India Financial Crime Intelligence Report
Enforcement posture across PMLA, crypto-enabled crime, hawala, narcotics finance, cross-border flows, TBML, and agency performance. Gap analysis and 2026-2030 projections for investigators, counsel, and compliance teams.
Executive Intelligence Summary
High-level dashboard of India's financial crime enforcement posture as of February 2026
STR Filing Explosion: India's crypto Suspicious Transaction Reports grew from 1,343 in FY2023-24 to 6,272 in FY2024-25 (+367%), and reached 11,720 in the first 8 months of FY2025-26 (April-November 2025) alone - already 87% above the entire prior full year. Tether (USDT) appeared in 7,467 of 9,795 reviewed STRs (76%) - Bitcoin only 6%.
India's anti-money laundering enforcement architecture reached several inflection points in FY2024-25 and into FY2025-26. The Enforcement Directorate issued its highest-ever single-year provisional attachment value of Rs 30,036 crore - a 141% increase in value year-on-year - bringing cumulative provisional attachments to Rs 1,54,594 crore. This trajectory coincides with a global crypto crime surge, with illicit flows hitting an all-time high of $158 billion in 2025 according to TRM Labs, reversing a three-year declining trend.
India's FATF Regular Follow-up classification (June 2024, the best possible outcome) reflects genuine institutional progress, but the report's assessors identified continuing gaps in DNFBP supervision, prosecution delays, and beneficial ownership identification. The convergence of traditional hawala networks with cryptocurrency infrastructure - particularly USDT on TRON - represents the primary emerging threat vector for 2026.
Key domestic developments include FIU-IND's privacy coin ban (January 8, 2026), blocking of 25 offshore exchanges (October 2025), and the establishment of a Darknet and Crypto Task Force under NCORD. India now has approximately 119 million crypto users - the world's largest user base - operating under a patchwork regulatory framework without dedicated legislation.
India's AML Institutional Architecture
13 key agencies, their legal mandates, reporting structures, and performance data
India's AML/CFT framework is a multi-agency architecture anchored by PMLA 2002, FEMA 1999, UAPA 1967, NDPS Act 1985, and the Customs Act 1962. Central coordination is chaired by the Revenue Secretary under PMLA Section 72A. The FATF nodal body is the FATF Cell, Department of Revenue (established 2017). India attained Regular Follow-up status at the FATF Plenary in Singapore (June 26-28, 2024) - the best possible category, shared with only UK, France, and Italy among G20 nations.
Cryptocurrency and Digital Asset-Enabled Financial Crime
Global crypto crime data, USDT/TRON analysis, India enforcement, and convergence typologies
-
April 6, 2018
RBI prohibited regulated entities from dealing in or providing services to virtual currency businesses.
-
March 4, 2020
WP No. 528/2018: SC struck down RBI circular as disproportionate; crypto trading revived.
-
February 1, 2022
30% flat tax on VDA income; 1% TDS on transactions above Rs 10,000. Effective July 2022. Led to 90% domestic volume drop and ~75% shift to offshore platforms.
-
March 7, 2023
Ministry of Finance S.O. 1072(E): VDA Service Providers classified as reporting entities under PMLA 2002. FATF Travel Rule implemented with no minimum threshold.
-
December 28, 2023
Binance, KuCoin, Kraken, Huobi, Gate.io, Bitstamp, Bittrex, MEXC, Bitfinex received show-cause notices for PMLA non-compliance. URLs/apps blocked in January 2024.
-
June 19, 2024
Largest crypto AML fine in India at the time. Binance registered with FIU-IND. Official order: FIU-IND Binance Order
-
January 31, 2025
Non-registration and continued expansion without mandatory FIU-IND registration.
-
October 1-7, 2025
AscendEx, BC.Game, BingX, BitMEX, CoinEx, CoinW, Huione (Haowang Guarantee), LBank, Phemex, Poloniex and 15 others. 14 of 25 held $9B+ in assets, $20B+ daily volume at time of action.
-
January 8, 2026
Monero (XMR), Zcash (ZEC), Dash, PIVX banned from regulated exchanges. Mixers/tumblers prohibited. New KYC: live selfie + liveness detection, geographic coordinates, penny-drop verification, enhanced due diligence on unhosted wallets.
-
April 2027 (Upcoming)
Offshore VDA SPs required to report Indian user transactions to CBDT. India confirmed commitment September 2025.
3A Global Crypto Crime Data (2020-2025)
Global illicit crypto volume hit an all-time high of $158 billion in 2025 (TRM Labs) /$154 billion (Chainalysis lower bound), reversing a multi-year decline. The surge was primarily driven by Russia-linked sanctions evasion (A7A5 stablecoin: $72B+), Chinese Money Laundering Networks (CMLNs, $103B+), and elevated scam/fraud activity ($35B). Historical estimates are regularly revised upward as attribution improves.
