The Anatomy of a Takeover: Forensic Reconstruction of the BCG Insider Threat

Investigative report HRPM-BCG20260 exposes a sophisticated, multi-year internal corporate takeover of Background Check Group (BCG). While the founder was incapacitated by external state harassment, executive management—specifically current CEO Mohammad Imran Haroon and associates—orchestrated a systematic dismantling of corporate governance. This study maps the transition from fiduciary duty to a criminal syndicate behavior.

Key Findings

Fabricated Indebtedness: The creation of PKR 15.8M in fake debt to justify asset seizures and share transfers via Form A/29.

Evidence Destruction: On March 27, 2026, as investigations peaked, Yousuf terminated Horizon Technologies to bring in a 'night shift operative' specifically to scrub forensic logs.

Identity Hijacking: Systematic use of ghost employee payrolls to funnel capital out of the primary corporate accounts.

Financial Data Analysis

The forensic summary completed on April 1, 2026, confirms a total fraud exceeding PKR 17M. The methodology was consistent: changed finance passwords, manipulation of 161 bank documents, and the fabrication of 75 unusual patterns, including director payments and fake loans. Specific actors mentioned in the reimbursement logs include Dilawar and Zubair, who managed 'Petty Cash' and 'Commission' positions that appear to have bypassed standard audit trails.

The SECP Filing Fraud

Centrally, the takeover relied on the submission of forged board resolutions to the SECP. By misrepresenting shareholder meetings that never occurred, the syndicate was able to alter the company's legal structure, effectively disenfranchising the legitimate owners under the cover of regulatory filings.

Legal Framework & Criminality

These actions fall under several sections of the Pakistan Penal Code (PPC), specifically those concerning Corporate Fraud, Embezzlement, and Forgery. Furthermore, the active destruction of digital evidence during a pending investigation constitutes a separate criminal offense. The 'Broken Chain of Custody' mentioned in related case files (HRPM-DTH20160) suggests a broader environment of legal impunity.

Recommendations

Based on the April 1st recommendation, the state must PROSECUTE the identified individuals. Financial institutions must freeze the parallel Wise UK and UBL accounts linked to the suspect transactions. Read the full case file on HRPM.