India Financial Crime Intelligence Report

Published Updated 18 min read

Enforcement posture across PMLA, crypto-enabled crime, hawala, narcotics finance, cross-border flows, TBML, and agency performance. Gap analysis and 2026-2030 projections for investigators, counsel, and compliance teams.

Executive Intelligence Summary

High-level dashboard of India's financial crime enforcement posture as of February 2026

Rs 1,54,594 Cr PMLA Assets Attached
$158B Global Illicit Crypto (2025)
94.82% PMLA Conviction Rate
11,720 Crypto STRs (8mo FY26)
Note

STR Filing Explosion: India's crypto Suspicious Transaction Reports grew from 1,343 in FY2023-24 to 6,272 in FY2024-25 (+367%), and reached 11,720 in the first 8 months of FY2025-26 (April-November 2025) alone - already 87% above the entire prior full year. Tether (USDT) appeared in 7,467 of 9,795 reviewed STRs (76%) - Bitcoin only 6%.

India crypto STR filings FY2024 to FY2026
Crypto-related Suspicious Transaction Reports filed with FIU-IND. FY2026 bar covers April–November 2025 only.

India's anti-money laundering enforcement architecture reached several inflection points in FY2024-25 and into FY2025-26. The Enforcement Directorate issued its highest-ever single-year provisional attachment value of Rs 30,036 crore - a 141% increase in value year-on-year - bringing cumulative provisional attachments to Rs 1,54,594 crore. This trajectory coincides with a global crypto crime surge, with illicit flows hitting an all-time high of $158 billion in 2025 according to TRM Labs, reversing a three-year declining trend.

India's FATF Regular Follow-up classification (June 2024, the best possible outcome) reflects genuine institutional progress, but the report's assessors identified continuing gaps in DNFBP supervision, prosecution delays, and beneficial ownership identification. The convergence of traditional hawala networks with cryptocurrency infrastructure - particularly USDT on TRON - represents the primary emerging threat vector for 2026.

Key domestic developments include FIU-IND's privacy coin ban (January 8, 2026), blocking of 25 offshore exchanges (October 2025), and the establishment of a Darknet and Crypto Task Force under NCORD. India now has approximately 119 million crypto users - the world's largest user base - operating under a patchwork regulatory framework without dedicated legislation.

India's AML Institutional Architecture

13 key agencies, their legal mandates, reporting structures, and performance data

Note

India's AML/CFT framework is a multi-agency architecture anchored by PMLA 2002, FEMA 1999, UAPA 1967, NDPS Act 1985, and the Customs Act 1962. Central coordination is chaired by the Revenue Secretary under PMLA Section 72A. The FATF nodal body is the FATF Cell, Department of Revenue (established 2017). India attained Regular Follow-up status at the FATF Plenary in Singapore (June 26-28, 2024) - the best possible category, shared with only UK, France, and Italy among G20 nations.

Cryptocurrency and Digital Asset-Enabled Financial Crime

Global crypto crime data, USDT/TRON analysis, India enforcement, and convergence typologies

Global illicit crypto volume 2020 to 2025
Global illicit cryptocurrency volume (USD billions). 2025 marks an all-time high after a multi-year decline.
Illustrative illicit volume share by blockchain
Illustrative share of observed illicit volume by chain. TRON dominance reflects USDT rail concentration in many typologies.
  • April 6, 2018

    RBI prohibited regulated entities from dealing in or providing services to virtual currency businesses.

  • March 4, 2020

    WP No. 528/2018: SC struck down RBI circular as disproportionate; crypto trading revived.

  • February 1, 2022

    30% flat tax on VDA income; 1% TDS on transactions above Rs 10,000. Effective July 2022. Led to 90% domestic volume drop and ~75% shift to offshore platforms.

  • March 7, 2023

    Ministry of Finance S.O. 1072(E): VDA Service Providers classified as reporting entities under PMLA 2002. FATF Travel Rule implemented with no minimum threshold.

  • December 28, 2023

    Binance, KuCoin, Kraken, Huobi, Gate.io, Bitstamp, Bittrex, MEXC, Bitfinex received show-cause notices for PMLA non-compliance. URLs/apps blocked in January 2024.

  • June 19, 2024

    Largest crypto AML fine in India at the time. Binance registered with FIU-IND. Official order: FIU-IND Binance Order

  • January 31, 2025

    Non-registration and continued expansion without mandatory FIU-IND registration.

  • October 1-7, 2025

    AscendEx, BC.Game, BingX, BitMEX, CoinEx, CoinW, Huione (Haowang Guarantee), LBank, Phemex, Poloniex and 15 others. 14 of 25 held $9B+ in assets, $20B+ daily volume at time of action.

  • January 8, 2026

    Monero (XMR), Zcash (ZEC), Dash, PIVX banned from regulated exchanges. Mixers/tumblers prohibited. New KYC: live selfie + liveness detection, geographic coordinates, penny-drop verification, enhanced due diligence on unhosted wallets.

  • April 2027 (Upcoming)

    Offshore VDA SPs required to report Indian user transactions to CBDT. India confirmed commitment September 2025.

3A Global Crypto Crime Data (2020-2025)

Note

Global illicit crypto volume hit an all-time high of $158 billion in 2025 (TRM Labs) /$154 billion (Chainalysis lower bound), reversing a multi-year decline. The surge was primarily driven by Russia-linked sanctions evasion (A7A5 stablecoin: $72B+), Chinese Money Laundering Networks (CMLNs, $103B+), and elevated scam/fraud activity ($35B). Historical estimates are regularly revised upward as attribution improves.

Note: TRM Labs and Chainalysis differ substantially due to different denominators. TRM's 2026 report excludes wash trading, peel chains, and internal exchange flows from denominator.

The shift from Bitcoin to stablecoins (primarily USDT on TRON) is the defining structural change in crypto crime since 2020. 77% of illicit stablecoin activity in 2025 was linked to Russia's A7A5 ruble-pegged stablecoin alone.

Crime Type↕ YoY Growth↕ Key Data Points
Sanctions/Sanctions Evasion >400% A7A5 token ($72B); A7 wallet cluster ($39B); Russia-linked; Garantex/Grinex
Blocklisted Funds +32% Largely Tether enforcement actions; 7,268 unique addresses blacklisted
Hacked/Stolen Funds +31% $2.87B across ~150 hacks; Bybit hack $1.46B (51% of total 2025 hacks)
Darknet Markets +20% $1.7B in 2024; vendor shops $600M+ (up from $289M in 2023)
Illicit Goods & Services +12% OTC desks, escrow services, CMLN "guarantee" platforms
Scams/Fraud Significant TRM: ~$35B; Chainalysis: $14B-$17B; AI-enabled scams +500% (TRM); pig-butchering
Ransomware -8% (payments) $820M on-chain payments; attacks +50%; share paying: 28% (record low)
Chinese Money Laundering Networks Surged $103B+ (TRM); $16.1B (Chainalysis); $44M/day average; Telegram guarantee platforms

Source:TRM Labs 2026 Crypto Crime Report | Chainalysis 2026 Report Introduction

3B USDT on TRON - The Dominant Illicit Rail

Note

Founded September 4, 2024 - a public-private partnership between TRON, Tether, and TRM Labs. By October 31, 2025 (first anniversary), T3 FCU had frozen over $300 million in illicit assets across 23 jurisdictions on all continents except Africa. USA ($83M, 37 cases) was the largest volume. Brazil: R$3 billion+ frozen via Operation Lusocoin (including 4.3M USDT). August 2025: T3 Global Collaboration Program launched with Binance as inaugural member.

