The Special Investigation Team (SIT) probing the elector fraud successful Aland Assembly constituency made the archetypal apprehension successful the lawsuit connected Wednesday.
A antheral moving 2 portals that provided telephone numbers and OTPs to the Kalaburagi-based backstage steadfast to unfastened untraceable accounts connected Election Commission (EC) portals done which forged Form 7s to delete genuine voters of Aland were made successful 2023, has been arrested.
Bapi Adya was picked up from a colony successful Nadia territory connected the Indo-Bangladeshi borderline successful West Bengal connected Wednesday night. He was produced earlier the First Additional Chief Metropolitan Magistrate (ACMM) Court successful Bengaluru connected Thursday and remanded successful 12 days constabulary custody.
Bapi Adya allegedly runs 2 portals that supply telephone numbers and OTPs sent to these numbers to bash transactions online, for ₹10 per specified credential.
These portals, sources said, look to person a tie-up with a akin portal successful the United States of America and their servers are besides suspected to beryllium based abroad. The constabulary recovered aggregate integer devices from the arrested prson.
The OTP mystery
In the Aland case, 5,994 of the 6,018 Form 7 applications (to delete elector names from the list) were recovered to beryllium forged successful February, 2023, during an onground verification pursuing a ailment by Congress campaigner B. R. Patil.
These applications were made successful the names of voters of Aland to delete different names from the list, with neither of them being aware. The Hindu reported connected the lawsuit connected September 7, 2025.
These forged Form 7s were made done 72 accounts created connected EC platforms — Voter Helpline App (VHA), National Voters’ Services Portal (NVSP), and Garuda app, details of which were shared with the investigators by the EC. However, further requests of circumstantial method information haven’t received a effect till date.
These 72 accounts were created utilizing 72 mobile numbers, dispersed crossed 18 States. While records amusement these numbers were sent OTPs from the EC portal portion creating the login ID and passwords, nary of the 72 who utilized these mobile numbers was alert of this. How the backstage steadfast that submitted the forged Form 7s zeroed successful connected these 72 telephone numbers and however they accessed OTPs without the owners knowing it is inactive a mystery.
The SIT has till day questioned six persons associated with the Kalaburagi-based backstage firm, which got a declaration to marque forged Form 7s. The SIT besides raided erstwhile BJP MLA Subhash Guttedar and his sons successful transportation with the case. They person secured anticipatory bail.
One of the cardinal persons moving the firm, who was successful Dubai and returned recently, was questioned by the SIT. He helped lick the OTP mystery.
Portals that merchantability OTPs
The co-owner of the steadfast reportedly pointed to investigators 2 portals that provided them with the 72 mobile numbers and OTPs to unfastened accounts connected the EC portals.
After registering connected these portals for a charge, the lawsuit volition person to prime a work similar WhatsApp oregon Telegram and “order” for a credential.
The portal generates a mobile number, which needs to beryllium copied and pasted successful the work selected, to get an OTP sent to that peculiar number. Bapi Adya was identified and tracked down done the wealth way the Kalaburagi-based steadfast paid.
While this was the beforehand extremity of however these portals worked, what exertion they utilized to entree OTPs sent to these random telephone numbers it generated, is yet to beryllium cracked.
Web portals that merchantability credentials and OTPs without the owners of these SIM cards being involved, person raised reddish flags for its imaginable successful cybercrimes. These portals volition present apt beryllium probed for transactions beyond the Aland case.
Authentication process
However, the portals enactment lone successful lawsuit of azygous authentication and not for transactions that person treble authentication. EC portals had lone azygous authentication erstwhile the elector fraud happened successful 2023 and present person treble authentication.

6 months ago
2



