Key Takeaways
- Romanian nationals executed Kerala’s first international ATM skimming heist in 2016
- Over ₹3.5 lakh stolen using hidden cameras and skimming devices
- One convict served time, another facing extradition from UK after 9 years
- Case exposed critical vulnerabilities in India’s ATM security infrastructure
Kerala witnessed its first international cyber heist when three Romanian nationals systematically stole over ₹3.5 lakh through ATM skimming at Althara Junction in Thiruvananthapuram. The sophisticated operation, which involved hidden cameras and skimming devices, exposed glaring security gaps that would change how India approaches cybercrime.
The Perfect Crime
On July 8, 2016, three young men casually entered an ATM kiosk at Althara Junction, appearing like regular tourists exploring “God’s Own Country.” This was their third visit in ten days, having previously visited on June 30 and July 6.
They installed a camera disguised as a smoke detector on the ceiling and a hidden skimming device inside the ATM. Over several days, hundreds of customers unknowingly provided their card data to the gang’s system.
The International Operation
The trio were part of a sophisticated global network involved in ATM skimming across Asia and Europe. After arriving in late June, they checked into separate hotels, hired scooters, and scouted ATMs with weak security.
Once they collected enough data, they left Kerala, cloned the stolen cards, and began withdrawing money from ATMs in Mumbai’s Worli area. The theft totaled over ₹3.5 lakh before authorities realized what was happening.
Investigation Breakthrough
Kerala Police’s Cyberdome wing, working with Technopark technical experts, tracked the gang’s movements in what became “one of the best-probed cybercrime cases” in state history.
Police arrested Ilie Gabriel Marian from Mumbai, seen in CCTV footage attaching a router to the ATM. He was convicted under the Information Technology Act.
“This was a first-of-its-kind case in Kerala. We had to adapt quickly, coordinate with global agencies, and depend heavily on digital forensics,” said then state police chief Loknath Behera.
Ongoing Legal Battle
Marian’s capture was just one piece of the puzzle. The alleged kingpin, Ianut Alexander Marino, was tracked to Nicaragua but escaped after securing bail in 2018.
In August 2025, nearly nine years after the heist, authorities traced another accused, Constantine Christian Victor, to the UK. Extradition proceedings are now underway.
“Once procedures are completed and the accused is brought back to the state, the pending charges will be reopened,” a legal official stated.
Legal Challenges
The case was split into seven FIRs, with the trial stretching nearly four years amid frequent adjournments and difficulties bringing expert witnesses. Special public prosecutor Dileep Sathyan described it as one of his toughest trials.
“It went on for 44 months, including the Covid period. Seven cases were being heard together. But we proved the charges under Sections 66 and 43 of the IT Act,” Sathyan said.
Lasting Impact
The Althara ATM heist remains a turning point in Kerala’s digital security landscape, exposing critical vulnerabilities in ATM infrastructure and forcing financial institutions to take cyber threats seriously. Nearly a decade later, the case continues to influence how India approaches cybercrime prevention.