Sources:TRM Labs 2025 Report Teaser (chain breakdown) | The Defiant - T3 FCU $300M milestone

3C India Crypto Enforcement Timeline & STR Growth

Exchange↕ Penalty↕ Date Reason
Binance Rs 18.82 Cr (~$2.25M) June 19, 2024 Non-registration; failure to maintain records under PMLA Sec 12(1)
Bybit Fintech Ltd Rs 9.27 Cr (~$1.06M) Jan 31, 2025 Non-registration; continued expansion without mandatory FIU-IND registration
KuCoin Rs 34.50 lakh (~$41K) March 22, 2024 Non-registration under PMLA Sec 12(1) - first offshore exchange to comply and pay
FY2024-25 Total ~Rs 28-29 Cr FY 2024-25 Various PMLA violations across multiple VDA SPs; 63 websites blocked

3D Crypto-Hawala-Narcotics Fund Flow Diagram

Note

Convergence model observed in Indian enforcement (2024-25): Narcotics proceeds - hawala operators - USDT conversion (P2P, no KYC) - cross-chain layering (TRON to ETH/BSC) - UAE accounts (OTC desks or hawala) - re-investment via shell FDI or real estate parking - integration into legitimate Indian economy. Crypto acts as a "force multiplier" enabling infinite layers and jurisdictions that traditional 4-layer hawala could not achieve.

Hawala and Informal Value Transfer Systems

Mechanics, scale, crypto-hawala convergence, and geographic corridors

Hawala (also "hundi" in Indian context) is a trust-based informal value transfer system (IVTS) operating outside conventional banking. No physical movement of money occurs in real time. Settlement happens via trade invoices, gold transfers, reverse hawala, or increasingly - cryptocurrency transfers.

  1. Sender (Country A) delivers cash to local hawala broker (hawaldar)
  2. Hawaldar provides a code/token (now often WhatsApp OTP or crypto wallet address)
  3. Country A broker notifies Country B counterpart via encrypted app with amount + code
  4. Recipient presents code to Country B hawaldar; receives equivalent local currency within hours
  5. Balances settled periodically via trade invoices, gold transfers, or USDT transfers

Note: $24-47B includes both legitimate informal transfers and criminal proceeds. This is a broad estimate applying the 20-40% ratio to official RBI remittance data. Precise measurement is inherently difficult given the system's opacity.

FIU-IND documented a hawala case involving multiple VDASP accounts with approximately Rs 1,100 crore deposited and converted to Indian currency via crypto-hawala hybrid. FIU stated: "VDAs are increasingly used as modern substitutes for hawala channels."

Modern Crypto-Hawala Convergence (2024-2025)

Note

The most significant structural shift documented in 2024-2025 is the fusion of traditional hawala networks with cryptocurrency infrastructure. DRI FY2024-25 report explicitly states:"In gold and narcotics smuggling, sale proceeds are either hawala-transferred or sent as cryptocurrency to masterminds abroad." DRI is now deploying blockchain analytics to trace these flows.

  1. Remitter pools funds into multiple mule bank accounts via UPI/RTGS - structured below Rs 50,000 alert thresholds ("smurfing")
  2. Mule accounts transfer to shell accounts belonging to unknown hawala operators
  3. Operator delivers USDT/stablecoin to a pre-negotiated crypto wallet in Dubai
  4. USDT exchanged at OTC desk or crypto ATM in Dubai for cash in Dirhams
  5. Hawala margins settled in local cash; cross-border settlement complete
  • Tumbler/mixer wallets - pool coins before redistribution to new wallets (now banned on Indian exchanges)

  • Bridge and swap functions - switch between blockchains (Bitcoin to Solana) to obscure fund trails

  • Self-custody wallets - not hosted on exchanges; invisible to FIU until they transact with compliant platforms

  • OTC/P2P transactions - two-party, off-exchange, no reporting obligation

  • VPNs and encrypted apps - Signal, Telegram, WeChat for coordination

  • Offshore non-FIU exchanges - Huione (Cambodia), BC.Game (Curacao) outside Indian reach

  • Cambodian Huione Pay link - 34 Indian customers using Cambodian phone numbers; funded via Huione Pay USDT, liquidated to INR

Date Case Amount Method
Jul 2024 DRI China Gold - Rs 127 Cr hawala via USDT Rs 127 Cr 108 kg China-origin gold sold in Delhi; proceeds to China via USDT/WeChat/VPN. First DRI crypto-hawala case.
Jun 2025 ED raids Gujarat/Mumbai - Rs 100 Cr hawala Rs 100 Cr+ Cyber-fraud proceeds to crypto via hawala operators in Surat, Ahmedabad, Mumbai
Aug 2025 ED raids 11 locations - Rs 260 Cr Rs 260 Cr Bitcoin to USDT, moved abroad via UAE-based hawala. Delhi/Noida/Gurugram/Dehradun
Nov 2025 ED raids Delhi-Goa hawala operators Rs 89 Cr (prior attachments) Undisclosed Dubai real estate; 17 related cases; hawala using USDT rail
Dec 2024 Kashmir IT/hawala bust Rs 800 Cr (network) Rs 1 Cr cash seized; Rs 50 Cr+ undisclosed Dubai assets in Rs 800 Cr hawala network
Dec 2025 4th Bloc Consultants (Ponzi-Hawala) Rs 623 Cr deposited 30-40% routed through hawala; crypto to UAE/Singapore/Mauritius offshore accounts

Padgha ISIS Terror Financing Case - Hawala + NIA + ED Joint Action

NIA registered Case RC-29/2023/NIA/DLI in November 2023. An ISIS-linked module based in Padgha village, Thane (Maharashtra) had self-declared the area "Al Sham" - a liberated ISIS territory. 21 accused charged by NIA for recruitment/radicalization, IED fabrication, and raising funds to sustain ISIS operations in India.

ED filed a PMLA case predicated on the NIA FIR in December 2025. On December 11, 2025, 40 locations were raided simultaneously across Maharashtra (Padgha/Borivali/Thane, Ratnagiri), Delhi, Kolkata, and Uttar Pradesh.

  • Illegal Khair (Acacia catechu/Kaith wood) smuggling from reserve forests used as predicate crime - proceeds financed the terrorist module
  • Front businesses: legitimate "Kattha" (food additive) production used as cover for illegal wood procurement
  • Cross-state hawala networks used for fund movement
  • International connections to ISIS financiers probed
  • Seized:Rs 3.70 crore cash + Rs 6 crore gold/bullion

This case demonstrates the environmental crime-terror financing nexus - a relatively uncommon but documented pattern where resource crimes fund extremism.

Detection Challenges and FATF Assessment

  1. No paper trail - transactions leave no documentation in formal financial systems

  2. Closed trust networks - caste/ethnic ties create impenetrable information ecosystems

  3. Front businesses - jewelry shops, textile exporters, travel agencies co-mingle receipts

  4. Crypto obfuscation - tumbler wallets, bridge swaps, self-custody wallets opaque to analytics

  5. Offshore non-compliant exchanges - many Indian operators use Huione/Cambodia, BC.game/Curacao; outside Indian regulatory reach

  6. DNFBP reporting gaps - real estate agents, jewelers, accountants file very few STRs despite high hawala exposure

  7. Political connections - hawala networks often have politician links, making investigations difficult

  8. Historical counterproductive enforcement - high-handed crackdowns historically drove hawaldars underground

  9. No Trade Transparency Units (TTUs) - India lacks bilateral trade data comparison tools to detect TBML misinvoicing

  10. 41% of Indian crypto users on offshore non-FIU platforms - significant blind spot

Narcotics-Linked Financial Crime

India's narcotics economy sits at the convergence of the Golden Crescent and Golden Triangle - two of the world's most prolific drug-producing regions. Drug trafficking generates proceeds that flow through real estate, crypto, and hawala before integration into the formal economy.

The NDPS Act 1985 defines and criminalizes drug offences. Drug trafficking offences are scheduled offences under PMLA, meaning any proceeds from NDPS violations can be traced, attached, and confiscated by the ED under the Prevention of Money Laundering Act 2002.

