She shared some details of this criminal case. The names of the participants have been changed.
In October 2025, 40-year-old Askar begins planning criminal activities. To conceal his name and bank details, he finds 18-year-old student Arthur through Telegram. Askar offers the young man training on how to earn money with cryptocurrency and gives him a task—link his bank card to an online resource.
For completing the task, he pays Arthur 15,000 soms, and the student becomes a "dropper," responsible for finding new victims willing to provide their bank cards. Arthur offers his acquaintances an easy way to earn money: a card for 10 days in exchange for cash, after which it can be blocked without consequences. As a result, he creates a group of five guys and one girl named Aizhan.
In January 2026, Arthur hands over six active bank cards and passwords for cryptocurrency wallets to Askar. Upon receiving this information, Askar sends phishing links, allowing him to gain remote access to the victims' mobile devices. Thus, he begins to manage the accounts of the "droppers."
Every morning at 10 a.m., Askar calls people, posing as an employee of a mobile company. On February 5, one of the residents of the capital receives such a call, where he is informed about the urgent need to extend the validity of his SIM card. Askar sends a 4-digit SMS code, and the victim, upon opening the message, dictates these numbers.
As Kanybekova explained, this was actually a code for resetting the password of the banking application. The citizen, unaware of the deception, confirms his identity but soon receives a second call.
“This is the security service. We are observing suspicious activity on your account. Please wait for the code to block the transaction and dictate it,” they say on the other end of the line.
He dictates four digits, which are actually the confirmation code for transferring all his savings. The entire process—from the first call to the account being emptied—takes only 30 minutes. The victim realizes that his account has been drained only after receiving an SMS from the bank about the closure of his deposit and heads to the police.
The total amount of damage amounted to 1,999,006 soms.
This case was registered under Article 209 Part 3 Clause 1 ("Fraud in a large amount") of the Criminal Code of the Kyrgyz Republic.
During the investigation, suspects associated with the dropping were detained: M.S.M., born in 2005, S.A.Z., born in 2008, B.A.I., born in 2006, T.U.B., born in 2006, and O.S.A., born in 2007.
During interrogations, they admitted that they needed money and agreed to sell their personal and bank details.
Later, employees of the Cybercrime Department of the Main Department for Combating Organized Crime tracked down the organizer of the scheme, T.E.T., born in 1984. Kanybekova reported that the detained individual registered accounts on various platforms to exchange the stolen funds for cryptocurrency, in order to conceal and legalize them. To ensure confidentiality, he used VPN services and regularly changed his IP addresses.
Investigative actions are ongoing.
