Doctor Exposed as Mastermind Behind ₹209 Crore Cryptocurrency Investment Fraud

Indian authorities have dismantled a sophisticated transnational online investment scheme worth ₹209 crore ($25.3 million), arresting nine suspects including an MBBS doctor who allegedly masterminded the operation. The fraudulent enterprise used bogus cryptocurrency investment portals to lure victims with promises of high, risk-free returns before channeling funds through a complex network of mule accounts across India and abroad.

Background and Context

The case emerged from a complaint filed by a resident of Ganderbal in Jammu and Kashmir, prompting the formation of a Special Investigation Team. According to police investigators, the criminal network exploited the growing public interest in cryptocurrency investments during the recent digital asset boom. The scheme specifically targeted individuals with limited financial literacy who were attracted to the prospect of quick, substantial returns through cryptocurrency trading platforms—a sector that has historically operated with minimal regulatory oversight in many jurisdictions.

Key Figures and Entities

The alleged kingpin, identified as Ekant Yogdutt alias "Dr Morphine," is a medical doctor from Haryana who was apprehended at Delhi's Indira Gandhi International Airport upon returning from China. According to interrogation reports, Yogdutt learned cyber fraud techniques while studying in the Philippines and later established connections with Chinese nationals who helped facilitate the cross-border elements of the operation. The network also relied on local operatives in Kashmir who recruited economically vulnerable individuals to provide their bank accounts for a monthly payment of ₹8,000 to ₹10,000 ($97 to $121), effectively creating a distributed network of financial mules unaware of the full extent of the criminal enterprise.

Legal and Financial Mechanisms

The criminal operation employed a multi-layered financial structure designed to obscure money trails and evade detection. Victims were directed to fake investment websites promoted through social media and search engines, where they deposited funds believing they were investing in legitimate cryptocurrency platforms. The money was initially routed through bank accounts opened in Budgam, Srinagar, Ganderbal, and Baramulla before being rapidly moved through multiple transfers to accounts in other Indian states and ultimately overseas. Investigators have identified 835 bank accounts linked to the operation, with verified transactions worth ₹209 crore across 290 accounts, though officials estimate the total fraud value could exceed ₹400 crore ($48.5 million) as the investigation continues.

A distinctive feature of the operation was its use of Telegram channels to distribute QR codes linked to mule accounts, which were embedded into the fraudulent investment websites. This system allowed the network to quickly replace accounts when they were frozen by cybercrime authorities, ensuring minimal disruption to their criminal activities. Evidence also suggests potential involvement of banking insiders who provided QR codes linked to compromised accounts, further facilitating the laundering of illicit funds.

International Implications and Policy Response

The case highlights growing concerns about transnational cyber-enabled financial crimes that exploit regulatory gaps in cryptocurrency markets and cross-border financial flows. According to cybersecurity experts, similar schemes have proliferated globally as criminals capitalize on the relatively anonymous nature of digital currencies and the challenges of coordinating international enforcement actions. The involvement of Chinese nationals in facilitating the cross-border elements of this operation underscores the need for enhanced international cooperation in combating financial crimes that operate across multiple jurisdictions.

Indian authorities have responded with warnings to citizens about the dangers of online investment platforms promising unusually high or guaranteed returns, particularly those involving cryptocurrency trading. Law enforcement agencies have emphasized that renting out bank accounts, ATM cards, or QR codes for monetary gain constitutes criminal liability under existing laws. The crackdown on this network is part of a broader effort to dismantle mule-account ecosystems and fake investment platforms that drive large-scale digital financial fraud, with officials indicating that further arrests are likely as the investigation continues.

Sources

This report draws on official statements from the Jammu and Kashmir Police Special Investigation Team, court filings related to the case, and independent news coverage from Indian media outlets reporting on the investigation between 2022-2023. The analysis also incorporates publicly available information about cryptocurrency investment fraud trends and international law enforcement responses to transnational financial crimes.