Note: TRM Labs and Chainalysis differ substantially due to different denominators. TRM's 2026 report excludes wash trading, peel chains, and internal exchange flows from denominator.
The shift from Bitcoin to stablecoins (primarily USDT on TRON) is the defining structural change in crypto crime since 2020. 77% of illicit stablecoin activity in 2025 was linked to Russia's A7A5 ruble-pegged stablecoin alone.
| Crime Type↕ | YoY Growth↕ | Key Data Points |
|---|---|---|
| Sanctions/Sanctions Evasion | >400% | A7A5 token ($72B); A7 wallet cluster ($39B); Russia-linked; Garantex/Grinex |
| Blocklisted Funds | +32% | Largely Tether enforcement actions; 7,268 unique addresses blacklisted |
| Hacked/Stolen Funds | +31% | $2.87B across ~150 hacks; Bybit hack $1.46B (51% of total 2025 hacks) |
| Darknet Markets | +20% | $1.7B in 2024; vendor shops $600M+ (up from $289M in 2023) |
| Illicit Goods & Services | +12% | OTC desks, escrow services, CMLN "guarantee" platforms |
| Scams/Fraud | Significant | TRM: ~$35B; Chainalysis: $14B-$17B; AI-enabled scams +500% (TRM); pig-butchering |
| Ransomware | -8% (payments) | $820M on-chain payments; attacks +50%; share paying: 28% (record low) |
| Chinese Money Laundering Networks | Surged | $103B+ (TRM); $16.1B (Chainalysis); $44M/day average; Telegram guarantee platforms |
Source:TRM Labs 2026 Crypto Crime Report | Chainalysis 2026 Report Introduction
3B USDT on TRON - The Dominant Illicit Rail
Founded September 4, 2024 - a public-private partnership between TRON, Tether, and TRM Labs. By October 31, 2025 (first anniversary), T3 FCU had frozen over $300 million in illicit assets across 23 jurisdictions on all continents except Africa. USA ($83M, 37 cases) was the largest volume. Brazil: R$3 billion+ frozen via Operation Lusocoin (including 4.3M USDT). August 2025: T3 Global Collaboration Program launched with Binance as inaugural member.
Sources:TRM Labs 2025 Report Teaser (chain breakdown) | The Defiant - T3 FCU $300M milestone
3C India Crypto Enforcement Timeline & STR Growth
| Exchange↕ | Penalty↕ | Date | Reason |
|---|---|---|---|
| Binance | Rs 18.82 Cr (~$2.25M) | June 19, 2024 | Non-registration; failure to maintain records under PMLA Sec 12(1) |
| Bybit Fintech Ltd | Rs 9.27 Cr (~$1.06M) | Jan 31, 2025 | Non-registration; continued expansion without mandatory FIU-IND registration |
| KuCoin | Rs 34.50 lakh (~$41K) | March 22, 2024 | Non-registration under PMLA Sec 12(1) - first offshore exchange to comply and pay |
| FY2024-25 Total | ~Rs 28-29 Cr | FY 2024-25 | Various PMLA violations across multiple VDA SPs; 63 websites blocked |
3D Crypto-Hawala-Narcotics Fund Flow Diagram
Convergence model observed in Indian enforcement (2024-25): Narcotics proceeds - hawala operators - USDT conversion (P2P, no KYC) - cross-chain layering (TRON to ETH/BSC) - UAE accounts (OTC desks or hawala) - re-investment via shell FDI or real estate parking - integration into legitimate Indian economy. Crypto acts as a "force multiplier" enabling infinite layers and jurisdictions that traditional 4-layer hawala could not achieve.
Hawala and Informal Value Transfer Systems
Mechanics, scale, crypto-hawala convergence, and geographic corridors
Hawala (also "hundi" in Indian context) is a trust-based informal value transfer system (IVTS) operating outside conventional banking. No physical movement of money occurs in real time. Settlement happens via trade invoices, gold transfers, reverse hawala, or increasingly - cryptocurrency transfers.
- Sender (Country A) delivers cash to local hawala broker (hawaldar)
- Hawaldar provides a code/token (now often WhatsApp OTP or crypto wallet address)
- Country A broker notifies Country B counterpart via encrypted app with amount + code
- Recipient presents code to Country B hawaldar; receives equivalent local currency within hours
- Balances settled periodically via trade invoices, gold transfers, or USDT transfers
Note: $24-47B includes both legitimate informal transfers and criminal proceeds. This is a broad estimate applying the 20-40% ratio to official RBI remittance data. Precise measurement is inherently difficult given the system's opacity.
