India Raids CoinDCX and Delta Exchange: ED Alleges Thousands of Crores Routed Offshore via USDT — 5 Checks for Indian Crypto Holders
India's Enforcement Directorate searched three Bengaluru offices of CoinDCX and Delta Exchange, alleging thousands of crores in crypto trades were routed offshore through USDT — here are the 5 checks every Indian holder should run tonight.
India's Enforcement Directorate searched three Bengaluru offices of crypto exchanges CoinDCX and Delta Exchange on November 4 and 5, alleging that thousands of crores of rupees in customer crypto trades were routed offshore through USDT — and if you hold crypto on an Indian exchange, the five checks at the end of this article are the ones to run tonight.
The searches, carried out under Section 37 of the Foreign Exchange Management Act (FEMA), 1999, are the sharpest enforcement action against Indian crypto platforms in years. The ED says rupee deposits were converted into the stablecoin USDT, moved through a Costa Rica-based paper entity, and executed on foreign exchanges including Binance, KuCoin, Bybit, Gate.io and Hyperliquid. No charges have been filed and the allegations have not been proven — but the details in the ED's own press release already redraw the map of what Indian exchanges can and cannot do.
This article explains what the ED alleges, what FEMA actually forbids, what CoinDCX said in response, and what happens next — including the three scenarios that decide whether this ends as a fine, a ban, or a full rewrite of India's crypto rules.
What Happened: 3 Searches in 2 Days
The Enforcement Directorate's Bengaluru Zonal Office moved on November 4 and 5, 2026, searching three premises linked to two companies: Neblio Technologies Pvt. Ltd., which operates CoinDCX, and Excelium Technologies Pvt. Ltd., which operates Delta Exchange India. The ED announced the searches in a press release on November 6, the same day its official account posted the announcement on X.
| Date | What happened |
|---|---|
| November 4–5, 2026 | ED Bengaluru searches 3 premises linked to CoinDCX (Neblio Technologies) and Delta Exchange (Excelium Technologies) under Section 37, FEMA 1999 |
| November 6, 2026 | ED issues press release and posts on X: alleged unauthorised cross-border transactions in crypto derivatives and Real World Asset (RWA) tokens, worth thousands of crores of rupees |
| November 6, 2026 | CoinDCX responds, calling the visit a "routine enquiry" and saying it fully cooperated with officials |
| November 6, 2026 | Reports emerge of separate ED searches at other Indian crypto platforms, including Mudrex, under FEMA |
| Next | Investigation continues; no charges filed yet — the ED's findings at this stage are allegations, not proven violations |
The timing matters. The searches came just weeks after CoinDCX faced scrutiny over a deposit wallet incident that cost about $16 million — an episode blockchain investigator ZachXBT said the exchange initially denied. That earlier incident is now part of the context every Indian holder is asking about: two enforcement problems in one month, on the same platform.
The 5 Allegations, in Plain English
The ED's press release makes five distinct claims. Each one matters on its own, because each points at a different rule the platforms allegedly broke.
1. Rupee deposits were converted into USDT and sent abroad. The ED alleges CoinDCX converted customers' rupee deposits into USDT and transferred the funds to overseas exchanges to execute spot crypto trades. The volume of those cross-border spot transactions, the agency said, runs into thousands of crores of rupees — tens of billions of rupees, or hundreds of millions of dollars at minimum.
2. A Costa Rica paper entity sat in the middle. According to reports of the ED's findings, the USDT was routed through an account held in the name of a Costa Rica-based entity before reaching global exchanges. The use of a paper entity in a third country is the detail that turns a compliance question into a money-movement investigation: it is the classic structure regulators look for when funds are moved outside a country's foreign-exchange framework.
3. Derivatives and tokenised stocks were offered without authorisation. Both platforms allegedly offered customers crypto futures and options contracts, plus trading in tokenised stocks of foreign companies, without the requisite authorisation. The ED says these products were executed through overseas exchanges — Binance, KuCoin, Gate.io, Bybit and Hyperliquid — using stablecoins such as USDT. The derivatives volumes, like the spot volumes, allegedly run into thousands of crores of rupees in each product line.
