India's Financial Crimes Agency Searches CoinDCX, Delta Exchange Over Alleged Offshore Trades
Key Takeaways
- •India's Enforcement Directorate searched three Bengaluru premises connected to CoinDCX and Delta Exchange on November 4 and 5 under FEMA, targeting operators Neblio Technologies and Excelium Technologies.
- •The agency alleges CoinDCX converted users' rupees into USDT and opened matching positions on foreign venues including Binance, KuCoin, Bybit and Gate.io through a Costa Rica-based shell entity, with cross-border flows reaching hundreds of millions of dollars.
- •According to the ED, tokenized share trades in companies such as Apple, Google and Tesla were actually derivatives positions opened on the decentralized exchange Hyperliquid.
- •Both exchanges said they fully cooperated with officials, cited Financial Intelligence Unit registrations, and stated that trading, deposits and withdrawals are functioning normally.
- •The investigation compounds a turbulent stretch for CoinDCX, which confirmed a $16 million loss from retired wallets last month after a roughly $44 million exploit in July 2025.

India's Enforcement Directorate has searched three premises in Bengaluru linked to crypto exchanges CoinDCX and Delta Exchange, alleging the platforms carried out unauthorized cross-border transactions worth hundreds of millions of dollars through crypto derivatives and tokenized assets.
According to the agency, CoinDCX converted users' rupees into USDT and executed their trades on foreign venues including Binance, KuCoin, Bybit and Gate.io via a Costa Rican "paper entity," with cross-border flows running to thousands of crores of rupees (one crore equals 10 million rupees). It further alleged that trades in tokenized stocks were routed to the decentralized exchange Hyperliquid.
The searches were carried out on November 4 and 5 under India's Foreign Exchange Management Act (FEMA), the agency — India's main financial crimes investigator — said in a statement dated November 6, which it shared on X on Thursday. FEMA is India's primary law governing foreign exchange transactions and cross-border remittances. Contraventions of the law are civil matters in India, generally addressed through penalties rather than criminal prosecution.
ईडी, बेंगलुरु ने क्रिप्टो टोकन डेरिवेटिव एवं वास्तविक विश्व परिसंपत्ति (आरडब्ल्यूए) टोकन से जुड़े बड़े पैमाने पर अनधिकृत सीमा-पार वित्तीय लेन-देन के मामले में फेमा, 1999 के अंतर्गत मेसर्स नेब्लियो टेक्नोलॉजीज प्राइवेट लिमिटेड (“कॉइनडीसीएक्स”) तथा मेसर्स एक्सेलियम टेक्नोलॉजीज… pic.twitter.com/vXwMU5uCTj — ED (@dir_ed) November 12, 2026
The investigation targets Neblio Technologies Private Limited, which operates CoinDCX, and Excelium Technologies, which runs Delta Exchange. According to the agency, both platforms offered futures and options on crypto tokens and openly advertised trading in tokenized shares of foreign companies, despite not being authorized to do so.
How the trades allegedly worked
The Enforcement Directorate alleged that CoinDCX used stablecoins such as USDT to carry out trades for its users on foreign crypto exchanges, including Binance, KuCoin, Bybit and Gate.io, bypassing India's framework for sending money abroad. That framework routes outward remittances through banks and other authorized dealers, and the agency's account instead describes matching positions opened directly in USDT on foreign venues, outside those banking channels.
When users deposited rupees and placed spot or derivatives orders, CoinDCX converted the funds into USDT and opened matching positions on the foreign exchanges, the agency said. The trades ran through accounts held in the name of a Costa Rica-based group entity, which it described as a shell entity, and were carried out directly from CoinDCX through APIs.
Trades in tokenized shares of companies such as Apple, Google and Tesla were in fact derivatives positions opened on the decentralized exchange Hyperliquid, according to the agency.
The Enforcement Directorate alleged that the cross-border transactions in each of these areas ran to hundreds of millions of dollars. It also said CoinDCX holds crypto assets in enterprise accounts on foreign exchanges, and has paid tens of millions of dollars in fees to those platforms in USDT, in breach of FEMA.
The agency said a large share of Delta Exchange's derivatives trading was executed through CoinDCX, and that Delta Exchange had transferred tens of millions of dollars to its overseas group entities, which is under investigation. Their fintech products also appear to contravene India's securities and central banking laws, it said, adding that its investigation is ongoing. Securities and central banking oversight in India rests with the Securities and Exchange Board of India and the Reserve Bank of India, respectively.
The exchanges respond
CoinDCX said in a tweet on November 6 that Enforcement Directorate officials had visited its Bengaluru office "as part of a routine enquiry" on November 4, and that it had fully cooperated. The exchange said it operates "in strict compliance with all applicable Indian laws, including FEMA," and adheres to its KYC, anti-money laundering and reporting obligations as an entity registered with India's Financial Intelligence Unit. Trading, deposits and withdrawals on the platform remain fully operational, it added.
Update: Officials from the Enforcement Directorate visited our Bengaluru office as part of a routine enquiry on 4th November. We fully cooperated with the authorities and provided all necessary information and assistance. As an entity registered with FIU-IND, we regularly… — CoinDCX (@CoinDCX) November 6, 2026
Delta Exchange said in its own tweet on November 6 that it had cooperated fully with officials, and that its business "does not involve any cross-border transfer of VDAs in any form or manner," using India's term for crypto assets. It said it runs a dedicated rupee-settled exchange for Indian users only, has been registered with India's Financial Intelligence Unit since 2023, and that trading, deposits and withdrawals were functioning normally. The FIU registrations both exchanges cite cover anti-money-laundering reporting obligations — a separate regime from FEMA, the foreign-exchange law under which the ED's allegations were made.
A turbulent year for CoinDCX
The investigation adds to a difficult stretch for CoinDCX, one of India's largest crypto exchanges. Last month, it confirmed a $16 million loss from retired wallets, days after co-founder and CEO Sumit Gupta called reports of a breach a "false alarm." That followed a roughly $44 million exploit in July 2025.
Coinbase, which has invested in CoinDCX since 2020, won approval from India's competition regulator to increase its minority stake in the exchange's parent company. The ED has described its investigation as ongoing, while both exchanges say trading, deposits and withdrawals are operating normally.