FIU-IND documented a hawala case involving multiple VDASP accounts with approximately Rs 1,100 crore deposited and converted to Indian currency via crypto-hawala hybrid. FIU stated: "VDAs are increasingly used as modern substitutes for hawala channels."
Modern Crypto-Hawala Convergence (2024-2025)
The most significant structural shift documented in 2024-2025 is the fusion of traditional hawala networks with cryptocurrency infrastructure. DRI FY2024-25 report explicitly states:"In gold and narcotics smuggling, sale proceeds are either hawala-transferred or sent as cryptocurrency to masterminds abroad." DRI is now deploying blockchain analytics to trace these flows.
- Remitter pools funds into multiple mule bank accounts via UPI/RTGS - structured below Rs 50,000 alert thresholds ("smurfing")
- Mule accounts transfer to shell accounts belonging to unknown hawala operators
- Operator delivers USDT/stablecoin to a pre-negotiated crypto wallet in Dubai
- USDT exchanged at OTC desk or crypto ATM in Dubai for cash in Dirhams
- Hawala margins settled in local cash; cross-border settlement complete
-
Tumbler/mixer wallets - pool coins before redistribution to new wallets (now banned on Indian exchanges)
-
Bridge and swap functions - switch between blockchains (Bitcoin to Solana) to obscure fund trails
-
Self-custody wallets - not hosted on exchanges; invisible to FIU until they transact with compliant platforms
-
OTC/P2P transactions - two-party, off-exchange, no reporting obligation
-
VPNs and encrypted apps - Signal, Telegram, WeChat for coordination
-
Offshore non-FIU exchanges - Huione (Cambodia), BC.Game (Curacao) outside Indian reach
-
Cambodian Huione Pay link - 34 Indian customers using Cambodian phone numbers; funded via Huione Pay USDT, liquidated to INR
| Date | Case | Amount | Method |
|---|---|---|---|
| Jul 2024 | DRI China Gold - Rs 127 Cr hawala via USDT | Rs 127 Cr | 108 kg China-origin gold sold in Delhi; proceeds to China via USDT/WeChat/VPN. First DRI crypto-hawala case. |
| Jun 2025 | ED raids Gujarat/Mumbai - Rs 100 Cr hawala | Rs 100 Cr+ | Cyber-fraud proceeds to crypto via hawala operators in Surat, Ahmedabad, Mumbai |
| Aug 2025 | ED raids 11 locations - Rs 260 Cr | Rs 260 Cr | Bitcoin to USDT, moved abroad via UAE-based hawala. Delhi/Noida/Gurugram/Dehradun |
| Nov 2025 | ED raids Delhi-Goa hawala operators | Rs 89 Cr (prior attachments) | Undisclosed Dubai real estate; 17 related cases; hawala using USDT rail |
| Dec 2024 | Kashmir IT/hawala bust | Rs 800 Cr (network) | Rs 1 Cr cash seized; Rs 50 Cr+ undisclosed Dubai assets in Rs 800 Cr hawala network |
| Dec 2025 | 4th Bloc Consultants (Ponzi-Hawala) | Rs 623 Cr deposited | 30-40% routed through hawala; crypto to UAE/Singapore/Mauritius offshore accounts |
Padgha ISIS Terror Financing Case - Hawala + NIA + ED Joint Action
NIA registered Case RC-29/2023/NIA/DLI in November 2023. An ISIS-linked module based in Padgha village, Thane (Maharashtra) had self-declared the area "Al Sham" - a liberated ISIS territory. 21 accused charged by NIA for recruitment/radicalization, IED fabrication, and raising funds to sustain ISIS operations in India.
ED filed a PMLA case predicated on the NIA FIR in December 2025. On December 11, 2025, 40 locations were raided simultaneously across Maharashtra (Padgha/Borivali/Thane, Ratnagiri), Delhi, Kolkata, and Uttar Pradesh.
- Illegal Khair (Acacia catechu/Kaith wood) smuggling from reserve forests used as predicate crime - proceeds financed the terrorist module
- Front businesses: legitimate "Kattha" (food additive) production used as cover for illegal wood procurement
- Cross-state hawala networks used for fund movement
- International connections to ISIS financiers probed
- Seized:Rs 3.70 crore cash + Rs 6 crore gold/bullion
This case demonstrates the environmental crime-terror financing nexus - a relatively uncommon but documented pattern where resource crimes fund extremism.
