Advocate Shoeb Hakim

Website Contact the business

Advocate Shoeb Hakim And I defend those who need protection.

Previously: Head of AML & Client ID, Credit Suisse | Capital Markets & Stock Broking Compliance | Digital Forensics & Cybercrime | Criminal Defense | Police Faculty Since 1996 | I train the people who protect India.
🔗 shoebhakim.com AML/CFT/CPF & Cyber-Enabled Fraud Advisor | Digital Forensics & Cybercrime Expert | Criminal Defense | Police Training Faculty

I train the people who protect India. Criminal Defense & PMLA Litigation · Digital Forensics & Cybercrime Investigation · AML/CFT/CPF Compliance · Police Training

📍 Mumbai · Thane · Ahilyanagar · Goa
🔗 shoebhakim.com

The FBI has announced the takedown of KillSec, a ransomware group linked to nearly 1,000 attacks. Three arrests. 110 ter...
01/10/2026

The FBI has announced the takedown of KillSec, a ransomware group linked to nearly 1,000 attacks. Three arrests. 110 terabytes of data secured. The alleged leader is a 16-year-old.

India’s Juvenile Justice Act governs anyone under 18. A 16-year-old accused of orchestrating a transnational ransomware operation would be tried as a juvenile, not as an adult.

India is not a member of Eurojust or Europol. The cooperation framework relies on MLATs and CBI channels.

The question is not whether India can investigate ransomware. It is whether the framework can prosecute a minor who operates a criminal enterprise.

https://lnkd.in/p/d4UfuW2t

Biometric data differs from a password — it cannot be reissued. Once an Emirates ID or fingerprint scan is compromised, ...
01/10/2026

Biometric data differs from a password — it cannot be reissued. Once an Emirates ID or fingerprint scan is compromised, the exposure is permanent, which is why the advisory points only to official UAE government facilities. The risk usually arrives through agents offering visa or ID services, not strangers.

A China-aligned group spent February and July 2026 impersonating a senior Anthropic employee and two former United State...
01/10/2026

A China-aligned group spent February and July 2026 impersonating a senior Anthropic employee and two former United States officials. The targets were AI policy experts at think tanks, universities, and law firms.

The lure was an invitation to advise on AI export controls. The payload was a counterfeit Microsoft OneDrive page designed to capture login credentials.

A separate campaign used a different technique. Threat actors forged the HTTP User-Agent header to impersonate web crawlers from Anthropic, OpenAI, Google, and Perplexity. They scanned 824 IP addresses across 795 network ranges, requesting files like /.env and /.aws/credentials.

The legitimate Anthropic crawler requests /robots.txt. The forged one never did.

Both techniques rely on the same assumption. The target will trust an identity because it looks familiar.

India’s legal framework addresses this imperfectly.

The Information Technology Act, 2000, Section 66C covers identity theft. Section 66D covers cheating by personation using a computer resource. Both provisions presume a human who knowingly impersonates another person.

A forged User-Agent header is not a person. It is a string of text. The server that processes it cannot distinguish between a legitimate crawler and a forged one unless it validates the source IP address against the vendor’s published ranges.

The Bharatiya Nyaya Sanhita, 2023, Section 318 covers cheating. Section 319 covers personation. Neither addresses automated impersonation at scale.

The operational consequence is evidentiary. When an Indian organisation is targeted by a forged AI crawler, the investigating officer must establish that the request came from a human who intended to deceive. The forged header does not identify that human. It identifies a header.

The source article records that the forged crawler identities never requested /robots.txt.

That is the detection signal. It is also the gap. A defensive measure exists. A statutory offence does not.

The impersonation of a named Anthropic employee is simpler. It is personation under Section 66D. The question is whether an Indian court can compel the foreign platform that hosted the counterfeit page to produce the records that identify the operator.

That question has no domestic answer.

The European Union has finalised standards bringing professional football clubs and football agents under its anti-money...
01/10/2026

The European Union has finalised standards bringing professional football clubs and football agents under its anti-money laundering framework from 10 July 2029. The obligations cover customer due diligence, the criteria for identifying business relationships and linked transactions, and group-wide arrangements for cross-border operations.

The target is player transfers. High-value cross-border payments. Agents as intermediaries. Undisclosed ownership of economic rights.

India’s football economy is smaller. That is not where the comparison sits.

Cricket is where the money is.

The Board of Control for Cricket in India is the richest cricket board in the world. The Indian Premier League is valued in the billions. Player auctions move crores in a single evening.

Franchise ownership crosses multiple jurisdictions. Player agents negotiate cross-border endorsement and transfer arrangements.

None of these entities appear in the Prevention of Money Laundering Act, 2002 as reporting entities.

The Act lists banking companies, financial institutions, intermediaries, and persons carrying on a designated business or profession. A cricket board is not a financial institution. A franchise is not an intermediary in the statutory sense. A player agent is not a designated profession.

