CoinDCX Founders Detained Amid Investigation Into Identity Theft

The Indian cryptocurrency sector is currently navigating a complex legal situation following the arrest of CoinDCX co-founders Sumit Gupta and Neeraj Khandelwal. According to reports from India’s Economic Times, the founders of the Coinbase-backed exchange were taken into custody in connection with a fraud case involving malicious third-party actors. The exchange has clarified that the legal action stems from a First Information Report (FIR) related to an extensive identity theft operation where criminal syndicates impersonated the official CoinDCX platform to defraud investors.

Identity Theft and the Proliferation of Fraudulent Domains

The core of the investigation revolves around a sophisticated fraud syndicate that utilized the brand reputation of CoinDCX to lure victims. Investigative findings indicate that the perpetrators established a network of approximately 1,212 fake websites designed to mimic the exchange's interface. These phishing domains were used to harvest user credentials and illicitly obtain funds, leading to the initial police report. Identity theft remains one of the most significant threats to centralized exchanges operating in the South Asian market, where digital literacy regarding URL verification is still evolving.

Official Response and Regulatory Cooperation

CoinDCX has issued a formal statement regarding the detention of its leadership, emphasizing that the founders are not involved in the illegal activities described in the FIR. The company maintains that Gupta and Khandelwal are victims of a broader scheme intended to damage the exchange’s integrity. The organization is currently:

• Engaging in full cooperation with law enforcement agencies to identify the actual perpetrators.
• Providing technical data to assist in the deactivation of the 1,212 discovered phishing sites.
• Advocating for the distinction between the platform's legitimate operations and the actions of the identity theft syndicate.

The company stated that the relevant FIR originated from an identity theft incident, where a fraud syndicate impersonated CoinDCX by establishing a large number of fake websites to carry out fraudulent activities.

This development highlights the ongoing challenges faced by major VASP (Virtual Asset Service Providers) in India as they navigate a stringent regulatory environment and the rising frequency of cybercrime. While the investigation continues, the focus remains on the security of user assets and the verification of the exchange's internal protocols. The case is expected to set a precedent for how Indian authorities handle corporate liability in instances where a company's brand is weaponized by external hackers.