When an elderly woman in Goa was placed under psychological siege by fraudsters posing as federal law enforcement officers in May 2025, she was coerced into transferring ₹2.60 crore into what she was told were "Secret Supervision Accounts." To local investigators, the case initially appeared to be another tragic example of "digital arrest"—a psychological extortion tactic that has proliferated across Indian cyberspace over the past two years.

Fifteen months later, the financial investigation into that single incident has led the Directorate of Enforcement (ED) to uncover one of the largest underground money-laundering ecosystems ever documented in the country.

On 28 August 2026, the ED’s Panaji Zonal Office arrested three additional key operatives—Bhushan Suryakant Moye, Vilas Narayan Pawar, and Shailesh Dagdu—under the Prevention of Money Laundering Act (PMLA), following the custodial remand of two Mumbai-based co-conspirators, Fahim Moin Hussain Sayed and Naim Mueen Sayyed. The special PMLA court in Panaji has remanded the newly arrested trio to agency custody through 1 September 2026.

The agency's findings reveal that the ₹2.60 crore stolen in Goa was merely a drop in a financial ocean. The digital trail has exposed an interconnected corporate and banking network that executed over ₹27,850 crore in banking transactions, absorbed ₹2,904 crore in direct cash deposits, and is directly linked to 163 FIRs and over 300 cybercrime complaints across 20 States and Union Territories, representing an aggregate reported public loss of ₹417.49 crore.

The Anatomy of the Extortion: Weaponized Bureaucracy#

The extortion methodology, widely termed "digital arrest," operates entirely on fabricated authority and psychological isolation. Fraudsters initiate contact via VoIP calls or mobile messaging applications, impersonating officials from the Central Bureau of Investigation (CBI), the Narcotics Control Bureau (NCB), the Telecom Regulatory Authority of India (TRAI), or state police departments.

Victims are informed that a parcel registered in their name has been intercepted containing illegal narcotics, counterfeit passports, or forged identity documents, or that their primary bank account has been flagged for financing terrorism. Under the threat of immediate arrest and public humiliation, victims are forced onto continuous Skype or WhatsApp video calls. The perpetrators operate against staged backdrops resembling formal police stations or judicial chambers, complete with official insignias, fabricated arrest warrants, and counterfeit Supreme Court directives.

The climax of the scheme involves demanding that victims transfer their liquid assets—including fixed deposits, mutual fund redemptions, and retirement savings—into designated government "escrow" or "verification" accounts to verify the legitimacy of their funds, with the false promise that the money will be refunded once their name is cleared.

The 400-Account Washing Machine#

The true significance of the ED’s probe lies in deciphering what happens after the victim presses "send." In the Goa case, the ₹2.60 crore was fragmented across 400 separate bank accounts within minutes of receipt, executing a textbook layering strategy designed to defeat automated bank alerts and rapid-response account freezes.

From these initial recipient accounts, the money was systematically routed through a secondary and tertiary tier of entities operating under the guise of commodity trading firms, travel agencies, and foreign exchange brokerages.

Financial investigators discovered that the syndicate utilized automated cash deposit infrastructure at an unprecedented scale. Out of ₹2,904 crore deposited in hard cash across the network, ₹584.70 crore was funneled through 61,448 individual transactions using Bulk Note Acceptance Machines (BNAMs) and automated Cash Deposit Machines (CDMs) spread across urban commercial hubs. By dispersing cash deposits through unmanned kiosks in continuous tranches just beneath mandatory reporting thresholds, the network moved vast quantities of physical currency into the formal banking system without triggering immediate human oversight.

Once deposited, the funds were withdrawn in cash across multiple states or channeled to RBI-licensed Full-Fledged Money Changers (FFMCs), where domestic fiat was converted into foreign currency notes and offshore wire transfers, severing the Indian audit trail.

The Proxy Director Supply Chain#

To shield the beneficial owners from criminal liability, the syndicate established a labyrinth of dummy companies using proxy directors. When ED search teams raided corporate addresses in Mumbai and Goa—recovering ₹3.25 crore in unaccounted cash during late August operations—they found that the registered directors of multi-hundred-crore trading enterprises were daily-wage earners, private drivers, and domestic staff living in single-room chawls.

These individuals were paid nominal monthly retainers or one-time commissions to hand over their identity credentials, sign blank incorporation documents, and provide biometric authentications for corporate current accounts. The syndicate then acquired full physical and digital custody of the associated chequebooks, NetBanking tokens, and registered SIM cards.

This structure allowed the primary handlers to manage dozens of corporate banking profiles remotely, executing high-volume RTGS and IMPS transfers while ensuring that regulatory summonses and local police inquiries fell entirely upon uninformed proxy figures.

A Structural Turning Point for Cyber Enforcement#

The scale of this enterprise underscores why cyber fraud in India can no longer be treated as localized, petty crime. It functions as an organized shadow financial system that leverages commercial banking infrastructure to export illicit capital.

In response to these systemic vulnerabilities, regulatory and security agencies are transitioning toward automated detection:

Essential Defense: Neutralizing the Extortion Threat#

To protect against digital arrest schemes and unauthorized financial demands, citizens and institutions should observe four non-negotiable principles:

---

Sources

DESCAM RESEARCH TEAM