The Financial Action Task Force’s 2024 mutual evaluation of India identified gaps in the regulation and supervision of designated non-financial businesses and professions. Sport was not named because sport is not yet within the framework’s scope.

The European Union is naming football because it followed the money. Transfers. Commissions. Third-party ownership.

India’s cricket economy runs through the same structures. The question is whether the framework will follow the money into cricket before the next scandal, or after.

The European Public Prosecutor's Office has arrested seven people across three countries for selling a million used phon...
01/10/2026

The European Public Prosecutor's Office has arrested seven people across three countries for selling a million used phones as new: The investigation required 1,770 officers across 19 countries. It took years to assemble the case.
The scheme worked because of a tax rule designed for second-hand goods.

The VAT margin scheme allows a reseller to pay tax only on the profit margin, not the full sale price. It applies only to goods on which VAT has already been paid.

The criminal organization assembled phones from used components in Hong Kong and the UAE. It packaged them as new. It sold them through shell companies in five EU member states and Switzerland.

Because the phones were presented as new, VAT was due on the full price. The scheme caused €30 million in VAT losses and €300 million in consumer damage.

India's enforcement architecture for this kind of fraud is split across two agencies.
The Directorate General of GST Intelligence investigates the tax evasion under the Central Goods and Services Tax Act, 2017. Arrests are made under Section 69.
The Enforcement Directorate investigates the money laundering under the Prevention of Money Laundering Act, 2002.
But the two cannot act in parallel automatically.

The Supreme Court in Vijay Madanlal Choudhary v. Union of India, (2022) SCC OnLine SC 929; 2022 INSC 757, judgment dated 27 July 2022, delivered by Justice A.M. Khanwilkar, Justice Dinesh Maheshwari, and Justice C.T. Ravikumar, held that GST evasion is not a scheduled offence under the PMLA unless it is accompanied by forgery, cheating, or criminal conspiracy.

The EPPO does not face this limitation. It investigates and prosecutes both the VAT fraud and the money laundering as a single offence against the EU's financial interests.

India's GST fraud enforcement is centralized under the DGGI. India's money laundering enforcement is centralized under the ED. They coordinate, but they are not the same agency.
The question is whether coordination produces the same result as integration.

The Supreme Court has suggested that unpaid traffic fines be added to electricity bills. The logic is simple: people wil...
01/10/2026

The Supreme Court has suggested that unpaid traffic fines be added to electricity bills. The logic is simple: people will pay to keep the lights on: The Bench of Justice J.B. Pardiwala and Justice K.V. Viswanathan made the remark during a road-safety public interest litigation.

The Court was told that States and Union Territories have issued e-challans worth approximately ₹45,000 crore. About ₹25,000 crore has been recovered. Roughly ₹20,000 crore remains unpaid.

The Court clarified that this was a suggestion, not a binding direction.

The suggestion raises a legal question that the hearing did not resolve.

Traffic violations are governed by the Motor Vehicles Act, 1988. Electricity supply is governed by the Electricity Act, 2003. The two statutes create different obligations and different remedies.

Linking them would require a legislative framework that does not currently exist.

The Supreme Court has previously addressed the limits of coercive recovery in the electricity context. In K.C. Ninan v. Kerala State Electricity Board & Ors., 2023 INSC 560; Civil Appeal Nos. 2109-2110 of 2004, judgment dated 19 May 2023, delivered by Justice K.M. Joseph and Justice B.V. Nagarathna, the Court held that the duty to supply electricity under Section 43 of the Electricity Act, 2003, is not absolute. It is subject to the charges and conditions stipulated in the Act and the Electricity Supply Code.

The Court also held that electricity dues are tied to the premises, not to the individual. A new owner or occupier can be required to clear arrears accrued on the premises.

A traffic fine is tied to the person who committed the violation. It is not tied to the premises.

If a tenant commits a traffic offence and does not pay, adding the fine to the landlord's electricity bill would penalise a person who had no involvement in the violation.

The doctrine of proportionality, applied by the Supreme Court in Justice K.S. Puttaswamy (Retd.) v. Union of India, (2017) 10 SCC 1; AIR 2017 SC 4161, judgment dated 24 August 2017, delivered by a nine-judge Bench comprising Chief Justice J.S. Khehar, Justice J. Chelameswar, Justice S.A. Bobde, Justice R.K. Agrawal, Justice R.F. Nariman, Justice A.M. Sapre, Justice D.Y. Chandrachud, Justice S.K. Kaul, and Justice S. Abdul Nazeer, requires that any state action restricting a right must be the least restrictive means available.

Disconnecting electricity for an unpaid traffic fine fails that test. There are less restrictive measures already available: blocking registration renewal, impounding vehicles, and blacklisting on the Parivahan portal.

The Court discussed all of these.

