12 Kolkata: Easy-to-guess default passwords and editable software to upload bank accounts are among the primary reasons for the Rs 1.9 crore tab fraud scam statewide, investigators have learnt. The schools never changed the passwords, the default software did not have any prompt to indicate how strong is the password, making it easier for the scamsters to hack into the portal and edit the original bank account details with those of fraud recipients.
Learning from "mistakes," the school education department is likely to data safeguards by introducing a software which will alert the beneficiary (students) in case any changes are made to their bank accounts. In addition to passwords, the IT department may also introduce One-Time-Password for logging into the central portal to upload the student's data. An official said, "We have identified the root of this issue and now we are working on securing data. The whole path will be secured from next time onwards so that logs will be secured."
Diwakar Das, the teacher who was arrested on Sunday, suspected to be a mastermind, took advantage of several loopholes in the Banglar Sikkha portal, the investigators said. Dibakar, they further said, even demonstrated to the detectives how they executed their plan, pointing out each of these loopholes. Police said the entire statewide plan was made from two hotspots – Chopra in North Dinajpur and Tamluk-Chandipur in East Midnapore.
Cops said that during interrogation, the suspects revealed that though there were instructions to change the ‘default password' provided officially, many schools did not comply. Taking advantage of this, they altered the account numbers next to the students' names to siphon off money.
"As passwords were not changed, the accused managed to access the codes and carry out the crime. The accused also obtained detailed bank account information from many people by luring them with the promise of high commissions, Rs 300-500 for every Rs 10,000 received in the account. As word of this ‘scheme' spread through word of mouth, many others, like Dibakar, embezzled money in the same manner. Efforts are underway to track them down," said an officer.
Meanwhile, Dibakar has now also been linked to Mansur Alam, who was caught from the Chandipur police station area in East Midnapore. Two teachers from Malda and Cooch Behar have already been apprehended, and their connection to Dibakar is being investigated. Kolkata Police is likely to take one accused arrested by East Midnapore Police into their custody.
Dibakar is a resident of Daluahat in Ghiringaon, Chopra. He joined Mirchagolgach Primary School in Chopra in Feb. His mother is a former Trinamool Congress panchayat leader. Following Dibakar's arrest, his family has disappeared. Mohammad Manzur Alam, the acting headmaster of the school, claimed that Dibakar was not attending school since Nov 14.
According to Bengal and Kolkata Police, the total number of victims at present stands at 1,913 with 121 separate FIRs registered across Bengal so far, 11 of them in Kolkata.