CoinDCX Founders Questioned in India Fraud Case

CoinDCX founders questioned by Indian authorities — that's the headline making rounds across Mumbai's financial circles this week, and the full picture is a lot messier than a simple fraud arrest. Co-founders Sumit Gupta and Neeraj Khandelwal were called in by the Thane Police following a criminal complaint alleging their platform defrauded an investor out of roughly $75,000. CoinDCX disputes all of it, pointing the finger squarely at impersonators running a sophisticated brand-spoofing operation — and the numbers behind that operation are genuinely alarming.

What the Police Complaint Actually Says

The case traces back to a 42-year-old insurance consultant from Mumbra who filed a first information report after losing approximately 71 lakh Indian rupees — around $75,000 — to what he believed was a legitimate CoinDCX investment opportunity. According to CoinDCX impersonation fraud FIR reporting, the victim was funneled through a fake website designed to mimic the real CoinDCX platform. He invested. The money went to third-party accounts that had zero connection to the actual exchange.

From there, the Thane Police moved on CoinDCX's leadership. Conflicting accounts emerged: The Economic Times reported the founders were arrested, while other outlets including Entrackr described it as a questioning session rather than a formal arrest. Either way, Gupta and Khandelwal were asked to cooperate with investigators — and both co-founders apparently did. What the complaint does NOT allege, to be clear, is that the real CoinDCX platform stole anyone's money. The entire case hinges on whether the founders bear responsibility for what fake websites are doing in their company's name.

CoinDCX Calls It a Conspiracy — and Has Data to Back That Up

The exchange wasted no time pushing back. In a statement posted to X on Saturday, CoinDCX described the FIR as 'false and filed as a conspiracy,' saying impersonators had posed as its founders and diverted victim funds to accounts entirely unconnected to the company.

That framing might sound like boilerplate corporate denial — except the scale CoinDCX cited is hard to dismiss. Between April 1, 2024 and January 5, 2026, the company says it reported more than 1,212 websites actively impersonating its coindcx.com domain to authorities. That's roughly two fake CoinDCX sites flagged every single day for nearly two years. The company said it is 'fully cooperating with the relevant law enforcement authorities' and stressed that user education and fraud awareness remain central to its operations.

The FIR is false and filed as a conspiracy by impersonators posing as our founders and diverting funds to third-party accounts with no connection to CoinDCX.

Why India's Crypto Fraud Problem Is Getting Worse

This case doesn't exist in a vacuum. India's Ministry of Home Affairs data — cited by Insights IAS — shows investment scams accounted for a staggering 76% of all financial losses from cybercrime in 2025. That number deserves to be read twice. Not a plurality. Not a majority. Three-quarters of every rupee lost to cybercrime in the country went through fake investment schemes.

Globally, the picture isn't much better. Web3 platforms lost around $3.95 billion to hacks, exploits, and fraud in 2025. For a major exchange like CoinDCX — one that was valued at approximately $2.45 billion following a Coinbase Ventures investment in October 2025 — brand impersonation isn't just a reputation problem. It's a direct threat to user trust at exactly the moment the exchange needs that trust most.

CoinDCX's Own Security Record Complicates the Story

Here's the part that makes this harder to frame as simply 'exchange vs. scammers.' CoinDCX itself suffered a significant breach in July 2025, when attackers drained roughly $44 million from an internal operational account — making the exchange one of that month's largest hacking victims by dollar value. The company maintained that customer funds were unaffected, but the incident raised serious questions about internal security architecture that haven't fully gone away.

So the exchange is simultaneously navigating a high-profile fraud case tied to impersonation, a lingering cloud from last year's hack, and now a police questioning that — regardless of outcome — generates the kind of press no crypto company wants. Founded in 2018 and headquartered in Mumbai, CoinDCX has grown into one of India's most prominent crypto trading platforms. But prominence cuts both ways: it makes you a target for scammers, and it makes every legal or security incident land louder.

Does a Fake Website Make the Exchange Liable?

That's the real legal question here, and it's one Indian courts will eventually have to work out as phishing and brand-spoofing cases multiply. CoinDCX's argument — that it cannot be held responsible for fraudsters cloning its domain — is logically sound. No financial institution in the world is typically liable for what criminals do with fake websites mimicking their brand. Banks deal with this constantly.

But India's crypto regulatory environment is still maturing, and enforcement agencies are under pressure to show action as retail investors keep losing money to investment scams. The founders being called in for questioning may be less about legal culpability and more about optics — authorities being seen to investigate every angle when a citizen loses $75,000. Whether charges follow, or the case dies at the FIR stage, probably depends on how thoroughly investigators can trace the fake website's actual operators.