Fake CoinDCX Website That Sparked Arrests
Key takeaways Impersonation scams can be low-tech yet highly effective, using fake websites that closely mimic trusted cryptocurrency platforms to deceive users. The CoinDCX case shows how a 7.16 million rupee fraud…
Summary
A counterfeit website and accompanying fake social channels led to a 7.16 million rupee complaint that initially produced arrests of CoinDCX executives before courts found the scheme was run by impersonators. The case highlights how low-tech impersonation — lookalike domains, Telegram groups and cloned social profiles — can produce major financial and legal fallout.
Key points
- The complaint alleged a loss of 7.16 million rupees (about $77,000) after the victim engaged with what he believed was CoinDCX.
- The victim, a 42-year-old insurance consultant from Mumbra, Thane, was promised unusually high monthly returns (about 10%–12%) under a franchise-style pitch tied to the CoinDCX brand.
- The fraud used a counterfeit domain, coindcx.pro, not the genuine coindcx.com.
- Scammers created an ecosystem — website, Telegram channels and social accounts — to present a convincing, brand-backed experience.
What happened
The complainant said he was recruited into an investment opportunity he thought was run by CoinDCX and transferred funds after being promised high monthly returns. The FIR was lodged at Mumbra police station, Thane, on March 16, 2026. During the investigation, CoinDCX co-founders Sumit Gupta and Neeraj Khandelwal were arrested in Bengaluru. The case later moved through the courts, and a Thane magistrate granted them bail, noting that prima facie there was no evidence implicating the founders directly and that the complainant had been deceived by impersonators.
Role of the fake domain
The victim had dealt with coindcx.pro, a lookalike domain that mimicked the real exchange. Domain impersonation is a common tactic: a small change or additional suffix can make a fraudulent site appear legitimate at a glance. CoinDCX has stated that no funds connected to this incident were processed through its exchange systems and that the scheme was run by external actors using the brand.
The fabricated ecosystem
Fraudsters rarely rely on a single page. In this case they reportedly set up supporting Telegram channels and social-media profiles that reinforced the illusion of a genuine community and official representatives. By combining a believable website with messaging groups and apparent customer contacts, scammers can create a seamless experience that reduces victims’ skepticism.
Why these scams work
- Brand trust: Using a recognizable company name lowers victims’ guard.
- High fixed returns: Promises of unusually high monthly yields (10%–12% here) are a classic lure.
- Social proof: Messaging apps and social profiles simulate real users and officials.
- Low cost and scalability: Creating domains and channels is inexpensive, so fraudsters can replicate templates across brands and geographies.
Broader pattern
CoinDCX reported encountering more than 1,200 fake websites impersonating its platform between April 2024 and January 2026, showing impersonation is a scalable and persistent threat. Once a convincing template exists, it can be adapted quickly for new victims.
Legal and reputational consequences
Even when courts determine a company wasn’t involved, impersonation cases cause damage:
- Temporary legal exposure for named executives and the company
- Reputational harm and loss of user trust
- Increased scrutiny from regulators and customers
This case also underlines a practical challenge for law enforcement: early complaints that name a recognized company can trigger swift action that may later be revised when impersonation is established.
CoinDCX’s response
CoinDCX announced a 100 crore rupee (~$10.76 million) Digital Suraksha Network (DSN) focused on fraud prevention and user education. Reported measures include an AI-driven WhatsApp helpline, APIs for sharing fraud-related data, and collaboration with law enforcement for training and faster responses. These steps aim to improve detection and cross-industry coordination, though no system is foolproof.
Practical takeaways for users
- Always verify the domain: small differences (extra letters, different suffixes) can indicate a fake site.
- Be skeptical of guaranteed or unusually high returns; urgency or exclusivity are red flags.
- Treat Telegram groups and social handles as unverified unless confirmed by official channels.
- Conduct transactions only through verified platform links and official apps.
Bottom line
This incident shows that sophisticated-looking fraud often relies on basic impersonation techniques rather than advanced hacks. Careful verification of domains, communications and returns claims is usually the simplest and most effective defense against these scams.