Detection Challenges and FATF Assessment
-
No paper trail - transactions leave no documentation in formal financial systems
-
Closed trust networks - caste/ethnic ties create impenetrable information ecosystems
-
Front businesses - jewelry shops, textile exporters, travel agencies co-mingle receipts
-
Crypto obfuscation - tumbler wallets, bridge swaps, self-custody wallets opaque to analytics
-
Offshore non-compliant exchanges - many Indian operators use Huione/Cambodia, BC.game/Curacao; outside Indian regulatory reach
-
DNFBP reporting gaps - real estate agents, jewelers, accountants file very few STRs despite high hawala exposure
-
Political connections - hawala networks often have politician links, making investigations difficult
-
Historical counterproductive enforcement - high-handed crackdowns historically drove hawaldars underground
-
No Trade Transparency Units (TTUs) - India lacks bilateral trade data comparison tools to detect TBML misinvoicing
-
41% of Indian crypto users on offshore non-FIU platforms - significant blind spot
Narcotics-Linked Financial Crime
India's narcotics economy sits at the convergence of the Golden Crescent and Golden Triangle - two of the world's most prolific drug-producing regions. Drug trafficking generates proceeds that flow through real estate, crypto, and hawala before integration into the formal economy.
Legal Framework: NDPS Act + PMLA Intersection
The NDPS Act 1985 defines and criminalizes drug offences. Drug trafficking offences are scheduled offences under PMLA, meaning any proceeds from NDPS violations can be traced, attached, and confiscated by the ED under the Prevention of Money Laundering Act 2002.
-
NCB: Seizure, arrest, and NDPS prosecution
-
ED: Financial investigation - tracing drug money through layers
-
DRI: Cross-border narcotics interdiction (import/export routes)
-
State Police: Predicate offence FIRs that trigger PMLA jurisdiction
-
NIA: Terror-narcotics nexus cases
-
NCB/state police files FIR under NDPS Act
-
ED registers ECIR (Enforcement Case Information Report)
-
ED issues Provisional Attachment Orders against proceeds
-
ED files Prosecution Complaint before Special PMLA Court
-
Conviction under PMLA independent of NDPS conviction
India's Dual-Threat Geographic Position
Drug Category Analysis: Seizure Volumes and Financial Flows
| Drug Category↕ | % of FY2024 Seizures↕ | FY2024 Volume (kg)↕ | Primary Source | Entry Route | ML Mechanism |
|---|---|---|---|---|---|
| Cannabis (Ganja/Hashish) | 41% | 540,810 | Domestic cultivation + Nepal, Bangladesh | Land borders; hydroponic via air | Cash, real estate, hawala |
| Opiates (Heroin/Opium) | 39% | 521,366 | Afghanistan via Pakistan (Golden Crescent) | Punjab land corridor; drone drops | Hawala to Pakistan; Dubai corridor |
| Pharmaceuticals (Codeine/Tramadol) | 18% | ~238,000 | Domestic diversion; Bangladesh | Northeast border; e-pharmacy | Cash, informal channels |
| Synthetic Drugs (Meth/ATS) | 2% | ~26,000 | Myanmar (Golden Triangle); CJNG via Mexico | NE land border; maritime; air | Crypto, jade/gems, hawala |
| Cocaine | <1% | 107 | Latin America; Africa transit | Air passenger (Nairobi, Addis hubs) | Crypto-hawala (CJNG case); shell companies |
Indo-Pakistan Corridor: Heroin, Drones, and Terror Financing
Pakistan ISI strategy: narcotics weaponized as a tool to \"destroy Punjab's youth cognitively\" while generating revenue for anti-India operations. Heroin from Afghanistan flows to Pakistan border laboratories, then enters Punjab via river/stream tosses, drone drops, and courier networks using recruited drug addicts as mules.
Heroin revenue finances weapon procurement and ideological operations in J&K. ISI-linked drug networks operate as dual-purpose entities: destabilizing Punjab while generating operational funding.
