cyber fraud method where criminals impersonate delivery personnel or customs officials, claiming that an illegal parcel, drugs, or contraband has been intercepted in the victim's name. By inducing panic or confusion, fraudsters trick victims into following technical prompts - often involving hidden USSD codes or call-forwarding commands - to compromise their personal telecom and messaging accounts.

A Growing Trend Among Public Figures

Bhide joins a growing roster of prominent Indian leaders who have been targeted by identical methods originating primarily from the Jharkhand-Bihar border region. Previous targets include Shiv Sena leader Shaina NC, Marathi actress Vanita Kharat, NCP leader Supriya Sule, and BJP leader Sambit Patra. Investigators note that fraudsters deliberately execute these hacks over weekends when administrative oversight is lower. "Also, if a well-known person asks others for money, people usually do not ask too many questions and do as they are told. The accused usually use this during weekends to target people," police said. Mumbai Mahanagar Gas Cyber Scam: 2 Arrested for Duping Resident of INR 4.98 Lakh Over Fake PNG Disconnection Threat.

Security Advice and Emergency Codes

Law enforcement agencies urge mobile users to remain vigilant against unsolicited delivery notifications and unexpected dialling prompts. If individuals suspect their phone or messaging applications have been compromised via unauthorised call redirection, cybersecurity experts recommend dialling ##002# to instantly cancel all active call-forwarding protocols and ##21# to block potential OTP thefts.

(The above story first appeared on LatestLY on Aug 25, 2026 12:39 PM IST. For more news and updates on politics, world, sports, entertainment and lifestyle, log on to our website latestly.com).