CoinDCX Founders Arrested in Mumbai Amid Alleged $85K Impersonation Scam

The arrest of Sumit Gupta and Neeraj Khandelwal, the high-profile co-founders of CoinDCX, marks a significant escalation in the legal challenges facing India's cryptocurrency sector. The arrests, executed by Mumbai police on March 21, 2026, stem from a First Information Report (FIR) filed by an investor who claims to have been defrauded of Rs 71 lakh (approximately $85,000). While the police action suggests direct culpability, CoinDCX has vehemently denied the allegations, framing the situation as a massive "impersonation conspiracy" where malicious actors leveraged the exchange's brand to orchestrate third-party scams. This case highlights the precarious position of crypto executives in a jurisdiction where the line between legitimate business operations and the activities of external bad actors is often blurred by law enforcement.

This development occurs against a backdrop of increasing regulatory scrutiny and a history of security vulnerabilities for the exchange. In 2025, CoinDCX suffered a major cyberattack that resulted in the theft of $44 million from an internal operational account. Although the company claimed user funds were unaffected at that time, the incident likely heightened the sensitivity of law enforcement and the public to complaints involving the platform. The current case highlights a growing trend in the Indian digital finance ecosystem where "clone" platforms—highly sophisticated replicas of legitimate exchanges—are used to siphon funds from less tech-savvy investors. These clones often replicate the look and feel of the official CoinDCX app, making it nearly impossible for the average user to distinguish between the two without technical verification.

“

The arrests, executed by Mumbai police on March 21, 2026, stem from a First Information Report (FIR) filed by an investor who claims to have been defrauded of Rs 71 lakh (approximately $85,000).

CoinDCX’s internal investigation reveals a staggering scale of fraud that the company has been battling for years. Between April 2024 and January 2026, the company identified more than 1,212 fake websites mimicking its interface. These sites, often promoted through private Telegram and WhatsApp groups, lure victims with promises of high-yield staking and exclusive investment opportunities that do not exist on the official platform. The company asserts that the complainant in the current FIR likely transferred funds in cash to third-party accounts that have no connection to CoinDCX’s official infrastructure, which remains secure. This "brand-jacking" strategy is particularly effective in India, where word-of-mouth and social media groups are primary sources of financial information for retail investors.