Key takeaways
– Impersonation scams can be simple yet very effective: fake websites that closely mimic trusted crypto platforms deceive users.
– A 7.16 million rupee fraud complaint in the CoinDCX matter escalated into legal action before investigators identified impersonation.
– The counterfeit domain coindcx.pro — not the legitimate coindcx.com — was used to mislead the victim.
– Scammers created a full fake ecosystem (websites, Telegram channels, social accounts) to build credibility.
While crypto reporting often focuses on market moves, smart-contract bugs or regulation, some of the most damaging threats are low-tech. A website that mirrors a real exchange can inflict financial and reputational harm. The CoinDCX impersonation incident is a clear example: a complaint about roughly 7.16 million rupees ($77,000) led to arrests of the exchange’s co-founders, before a court found the fraud had been carried out via an impersonation site run by third parties.
A fake CoinDCX, but a real complaint
The matter began with a complaint from a 42-year-old insurance consultant in Mumbra, Thane. He alleged being defrauded of about 7.16 million rupees after interacting with a site and representatives he believed were CoinDCX. The offer reportedly promised 10–12% monthly returns and described a franchise-style crypto investment arrangement tied to the brand. Those promises and the apparent legitimacy of the brand formed the core of the deception.
Instead of being immediately recognized as an impersonation, the complaint escalated into legal action that resulted in the arrest of CoinDCX co-founders Sumit Gupta and Neeraj Khandelwal.
The role of coindcx.pro
Central to the scam was coindcx.pro — a counterfeit domain that mimicked the genuine coindcx.com. Fake domains like this are a standard tactic: they look right, exploit brand trust and lure victims into sending funds or personal details. CoinDCX has stated that no funds related to the case moved through its exchange and that the scam originated outside its systems.
Domain impersonation often relies on subtle changes: swapping letters (o → 0), adding words or using different extensions to make a site appear legitimate at a glance.
How the fraudsters built a fake ecosystem
The impersonation went beyond a single website. Scammers set up Telegram channels, social media profiles and apparent community support to create a convincing, seamless experience: website, group and representatives all pointing to the same fake brand. This multi-channel approach is increasingly common; fraud networks replicate an entire parallel ecosystem to reduce suspicion.
How the case escalated
The FIR was filed at Mumbra police station on March 16, 2026. During the investigation, CoinDCX’s co-founders were taken into custody in Bengaluru. This demonstrates a core difficulty in impersonation cases: when victims name a prominent company in complaints, early police action can mistakenly target legitimate companies before misuse is distinguished from genuine involvement.
A Thane magistrate later granted bail to the co-founders, observing no prima facie case against them and noting the complainant had been deceived by people impersonating the company’s promoters and had no direct interaction with the actual co-founders.
A wider pattern of fake domains
CoinDCX reported more than 1,200 fake websites impersonating its platform between April 2024 and January 2026, underscoring that impersonation is a scalable fraud strategy rather than a one-off. Creating lookalike domains is inexpensive, and when paired with messaging apps and social media, fraudsters can recreate a façade of trust at scale. CoinDCX also stated the FIR against its co-founders was false.
Why high monthly returns remain a key trigger
Promises of 10–12% monthly returns were central to this alleged scam. Such high-return claims serve to capture attention and lower skepticism, especially when presented as organized or linked to a known brand. Urgency, exclusivity and institutional associations are common levers used to override doubts. Scammers also reuse site templates and scripts, allowing a fake site built for one exchange to be repurposed quickly for others.
Legal and reputational fallout
Even when courts find no case against a company, impersonation incidents cause temporary legal exposure, reputational damage and increased scrutiny from users and regulators. Users may panic when a trusted exchange is linked to negative news, fearing loss or complex recovery procedures. The episode highlights challenges for law enforcement handling digital impersonation, where identities and domains can be copied faster than they can be verified.
CoinDCX’s response
In response, CoinDCX announced a 100 crore rupee ($10.76 million) Digital Suraksha Network (DSN) initiative focused on fraud prevention and user education. Reported measures include an AI-driven WhatsApp helpline, APIs for sharing fraud data, and collaboration with law enforcement on training and response. These steps cannot remove impersonation risk entirely but aim to improve defense and coordination across the ecosystem.
What users should take away
– Verify domains carefully; minor variations often indicate fraud.
– Be skeptical of promises of fixed or unusually high monthly returns.
– Treat Telegram groups and social handles as unverified unless confirmed officially.
– Conduct transactions only through official platforms.
Often the gap between a legitimate service and a scam comes down to careful verification rather than advanced technical know-how.