The question is which of them can be implemented without fresh legislation, and which require Parliament to act.

“Rent a Partner” Scam for Garba? That viral post may be a scam. Ahmedabad Cyber Crime Branch has cautioned users about s...
01/10/2026

“Rent a Partner” Scam for Garba? That viral post may be a scam. Ahmedabad Cyber Crime Branch has cautioned users about social media posts offering partners for Garba or Navratri against payment.

Seasonal scams follow demand. Garba, festival travel, exam results, tax filing — criminals time their operations to predictable social demand, which makes the pattern easier to anticipate than to react to.

There's a reporting problem with this one too. Payment fraud tied to something that feels embarrassing tends to go unreported, which extends the scam's window and keeps the same accounts active for the next victim.

Anonymous reporting channels and careful messaging matter more here than in ordinary cases.

View Adv Shoeb Hakim’s profileAdv Shoeb Hakim  • YouPreviously: Head of AML & Client ID, Credit Suisse | Capital Markets...
01/10/2026

View Adv Shoeb Hakim’s profile
Adv Shoeb Hakim

• You

Previously: Head of AML & Client ID, Credit Suisse | Capital Markets & Stock Broking Compliance | Digital Forensics & Cybercrime | Criminal Defense | Police Faculty Since 1996 | I train the people who protect India.

now •

A terrorist cell and a smuggling network can share the same operative, the same route, and the same bank account : India's legal framework treats them as two separate problems.
The 15th United Nations Congress on Crime Prevention and Criminal Justice in Abu Dhabi heard a call for African-led operational coordination against this nexus. Mohamed Shalo, Director of Strategic Partnerships and Communication at the General Secretariat of the National Committee, delivered opening remarks at the session.
The nexus itself is well-recognised. The Financial Action Task Force has documented the overlap for over a decade. The United Nations Security Council has adopted resolutions on the connection between terrorism and organised crime.
The institutional architecture remains fragmented.

India's framework reflects this fragmentation.
Terrorist financing is investigated under the Unlawful Activities (Prevention) Act, 1967, by the National Investigation Agency.
Money laundering is investigated under the Prevention of Money Laundering Act, 2002, by the Enforcement Directorate.
The two statutes overlap. The Prevention of Money Laundering Act's schedule of predicate offences includes offences under the Unlawful Activities (Prevention) Act.
But the agencies are separate. The mandates are separate. The evidentiary standards are separate.

An investigation that begins as a money laundering case and reveals a terrorist financing angle must be transferred or coordinated. The mechanism for that coordination is not codified in either statute.
Neither referral is automatic. Neither is governed by a timeline. Neither has a defined evidentiary standard.

The Financial Action Task Force's Mutual Evaluation of India, published in 2024, assessed India's effectiveness in both frameworks. It noted progress. It also noted the need for stronger coordination.
That is where the operational coordination the UAE is calling for becomes relevant.

Not as a diplomatic statement. As a statutory gap.
The crime-terrorism nexus is not a new problem. The coordination mechanism is.

Middle Eastern and North African states are building a regional framework to fight fraud-linked money laundering. Intell...
01/10/2026

Middle Eastern and North African states are building a regional framework to fight fraud-linked money laundering. Intelligence sharing. Working groups. AI-driven risk mapping.It has no power to make any member state change a single law.

The UAE has proposed the initiative under MENAFATF, the regions FATF-style body. It will be presented at the November plenary in Abu Dhabi.The working groups mandate: examine national risk assessments, identify legislative gaps, and develop strategies to address fraud-related financial crime. The output will be a report. The report will contain recommendations.

MENAFATF was founded in 2004 by fourteen governments. It operates by consensus. It is not treaty-based.

FATF mutual evaluations carry consequences. A jurisdiction that fails to address identified deficiencies can be placed on the grey list. That triggers enhanced monitoring and restricts correspondent banking relationships.

MENAFATF recommendations do not carry that weight.India knows this structure well.

The Asia/Pacific Group on Money Laundering, Indias regional body, operates the same way. It evaluates. It recommends. It does not legislate.

India's 2024 FATF mutual evaluation identified gaps in the regulation and supervision of designated non-financial businesses and professions — real estate agents, dealers in precious metals, trust and company service providers.

Closing those gaps requires amendments to the Prevention of Money Laundering Act, 2002. That is Parliaments function, not APGs.

The evaluation cycle continues. The legislative calendar does not move at the same speed. The gap is identified faster now. It stays open just as long.

Address

Thane

Opening Hours

Wednesday 2pm - 6pm
Thursday 2pm - 6pm
Friday 2pm - 6pm
Saturday 2pm - 6pm
Sunday 2pm - 6pm
7pm - 10:50pm

Alerts

Be the first to know and let us send you an email when Advocate Shoeb Hakim posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to Advocate Shoeb Hakim:

Shortcuts

Share