India's Directorate of Enforcement (ED) filed a prosecution complaint against Chirag Tomar and seven other individuals and entities in connection with an alleged Coinbase spoofing scheme that stole more than $20 million from victims.
The ED launched its investigation after reports of Tomar's arrest in the United States and later obtained details of the criminal proceedings and evidence through Mutual Legal Assistance Treaty channels from U.S. authorities, the agency said in a statement on Monday. Tomar was previously sentenced in the United States to 60 months in prison, followed by two years of supervised release.
According to the statement, Tomar and his associates created spoofed websites designed to mimic Coinbase's platform to harvest user login credentials and two-factor authentication codes.
After gaining access to victim accounts, the group transferred cryptocurrency holdings to wallets under their control, converted the assets through multiple wallets, and ultimately exchanged the funds for Indian rupees via peer-to-peer transactions, the ED alleged.
The investigation also found that proceeds from the alleged fraud were deposited into bank accounts linked to Tomar, his family members, associates, and group entities before being layered through multiple accounts and used to acquire movable and immovable assets, per the statement.
In response to these findings, the ED has provisionally attached 64.55 crore rupees ($6.8 million) in assets as part of its ongoing probe.
The development comes about three months after India's Central Bureau of Investigation arrested Darwin Labs co-founder and chief technology officer Ayush Varshney at Mumbai airport over his alleged role in the multi-year GainBitcoin scheme.
These back-to-back state interventions come as India continues to rank among the world's largest crypto markets. According to TRM Labs' 2025 Crypto Adoption and Stablecoin Usage Report, the country retained the top position in global crypto adoption for the third consecutive year, with the broader South Asia region recording an 80% increase in crypto adoption between January and July 2025 versus the same period a year earlier.
Disclaimer: The Block is an independent media outlet that delivers news, research, and data. As of November 2023, Foresight Ventures is a majority investor of The Block. Foresight Ventures invests in other companies in the crypto space. Crypto exchange Bitget is an anchor LP for Foresight Ventures. The Block continues to operate independently to deliver objective, impactful, and timely information about the crypto industry. Here are our current financial disclosures.
© 2026 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.