- Afghanistan farmgate: ~Rs 1 lakh/kg
- Pakistan border: ~Rs 5-10 lakh/kg
- Delhi wholesale: ~Rs 50 lakh/kg
- Indian street level: ~Rs 5 crore/kg
Source:Defence Horizon Journal / Punjab Drug-Drone Analysis
Indo-Myanmar Corridor: Methamphetamine and Narco-Finance
Post-2021 Myanmar military coup: fragmentation of governance enabled Ethnic Armed Organizations (EAOs) to dramatically scale methamphetamine production. The United Wa State Army (UWSA) added synthetics to its heroin portfolio. UNODC designated Shan State production as showing \"explosive growth.\"
-
Mizoram: 527,900 meth tablets (April 2024); 2,625,890 tablets (May 2024)
-
Assam: 500,000+ tablets across 5 largest operations
-
Manipur: 100,000 Yaba pills; 7.7 kg heroin, 6.7 kg opium (joint op)
-
Tripura: 171,000+ tablets
-
NCB Operation Crystal Fortress (Delhi 2025): 328 kg high-purity meth
-
Jade/Gemstone trade: Drug proceeds converted to jade at Myanmar border markets - serves as TBML settlement commodity (parallel to gold in Dubai corridor)
-
Insurgent protection money: EAOs extract fees from traffickers in cash; recycled through hawala into commerce
-
Diaspora remittances: Proceeds sometimes repatriated via legitimate-appearing remittances from Southeast Asia
-
Near 500% increase in ATS seizures 2020-2024 (UNODC/NCB)
Sources: The Print / Myanmar Drugs India | PIB / DRI Northeast Seizures
CJNG Cartel-Crypto-Delhi Connection (October 2024)
This is the first confirmed Indian case of a Latin American cartel's crypto-hawala pipeline into India. CJNG (Jalisco New Generation Cartel, Mexico) - one of the world's most powerful drug cartels - funded the Delhi drug network through a three-hop chain.
Crypto (CJNG Mexico) → Dubai OTC exchange → Hawala to Delhi in 3 installments → Drug purchase and distribution
- 95.5 kg amphetamine seized
- Rs 9.20 crore assets frozen by NCB
- Multiple arrests across Delhi network
- Mexico-India drug supply chain disrupted
Source:NDTV / NCB CJNG Asset Freeze
NCB FY2025 Performance Summary
Cross-Border Fund Movement & FEMA Violations
The Foreign Exchange Management Act governs India's cross-border capital flows. Violations range from unauthorized remittances and round-tripping to shell company layering through Dubai, Singapore, and the Caribbean. ED enforces both PMLA and FEMA, giving it dual jurisdiction over financial crime with international dimensions.
Shell Company Layering: India - Dubai - Singapore - Caribbean
The standard four-layer typology documented by Indian enforcement agencies:
Source:ZIGRAM / Shell Companies Dubai Case Studies | ACAMS India TBML Analysis
Mauritius Round-Tripping: From 41% of FDI to DTAA Reform
- Mauritius accounted for 41.80% of total FDI into India from April 2000 to March 2011 ($54.2 billion)
- Singapore: 9.17% ($11.9 billion) over same period
- Government White Paper: "Mauritius and Singapore with their small economies cannot be the sources of such huge investments" - pointing to round-tripping
Indian resident deposits black money abroad - creates shell entity in Mauritius/Singapore (gets Tax Residency Certificate) - invests "FDI" back into own Indian company - capital gains tax-exempt under DTAA.
- 2016: India renegotiated Mauritius DTAA - benefits now require expenditure of Rs 27 lakh in Mauritius preceding one year (blocking empty-shell structures)
- Similar DTAA amendments with Cyprus and Singapore
- GAAR (General Anti-Avoidance Rules) under Direct Taxes Code
Round-tripping continues but at reduced volumes. Sophisticated operators shifted to complex structures: Cayman/BVI entities investing through Singapore, which retains DTAA benefits under substantive presence tests. ED-Mauritius MoU signed for agency-to-agency cooperation.
Source:Voice of CA / Government FDI Round-tripping Document
India's International Financial Crime Cooperation Framework
| Framework | India's Status | Key Milestone | Current Activity |
|---|---|---|---|
| FATF | Member since 2010 | Regular Follow-Up (June 2024) - highest tier | Steering Group + RTM Working Group co-chair; next report due Oct 2027 |
| Egmont Group | Member since May 2007 | Runner-up for Best Egmont Case Award (BECA) 2025 | 182 jurisdictions information exchange; Finnex 2.0 portal |
| MLAT Network | 45+ countries | UAE, UK, Singapore, Swiss, Mauritius key partners | PNB/Nirav Modi, AgustaWestland invocations; 2-5 year avg. processing |
| FIU-IND MoUs | 51 bilateral MoUs | RBI MoU: Apr 17, 2025; DoT MoU: Sep 25, 2025 | Real-time fraud data (FRI) sharing; Mobile Number Revocation List |
| India-UAE AML | Active | Jan 19, 2026: PM Modi - Sheikh MBZ joint statement | Condemnation of cross-border TF; UAE exited grey list Feb 2024 |
| CARF (Crypto) | Adopting 2025 | July 2025: India commits to CARF adoption | VDA SPs to report user transactions by April 2027 |
Black Money Act (2015-2025): Rs 35,000 Crore Demanded, Rs 338 Crore Recovered
- 1,021 assessments completed
- Rs 35,105 crore in demands raised
- Only Rs 338 crore recovered - less than 1% recovery rate
- 163 prosecution complaints filed
- No mechanism for automated cross-border asset seizure
- MLAT requests take 2-5 years
- Complex corporate structures hide ownership in target jurisdictions
- Limited success with extradition of high-value fugitives
Indian funds in Swiss banks reached CHF 3.5 billion (~Rs 37,600 crore) in 2024 - more than tripled in a single year. This reversal, after years of declining figures following AEOI implementation, indicates:
-
New structuring techniques to avoid automatic exchange of information
-
Swiss private banking structures falling below AEOI thresholds
-
Shell company layering through non-AEOI jurisdictions before entering Switzerland
-
Rs 30,444 crore undisclosed income detected via 465 surveys
-
1,437 groups searched
-
Rs 2,504 crore assets seized
Source:CNBC TV18 / Black Money Law India
Case: Abu Sabah (Balvinder Singh Sahni) - Dubai Conviction 2025
Indian businessman Balvinder Singh Sahni, known as "Abu Sabah," convicted by Dubai Court of Appeal for money laundering. Sentenced to 5 years imprisonment, AED 150 million (~Rs 360 crore) fine, and deportation after sentence completion.