  • NCB: Seizure, arrest, and NDPS prosecution

  • ED: Financial investigation - tracing drug money through layers

  • DRI: Cross-border narcotics interdiction (import/export routes)

  • State Police: Predicate offence FIRs that trigger PMLA jurisdiction

  • NIA: Terror-narcotics nexus cases

  • NCB/state police files FIR under NDPS Act

  • ED registers ECIR (Enforcement Case Information Report)

  • ED issues Provisional Attachment Orders against proceeds

  • ED files Prosecution Complaint before Special PMLA Court

  • Conviction under PMLA independent of NDPS conviction

India's Dual-Threat Geographic Position

Golden Crescent Afghanistan - Pakistan - Iran
Golden Triangle Myanmar - Thailand - Laos
Rs 1,980 Cr NCB FY2025 Seizure Value
Rs 25,330 Cr All-Agency Narcotics Value 2024

Drug Category Analysis: Seizure Volumes and Financial Flows

Drug Category↕ % of FY2024 Seizures↕ FY2024 Volume (kg)↕ Primary Source Entry Route ML Mechanism
Cannabis (Ganja/Hashish) 41% 540,810 Domestic cultivation + Nepal, Bangladesh Land borders; hydroponic via air Cash, real estate, hawala
Opiates (Heroin/Opium) 39% 521,366 Afghanistan via Pakistan (Golden Crescent) Punjab land corridor; drone drops Hawala to Pakistan; Dubai corridor
Pharmaceuticals (Codeine/Tramadol) 18% ~238,000 Domestic diversion; Bangladesh Northeast border; e-pharmacy Cash, informal channels
Synthetic Drugs (Meth/ATS) 2% ~26,000 Myanmar (Golden Triangle); CJNG via Mexico NE land border; maritime; air Crypto, jade/gems, hawala
Cocaine <1% 107 Latin America; Africa transit Air passenger (Nairobi, Addis hubs) Crypto-hawala (CJNG case); shell companies

Indo-Pakistan Corridor: Heroin, Drones, and Terror Financing

Pakistan ISI strategy: narcotics weaponized as a tool to \"destroy Punjab's youth cognitively\" while generating revenue for anti-India operations. Heroin from Afghanistan flows to Pakistan border laboratories, then enters Punjab via river/stream tosses, drone drops, and courier networks using recruited drug addicts as mules.

Heroin revenue finances weapon procurement and ideological operations in J&K. ISI-linked drug networks operate as dual-purpose entities: destabilizing Punjab while generating operational funding.

  • Afghanistan farmgate: ~Rs 1 lakh/kg
  • Pakistan border: ~Rs 5-10 lakh/kg
  • Delhi wholesale: ~Rs 50 lakh/kg
  • Indian street level: ~Rs 5 crore/kg

Source:Defence Horizon Journal / Punjab Drug-Drone Analysis

Indo-Myanmar Corridor: Methamphetamine and Narco-Finance

Post-2021 Myanmar military coup: fragmentation of governance enabled Ethnic Armed Organizations (EAOs) to dramatically scale methamphetamine production. The United Wa State Army (UWSA) added synthetics to its heroin portfolio. UNODC designated Shan State production as showing \"explosive growth.\"

  • Mizoram: 527,900 meth tablets (April 2024); 2,625,890 tablets (May 2024)

  • Assam: 500,000+ tablets across 5 largest operations

  • Manipur: 100,000 Yaba pills; 7.7 kg heroin, 6.7 kg opium (joint op)

  • Tripura: 171,000+ tablets

  • NCB Operation Crystal Fortress (Delhi 2025): 328 kg high-purity meth

  • Jade/Gemstone trade: Drug proceeds converted to jade at Myanmar border markets - serves as TBML settlement commodity (parallel to gold in Dubai corridor)

  • Insurgent protection money: EAOs extract fees from traffickers in cash; recycled through hawala into commerce

  • Diaspora remittances: Proceeds sometimes repatriated via legitimate-appearing remittances from Southeast Asia

  • Near 500% increase in ATS seizures 2020-2024 (UNODC/NCB)

Sources: The Print / Myanmar Drugs India | PIB / DRI Northeast Seizures

CJNG Cartel-Crypto-Delhi Connection (October 2024)

This is the first confirmed Indian case of a Latin American cartel's crypto-hawala pipeline into India. CJNG (Jalisco New Generation Cartel, Mexico) - one of the world's most powerful drug cartels - funded the Delhi drug network through a three-hop chain.

Crypto (CJNG Mexico) → Dubai OTC exchange → Hawala to Delhi in 3 installments → Drug purchase and distribution

  • 95.5 kg amphetamine seized
  • Rs 9.20 crore assets frozen by NCB
  • Multiple arrests across Delhi network
  • Mexico-India drug supply chain disrupted

Source:NDTV / NCB CJNG Asset Freeze

NCB FY2025 Performance Summary

1,33,965 kg Total Seizures FY2025
994 Traffickers Arrested
66.8% Conviction Rate (up from 60.8% in 2024)
37 Interpol Notices Issued

Cross-Border Fund Movement & FEMA Violations

The Foreign Exchange Management Act governs India's cross-border capital flows. Violations range from unauthorized remittances and round-tripping to shell company layering through Dubai, Singapore, and the Caribbean. ED enforces both PMLA and FEMA, giving it dual jurisdiction over financial crime with international dimensions.

33,988 Cumulative FEMA Investigations
Rs 5,238 Cr FEMA Penalties Levied FY2024-25
45+ MLAT Partner Countries
CHF 3.5 Bn Indian Funds in Swiss Banks (2024)

Shell Company Layering: India - Dubai - Singapore - Caribbean

The standard four-layer typology documented by Indian enforcement agencies:

Source:ZIGRAM / Shell Companies Dubai Case Studies | ACAMS India TBML Analysis

Mauritius Round-Tripping: From 41% of FDI to DTAA Reform

  • Mauritius accounted for 41.80% of total FDI into India from April 2000 to March 2011 ($54.2 billion)
  • Singapore: 9.17% ($11.9 billion) over same period
  • Government White Paper: "Mauritius and Singapore with their small economies cannot be the sources of such huge investments" - pointing to round-tripping

Indian resident deposits black money abroad - creates shell entity in Mauritius/Singapore (gets Tax Residency Certificate) - invests "FDI" back into own Indian company - capital gains tax-exempt under DTAA.

  • 2016: India renegotiated Mauritius DTAA - benefits now require expenditure of Rs 27 lakh in Mauritius preceding one year (blocking empty-shell structures)
  • Similar DTAA amendments with Cyprus and Singapore
  • GAAR (General Anti-Avoidance Rules) under Direct Taxes Code

Round-tripping continues but at reduced volumes. Sophisticated operators shifted to complex structures: Cayman/BVI entities investing through Singapore, which retains DTAA benefits under substantive presence tests. ED-Mauritius MoU signed for agency-to-agency cooperation.

Source:Voice of CA / Government FDI Round-tripping Document

India's International Financial Crime Cooperation Framework

Framework India's Status Key Milestone Current Activity
FATF Member since 2010 Regular Follow-Up (June 2024) - highest tier Steering Group + RTM Working Group co-chair; next report due Oct 2027
Egmont Group Member since May 2007 Runner-up for Best Egmont Case Award (BECA) 2025 182 jurisdictions information exchange; Finnex 2.0 portal
MLAT Network 45+ countries UAE, UK, Singapore, Swiss, Mauritius key partners PNB/Nirav Modi, AgustaWestland invocations; 2-5 year avg. processing
FIU-IND MoUs 51 bilateral MoUs RBI MoU: Apr 17, 2025; DoT MoU: Sep 25, 2025 Real-time fraud data (FRI) sharing; Mobile Number Revocation List
India-UAE AML Active Jan 19, 2026: PM Modi - Sheikh MBZ joint statement Condemnation of cross-border TF; UAE exited grey list Feb 2024
CARF (Crypto) Adopting 2025 July 2025: India commits to CARF adoption VDA SPs to report user transactions by April 2027

Black Money Act (2015-2025): Rs 35,000 Crore Demanded, Rs 338 Crore Recovered

  • 1,021 assessments completed
  • Rs 35,105 crore in demands raised
  • Only Rs 338 crore recovered - less than 1% recovery rate
  • 163 prosecution complaints filed
  1. No mechanism for automated cross-border asset seizure
  2. MLAT requests take 2-5 years
  3. Complex corporate structures hide ownership in target jurisdictions
  4. Limited success with extradition of high-value fugitives

Indian funds in Swiss banks reached CHF 3.5 billion (~Rs 37,600 crore) in 2024 - more than tripled in a single year. This reversal, after years of declining figures following AEOI implementation, indicates:

  • New structuring techniques to avoid automatic exchange of information

  • Swiss private banking structures falling below AEOI thresholds

  • Shell company layering through non-AEOI jurisdictions before entering Switzerland

  • Rs 30,444 crore undisclosed income detected via 465 surveys

  • 1,437 groups searched

  • Rs 2,504 crore assets seized

Source:CNBC TV18 / Black Money Law India

Case: Abu Sabah (Balvinder Singh Sahni) - Dubai Conviction 2025

Indian businessman Balvinder Singh Sahni, known as "Abu Sabah," convicted by Dubai Court of Appeal for money laundering. Sentenced to 5 years imprisonment, AED 150 million (~Rs 360 crore) fine, and deportation after sentence completion.

