Live Investigation
CFX Export
CLASSIFIED
TLP:RED
Case Findings

Key Findings & Linked Evidence

Each finding aggregates corroborating artifacts across chats, banking logs, ERP edits, and regulatory filings.

6 findings · Rs 9,095,406 exposure
F-001 · Tax Fraud
Withholding-tax line items zeroed post-filing on SRB portal

12 filings show admin-session edits that silently set withholding-tax amounts to zero after the original submission was acknowledged.

Critical
Confirmed
4 artifacts
3 statutes citedRs 2,029,066
F-002 · Embezzlement
Shell-vendor accounts receive inflows matching forged invoices within 24h

Four shell entities — most prominently Crescent Trade Solutions and Indus Procurement FZE — hold accounts whose inbound credits mirror forged vendor invoices in amount and reference within a same-day window.

Critical
Confirmed
5 artifacts
3 statutes citedRs 1,279,342
F-003 · AML
Sub-CTR cash extractions by Dilawar Khan across multiple branches

Chat directives place Dilawar Khan at three branches within a single window, executing cash withdrawals deliberately structured beneath the Currency Transaction Reporting threshold.

High
Confirmed
4 artifacts
3 statutes citedRs 4,350,000
F-004 · Corporate Hijacking
Beneficial-ownership records overwritten on SECP filings overnight

SECP beneficial ownership for the operating company was reassigned to a nominee ('A. Qureshi') in an overnight filing window without notification to existing directors.

Critical
High
4 artifacts
3 statutes citedQualitative
F-005 · Embezzlement
Chat corpus places Imran → Zubair → Dilawar in sequence for every high-risk event

Across every High-risk invoice and cash extraction, the chat corpus shows a consistent direction-of-instruction chain from Imran to Zubair to Dilawar within the preceding 72 hours.

High
High
6 artifacts
3 statutes citedQualitative
F-006 · Document Forgery
Persistent gap between gross invoices and net bank deposits

Aggregated across the invoice population, gross invoiced value exceeds net bank deposits by a margin substantially larger than the legitimate withholding-tax component.

Medium
Confirmed
3 artifacts
2 statutes citedRs 1,436,998
Evidence-linking methodology
Findings are constructed by joining four primary streams — insider chat archives, banking transaction logs, ERP/portal change journals, and SECP/SRB filings — on actor, time, and amount. Each artifact reference in a finding deep-links into the corresponding Timeline, Money Trail, or Syndicate Map record so the chain of custody is reviewable end-to-end.