Between 2017 and 2020, five listed companies on Indian exchanges came alive out of nowhere. They had no meaningful revenue, no announcements, no reason for anyone to touch them.
Yet their share prices climbed like they were the hottest stories in the market.
One rose roughly eleven and a half times in under twelve months. Another saw its trading volume explode by 1,638 percent in a single stretch.
Lakhs of ordinary investors received SMS tips telling them to buy, apparently from names they trusted, and they did.
None of it was real.
According to SEBI’s final order dated June 30, 2026, the entire episode was an engineered market-manipulation scheme that funnelled about ₹143.79 crore of unlawful gains through layers of shell entities and forex operators to a single mastermind, a man the order names as Hanif Shekh, and to the promoters of the companies involved.
The order runs to 394 pages, names 226 entities, and ends with Shekh banned from the securities market for seven years and penalised ₹10 crore, on top of disgorgement of illegal gains.
This is how the machine worked, scrip by scrip, and how it finally came apart.
How the Scam Began: Manufacturing Fake Demand in 5 Listed Stocks
The five companies at the centre of the case were Mauria Udyog, 7NR Retail, Vishal Fabrics, GBL Industries, and Darjeeling Ropeway.
All five shared the same fatal attraction for a manipulator: they were illiquid and unwatched. When almost nobody is trading a stock, a small group can control what the price appears to do.
So before a single member of the public was lured in, the price had to be faked.
The order describes clusters of connected entities, labelled “price-volume influencers”, trading shares back and forth among themselves to create the illusion of demand. One entity would sell, and a connected entity would buy within seconds, each transaction nudging the price a little higher.
Nothing was genuinely changing hands. It was a closed loop dressed up as a market.
The forensic detail SEBI extracted is the most damning part.
In Mauria Udyog, the order documents an entity placing buy orders around ₹50 below the market price, and then, within one second of a matching sell order appearing, revising its bid upward to roughly ₹250.8 when the last traded price was ₹252.4, a buy engineered purely to swallow a connected party’s sell order.
A cluster of these entities, trading among themselves, contributed hundreds of rupees of upward price movement, several times the net genuine movement in the scrip.
GBL Industries is where the pattern becomes almost absurd.
Out of 9,788 trades examined, 7,288, roughly 74 percent, involved just a single share changing hands. In a large share of them, the gap between buy and sell orders was under 10 seconds.
Circular trading, where the same group sold and bought back the same shares, made up nearly 67 percent of that group’s total volume.
A stock can look furiously active while, underneath, one share is being passed around a small circle at ever-higher prices.
How Hanif Shekh Used Fake SMS Tips to Lure Retail Investors?
Once the charts were climbing convincingly, the real prey were invited in.
The order describes a bulk-SMS operation of industrial scale. For Mauria Udyog, buy recommendations went out to more than 60,000 unique mobile numbers.
For GBL alone, approximately 2.10 crore bulk SMSes were sent. The tips were also pushed through websites set up for the purpose, including midcapgains.in and mbstocks.in.
The crucial trick was disguise. The SMS sender headers were spoofed to mimic reputed brokers, imitating names like Zerodha and ICICI Securities, so that a recipient would assume the recommendation came from an established, credible source.
The psychology is simple and brutal. An ordinary investor opens the message, sees a familiar name, then pulls up the chart and finds the stock genuinely rising.
A trusted tip plus a rising price feels like proof. So they buy. And the moment retail money floods in, the price, now driven by real demand, jumps even higher.
The Pump-and-Dump Payoff: How Shares Were Sold at Inflated Prices?
This is the payoff. The whole point of inflating the price was to have shares waiting to be sold at the top. As the public bought, entities connected to Shekh and to the promoters offloaded their holdings into that flood of demand, booking the gains.
Many of these selling accounts belonged to small, disposable people.
The order describes company employees and labour contractors who had received shares before listing without paying for them, and others, modest earners who had simply rented out their trading accounts for a commission, one of them for around ₹3,000.
