Chandra Wibowo
Reports have emerged suggesting the arrest of Sumit Gupta and Neeraj Khandelwal, co-founders of prominent Indian cryptocurrency exchange CoinDCX, following a police complaint alleging their involvement in a significant crypto investment fraud. While some media outlets, including The Economic Times, indicated the pair were arrested by Thane Police on charges of criminal breach of trust, other local publications, such as Entrackr, reported that the founders were summoned for questioning rather than being taken into custody. This developing situation has sent ripples through India’s rapidly growing digital asset sector, raising questions about the security and regulatory landscape for cryptocurrency investments.
The allegations stem from a First Information Report (FIR) filed by a 42-year-old insurance consultant who claims to have lost approximately 71 lakh Indian rupees (roughly $75,000 USD) after being deceived into investing through a fraudulent website that allegedly impersonated the official CoinDCX platform. This incident highlights a growing concern regarding phishing and impersonation attacks targeting cryptocurrency users in India, a trend that CoinDCX itself has acknowledged and is actively working to combat.
CoinDCX’s Response and Counter-Allegations
In response to the reports and the FIR, CoinDCX issued a statement on the social media platform X, formerly Twitter. The company vehemently denied the allegations, describing the FIR as "false and filed as a conspiracy." According to CoinDCX, the complaint was initiated by individuals impersonating its founders, who then allegedly diverted funds to third-party accounts that have no affiliation with the legitimate exchange. This counter-narrative suggests a sophisticated attempt at defrauding investors by leveraging the established reputation of CoinDCX.
The exchange further emphasized that brand impersonation and cyber fraud are escalating challenges within India’s digital finance ecosystem. They asserted their commitment to cooperating fully with law enforcement authorities while simultaneously focusing on enhancing user education and awareness regarding these prevalent online threats. This proactive stance aims to reassure users and stakeholders about the company’s dedication to security and integrity.
Scale of Impersonation Attacks
CoinDCX provided alarming statistics to underscore the magnitude of the problem. The company revealed that between April 1, 2024, and January 5, 2026, it had flagged over 1,212 websites that were attempting to impersonate its official domain, coindcx.com. This extensive number paints a stark picture of the persistent and widespread nature of phishing and impersonation schemes targeting Indian crypto investors. These attacks often rely on sophisticated social engineering tactics, luring unsuspecting individuals with promises of high returns or exclusive investment opportunities, only to abscond with their funds.
The victim in the current FIR, an insurance consultant from Mumbra, reportedly fell prey to such a tactic. The Times of India’s earlier report detailed how the consultant was enticed to invest via the fake website, leading to a substantial financial loss. The investigation by Thane Police is now reportedly focused on understanding the modus operandi of these fraudulent operations and identifying the perpetrators behind the impersonation.
Broader Context: A Rising Tide of Investment Scams in India
The CoinDCX incident occurs against a backdrop of a significant increase in online investment scams across India. Data from the Ministry of Home Affairs, as cited by Insights IAS, reveals a concerning trend: investment scams constituted a staggering 76% of all financial losses reported in 2025. This statistic underscores the pervasive nature of fraudulent schemes targeting individuals seeking to grow their wealth through digital avenues.
The cryptocurrency and broader Web3 space, while offering innovative financial opportunities, has also become a fertile ground for scammers. Globally, the decentralised finance (DeFi) and Web3 platforms experienced substantial losses amounting to approximately $3.95 billion in 2025 due to hacks and exploits, according to various industry reports. This figure, while not directly attributable to the current CoinDCX case, illustrates the inherent risks associated with the nascent digital asset market and the need for robust security measures and regulatory oversight.
CoinDCX: A Leading Player in India’s Crypto Market
Founded in 2018 and headquartered in Mumbai, CoinDCX has established itself as one of India’s leading cryptocurrency trading platforms. The exchange has garnered significant attention and investment, notably receiving a substantial investment from Coinbase Ventures in October 2025, which valued the company at approximately $2.45 billion. This valuation underscores CoinDCX’s significant market presence and its role in facilitating crypto adoption within India.
However, the exchange has not been immune to security challenges. In July 2025, CoinDCX experienced a security breach that resulted in the theft of approximately $44 million from an internal operational account. While the company assured its users that customer assets remained unaffected, the incident highlighted the vulnerabilities that even established platforms can face. This previous security lapse, coupled with the current allegations, could lead to increased scrutiny from both regulators and the investing public regarding the exchange’s security protocols and internal controls.
Regulatory and Security Implications
The reported arrests and allegations against CoinDCX’s co-founders are likely to intensify discussions around the regulatory framework for cryptocurrency exchanges in India. While India has been cautious in its approach to digital assets, with ongoing debates about potential regulations and taxation, incidents like these can accelerate the demand for clearer guidelines and stricter enforcement.
For investors, the situation serves as a stark reminder of the importance of due diligence and security awareness. Key considerations for navigating the crypto landscape safely include:
- Verifying Platform Authenticity: Always ensure you are interacting with the official website and never click on unsolicited links or respond to suspicious communications.
- Understanding Investment Risks: Cryptocurrency investments are inherently volatile and carry significant risks. Promises of guaranteed high returns should be treated with extreme caution.
- Utilizing Strong Security Practices: Employing two-factor authentication (2FA) on all accounts, using strong and unique passwords, and being wary of sharing personal information are crucial.
- Researching Exchanges: Opting for reputable and well-established exchanges with a proven track record of security and regulatory compliance is essential.
- Staying Informed: Keeping abreast of common scam tactics and staying updated on industry security best practices can help protect against fraud.
The ongoing investigation into the alleged crypto investment fraud involving CoinDCX’s co-founders will be closely watched by the industry. The outcome will not only impact the involved parties but also contribute to the broader narrative surrounding the security, regulation, and future of cryptocurrency investments in India. CoinDCX’s commitment to cooperating with authorities and its proactive approach to educating users on cybersecurity risks will be critical in navigating this challenging period and rebuilding trust within the community. The company’s ability to effectively address these allegations and demonstrate robust security measures will be paramount to its continued success and its standing in the Indian digital asset market.
The broader implications of this case extend beyond CoinDCX. It underscores the critical need for enhanced cybersecurity measures and a robust regulatory framework to protect investors in the rapidly evolving digital finance sector. As India continues to embrace technological advancements, ensuring a secure and trustworthy environment for digital asset investments remains a paramount challenge. The interplay between innovation and security will continue to shape the future of fintech and cryptocurrency adoption in the country. Industry participants, regulators, and users alike will need to collaborate to foster a more resilient and secure digital economy.
