On June 8, 2025, I came across a video by @Gambit1 on an Indian scam call center being taken over, exposed and eventually shut down. The call center, which operated out of an office at 41, Jannagar Rd, Mullick Bazar, Beniapukur, Kolkata, West Bengal 700014, India.
The scammers have four computers to facilitate a PayPal refund scam where,
- The scammers will send a fraudulent invoice to their victims, falsely claiming their PayPal account was used to purchase an Apple iPhone.
- The victims, which are predominantly elderly, will be asked to call a designated “suppoat” line that appears to be operated through RingCentral, and the scammers will answer under the guise of PayPal employees and attempt to remotely connect to their victims’ computers through a forked version of ConnectWise hosted on http://rdkc.xyz
-
- The scammers may also use Iperius or support.me
- Once remotely connected, the scammer will attempt to use the victim’s webcam and force them to transfer money directly from their PayPal account.
Gambit has since reported their activities to local authorities, seized control of their VoIP system and even went as far as to track the location of one of the bhenchods through his mobile phone, which was later factory reset.
The bhenchod that was tracked seems to reside at 7MJCG9X8+2FJQ, Ward Number 60, Kolkata, West Bengal 700014, India and I was also able to link their operations to an Amazon refund scam that was reported on March 24, 2025 solely based on the IP address used for their ConnectWise operations.