What Happened
- Co-founders of CoinDCX — India's largest cryptocurrency exchange — Sumit Gupta and Neeraj Khandelwal were arrested by Thane police following an FIR registered on March 16, 2026 at the Mumbra police station, Thane district.
- The FIR was filed by a 42-year-old insurance consultant who alleged he was defrauded of approximately ₹71.6 lakh (~$85,000) after being promised high returns and franchise rights tied to CoinDCX between August 2025 and February 2026.
- CoinDCX denied wrongdoing, calling the FIR "false and filed as a conspiracy against CoinDCX by impersonators posing as its founders." The company stated the fraud was carried out through a fake website (coindcx.pro) entirely separate from its legitimate platform (coindcx.com).
- CoinDCX reported that between April 1, 2024 and January 5, 2026, it had filed complaints about 1,212 fake websites impersonating its platform.
- The case draws attention to a persistent problem in India's crypto ecosystem: impersonation scams using fake exchange websites and social media personas to defraud retail investors.
Static Topic Bridges
Virtual Digital Assets (VDA) — Regulatory Framework in India
India does not recognise cryptocurrency as legal tender but has created a regulatory and taxation framework for Virtual Digital Assets (VDAs). The Finance Act, 2022 inserted Section 115BBH into the Income Tax Act, 1961, defining VDAs and imposing a flat 30% tax (plus 4% health and education cess) on income from VDA transfers, with no deduction allowed for expenses or losses from other VDAs.
- Section 115BBH, Income Tax Act (via Finance Act 2022): 30% flat tax on VDA income
- Section 194S (Finance Act 2022): 1% TDS on VDA transfer payments above ₹50,000/year (₹10,000 for specified persons)
- VDA definition (Income Tax Act): any information, code, number or token (not Indian or foreign currency) generated through cryptographic means; includes NFTs
- Crypto is NOT legal tender in India; the Cryptocurrency and Regulation of Official Digital Currency Bill (proposed) has not yet been enacted as of 2026
- India's Central Bank Digital Currency (CBDC): RBI launched the Digital Rupee (e₹) wholesale pilot in November 2022 and retail pilot in December 2022
Connection to this news: The CoinDCX case exposes the gap between India's taxation of VDAs (well-defined) and consumer protection/investor safety in the crypto market (less developed). Retail investors attracted by crypto's high-return narrative are particularly vulnerable to impersonation scams in this regulatory grey zone.
PMLA and VDA Service Providers as Reporting Entities
The Ministry of Finance, through a gazette notification on March 7, 2023, brought Virtual Digital Asset (VDA) service providers within the ambit of the Prevention of Money Laundering Act (PMLA), 2002. This means crypto exchanges and other VDA businesses are now classified as "Reporting Entities" under PMLA with mandatory Know Your Customer (KYC), transaction monitoring, and suspicious transaction reporting obligations.
- PMLA notification (March 7, 2023): VDA service providers = reporting entities under PMLA, 2002
- Compliance obligations: KYC for all users, due diligence on beneficial owners, record-keeping under PMLA (Maintenance of Records) Rules, 2005
- FIU-IND (Financial Intelligence Unit — India): VDA service providers must register with FIU-IND; non-compliant offshore exchanges received show-cause notices in December 2023 (Binance, KuCoin, Kraken, Gate.io, etc.)
- PMLA, 2002: money laundering provisions; enforcement by Enforcement Directorate (ED)
- India's Financial Action Task Force (FATF) peer review: VDA inclusion in PMLA aligns with FATF's Recommendation 15 on Virtual Assets and VASPs
Connection to this news: While CoinDCX is a registered FIU-IND compliant exchange, the case highlights how impersonation scams operating through unregistered fake platforms exploit the regulatory distinction between legitimate registered exchanges and fraudulent impostors — a challenge that PMLA registration alone cannot fully address.
Cryptocurrency Impersonation Fraud — Technology and Consumer Protection
Impersonation fraud in the crypto space involves creating look-alike websites (cybersquatting), fake social media accounts, and fraudulent "franchise" or "investment" schemes using the brand equity of legitimate exchanges. In India, such frauds fall under the Indian Penal Code (IPC) provisions on cheating (Section 420), forgery (Sections 463-471), and the Information Technology Act, 2000 (Section 66D — identity theft using computer resources).
- IT Act, 2000 Section 66D: punishment for cheating by personation using computer resource; imprisonment up to 3 years and fine up to ₹1 lakh
- IPC Section 420: cheating and dishonestly inducing delivery of property; up to 7 years imprisonment
- Cybercrime reporting: Ministry of Home Affairs operates the National Cyber Crime Reporting Portal (cybercrime.gov.in) and helpline 1930
- Indian Computer Emergency Response Team (CERT-In): under IT Act Section 70B; handles cyber security incidents including fraudulent websites
- CoinDCX's scale of impersonation: 1,212 fake websites reported in a ~21-month period (April 2024 – January 2026)
Connection to this news: The FIR against CoinDCX co-founders — based on a complaint about what appears to have been a third-party impersonation scheme — illustrates both the volume of crypto impersonation fraud in India and the risks of police action against legitimate exchange operators based on complaints about fraudulent impostors.
India's Crypto Regulatory Trajectory — Towards a VDA Law
India's regulatory approach to cryptocurrencies has evolved from hostility (RBI's 2018 circular banning bank services to crypto firms, struck down by the Supreme Court in March 2020 in Internet and Mobile Association of India v. RBI) to a framework of taxation and AML compliance, with a comprehensive VDA law still pending.
- Internet and Mobile Association of India v. RBI (2020): Supreme Court struck down RBI's 2018 banking ban on crypto as disproportionate; landmark for India's crypto sector
- Post-2020: crypto activity legal but unregulated for consumer protection; VDA tax framework from 2022; PMLA inclusion from 2023
- Proposed Cryptocurrency Bill: listed in Parliament's legislative agenda multiple times (2021, 2022); not yet enacted as of 2026
- RBI stance: consistently cautious; has warned about financial stability risks from crypto; promotes Digital Rupee (CBDC) as an alternative
- G20 Presidency (India, 2023): India advocated for global coordination on crypto regulation, acknowledging unilateral regulation is insufficient given crypto's borderless nature
Connection to this news: The CoinDCX case occurs in a regulatory vacuum: VDA taxation is clear, AML obligations are defined, but consumer protection, exchange licensing, and investor redress mechanisms for crypto-related fraud are still governed by general criminal law — highlighting the urgency of a comprehensive VDA regulatory framework.
Key Facts & Data
- FIR filed: March 16, 2026, Mumbra police station, Thane
- Alleged fraud amount: ₹71.6 lakh (~$85,000)
- CoinDCX: India's largest crypto exchange by some metrics; founded by Sumit Gupta and Neeraj Khandelwal
- Fake websites against CoinDCX: 1,212 reported in April 2024 – January 2026 period
- PMLA VDA notification: March 7, 2023 — crypto exchanges = PMLA reporting entities
- VDA tax rate: 30% flat (Section 115BBH) + 1% TDS (Section 194S) since Finance Act 2022
- Internet and Mobile Association of India v. RBI (2020): Supreme Court struck down RBI's banking ban on crypto
- IT Act Section 66D: identity theft via computer resource — up to 3 years imprisonment
- National Cyber Crime Reporting Portal: cybercrime.gov.in; helpline 1930
- RBI Digital Rupee retail pilot: launched December 2022