Network used shell companies and suspicious transfers to move illicit funds across jurisdictions. Demonstrates that India-linked money laundering through UAE now faces increased enforcement risk following UAE's FATF grey list exit and strengthened AML framework.

Source:India Blooms / Abu Sabah Dubai Conviction

Trade-Based Money Laundering & Customs Enforcement

TBML is described by ACAMS as "the most sophisticated method to launder illicit funds." India is specifically vulnerable given its trade volumes, documentation gaps, and the absence of Trade Transparency Units. GST fraud - at Rs 7.08 lakh crore detected over five years - represents the largest quantified illicit financial flow in the Indian economy.

Rs 7.08 L Cr GST Evasion Detected FY2021-2025
1,073 kg DRI Gold Seizures FY2024-25
87% IFF from Trade Misinvoicing (GFI)
0 Trade Transparency Units in India

Core TBML Typologies Documented in India

Typology↕ Mechanism Common Sectors Detection Difficulty
Over-Invoicing of Imports Importer pays more than actual value; excess retained by foreign supplier as black money abroad Consulting/tech services; capital equipment HIGH
Under-Invoicing of Exports Exporter receives less than declared value; difference retained offshore Gems & jewelry; textiles; software exports HIGH
Phantom Shipments / Fake BoEs Multiple remittances using copies of same Bill of Entry at different banks All import-intensive sectors MEDIUM
Multiple Invoicing Single shipment invoiced multiple times through different banks Commodities; bulk goods MEDIUM
GST Circular Trading Shell firms issue fake invoices; circular trading creates artificial turnover; fraudulent ITC claims Manufacturing; services; construction MEDIUM
SEZ/Advance Auth Misuse Diversion of duty-free imported goods; phantom exports creating false FIRC credits Software; pharma; electronics HIGH

GST Evasion Detection: Year-by-Year Escalation (FY2021-2025)

Financial Year↕ GST Evasion Detected↕ Fake ITC Claims↕ Cases Filed
FY2021 Rs 49,384 crore - -
FY2022 Rs 73,238 crore - -
FY2023 Rs 1,32,000 crore Rs 24,140 crore -
FY2024 Rs 2,30,000 crore Rs 36,374 crore -
FY2025 Rs 2,23,000 crore Rs 58,772 crore 30,056
FY21-25 Total Rs 7.08 lakh crore Rs 1.79 lakh crore 91,370

Source: Ministry of Finance data. Voluntary recovery across FY21-25: Rs 1.29 lakh crore.

DRI FICN Multi-State Operation (February 2025): Hong Kong - India Supply Chain

  • Feb 8: Two importers of specialist security paper (Hong Kong origin) arrested - one in Ghazipur UP, one in Bengaluru

  • Feb 9: Two printing facilities busted - Thane (Maharashtra) and Bhiwani (Haryana)

  • Feb 20: Simultaneous raids at 11 locations across Maharashtra, Haryana, Telangana, Tamil Nadu, Bihar

  • Fake Rs 50 and Rs 100 denomination notes

  • Laptops and high-resolution digital printers

  • Security paper with authentic "RBI" watermarks (smuggled from Hong Kong)

  • Specialized UV-reactive inks; Mahatma Gandhi watermark butter paper

Hong Kong security paper procurement - multiple domestic printing hubs - distribution network spanning 5 states. Represents the international dimension of FICN operations not merely a domestic criminal enterprise.

  • Vikhroli West, Mumbai: sophisticated printing/finishing facility
  • Sangamner + Kolhapur, Maharashtra: computer/printer facilities
  • Belgaum, Karnataka (led from Kolhapur intelligence)
  • West Godavari, Andhra Pradesh: security paper importer
  • Khagaria district, Bihar: laptops and restricted security paper
  • Rohtak, Haryana: paper importer

Source:PIB Official Press Release | Tribune India

  • Land routes (Myanmar, Bangladesh, Nepal): 55% of DRI seizures
  • Air routes (Middle East, SE Asia): 36%
  • Sea routes: 9%

Single most active route. Documented concealment methods:

  • Body concealment (rectal capsules, clothing implants)
  • Gold paste form (melted and dried - harder to detect)
  • Aircraft seat pipe/toilet concealment (insider staff)
  • Modified luggage (false bottoms, electronic device cavities)

When India cut import duty from 15% to 6%, margins compressed to Rs 6.3 lakh/kg. However, 67% gold price rise through 2025 pushed margins to Rs 11.5 lakh/kg - exceeding pre-reduction levels. Smuggling incentives remain high.

  • 1,073 kg gold seized (DRI): Rs 785 crore market value
  • Tamil Nadu, Gujarat, West Bengal: primary redistribution hotspots
  • New Ladakh corridor (LAC border, limited security presence)
  • Mumbai International Airport: 35% of airport seizures

Kannada actress: 31 trips to Dubai over 12 months, total 127.287 kg gold (Rs 102.55 crore). Proceeds hawala-transferred back to Dubai.

Source:Reuters / Gold Smuggling Surge India 2025

Recent GST Fraud Case Studies (2025-2026)

DGGI uncovered two tax fraud rackets with total evasion of Rs 262 crore:

  • Case 1: Fake ITC claims of Rs 252.66 crore; taxable value Rs 1,403.66 crore
  • Private limited companies with dummy directors showing bogus turnover within months of incorporation
  • Method:"Funds were routed through RTGS transactions before being returned in cash through hawala channels after deducting commissions"
  • DGGI searched Ahmedabad, Jamnagar, and Mumbai premises

Fake GST invoicing racket using 95+ entities across Tamil Nadu and Karnataka:

  • Detected via IP address correlation of GST return filings (multiple entities filing from same IP)
  • 196 SIM card covers, 42 cheque books, 41 mobile phones, company stamps seized
  • 12 entities (Chennai North): Rs 50.85 crore fake ITC
  • 83 more entities under investigation; total suspected >Rs 350 crore
  • Demonstrates how digital forensics can detect coordinated fraud at scale

Source:Business Today / GST Fake Invoice Frauds February 2026

Agency Performance Scorecards

A data-driven comparison of India's 13 financial crime enforcement agencies across investigations, attachments, convictions, and specialized mandates. FY2024-25 data. The Enforcement Directorate's Rs 30,036 crore PMLA attachments represent a 141% year-on-year increase - the highest ever recorded.

ED provisional attachments under PMLA FY2021 to FY2025
ED provisional attachment value under PMLA by financial year (₹ crore). FY2025 is the standout step-change year.

Enforcement Directorate (ED) - FY2024-25

775 New PMLA Investigations (ECIRs)
Rs 30,036 Cr Provisional Attachment Orders
94.82% Conviction Rate
122 Cyber/Crypto Investigations

All-Agency Performance Comparison: FY2024-25

Agency↕ Primary Mandate Key FY2024-25 Metric Value / Volume Conviction / Success Rate
ED PMLA + FEMA enforcement Provisional attachments Rs 30,036 crore (461 PAOs) 94.82%
FIU-IND Financial intelligence; STR analysis STRs disseminated 4,36,287 STRs Rs 28 Cr penalties on VDA SPs
NCB Narcotics enforcement Total seizures 1,33,965 kg (Rs 1,980 Cr) 66.8%
DRI Anti-smuggling; customs fraud Gold seized 1,073 kg gold; 3,029 kg narcotics 3,005 gold cases
NIA Terror financing (TF) Cases registered 692 cumulative cases; 4,232 arrested 95.54%
CBI Corruption + major fraud Cases (FY24) ~950 cases registered ~65% (multi-year avg)
RBI Banking supervision; AML compliance Penalties levied Rs 86+ crore on banks FY25 MuleHunter.AI: 15+ banks
SEBI Securities fraud Orders passed 200+ enforcement actions FY25 Rs 1,500+ crore recovery orders
SFIO Corporate fraud Investigations 70+ active investigations Multiple conviction cases
I4C Cybercrime coordination Financial fraud flagged 144+ crypto-narco cases 3-yr period ASTR: 1M+ SIM frauds detected
CBDT / IT Dept Tax evasion; black money Undisclosed income detected Rs 30,444 crore via 465 surveys 44,000+ NUDGE notices issued
DGGI / GST Intel GST evasion; fake ITC Evasion detected FY25 Rs 2,23,000 crore (30,056 cases) Rs 1.29 L Cr voluntary recovery FY21-25
BSF / Customs Border enforcement Bangladesh border FY24 Rs 1,300 crore+ gold/silver; 3.26M FICN Narcotics: 11,866 kg

