On the morning of March 21, 2026, Thane Police quietly made a move that sent shockwaves through India’s cryptocurrency community. Co-founders of CoinDCX — Sumit Gupta and Neeraj Khandelwal, the men who built India’s first crypto unicorn — were summoned for questioning at a Mumbai-area police station in connection with an FIR alleging cheating and financial fraud worth ₹71.6 lakh.

But here’s the critical truth buried beneath the headline: CoinDCX itself is not the villain in this story — it is also a victim. Sophisticated fraudsters built a near-perfect clone of the real CoinDCX platform, used a lookalike domain, impersonated its founders, and lured unsuspecting investors into a high-return trap. The founders were named in the FIR because the scam was dressed in their identities.

If you — or someone you know — ever invested money through a platform called coindcx.pro, received messages promising 10–12% guaranteed returns supposedly linked to CoinDCX, or transferred funds based on promotional material featuring Sumit Gupta or Neeraj Khandelwal’s names and photos, this article could be the most important thing you read today.

How the ₹71.6 Lakh Fraud Actually Worked

The victim at the centre of the Thane Police FIR is a 42-year-old insurance consultant based in Mumbra, Maharashtra. According to the FIR registered on March 16, 2026 at a Thane-area police station, this individual was approached by fraudsters who presented themselves as representatives of CoinDCX — complete with branding, documents, and the names and images of the real founders.

The scheme ran between August 2025 and March 2026 — a seven-month-long, methodical con. The victim was told that by investing through the platform coindcx.pro, they would receive guaranteed returns of 10 to 12 percent. Promotional material, fake screenshots of investment dashboards, and forged company documents were used to build confidence. Once trust was established, larger and larger deposits were requested.

The money was ultimately transferred to third-party accounts — accounts that have no documented relationship with CoinDCX’s official systems whatsoever. When the victim realised something was wrong and filed the complaint, the FIR named multiple individuals including Sumit Gupta, Neeraj Khandelwal, Akash Rana, Rahul Gupta, P. Vasudev, and Shivam Sharma. CoinDCX maintains that its founders were named only because the fraudsters impersonated them — and that neither founder nor the company received any of the fraudulently obtained funds.

CoinDCX vs CoinDCX.pro — Know the Difference

Domain impersonation is the backbone of this entire fraud. Understanding the precise difference between the real platform and the fake one could protect you — and thousands of other potential victims.

The Scale of the Problem: 1,212 Fake Websites and Counting

The coindcx.pro incident is not a one-off attack. CoinDCX disclosed a staggering internal finding: between April 1, 2024, and January 5, 2026 — a period of just under two years — the company identified more than 1,212 fake websites that were impersonating its official platform. That is roughly one new fake site every 14 hours.

This pattern reflects a broader national trend. India’s rapidly growing retail crypto investor base — estimated in the tens of millions — provides an enormous pool of potential victims for cyber-enabled financial fraud. CoinDCX has issued a public warning notice on its official website and is actively cooperating with the Thane Police investigation.

Red Flags: Signs You May Have Been Targeted

Whether you invested through coindcx.pro specifically, or through any other platform claiming CoinDCX affiliation, watch for these warning signs that strongly suggest fraudulent activity:

• You were promised fixed or guaranteed returns of 8%, 10%, 12% or more on crypto investments
• You were contacted first via WhatsApp, Telegram, or social media — not through a verified app store
• The website URL contained any variation of “coindcx” but was NOT coindcx.com
• Promotional material featured photos of Sumit Gupta or Neeraj Khandelwal encouraging investment
• You were asked to transfer money to a personal bank account or third-party wallet
• You were pressured to invest more to “unlock” existing returns or withdraw earlier deposits
• The platform had no proper KYC process or a suspiciously simple one

What You Must Do Right Now — 7 Immediate Steps

CoinDCX’s Official Response — What the Company Says

CoinDCX responded swiftly and publicly on March 21, 2026, posting a detailed statement on its official X (formerly Twitter) account. The company categorically denied any wrongdoing and distanced itself entirely from the coindcx.pro domain.

In its statement, the company described the FIR as “false and filed as a conspiracy against CoinDCX by impersonators posing as founders of CoinDCX and cheating the public at large.” CoinDCX clarified that it has already published a public notice on its website warning users about the impersonation campaign, and that the funds in question were transferred to “third-party accounts which have no relation to CoinDCX.”

The company also confirmed that co-founders Sumit Gupta and Neeraj Khandelwal have been fully cooperative with the Thane Police questioning process. Notably, CoinDCX disclosed that it has identified over 1,212 fake websites mimicking its platform since April 2024 — a figure that underscores the industrial scale of the brand impersonation problem facing Indian fintech companies.

This case also arrives on the heels of an already difficult year for CoinDCX. In July 2025, the exchange disclosed a significant security breach in which approximately $44.2 million was stolen from its internal treasury wallet — an attack later linked to a compromised employee. The company covered all losses and maintained that no user funds were affected. The founding team is now dealing with two entirely separate crises — a cyberattack and a brand impersonation conspiracy — within the span of nine months.

Why India’s Crypto Investors Must Adopt a “Verify First” Culture

The coindcx.pro case is a textbook example of what cybersecurity experts call a “homograph attack” combined with social engineering. The fraudsters did not need to hack CoinDCX. They simply copied its appearance, registered a slightly different domain, and exploited the public’s trust in a well-known brand.

For India’s 20+ crore retail investors now engaging with digital assets, the lesson is urgent: brand recognition is not the same as platform verification. Before investing a single rupee through any platform — regardless of how professionally it looks, whose name appears on it, or what returns it promises — verify the following:

• Check the exact URL in your browser address bar — not the display name, the actual domain
• Verify the platform’s registration on India’s Financial Intelligence Unit (FIU-IND) list
• Never trust investment platforms found through WhatsApp or Telegram groups
• Confirm the platform offers standard KYC — PAN, Aadhaar verification before accepting funds
• Look for the platform’s app on official Google Play Store or Apple App Store only

As CoinDCX itself has said publicly, brand impersonation and cyber-enabled financial fraud are rapidly becoming a systemic problem in India’s digital finance market. Regulatory bodies including SEBI, RBI, and the Ministry of Finance have all issued advisories about fraudulent platforms using legitimate exchange names. Staying safe requires personal vigilance, not just institutional protection.