Network used shell companies and suspicious transfers to move illicit funds across jurisdictions. Demonstrates that India-linked money laundering through UAE now faces increased enforcement risk following UAE's FATF grey list exit and strengthened AML framework.
Source:India Blooms / Abu Sabah Dubai Conviction
Trade-Based Money Laundering & Customs Enforcement
TBML is described by ACAMS as "the most sophisticated method to launder illicit funds." India is specifically vulnerable given its trade volumes, documentation gaps, and the absence of Trade Transparency Units. GST fraud - at Rs 7.08 lakh crore detected over five years - represents the largest quantified illicit financial flow in the Indian economy.
Core TBML Typologies Documented in India
| Typology↕ | Mechanism | Common Sectors | Detection Difficulty |
|---|---|---|---|
| Over-Invoicing of Imports | Importer pays more than actual value; excess retained by foreign supplier as black money abroad | Consulting/tech services; capital equipment | HIGH |
| Under-Invoicing of Exports | Exporter receives less than declared value; difference retained offshore | Gems & jewelry; textiles; software exports | HIGH |
| Phantom Shipments / Fake BoEs | Multiple remittances using copies of same Bill of Entry at different banks | All import-intensive sectors | MEDIUM |
| Multiple Invoicing | Single shipment invoiced multiple times through different banks | Commodities; bulk goods | MEDIUM |
| GST Circular Trading | Shell firms issue fake invoices; circular trading creates artificial turnover; fraudulent ITC claims | Manufacturing; services; construction | MEDIUM |
| SEZ/Advance Auth Misuse | Diversion of duty-free imported goods; phantom exports creating false FIRC credits | Software; pharma; electronics | HIGH |
GST Evasion Detection: Year-by-Year Escalation (FY2021-2025)
| Financial Year↕ | GST Evasion Detected↕ | Fake ITC Claims↕ | Cases Filed |
|---|---|---|---|
| FY2021 | Rs 49,384 crore | - | - |
| FY2022 | Rs 73,238 crore | - | - |
| FY2023 | Rs 1,32,000 crore | Rs 24,140 crore | - |
| FY2024 | Rs 2,30,000 crore | Rs 36,374 crore | - |
| FY2025 | Rs 2,23,000 crore | Rs 58,772 crore | 30,056 |
| FY21-25 Total | Rs 7.08 lakh crore | Rs 1.79 lakh crore | 91,370 |
Source: Ministry of Finance data. Voluntary recovery across FY21-25: Rs 1.29 lakh crore.
DRI FICN Multi-State Operation (February 2025): Hong Kong - India Supply Chain
-
Feb 8: Two importers of specialist security paper (Hong Kong origin) arrested - one in Ghazipur UP, one in Bengaluru
-
Feb 9: Two printing facilities busted - Thane (Maharashtra) and Bhiwani (Haryana)
-
Feb 20: Simultaneous raids at 11 locations across Maharashtra, Haryana, Telangana, Tamil Nadu, Bihar
-
Fake Rs 50 and Rs 100 denomination notes
-
Laptops and high-resolution digital printers
-
Security paper with authentic "RBI" watermarks (smuggled from Hong Kong)
-
Specialized UV-reactive inks; Mahatma Gandhi watermark butter paper
Hong Kong security paper procurement - multiple domestic printing hubs - distribution network spanning 5 states. Represents the international dimension of FICN operations not merely a domestic criminal enterprise.