FIU-IND Detailed Scorecard: Financial Intelligence Operations FY2024-25

  • 4,36,287 STRs disseminated to law enforcement

  • STR analysis identified: hawala, gambling, scams, fraud, CSAM, terror financing

  • Priority STR pipeline: one STR helped uncover crypto-laundering scheme with spoofed exchange accounts

  • Rs 4.87 lakh crore offshore crypto volume by Indian users tracked

  • 49 VDA SPs registered (45 domestic, 4 offshore)

  • Total penalties: Rs 28 crore on non-compliant VDA SPs

  • Binance: Rs 18.82 crore; Bybit: Rs 9.27 crore; KuCoin: Rs 3.45 lakh

  • October 2025: 25 additional offshore exchanges issued non-compliance notices

  • 51 bilateral MoUs with foreign FIUs

  • Egmont Group: 182 jurisdictions via Egmont Secure Web

  • RBI MoU signed April 17, 2025 (data sharing/co-supervision)

  • DoT MoU signed September 25, 2025 (Financial Fraud Risk Indicator data; Mobile Number Revocation List)

  • I4C portal integration for cybercrime intelligence sharing

Finnex 2.0 portal enables secure real-time data transmission. September 15, 2025 circular: new VDA SP registration requires live demonstrations of KYC, sanctions screening, transaction monitoring, blockchain analytics, Travel Rule compliance, and CERT-In cybersecurity audits.

Source:Cyril Amarchand Blogs / FIU-IND Annual Report 2024-25 Analysis

NIA Terror Financing Enforcement: Cumulative Performance

95.54% NIA Conviction Rate
692 Cumulative Cases
4,232 Total Arrested
40+ Active Terror Finance Cases

Government Initiatives & Regulatory Actions

A chronological record of India's legislative, regulatory, and international enforcement milestones from 2022 through February 2026. India achieved FATF Regular Follow-Up status in June 2024 - the highest possible tier - joining only France, Italy, Russia, and the UK among G20 nations.

AI and Technology Initiatives in India's AML Ecosystem

  • MuleHunter.AI (RBI Innovation Hub): deployed by 15+ Indian banks for mule account detection; 95% accuracy reported by one major bank

  • FREE-AI Framework (August 2025): Framework for Responsible and Ethical Enablement of AI - mandates board-level oversight, Risk Management Committee, model validation

  • RBI survey: 101 AI tools deployed specifically for Financial Crime Compliance (FCC) across 583 tools surveyed - covering fraud detection, AML/CFT/KYC, Early Warning Signals

  • Pilot blockchain-based land records (Andhra Pradesh)

  • AI cross-checking of property ownership vs. Aadhaar-linked data and income tax filings

  • CBDT NUDGE campaigns for benami/undisclosed asset compliance; 44,000+ notices issued for undisclosed crypto

  • Over 80% of Indian financial institutions using AI for chatbots/virtual assistants

  • 65% adopted AI for fraud detection

  • SEBI guidelines on AI in financial services being implemented

  • Transaction monitoring with ML-based anomaly detection

  • Entity resolution across fragmented databases

  • NLP for STR narrative analysis

  • Blockchain analytics (Chainalysis/Elliptic/CipherTrace used by ED technical cell)

  • DoT's ASTR tool (AI SIM fraud detection) integrated with FIU-IND

Source:KPMG India / Machine Learning in Financial Crime Compliance

India's FATF Leadership Role

  • Member of FATF Steering Group (governance-level participation)
  • Co-chair of FATF Risks, Trends and Methodologies (RTM) Working Group - the group that informs global typologies and red flags

India hosted the FATF Private Sector Collaborative Forum (PSCF) March 25-27, 2025 in Mumbai. Inaugurated by FATF President Elisa de Anda Madrazo; RBI Governor Sanjay Malhotra presided. Hosted by RBI and Ministry of Finance.

India hosted the Eurasian Group on Combating Money Laundering and Financing of Terrorism (EAG) Plenary in Indore, November 2024 - demonstrating regional AML leadership across the Eurasian grouping.

India's co-chair of RTM Working Group means Indian expertise directly shapes global AML standards, typology guidance, and red-flag indicators used by all 40 FATF member countries and 200+ FATF-Style Regional Body members. This creates a feedback loop between India's enforcement experience and global standards.

Sources: PIB / FATF PSCF Mumbai 2025 | ComplyAdvantage / FATF February 2026 Plenary

Gap Analysis: Where India's Framework Falls Short

Despite FATF's Regular Follow-Up designation, material gaps remain. The 99.3% of PMLA investigations that have never reached a verdict, the absence of dedicated crypto legislation protecting 119 million users, and the less-than-1% Black Money Act recovery rate represent systemic failures that undermine the deterrent value of India's enforcement framework.

Judicial Backlog - Detailed Analysis: The 99.3% Problem

  • 7,771 ECIRs filed since PMLA enactment (2005)
  • ~1,739 prosecution complaints at trial stage
  • 58 cases fully decided
  • Conviction rate: 94.82% (of 58 decided cases)
  • But:99.3% of all ECIRs have never reached verdict
  1. Cascade dependency: PMLA trials must wait for predicate offence trial progress
  2. Judicial density: India has only ~21 judges per million people vs. global standard 50+
  3. Special court overload: 100 PMLA courts handle multiple law jurisdictions simultaneously
  4. Asset disputes: Rs 3,803.91 crore in orders under court-ordered stay due to adjudicating authority disputes

"Several PMLA investigations are pending for a very long time." - ED Director Rahul Navin, acknowledging systemic delays despite 94% conviction rate in completed cases.

ED continues to attach assets of corporate debtors even after IBC resolution plans are approved. Despite Section 32A (2020) immunity provision, enforcement agencies maintain aggressive attachment posture. Buyers price "ED risk" into IBC auction valuations, reducing creditor recovery.

92,828 pending cases at Supreme Court level (record high, January 2026). Total Indian judiciary: 54 million pending cases. Cases pending 30+ years: 180,000+.

Source:New Indian Express / ED Director on PMLA Delays

Crypto Regulation Gaps: 119 Million Users Without Dedicated Protection

Gap Current Status Risk Level Comparable Jurisdiction
No dedicated Crypto Asset law Trading legal; patchwork PMLA/IT/SEBI HIGH EU: MiCA (2024); UAE: VARA framework
DeFi regulation No explicit rules; activity-based test ambiguous HIGH MiCA partially addresses; US still unclear
Stablecoin framework No dedicated rules; RBI monitoring UPI impact MEDIUM-HIGH UK: stablecoin bill in progress
P2P/DEX monitoring 91.5% of volume offshore; significant blind spot HIGH No jurisdiction fully resolved this
NFT regulation No classification or rules MEDIUM Most jurisdictions similarly behind
RBI position Opposes formal regulation ("may confer legitimacy") HIGH Diverges from global regulatory trend
  • Delhi HC (Feb 2026): Declined to mandate CBI inquiry into Bitbns withdrawal freeze - no legal hook without dedicated statute

  • Madras HC (Oct 2025): Recognized crypto as "property" under Indian law - important precedent but no statutory framework follows

  • 119 million crypto users in India (2025) - world's largest

  • ~$2.6 billion Indian crypto market size

  • Rs 4.87 lakh crore offshore crypto volume by Indian users (FY2024-25)

  • CBDT detected Rs 888.82 crore in undisclosed VDA income

Source:CoinGeek / India Crypto Regulation Analysis

Inter-Agency Coordination: Data Silos and Structural Fragmentation

India's financial crime enforcement is distributed across at least 10 agencies with overlapping mandates. FATF noted improvement in coordination (MoUs, joint operations) but structural fragmentation creates systemic inefficiency.