4. Hundreds of crores in fees bypassed the framework. The ED further alleged that CoinDCX paid hundreds of crores of rupees in transaction fees to foreign exchanges through USDT, bypassing the prescribed foreign-exchange framework. Fees are the part of the story that is hardest to explain away as a paperwork error: they are recurring, deliberate payments to entities outside India, made in a currency the Indian framework does not recognise for that purpose.
5. Customer crypto was kept abroad. The ED said CoinDCX holds enterprise trading accounts on foreign crypto platforms, keeping crypto assets abroad in contravention of FEMA. For customers, this is the allegation with the most direct consequence: it raises the question of where, exactly, the crypto backing Indian users' balances actually sits.
The ED also said the products offered appear, prima facie, to be contrary to three further laws: the Securities Contracts (Regulation) Act, 1956, the SEBI Act, 1992, and the RBI Act, 1934. "Prima facie" is doing heavy work in that sentence — it means the agency believes the case is made on first examination, not that a court has ruled. But it signals the ED is not treating this as a narrow FEMA paperwork matter. It is examining whether the platforms were, in effect, running an unauthorised securities and derivatives market.
What FEMA Actually Says — and Why Crypto Trades Can Break It
Most Indian crypto holders have never read the Foreign Exchange Management Act, and most have never needed to. FEMA, passed in 1999, governs how money crosses India's borders. Its core principle is simple: foreign-exchange transactions must go through authorised channels, and moving money out of India outside those channels is a violation — even if the money itself is legitimate.
That principle collides with how crypto actually works. A rupee deposit that becomes USDT and lands on Binance has, from FEMA's point of view, left India. The stablecoin is the bridge: it is dollar-denominated, it moves on global blockchains in minutes, and it does not pass through an authorised dealer bank. When an Indian platform converts customer rupees into USDT and sends that USDT to an overseas exchange, the ED's position is that the platform has arranged an unauthorised cross-border transaction — regardless of whether the customer eventually got the crypto they paid for.
The contrast with the regulated side of the market is stark. India taxes crypto gains at a flat 30% and deducts 1% tax at source on transactions, and FIU-registered exchanges must collect KYC and report suspicious transactions. Our guide to buying Bitcoin in India in 2026 compares five FIU-registered exchanges and explains the 30% tax in detail. The ED case is about what happens outside that registered perimeter — and the answer, it turns out, may be a raid.
"Routine Enquiry": What CoinDCX Said — and the $16M Problem That Came First
CoinDCX's response, carried by The Hindu BusinessLine, was brief. In a statement, Neblio Technologies said: "Officials from the Enforcement Directorate visited our Bengaluru office as a part of a routine enquiry. We fully cooperated with the authorities and provided all necessary information and assistance."
That framing is standard for a company at the search stage of an investigation, and it is worth noting what it does not say.
The $16 million deposit wallet incident is the part of the story CoinDCX cannot frame as routine. Weeks before the ED searches, the exchange faced scrutiny after about $16 million vanished from its deposit wallets. Blockchain investigator ZachXBT accused the exchange of initially denying that the loss had taken place. For holders, the two episodes combine into a single uncomfortable question: is the platform that lost $16 million from a deposit wallet, and allegedly routed thousands of crores offshore, a safe place to keep crypto? That is the question the five checks at the end of this article are designed to answer.