- Vikhroli West, Mumbai: sophisticated printing/finishing facility
- Sangamner + Kolhapur, Maharashtra: computer/printer facilities
- Belgaum, Karnataka (led from Kolhapur intelligence)
- West Godavari, Andhra Pradesh: security paper importer
- Khagaria district, Bihar: laptops and restricted security paper
- Rohtak, Haryana: paper importer
Source:PIB Official Press Release | Tribune India
Gold Smuggling: Routes, Economics, and Enforcement Trends
- Land routes (Myanmar, Bangladesh, Nepal): 55% of DRI seizures
- Air routes (Middle East, SE Asia): 36%
- Sea routes: 9%
Single most active route. Documented concealment methods:
- Body concealment (rectal capsules, clothing implants)
- Gold paste form (melted and dried - harder to detect)
- Aircraft seat pipe/toilet concealment (insider staff)
- Modified luggage (false bottoms, electronic device cavities)
When India cut import duty from 15% to 6%, margins compressed to Rs 6.3 lakh/kg. However, 67% gold price rise through 2025 pushed margins to Rs 11.5 lakh/kg - exceeding pre-reduction levels. Smuggling incentives remain high.
- 1,073 kg gold seized (DRI): Rs 785 crore market value
- Tamil Nadu, Gujarat, West Bengal: primary redistribution hotspots
- New Ladakh corridor (LAC border, limited security presence)
- Mumbai International Airport: 35% of airport seizures
Kannada actress: 31 trips to Dubai over 12 months, total 127.287 kg gold (Rs 102.55 crore). Proceeds hawala-transferred back to Dubai.
Source:Reuters / Gold Smuggling Surge India 2025
Recent GST Fraud Case Studies (2025-2026)
DGGI uncovered two tax fraud rackets with total evasion of Rs 262 crore:
- Case 1: Fake ITC claims of Rs 252.66 crore; taxable value Rs 1,403.66 crore
- Private limited companies with dummy directors showing bogus turnover within months of incorporation
- Method:"Funds were routed through RTGS transactions before being returned in cash through hawala channels after deducting commissions"
- DGGI searched Ahmedabad, Jamnagar, and Mumbai premises
Fake GST invoicing racket using 95+ entities across Tamil Nadu and Karnataka:
- Detected via IP address correlation of GST return filings (multiple entities filing from same IP)
- 196 SIM card covers, 42 cheque books, 41 mobile phones, company stamps seized
- 12 entities (Chennai North): Rs 50.85 crore fake ITC
- 83 more entities under investigation; total suspected >Rs 350 crore
- Demonstrates how digital forensics can detect coordinated fraud at scale
Source:Business Today / GST Fake Invoice Frauds February 2026
Agency Performance Scorecards
A data-driven comparison of India's 13 financial crime enforcement agencies across investigations, attachments, convictions, and specialized mandates. FY2024-25 data. The Enforcement Directorate's Rs 30,036 crore PMLA attachments represent a 141% year-on-year increase - the highest ever recorded.
Enforcement Directorate (ED) - FY2024-25
All-Agency Performance Comparison: FY2024-25
| Agency↕ | Primary Mandate | Key FY2024-25 Metric | Value / Volume | Conviction / Success Rate |
|---|---|---|---|---|
| ED | PMLA + FEMA enforcement | Provisional attachments | Rs 30,036 crore (461 PAOs) | 94.82% |
| FIU-IND | Financial intelligence; STR analysis | STRs disseminated | 4,36,287 STRs | Rs 28 Cr penalties on VDA SPs |
| NCB | Narcotics enforcement | Total seizures | 1,33,965 kg (Rs 1,980 Cr) | 66.8% |
| DRI | Anti-smuggling; customs fraud | Gold seized | 1,073 kg gold; 3,029 kg narcotics | 3,005 gold cases |
| NIA | Terror financing (TF) | Cases registered | 692 cumulative cases; 4,232 arrested | 95.54% |
| CBI | Corruption + major fraud | Cases (FY24) | ~950 cases registered | ~65% (multi-year avg) |
| RBI | Banking supervision; AML compliance | Penalties levied | Rs 86+ crore on banks FY25 | MuleHunter.AI: 15+ banks |
| SEBI | Securities fraud | Orders passed | 200+ enforcement actions FY25 | Rs 1,500+ crore recovery orders |
| SFIO | Corporate fraud | Investigations | 70+ active investigations | Multiple conviction cases |
| I4C | Cybercrime coordination | Financial fraud flagged | 144+ crypto-narco cases 3-yr period | ASTR: 1M+ SIM frauds detected |
| CBDT / IT Dept | Tax evasion; black money | Undisclosed income detected | Rs 30,444 crore via 465 surveys | 44,000+ NUDGE notices issued |