Agency Primary Mandate Overlap With Coordination Mechanism
ED PMLA/FEMA enforcement CBI, NCB, NIA, IT Dept Shared predicate offences; joint task forces
CBI Corruption; major fraud predicate crimes ED, SFIO, NIA FIR sharing; joint investigation teams
IT Department Tax evasion; benami ED, FIU-IND, CBDT CBDT-ED MoU; Project Insight data sharing
FIU-IND Financial intelligence All enforcement agencies; RBI; DoT Finnex 2.0; bilateral MoUs with RBI and DoT
SEBI Securities fraud ED, CBI, SFIO SEBI-ED PMLA coordination; STR sharing
RBI Banking supervision FIU-IND, ED, SEBI FIU-RBI MoU (Apr 2025); MuleHunter.AI
NCB Narcotics ED, DRI, NIA, State Police Joint operations; MoU with NCB-ED-DRI
DRI Customs/smuggling ED, NCB, BSF, CBIC COIN network; CBIC oversight
NIA Terror financing ED, IB, R&AW, State ATS Joint investigation; PMLA predicate FIRs
I4C Cybercrime coordination FIU-IND, ED, State Police FRI data sharing; ASTR-FIU integration

Source:Atlas Institute / India AML-CFT Framework Analysis | FATF India MER 2024

Projections 2026-2030

Forward-looking analysis of India's financial crime risk trajectory based on market growth forecasts, technology adoption curves, regulatory pipeline, and the Secretariat's Global Financial Crime Outlook 2025. India currently sits at 2.31/4.00 on the SECI index - classified as a "Reactive Reformer."

2.31 / 4.00 India SECI Index Score (2025)
$4.5-6 Tr Projected Global IFF by 2030
$15 Bn India Crypto Market by 2030
Apr 2027 CARF Implementation Deadline

AML Technology and Market Size Projections

Market / Metric↕ Current (2025)↕ Projection (2030-31) CAGR Source
India AML market $4.72 billion $9.88 billion (2031) 12.8% Mobility Foresights
Global AML market $4.13 billion $9.38 billion 17.8% Grand View Research
India crypto market ~$2.6 billion $15 billion ~34% CCN/Yahoo Finance
India crypto exchange platform $1.3 billion $7.5 billion 28.3% Grand View Research
India digital forensics Rs 1,603 crore Rs 11,829 crore (2030) ~40% N-CoE / Govt India
India GenAI in banking Emerging $12 billion (2033) High Multiple analysts
Global illicit financial flows ~$3.1 trillion (2023) $4.5-6 trillion +6-12% pa Secretariat / Nasdaq
India offshore crypto volume share 91.5% offshore 70-80% offshore (with CARF) Declining Ainvest analysis

Three Scenarios for India's Financial Crime Enforcement (2026-2030)

Conditions: Crypto legislation enacted; CARF 2027 operational; judicial reforms reduce PMLA trial backlog; TTUs established with UAE/Singapore; unified financial crime command created.

  • Offshore crypto volume falls to <60% within 3 years
  • PMLA verdict count multiplies 5x by 2030
  • Black Money Act recovery rate improves to 10%+
  • India upgrades from "Reactive Reformer" to "Active Enforcer" on SECI
  • Crypto-hawala pipeline disrupted through on-chain analytics and CARF data

Conditions: Incremental improvements; no major legislation; CARF implementation but limited effectiveness; judicial backlog persists; DNFBP gaps unresolved.

  • ED attachments continue to grow but conviction rate stays near zero at system level
  • Crypto regulation patchwork expands but no dedicated law
  • India stays at SECI 2.31-2.50 range ("Reactive Reformer")
  • Hawala-crypto convergence continues unchecked for non-FIU platforms
  • Swiss bank anomaly persists; Black Money Act recovery <2%

Conditions: Political will weakens; CARF delayed; courts overwhelmed; DeFi adoption outpaces any regulatory response; India-Russia-China TBML grows via sanctions workaround vectors.

  • India risks slipping from Regular Follow-Up in next FATF evaluation cycle
  • Crypto crime losses to Indian consumers double
  • Narco-terror financing through Myanmar and Pakistan corridors intensifies
  • AI-deepfake fraud exceeds Rs 10,000 crore annually
  • Offshore crypto share stays above 90%; privacy coin usage grows

Top 10 Emerging Financial Crime Typologies for India (2026-2030)

# Typology India-Specific Risk Existing Countermeasure
1 AI-Deepfake Fraud Automated deepfake-enabled identity theft; synthetic KYC documents already causing Indian bank losses RBI FREE-AI Framework (Aug 2025); limited
2 DeFi / Unhosted Wallet ML Privacy coins, cross-chain bridges, CEX-to-DEX bridges used to obscure India-origin crypto flows Privacy coin ban (Jan 2026); FIU has no DEX visibility
3 Real-Time Payment Laundering UPI/IMPS 24x7 instant payments create T+0 laundering window; mule accounts activated within seconds MuleHunter.AI; FRI data sharing (FIU-DoT)
4 India-Russia-China TBML Post-Ukraine sanctions: India-Russia bilateral trade creates new TBML vectors; ruble/rupee invoicing gaps SWIFT monitoring; I/EDPMS; inadequate for new routes
5 Proliferation Financing India's tech exports; dual-use goods; SCOMET controls; China-Pakistan supply chain concerns DGFT SCOMET controls; DRI seizures
6 ESG / Carbon Credit Fraud Greenwashing; carbon credit double-counting; ESG reporting manipulation as new IFF vector SEBI ESG disclosure rules; enforcement nascent
7 Stablecoin Money Flows USDT already dominant in hawala settlement; CBDC competitors to UPI create new monitoring gaps Privacy coin ban covers some; stablecoins unregulated
8 Pig Butchering Scams Myanmar/Cambodia scam compounds targeting Indian victims; Rs 1,000+ crore estimated losses annually I4C operations; limited; funds exit via hawala
9 Corporate Fraud / White-Collar 30% of ED caseload is corporate fraud (Business Standard Aug 2025); growing IBC exploitation SFIO; ED; SEBI; IBC Section 32A
10 Cross-Border CARF Evasion Post-CARF 2027, sophisticated operators will migrate to non-CARF jurisdictions or DeFi structures FATF VASP guidance; CARF not yet live

Source:Secretariat Global Financial and Economic Crime Outlook 2025

CBDC / e-Rupee: AML Benefits vs. Privacy Risks (2026-2030)

  • Inherent transaction traceability at the network level

  • Real-time monitoring capability for RBI/FIU-IND

  • Reduces black money scope (programmable spending limits possible)

  • Cross-border CBDC corridors being explored with UAE, Singapore, Mauritius

  • By 2028-2030: potential for real-time cross-border monitoring of compliant flows

  • Privacy concerns could drive users to privacy coins / unhosted wallets

  • Centralized surveillance risk creating political misuse potential

  • Cybersecurity vulnerabilities at RBI level - single point of failure

  • Potential financial disintermediation of commercial banks

  • Criminal flows will migrate to privacy-enhanced alternatives; CBDC only covers compliant users

RBI actively piloting e-Rupee (retail CBDC). Adoption slow due to UPI competition (UPI processes 16+ billion transactions/month - already a dominant payment rail).

Sources: PwC India / CBDC Context | FTI Consulting / India CBDC Analysis

Case Study Repository

Nine landmark cases from 2024-2026 documenting India's financial crime enforcement in practice. Each case illustrates distinct money laundering typologies, enforcement mechanisms, and cross-border dimensions. Drawn from ED, NCB, DRI, FIU-IND, and NIA operations.

4th Bloc Consultants - India's Most Sophisticated Crypto Ponzi

Case 01 · ED Bangalore Zonal Office December 2025 Rs 623 Crore Fraud Crypto Ponzi + Hawala · ED Bangalore Zonal Office · December 2025 · Rs 623 Crore Fraud · Crypto Ponzi + Hawala

21 premises simultaneously raided across Karnataka, Maharashtra, and Delhi. Follow-up raids December 24, 2025 in Haryana (Ambala, Kurukshetra, Karnal, Chandigarh).

