ChainCatcher reported that India’s Enforcement Directorate (ED) has filed a charge sheet before the PMLA Special Court in Dwarka, New Delhi, formally accusing Chirag Tomar and his associates of participating in a cryptocurrency phishing fraud case involving approximately $20 million. The case centers on a phishing operation that allegedly used a fake exchange website, account credential theft, fraudulent collection of 2FA verification, and remote transfers of victims’ crypto assets.
Fake “Coinbase Pro” Site and SEO Hijacking
According to the investigation, the group carried out the attacks through SEO hijacking and a highly imitated “Coinbase Pro” phishing website. Users were induced to enter their account information on the fake site and were then further deceived into providing 2FA verification. After obtaining these details, the attackers were able to remotely transfer victims’ cryptocurrency assets.
The investigation further found that the funds were subsequently split across thousands of wallets. Rather than remaining in a single address or a small group of addresses, the assets were dispersed and then moved through layers of laundering involving P2P transactions and local trading platforms. The charge sheet describes a chain of activity covering the collection of user credentials, the transfer of crypto assets, and the later splitting and laundering of funds.
Coordination With U.S. Federal Enforcement
The case was coordinated with U.S. federal law enforcement actions. Tomar had previously been arrested in the United States by the FBI and was sentenced to 60 months in prison for conspiracy to commit wire fraud. India’s ED said it obtained key evidence through international judicial cooperation, and that evidence has been used in connection with the Indian proceedings.
On the asset side, the ED has frozen 129 bank accounts linked to the case, along with assets worth approximately 645.5 million rupees. The agency also said that funds and real estate connected to the case are being pursued through recovery and confiscation procedures. With the charge sheet now submitted to the PMLA Special Court in Dwarka, New Delhi, the accusations against Chirag Tomar and his associates have advanced into the Indian judicial process.