Share article

CoinDCX, a major Indian crypto exchange backed by Coinbase, just got pulled into the kind of "investment opportunity" story that usually ends with a police report and a shrug. This time, the founders are the ones being questioned, because of course they are. [1]

Enjoy articles without ads?

Register for free and get unlimited access to all articles.

What happened

Indian media reports say CoinDCX co-founders Sumit Gupta and Neeraj Khandelwal were questioned by police after a complaint alleged their involvement in an alleged crypto investment fraud. [2] The report trail includes coverage from The Economic Times and was amplified in the crypto press earlier today. [3]

The allegation centers on an impersonation-led scheme in which a complainant claims they were induced to transfer funds after being presented with CoinDCX-branded materials. Figures cited in reporting put the disputed amount at roughly ₹71 lakh (about $85,000), a mid-sized scam by global standards, but large enough locally to trigger formal action and headlines. [4]

CoinDCX has pushed back on the framing. The company says the complaint and resulting police action are tied to a wider impersonation conspiracy, not misconduct by the exchange or its leadership. [5]

CoinDCX's response: "It's impersonators, not us"

CoinDCX's core claim is simple: scammers are using the brand at scale, and law enforcement is now dealing with the messy downstream effects.

According to The Economic Times report cited by CoinDCX, the exchange flagged more than 1,200 fake websites allegedly using CoinDCX branding. That detail matters because it reframes the incident from a one-off "bad actor" pitch into a broader phishing and brand-cloning problem, where victims think they are dealing with an official platform or representative. [2]
In plain terms: if a user is routed through a lookalike domain or a fake "support" channel, the money can be gone long before anyone reaches the real exchange.

Why this matters beyond one case

This is not just reputational damage. For centralized exchanges operating in India's high-friction environment (tax complexity, banking constraints, and tight compliance expectations), even a perception of involvement can create second-order consequences:
  • Banking and payment rails scrutiny tends to rise after fraud-linked headlines, regardless of fault.
  • Customer trust takes a hit when impersonation becomes indistinguishable from official outreach.
  • Law enforcement process risk increases when brand abuse produces formal complaints (and not all investigators will start by separating "real entity" from "fake site").

The key unresolved question is procedural: whether authorities treat this primarily as a cyber-impersonation case, or continue testing theories that pull executives into the chain of liability.

What to watch next

  • Clarity on legal status: Were the founders formally arrested, detained for questioning, or simply summoned? Expect tighter wording from police and the company as documents circulate.
  • Takedown and attribution efforts: If CoinDCX can demonstrate coordinated takedowns of the alleged 1,200-plus fake domains, it strengthens the impersonation narrative.
  • User-facing controls: Watch for CoinDCX to publish verified domain lists, anti-phishing codes, or stricter outbound communication policies, because "don't click links" is not a security strategy.
  • Regulatory follow-through: If the case escalates, it could become a template for how Indian authorities handle fraud complaints tied to crypto brands, guilty or impersonated.