Source:MEXC News|New Indian Express

ED: 26 Fake Crypto Investment Platforms - Pan-India Syndicate

Case 02 · Enforcement Directorate December 2025 Rs 3 Cr Immovable Assets Fake Platforms + MLM · Enforcement Directorate · December 2025 · Rs 3 Cr Immovable Assets · Fake Platforms + MLM

wozur.com | paymara.com | growmore.com | bitrobix.com | zylotrade.com | bitleeds.com | fincorp.com | cryptobrite.com | goldxcapital.com | cubigains.com | turbominers.com | bitminerclub.com | primetrades.com | hydrominers.com | bixotrade.org | metaaibox.com | +10 more

Victim bank transfers → 50+ mule accounts → crypto wallets → hawala networks → P2P exchanges → UAE/Singapore/Mauritius

Investigation originated partly from an unrelated hawala/terrorism financing probe in mid-2023 - demonstrating cross-crime intelligence value.

Source:Free Press Journal / ED 26 Fake Platforms

FIU-IND vs Binance and KuCoin: Offshore Exchange Enforcement

Case 03 · FIU-IND 2023-2025 Rs 18.82 Cr Binance Fine Regulatory Enforcement · FIU-IND · 2023-2025 · Rs 18.82 Cr Binance Fine · Regulatory Enforcement

Before the ban, Binance alone accounted for approximately 90% of estimated $4 billion in crypto holdings of Indian nationals.

FIU-IND issued non-compliance notices to 25 additional offshore VDA service providers. Significant inclusion: Huione (Cambodia) - a key node in Southeast Asian pig-butchering scam money flows.

FIU-IND imposed total penalties of Rs 28 crore on non-compliant VDA SPs; 49 exchanges registered (45 domestic, 4 offshore).

Source:FIU-IND Official Binance Order (PDF)|Charltons Quantum Analysis

Padgha ISIS Terror Financing: Environmental Crime Meets Extremism

Case 04 · ED + Maharashtra ATS + NIA December 2025 Rs 3.70 Cr Cash + Rs 6 Cr Gold Terror Financing · ED + Maharashtra ATS + NIA · December 2025 · Rs 3.70 Cr Cash + Rs 6 Cr Gold · Terror Financing

ISIS-linked module based in Padgha village, Thane (Maharashtra) self-declared the area "Al Sham" - a liberated ISIS territory. NIA registered Case RC-29/2023/NIA/DLI in November 2023. 21 accused charged for recruitment/radicalization, IED fabrication, and raising funds for ISIS operations in India.

ED + Maharashtra ATS simultaneously raided 40 locations across Maharashtra (Padgha/Borivali/Thane, Ratnagiri), Delhi, Kolkata, and Uttar Pradesh.

Key accused: Saquib Abdul Hamid Nachan (self-styled Amir-e-Hind for ISIS) - died June 2025 before trial.

Illegal Khair (Acacia catechu/Kaith wood) smuggling from reserve forests used as predicate crime. Front businesses: legitimate "Kattha" (food additive) production used as cover for illegal wood procurement, with proceeds financing the ISIS module.

This case documents the environmental crime-terror financing nexus - a relatively uncommon but FATF-recognized pattern where resource crimes fund extremism. Cross-state hawala networks used for fund movement.

Sources:Deccan Chronicle|India Today

PACL: India's Largest-Ever Single Attachment Order (Rs 10,021 Crore)

Case 05 · Enforcement Directorate February 18, 2026 Rs 10,021 Crore All-Time Record · Enforcement Directorate · February 18, 2026 · Rs 10,021 Crore · All-Time Record

PACL operated a Rs 48,000 crore Ponzi scheme that defrauded over 50 million investors across India - one of the largest investment fraud cases in Indian history.

ED issued a Rs 10,021 crore single attachment order covering 247 properties - the single largest attachment order ever issued in India's enforcement history. This dwarfs previous records and signals ED's willingness to pursue even decades-old fraud schemes.

Illegal prediction market (online betting): ED Gurugram raided Probo's offices July 8-9, 2025. Rs 284.5 crore in investments frozen. Rs 134.84 crore in foreign funding traced to Mauritius and Cayman Islands. December 9, 2025 second attachment: Rs 117.41 crore additional assets.

January 15, 2026: ED chargesheet at Ahmedabad Special PMLA Court. Pakistani directors operating from UAE. Hawala + crypto used for fund diversion back to Pakistan.

Source:Economic Times / ED PACL Record Attachment

Pawan Thakur: Rs 2,500 Crore Drug Racket + CJNG Cartel Connection

Case 06 · ED + NCB + Delhi Police 2024 Rs 681 Cr Under Investigation Narco-Finance + Cartel · ED + NCB + Delhi Police · 2024 · Rs 681 Cr Under Investigation · Narco-Finance + Cartel

October 2024: NCB + Delhi Police seized 95.5 kg amphetamine. CJNG (Jalisco New Generation Cartel, Mexico) funded via crypto → Dubai OTC → hawala to Delhi in 3 installments.

Sources:NDTV / Pawan Thakur Dubai|NDTV / CJNG Asset Freeze

Ranya Rao: 127 kg Gold Smuggling Ring (Rs 102.55 Crore)

Case 07 · DRI + ED Karnataka March 2024 - February 2026 Rs 34.12 Cr Attached Gold Smuggling + Hawala · DRI + ED Karnataka · March 2024 - February 2026 · Rs 34.12 Cr Attached · Gold Smuggling + Hawala

Gold sold in domestic market → cash proceeds → hawala → layered through multiple bank accounts and entities.

Rs 34.12 crore in immovable properties attached.

Sources:Indian Express / Ranya Rao DRI Probe|Latestly / ED Chargesheet

Faisal & Alfiya Shaikh: Dawood Ibrahim Network + Drug-Money Laundering

Case 08 · ED Mumbai October 2025 - February 2026 Rs 5.88 Cr Attached Organized Crime + Narcotics · ED Mumbai · October 2025 - February 2026 · Rs 5.88 Cr Attached · Organized Crime + Narcotics

NCB arrested Faisal Javed Shaikh in 2023 for drug trafficking linked to the Dawood Ibrahim gang. Faisal procured MD (mephedrone) from Salim Dola - a drug kingpin linked to Dawood Ibrahim and Chhota Shakeel, currently wanted by NCB. Alfiya Faisal Shaikh (wife) co-accused in managing drug distribution network.

ED attached properties worth Rs 5.88 crore in ongoing case. Investigation remains active with Dawood Ibrahim network connections under continued scrutiny.

Source:India Today / Dawood Network ED Raids

Goa-Pan-India Narcotics Network: B2B Drug Model Across 7 States

Case 09 · ED January 2026 Rs 3 Crore Seized Inter-State Trafficking · ED · January 2026 · Rs 3 Crore Seized · Inter-State Trafficking

Well-organised inter-state drug trafficking via B2B (business-to-business) model - treating drug distribution as a franchise/supply chain rather than individual transactions. This model creates greater operational security for kingpins and makes financial flows appear more legitimate.

The B2B narcotics model creates a legitimate-appearing layering structure: wholesale drug suppliers create fake invoicing for goods/services through shell companies. Retail drug proceeds are integrated via hawala back to the wholesale level, creating a circular economy of illicit finance.

February 26, 2026: ED attached Rs 7.17 crore in immovable properties in a narcotics trafficking PMLA case (Prasad Walke case, Goa). Demonstrates continuing prosecution pipeline.

Sources:Millennium Post|Deccan Herald

Methodology, Glossary & Data Appendix

Research methodology, key term definitions, primary source directory, and data transparency notes for this intelligence report.

