⚠️ DISCLAIMER: Ministry of Cyber Affairs is an independent news, guides and directory service on cybercrime and cybersecurity, for victims and investigators. It is NOT an official government or ministry portal.
Website Scam CheckerNew
Back to News

India's ED Arrests Crypto Founder Over Betting and Cyber-Fraud Laundering via Jubilee Hills Mercantile Co-operative Bank, Nagarbhavi Credit Society

11 November 2026
Source:India's Enforcement Directorate (Mumbai Zonal Office-II) press releases, 31 Oct and 25 Jul 2026
Share
India's ED Arrests Crypto Founder Over Betting and Cyber-Fraud Laundering via Jubilee Hills Mercantile Co-operative Bank, Nagarbhavi Credit Society

India's Enforcement Directorate has arrested Sagar Dash, founder of Armstrong Exchange Pvt Ltd, in its money laundering probe into the All Panel Exchange (APX) betting platform. ED alleges victims' money moved through mule accounts at Jubilee Hills Mercantile Co-operative Bank, Hyderabad, and shell firms into an account at Nagarbhavi Credit Co-operative Society, Bengaluru, and that Dash used the society's KYC and forged papers to open a crypto account. About $960,000 is frozen.

India's Enforcement Directorate (ED), the country's financial crimes agency, has arrested Sagar Dash, founder of Armstrong Exchange Private Limited, in a money laundering investigation into an online gaming and betting fraud run through All Panel Exchange (APX) and related cyber scams.

Dash was arrested on 27 October 2026 by ED's Mumbai Zonal Office-II under the Prevention of Money Laundering Act (PMLA), 2002. A Special PMLA Court in Mumbai remanded him to ED custody for three days.

The case

ED's probe is based on three police cases (FIRs) involving online gaming, betting and cyber fraud, in which complainants lost crores of rupees.

ED's July search release sets out how the scheme worked.

Victims were lured through WhatsApp onto the APX betting platform.

Early withdrawals were allowed to build trust; once larger sums were deposited, withdrawals were refused and the operators stopped responding.

The money trail

According to ED, victims' money was first routed through multiple mule accounts at Jubilee Hills Mercantile Co-operative Bank in Hyderabad and then moved into various shell entities.

Large sums from these entities were then transferred into a nodal account of Nagarbhavi Credit Co-operative Society in Bengaluru, operated on behalf of Armstrong Exchange, the company Dash set up.

ED alleges that Dash used the credit society's KYC (know-your-customer) records and forged documents to open a cryptocurrency account.

Hundreds of crores of rupees, equal to tens of millions of dollars, passed through the society's bank account, and a large share was directly linked to proceeds of illegal gaming and betting platforms that lured victims through cyber scams.

In its July 2026 release, ED said an individual had routed about Rs 800 crore (about $85 million) through a co-operative society's bank account using that society's KYC and fabricated documents; that release did not name the individual.

Searches and earlier arrest

ED earlier searched locations in Pune, Mumbai, Bengaluru, Hyderabad, and Surat and Mehsana in Gujarat, seizing incriminating documents and freezing about $960,000 (Rs 9 crore) in bank accounts.

The agency had previously arrested Ram U. Ramdhani, chief executive of Pune-based Edsom Fintech Private Limited, in the same case.

According to an earlier ED statement carried by Indian media, Ramdhani was arrested on 28 September 2026, and Edsom's accounts received hundreds of crores of rupees through mule accounts and were linked to complaints of gaming, investment, task, digital arrest and crypto frauds.

ED said it remains committed to tracing and dismantling illegal financial networks.

The investigation is continuing.

Dollar figures are converted at the Reserve Bank of India reference rate of Rs 93.81 per US dollar on 11 November 2026.

More in Cybercrime Trends

Related articles

Cybercrime Trends (News)

India's UP Police Arrest Man Accused of Running Telegram Groups to Share Child Sexual Abuse Material, Acting on NCMEC CyberTipline Alert

Police in Bhadohi, in India's Uttar Pradesh state, have arrested a 27-year-old man accused of creating multiple Telegram groups to collect and share child sexual abuse material (CSAM). The case began with a CyberTipline report received at Koirauna police station. An FIR was registered under India's IT Act, the POCSO Act and the Bharatiya Nyaya Sanhita. Officers recovered a Redmi (Xiaomi 15) phone said to have been used in the offence. The arrest was made on 10 November 2026.

12 Nov 2026
Cybercrime Trends (News)

India's Enforcement Directorate Seizes $1.5 Million in HashPe Crypto Ponzi That Promised 1% Daily Returns; Four Promoters in Custody

India's Enforcement Directorate has provisionally attached assets worth about $1.5 million (Rs 14.16 crore) in the HashPe cryptocurrency investment case and filed charges before a special money laundering court in Puducherry. Run through hashpe.io and a multi-level marketing network, the scheme raised about $12 million by promising 1% daily returns, trading fictitious coins and paying earlier investors with new money. Four accused are in judicial custody.

11 Nov 2026
Cybercrime Trends (News)

I4C Asks Google to Remove 8 Predatory Loan Apps That Harvested Contacts and Extorted Indian Borrowers With Morphed Photos; Copycats Still on Play

India's I4C asked Google on 5 Nov 2026 to remove eight Play Store loan apps. Victims report 7-day terms instead of the 91-365 days advertised, about 40% deducted upfront, contact harvesting and extortion with morphed photos. The apps belong to three separate operations, one with Chinese-language code and a hidden silent-photo function. Four look-alikes still on Play request SMS access, and FlexiBee's replacement uses Beijing-made SDKs despite claiming it collects no data.

11 Nov 2026