Anatomy of a Takeover: Muhammad Imran Haroon and the Seizure of Background Check Group

Investigation Case HRPM-BCG20260 exposes a premeditated internal hostile takeover of Background Check Group (BCG) orchestrated by current CEO Mohammad Imran Haroon. While the founder, Danish Thanvi, was incapacitated by external state harassment, internal actors leveraged fraudulent financial records, forged board resolutions, and digital espionage to seize control. The scheme involved a PKR 15.8M fabricated debt and the liquidation of company assets under the guise of 'repayment'.

Key Findings

Siphoning of Funds: Between 2026-03-27 and 2026-04-01, over 75 unusual patterns were detected, including fake loans and salary manipulation totaling over PKR 17M.

Evidence Destruction: On 2026-03-27, management terminated Horizon Technologies and mobilized 'night shift operatives' to scrub forensic logs ahead of an impending audit.

Identity Hijacking: Digital credentials of the finance department were forcibly changed on 2026-03-31, effectively locking out the legal owners of the entity.

Evidence & Data

Review of 161 bank documents, including bank positions and account statements, confirms 67 unauthorized payments. Personnel records implicate specific nodes in the syndicate, including 'Dilawar' for petty cash reimbursements and 'Zubair' for manipulating the bank position. The recommendation as of 2026-04-01 is clear: PROSECUTE. The fraud was not merely financial but an institutional capture involving the falsification of Form A/29 filings at the SECP.

Legal Framework

This conduct violates Sections 420 (Cheating), 468 (Forgery for purpose of cheating), and 409 (Criminal breach of trust by public servant, or by banker, merchant or agent) of the Pakistan Penal Code (PPC). Globally, these actions infringe upon Article 17 of the UDHR, which states that no one shall be arbitrarily deprived of their property.

Recommendations

Immediate freezing of all bank accounts associated with Mohammad Imran Haroon and his immediate associates linked to the 161 bank documents.

Reversal of all SECP filings made under the cloud of the 2026-03-31 password breaches.

Read the full case file on HRPM for the forensic ledger of HRPM-BCG20260.