Research Methodology

This report draws exclusively from publicly available information across four categories:

  1. Official Government Publications: PIB press releases, ED Annual Reports, NCB Year-End Press Releases, FIU-IND Annual Reports, DRI Smuggling in India Reports, FATF Mutual Evaluation Report (India 2024), Ministry of Finance notifications
  2. Regulatory Documents: FIU-IND penalty orders, RBI circulars, SEBI guidelines, official court orders
  3. Institutional Research: FATF typology papers, UNODC reports, Egmont Group publications, UNCTAD IFF framework documents, GFI trade data reports
  4. Media and Analysis: Indian Express investigative series, Economic Times, Business Standard, NDTV, Reuters, Bloomberg; analytical publications from KPMG, Secretariat International, Atlas Institute, Charltons Quantum, Cyril Amarchand Blogs, ZIGRAM, LexisNexis Risk, ComplyAdvantage, Napier AI, Chainalysis

Data is current as of February 27, 2026. Financial year data uses India's April-March fiscal year convention. All rupee amounts are as reported (nominal); USD equivalents are approximate conversions at prevailing rates.

  • Illicit financial flow estimates by definition rely on indirect measurement methods and carry significant uncertainty ranges
  • Hawala volumes are inherently unmeasurable with precision; all hawala estimates should be treated as indicative ranges
  • ED conviction data is current as of December 2025; earlier counts may differ from current official figures
  • GFI India country-specific data is current only to 2015; no updated India-specific GFI report has been published since
  • This report contains no classified, non-public, or restricted government information

All statistics, case details, and institutional data in this report are traceable to cited primary or secondary sources. No data points have been fabricated or estimated without source attribution.

Glossary of Key Terms

PMLA

Prevention of Money Laundering Act, 2002. India's primary AML legislation. Amended multiple times; VDA amendment March 2023. Enforced by the Enforcement Directorate.

ECIR

Enforcement Case Information Report. ED's equivalent of a police FIR - the internal document ED registers to begin a PMLA investigation. As of FY2025: 7,771 ECIRs registered since 2005.

PAO

Provisional Attachment Order. ED's power to freeze/seize "proceeds of crime" during investigation before trial. Valid for 180 days unless confirmed by Adjudicating Authority.

FEMA

Foreign Exchange Management Act, 1999. Regulates foreign exchange and cross-border payments. Violations are civil (not criminal) offences, but ED can prosecute serious FEMA violations.

STR

Suspicious Transaction Report. Filed by banks, financial institutions, and VDA SPs to FIU-IND when a transaction raises AML/CFT concerns. Rs 4,36,287 STRs disseminated by FIU-IND in FY2024-25.

CTR

Cash Transaction Report. Filed for cash transactions above Rs 10 lakh. Separate from STR - CTR is volume-triggered; STR is suspicion-triggered.

CBWTR

Cross-Border Wire Transfer Report. Filed for all cross-border wire transfers above Rs 5 lakh. Provides FIU-IND with visibility on international capital flows.

VDASP / VDA SP

Virtual Digital Asset Service Provider. India's terminology (per PMLA 2023 amendment) for crypto exchanges, wallet providers, and VDA transfer services. 49 registered with FIU-IND as of March 2025.

Hawala

Informal value transfer system (IVTS) operating outside banking, using a network of brokers (hawaldars) in different countries. No physical money crosses borders; settlement via periodic balancing through trade, gold, or crypto. Estimated 20-40% of India's formal remittance volume equivalent moves through hawala.

TBML

Trade-Based Money Laundering. Using international trade transactions (import/export invoices, shipping documents) to disguise the transfer of illicit value across borders. Methods include over/under-invoicing and phantom shipments.

FICN

Fake Indian Currency Notes. Counterfeit Indian currency manufactured and circulated as economic warfare and to fund criminal/terror activities. Pakistan and Bangladesh-origin FICN historically documented; February 2025 DRI operation revealed Hong Kong as security paper source.

DNFBP

Designated Non-Financial Businesses and Professions. Under FATF standards, certain non-bank businesses (real estate agents, lawyers, accountants, jewelers, casino operators) are subject to AML obligations. India's DNFBP supervision rated Partially Compliant by FATF.

PEP

Politically Exposed Person. A person who holds or has held a prominent public function and therefore carries higher corruption/bribery/ML risk. Banks must apply Enhanced Due Diligence (EDD) to PEPs. India's PEP identification system rated Partially Compliant (FATF R.12).

FATF

Financial Action Task Force. Paris-based intergovernmental body that sets global AML/CFT standards. 40 Recommendations. India became FATF member in 2010; achieved Regular Follow-Up (highest tier) in June 2024.

MER

Mutual Evaluation Report. FATF's peer-review assessment of a country's AML/CFT framework. India's MER adopted June 2024, published September 2024. Next India MER: part of 5th round evaluations (post-2030).

Egmont Group

International network of 182 Financial Intelligence Units enabling information exchange on money laundering and terrorist financing via the Egmont Secure Web (ESW). FIU-India joined in May 2007; won runner-up BECA award in 2025.

MLAT

Mutual Legal Assistance Treaty. Bilateral treaties enabling evidence sharing and asset seizure cooperation between countries for criminal prosecution. India has MLATs with 45+ countries. Requests typically take 2-5 years to process.

FEO

Fugitive Economic Offender. Designation under the Fugitive Economic Offenders Act 2018 for persons who owe Rs 100+ crore and flee India to evade prosecution. 24 applications filed; 14 declared FEOs; Rs 900+ crore confiscated.

Benami

Property owned by one person in the name of another (benamidar) to conceal true ownership. Regulated by the Prohibition of Benami Property Transactions Act (PBPTA) 2016. 24 dedicated Benami Property Units under IT Department.

CARF

Crypto-Asset Reporting Framework. OECD-developed standard for automatic exchange of information on crypto assets between tax authorities, similar to CRS for financial accounts. India committed to implementation by April 2027.

Travel Rule

FATF requirement that VDA SPs collect and transmit originator and beneficiary information for virtual asset transfers. India implemented Travel Rule via March 7, 2023 PMLA amendment with NO minimum threshold.

IFF

Illicit Financial Flows. Value that is illegally earned, transferred, or utilized, crossing international borders. SDG indicator 16.4.1 measures IFFs. India estimated at $9.8 billion annual outflows (GFI 2015 data; no updated India-specific figure available).

SECI

Secretariat Economic Crime Index. A 177-country composite index measuring financial and economic crime risk. India scores 2.31/4.00 (2025), classified as "Reactive Reformer" (tier: 2.19-2.83).

Primary Source Directory

Institution Document URL
Enforcement Directorate Annual Report FY2024-25 enforcementdirectorate.gov.in
FIU-IND Binance Penalty Order (PDF) fiuindia.gov.in
PIB / Finance Ministry FATF India MER Press Release pib.gov.in
FATF India MER 2024 Full Report fatf-gafi.org
PIB DRI FICN Operation Press Release pib.gov.in
PIB ED Day FY2025 Annual Performance pib.gov.in
PIB FIU-IND / DoT MoU pib.gov.in
PIB FATF PSCF Mumbai 2025 pib.gov.in
Egmont Group 2025 Plenary Luxembourg Statement egmontgroup.org
NCB Year End Press Release 2025 narcoticsindia.nic.in
DRI Annual Smuggling Report FY2024-25 dri.nic.in
GFI India Country Case Study gfintegrity.org
UNCTAD IFF Statistics Portal unctad.org
Secretariat International Global Financial and Economic Crime Outlook 2025 secretariat-intl.com
KPMG India ML Models in Financial Crime Compliance kpmg.com
Cyril Amarchand FIU-IND Annual Report 2024-25 Analysis cyrilamarchandblogs.com
Atlas Institute India AML/CFT Frameworks Analysis atlasinstitute.org
ComplyAdvantage FATF February 2026 Plenary Update complyadvantage.com
FinCEN IVTS Advisory (Hawala/Hundi) fincen.gov
TRM Labs Crypto Crime Report 2025 trmlabs.com
Chainalysis 2025 Crypto Crime Report chainalysis.com
Napier AI AI-AML Index 2025-2026 napier.ai

This intelligence report is compiled from publicly available information and is intended for informational and research purposes only. All data points are attributed to their respective source organizations. Nothing in this report constitutes legal advice, investment advice, or official government guidance. All enforcement data should be verified against primary source documents before use in formal reporting or legal proceedings. The compiler makes no warranty regarding the accuracy, completeness, or currency of third-party data.

Report compiled: February 27, 2026. Data current as of research date.