What Indian Exchanges Can Offer vs What Was Allegedly Offered
The gap between the regulated market and the alleged offshore operation is the heart of this story. Here is how the two compare:
| Product | On a registered Indian exchange | What the ED alleges was offered |
|---|---|---|
| Spot crypto trading (BTC, ETH, etc.) | Allowed, with KYC, 1% TDS and 30% tax on gains | Executed offshore via USDT on Binance, KuCoin, Gate.io and Bybit |
| Crypto futures and options | Not authorised in India | Offered to customers and executed on foreign exchanges |
| Tokenised foreign stocks | Not authorised in India | Openly advertised and traded via offshore venues |
| Where customer funds sit | Expected to be accounted for in India under FEMA | Allegedly held in enterprise accounts on foreign platforms |
| Fees to foreign exchanges | Must pass through the prescribed foreign-exchange framework | Allegedly hundreds of crores paid in USDT, bypassing the framework |
| Regulatory status | FIU-registered, KYC and reporting obligations | Products prima facie contrary to SCRA 1956, SEBI Act 1992 and RBI Act 1934, per the ED |
The table explains why the ED's action reaches beyond two companies. If derivatives and tokenised stocks cannot be offered legally in India, and the offshore route to offer them violates FEMA, then the products simply cannot be offered to Indian customers at all — not by anyone, through any route. That is a conclusion the whole Indian market is now digesting.
5 Checks Every Indian Crypto Holder Should Run Tonight
Whether or not you use CoinDCX or Delta Exchange, this case is a prompt to audit where your crypto actually is. Run these five checks now, while the investigation is still at the search stage — not after the next headline.
Check 1: Know where your coins actually sit. If your crypto is on any exchange, it is an IOU, not a holding — the exchange controls the keys. The ED alleges customer crypto was kept in enterprise accounts on foreign platforms. Ask your exchange, in writing, where customer assets are custodied, and whether they are held in India or abroad. If you cannot get a straight answer, that is an answer. Our guide to storing crypto safely in 2026 explains cold storage, seed phrases and how to move coins off an exchange step by step.
Check 2: Move long-term holdings to a wallet you control. Coins you do not plan to trade have no business sitting on an exchange — especially one under investigation. A hardware wallet costs less than a single bad day in this market, and it removes your funds from any platform's legal problems entirely. We compared seven options after the $6.3 billion Binance hack in our best crypto wallets in 2026 guide — prices, security, and the one beginner mistake to avoid.
Check 3: Stop using derivatives and tokenised stocks from Indian platforms. Until the ED case is resolved, treat any crypto futures, options or tokenised-stock product offered to Indian users as legally exposed. These are the exact products at the centre of the investigation. If a platform offers them, ask how they are authorised — and if the answer involves an offshore entity, walk away.
Check 4: Keep records of every rupee you deposited. If the investigation widens, users may need to prove the source and destination of their funds. Save bank statements showing deposits to exchanges, exchange statements showing trades, and any tax filings. India taxes crypto gains at 30%, and clean records are your best defence if any authority asks questions. Our crypto tax-loss harvesting guide explains how to turn this year's losses into a tax break before the December 31 deadline.
Check 5: Watch for withdrawal freezes and withdrawal limits. The first sign of trouble at an exchange under investigation is usually not an announcement — it is a withdrawal that takes hours instead of minutes, or a new limit nobody announced. Test a small withdrawal now, while things are normal, so you know the rails work. And remember the context: India already saw a $16 million deposit wallet incident at CoinDCX weeks ago, covered in our report on the CoinDCX $16M hack — platforms under stress fail in the plumbing first.
What Happens Next: 3 Scenarios
The investigation is at the search stage, which means the ED is still gathering evidence. No charges have been filed. But the range of outcomes is wide, and each one changes the Indian market differently.
Scenario 1: Fines and a compliance reset (most likely). The ED's typical FEMA enforcement ends in adjudication and penalties, not criminal prosecution. The platforms pay fines, shut down the offshore routing, and rebuild their products inside the registered perimeter. Indian users keep trading spot crypto on FIU-registered exchanges, and the derivatives and tokenised-stock products disappear from the Indian market. This is the base case — painful for the two companies, survivable for users.
Scenario 2: A widening crackdown. The ED has already searched other platforms, including Mudrex, according to reports of separate FEMA searches. If the investigation spreads across the industry, the offshore model itself could be dismantled — and the exchanges that relied on it would face existential pressure. Indian users would see products vanish, some platforms exit the market, and a flight toward the largest FIU-registered exchanges. Watch for further search announcements: each one is a signal that Scenario 2 is becoming more likely.
