India's largest crypto exchange is at the center of a legal storm. CoinDCX co-founders Sumit Gupta and Neeraj Khandelwal were apprehended by Thane Police in Bengaluru in March 2026 and remanded to custody until March 23.
Key Takeaways
CoinDCX co-founders were arrested in March 2026 over a fraud allegation; the company claims impersonation by scammers, not internal wrongdoing.
CoinDCX reported over 1,200 fake websites mimicking its platform between 2024 and 2026.
India’s crypto sector faces mounting legal pressure, from WazirX’s $230M hack to international arrests on Indian soil.
Indian regulators have tightened crypto compliance, with founders now personally liable under AML laws.
The case has split industry observers – some see it as straightforward fraud, others as a cautionary tale about executive impersonation in crypto.
As reported by the Economic Times, he arrest stems from an FIR filed by a 42-year-old insurance advisor alleging a fraud of ₹71.6 lakh (approximately $86,000). The victim claims he was drawn in between August 2025 and February 2026 with promises of high returns and “franchise opportunities” tied to the CoinDCX brand. Charges have been filed under the Bharatiya Nyaya Sanhita for criminal breach of trust and cheating. Major outlets including The Times of India and The Economic Times confirmed the founders are in custody.
CoinDCX’s Defense: A Conspiracy of Impersonation
CoinDCX has pushed back hard. The company states it reported over 1,212 fake websites mimicking coindcx.com between April 2024 and January 2026. In this specific case, the victim transferred funds via cash and bank transfers to third-party accounts the exchange says have no connection to it whatsoever. CoinDCX’s argument: scammers posing as the founders ran the operation from start to finish.
The arrest arrives against a turbulent backdrop. In July 2025, CoinDCX suffered a server breach resulting in the theft of $44.2 million – losses it covered from its own treasury, with no customer funds touched. By October 2025, it closed a funding round with Coinbase Ventures valuing the company at $2.45 billion, and counts over 21.8 million registered users as of early 2026.
India’s Crypto Sector Has Seen This Before
The CoinDCX case is not happening in isolation. The closest parallel is WazirX. Following its $230 million hack in July 2024, founder Nischal Shetty faced FIRs and a Supreme Court petition alleging negligence. In April 2025, the Court dismissed the case, ruling crypto regulation remains a government policy matter. WazirX blamed external actors – the Lazarus Group – much like CoinDCX blames impersonators today. The key difference: WazirX dealt with an actual breach of its wallets; CoinDCX claims criminals simply borrowed its brand.
In March 2025, the CBI arrested Garantex co-founder Aleksej Besciokov in Kerala while he was on vacation – wanted by U.S. authorities for allegedly laundering over $96 billion. The arrest made clear India is no longer a safe harbor for crypto figures with international legal exposure.
A more recent case cuts closer to CoinDCX’s defense. A former Coinbase employee was arrested in India for leaking data on nearly 70,000 customers. Scammers used that data to launch convincing impersonation attacks – proving that this type of fraud doesn’t just rely on fake websites. It increasingly involves insider breaches that make the deception look legitimate even to experienced investors.
Where Regulation Stands
India has moved decisively from debating a crypto ban to enforcing a high-tax, high-surveillance compliance framework.
All crypto gains remain subject to a flat 30% tax, a 1% TDS on every transaction, and a strict no-loss-offsetting rule. From April 1, 2026, exchanges face $2.40-per-day fines for late reporting and $600 penalties for inaccurate data under Section 509 of the Income Tax Act.
At the oversight level, FIU-IND now treats crypto exchanges like banks. Registration is mandatory, KYC requires live liveness checks and geo-location capture, and the Travel Rule mandates sharing sender and receiver data on every transaction. Most consequentially, crypto is fully under the Prevention of Money Laundering Act – meaning founders and board members carry personal liability for AML failures on their platforms.
That last point gives the CoinDCX arrest its sharpest edge. Leadership can no longer easily distance itself from what happens around its platform, even when the wrongdoing originates elsewhere.
Why “Impersonation” Is the New Battleground
The CoinDCX case may turn on a question Indian courts are not yet well-equipped to answer: where does a company’s legal responsibility end when criminals weaponize its brand?
According to the 2026 Crypto Crime Report, impersonation scams grew 1,400% year-over-year. The toolkit is expanding fast – AI deepfakes using real executives’ faces and voices, phishing-as-a-service kits that deploy thousands of fake sites for under $500, and mule accounts that make stolen funds appear to flow through legitimate exchanges.
The WazirX collapse already fractured public trust in Indian centralized exchanges. If the CoinDCX founders are cleared, it won’t restore confidence – it will expose a structural gap: that being a crypto executive today means carrying legal exposure for crimes you may have had no hand in. Until regulators draw cleaner lines between platform liability and third-party fraud, that gap stays open – and impersonation syndicates will keep exploiting it.