Their names carried crores; their hands kept almost nothing. Because they had lent their accounts voluntarily for a commercial motive, SEBI held them liable as well, not as masterminds, but as knowing participants.
The individual scrips read like variations on the same script. In 7NR Retail, the price rose approximately 11.5 times in under twelve months on manufactured volume.
In Vishal Fabrics, the price-riggers and sellers included entities linked to the company’s own promoter group.
In Darjeeling Ropeway, the promoter himself offloaded 2,17,335 of his own shares onto the manipulating sub-groups as the price was pushed to a high of ₹112.40; the manipulator and the company were partners, not adversaries.
Finally, the proceeds had to be cleaned. The order traces the sale money moving through financiers and conduit companies and, ultimately, into forex operations that converted it to cash and kept no bills.
Each transfer stripped away another layer of identity, so that by the end, no single account obviously pointed to the man who ran the whole thing.
The order describes this deliberate obscuring of the ultimate beneficiaries as one of the gravest features of the scheme.
Darjeeling Ropeway: The One Stock SEBI Caught in Just 4 Days
There is a revealing exception buried in the case. In Darjeeling Ropeway, the manipulation lasted only four days, from December 23 to December 27, 2019.
That is because the stock exchange’s surveillance framework for unsolicited messages flagged the scrip on December 27, and once that red flag went up, the price began to collapse before the offloaders could fully cash out.
That single detail is quietly explosive. It proves the surveillance system was capable of catching exactly this behaviour within days.
The obvious question, why the other four scripts ran for years while this one was stopped in four days, is one the order does not fully answer.
How SEBI Traced the ₹143.79 Crore Scam Back to Hanif Shekh?
Hanif Shekh had built the scheme to be untraceable. The SMS headers were fake. The selling accounts belonged to other people. The money vanished into cash.
On paper, he was nowhere. The investigation did not chase the fake names.
It chased the phone numbers. SEBI worked back to the numbers behind the SMS reseller accounts, dealing with resellers named in the order as Spark TG, Newrise Technosys, Popular SoftTech, and Awadh Info, and the numbers behind the websites, obtained via the domain registrar and web-hosting providers.
Then it matched those numbers against Shekh’s own digital footprint: his travel bookings, food-delivery orders, hotel stays and bank records.
The same numbers kept surfacing. Call-detail records and WhatsApp chats between his numbers and the SMS resellers confirmed the link.
There was also a master key that tied everything together.
Across all five scrips, different fronts, different cities, different brokers, including a broker named in the order whose owner was in frequent contact with Shekh, the money consistently drained into the same set of forex operations.
Five apparently separate scams shared one destination.
That common drain is what proved this was never five coincidences. It was one machine, with one man at the centre.
The man who had erased himself from every account was fully visible inside his own phone.
SEBI’s Final Order: Penalties, Bans, and Unanswered Questions
SEBI’s interim order came in 2023. The final order came on June 30, 2026, roughly six years after the scheme had been completed, and by the time it arrived, two of the accused had died, their liabilities passing to their heirs.
If anyone still wonders, is pump and dump illegal in India? This massive 394-page verdict leaves no room for doubt.
The directions were clear: Hanif Shekh was restrained from the market for seven years and penalised ₹10 crore, separate from and in addition to the disgorgement of unlawful gains, which carries 12 percent interest from October 2020 and is routed to the Investor Protection and Education Fund.
The promoters and key collaborators drew heavy bans and penalties of their own. The smallest fronts, the account-lenders who earned a few thousand rupees, face ₹5 lakh penalties and four-year bans.
Which leaves the uncomfortable questions any honest reading of this case has to sit with. If surveillance caught one scrip in four days, why did four others run for years?
If a case takes the better part of a decade to conclude, what does justice mean for the accused who die before the verdict and the investors who were fleeced before the first order?
And when the recovered crores flow into a government fund, does the retail investor who bought at the very top ever see a single rupee returned?
The order answers the first question: who did it and how.
The rest, for now, hang in the air.