Scenario 3: Prosecution and a market rewrite. The least likely but most consequential outcome: the ED's prima facie findings under the SCRA, SEBI Act and RBI Act turn into formal proceedings, and the case becomes the trigger for a comprehensive Indian crypto law — the kind of framework the industry has waited years for, arriving in its harshest possible form. Tokenised stocks and derivatives would be off the table for years, and the compliance bar for every Indian exchange would rise sharply. India has already tightened around the edges — our report on India's crypto cards under RBI scrutiny shows the same pattern in payments. A Scenario 3 outcome would extend it to trading itself.
The signal to watch is simple: the next ED announcement. A second wave of searches means the investigation is widening. A summons to senior executives means it is deepening. Silence, for now, means the agency is still building its case — and the market is holding its breath.
FAQs
Is my money safe on CoinDCX right now?
There is no public evidence that customer funds on CoinDCX are missing or frozen. The ED's allegations concern how trades were routed and where assets were held, not a theft of customer deposits. But the $16 million deposit wallet incident weeks earlier, and the allegation that crypto was held in foreign enterprise accounts, are real reasons to reduce exposure: move long-term holdings to a wallet you control and keep only trading balances on the exchange.
Is CoinDCX shut down?
No. The ED conducted searches at three Bengaluru premises on November 4 and 5. The platform continues to operate. CoinDCX described the visit as a "routine enquiry" and said it cooperated fully. No charges have been filed.
What is FEMA, and why does it apply to crypto?
The Foreign Exchange Management Act, 1999, governs how money crosses India's borders. The ED's position is that converting rupees into USDT and sending that USDT to overseas exchanges is an unauthorised cross-border transaction, even though the stablecoin moves on a blockchain rather than through a bank. The searches were carried out under Section 37 of FEMA.
Can Indian exchanges legally offer crypto futures and options?
Not under current Indian law, according to the ED's findings. The agency says the futures, options and tokenised-stock products offered by CoinDCX and Delta Exchange were not authorised, and that the products appear prima facie contrary to the Securities Contracts (Regulation) Act 1956, the SEBI Act 1992 and the RBI Act 1934.
What does "thousands of crores" mean in real money?
One crore is ₹10 million. "Thousands of crores" means tens of billions of rupees — hundreds of millions of dollars at minimum — in each product line the ED named. The agency said both the spot volumes and the derivatives volumes ran into thousands of crores, and that hundreds of crores in fees were paid to foreign exchanges in USDT.
What should Indian crypto holders do now?
Run the five checks above: confirm where your coins are custodied, move long-term holdings to a wallet you control, stop using derivatives and tokenised-stock products from Indian platforms, keep complete records of deposits and trades, and test a small withdrawal now. And follow the case: the next ED announcement will tell you whether this stays a two-company problem or becomes an industry-wide reset.
Conclusion
The ED's searches at CoinDCX and Delta Exchange are not a story about two companies. They are a story about a business model — take rupees, convert to USDT, execute abroad — that much of India's crypto market has quietly relied on for years. The ED says that model violates FEMA, and that the derivatives and tokenised stocks it enabled were never authorised at all.
For Indian holders, the practical lesson is older than this case and more important than it: coins on an exchange are an IOU, and an IOU is only as good as the company behind it. The $16 million deposit wallet incident, the Costa Rica entity, the hundreds of crores in offshore fees — each one is a reminder that custody is the decision that matters most. Move what you do not trade into a wallet you control, keep your records clean, and watch what the ED does next. The next announcement will decide whether India gets a fine, a crackdown, or a whole new set of rules.
Sources: NDTV Profit, Moneycontrol, Coinpedia, TradingView, Ministry of Cyber Affairs. Allegations reported are unproven and no charges have been filed. This article is not legal or investment advice.