| DGGI / GST Intel | GST evasion; fake ITC | Evasion detected FY25 | Rs 2,23,000 crore (30,056 cases) | Rs 1.29 L Cr voluntary recovery FY21-25 |
| BSF / Customs | Border enforcement | Bangladesh border FY24 | Rs 1,300 crore+ gold/silver; 3.26M FICN | Narcotics: 11,866 kg |
FIU-IND Detailed Scorecard: Financial Intelligence Operations FY2024-25
-
4,36,287 STRs disseminated to law enforcement
-
STR analysis identified: hawala, gambling, scams, fraud, CSAM, terror financing
-
Priority STR pipeline: one STR helped uncover crypto-laundering scheme with spoofed exchange accounts
-
Rs 4.87 lakh crore offshore crypto volume by Indian users tracked
-
49 VDA SPs registered (45 domestic, 4 offshore)
-
Total penalties: Rs 28 crore on non-compliant VDA SPs
-
Binance: Rs 18.82 crore; Bybit: Rs 9.27 crore; KuCoin: Rs 3.45 lakh
-
October 2025: 25 additional offshore exchanges issued non-compliance notices
-
51 bilateral MoUs with foreign FIUs
-
Egmont Group: 182 jurisdictions via Egmont Secure Web
-
RBI MoU signed April 17, 2025 (data sharing/co-supervision)
-
DoT MoU signed September 25, 2025 (Financial Fraud Risk Indicator data; Mobile Number Revocation List)
-
I4C portal integration for cybercrime intelligence sharing
Finnex 2.0 portal enables secure real-time data transmission. September 15, 2025 circular: new VDA SP registration requires live demonstrations of KYC, sanctions screening, transaction monitoring, blockchain analytics, Travel Rule compliance, and CERT-In cybersecurity audits.
Source:Cyril Amarchand Blogs / FIU-IND Annual Report 2024-25 Analysis
NIA Terror Financing Enforcement: Cumulative Performance
Government Initiatives & Regulatory Actions
A chronological record of India's legislative, regulatory, and international enforcement milestones from 2022 through February 2026. India achieved FATF Regular Follow-Up status in June 2024 - the highest possible tier - joining only France, Italy, Russia, and the UK among G20 nations.
AI and Technology Initiatives in India's AML Ecosystem
-
MuleHunter.AI (RBI Innovation Hub): deployed by 15+ Indian banks for mule account detection; 95% accuracy reported by one major bank
-
FREE-AI Framework (August 2025): Framework for Responsible and Ethical Enablement of AI - mandates board-level oversight, Risk Management Committee, model validation
-
RBI survey: 101 AI tools deployed specifically for Financial Crime Compliance (FCC) across 583 tools surveyed - covering fraud detection, AML/CFT/KYC, Early Warning Signals
-
Pilot blockchain-based land records (Andhra Pradesh)
-
AI cross-checking of property ownership vs. Aadhaar-linked data and income tax filings
-
CBDT NUDGE campaigns for benami/undisclosed asset compliance; 44,000+ notices issued for undisclosed crypto
-
Over 80% of Indian financial institutions using AI for chatbots/virtual assistants
-
65% adopted AI for fraud detection
-
SEBI guidelines on AI in financial services being implemented
-
Transaction monitoring with ML-based anomaly detection
-
Entity resolution across fragmented databases
-
NLP for STR narrative analysis
-
Blockchain analytics (Chainalysis/Elliptic/CipherTrace used by ED technical cell)
-
DoT's ASTR tool (AI SIM fraud detection) integrated with FIU-IND
Source:KPMG India / Machine Learning in Financial Crime Compliance
India's FATF Leadership Role
- Member of FATF Steering Group (governance-level participation)
- Co-chair of FATF Risks, Trends and Methodologies (RTM) Working Group - the group that informs global typologies and red flags
India hosted the FATF Private Sector Collaborative Forum (PSCF) March 25-27, 2025 in Mumbai. Inaugurated by FATF President Elisa de Anda Madrazo; RBI Governor Sanjay Malhotra presided. Hosted by RBI and Ministry of Finance.
India hosted the Eurasian Group on Combating Money Laundering and Financing of Terrorism (EAG) Plenary in Indore, November 2024 - demonstrating regional AML leadership across the Eurasian grouping.
India's co-chair of RTM Working Group means Indian expertise directly shapes global AML standards, typology guidance, and red-flag indicators used by all 40 FATF member countries and 200+ FATF-Style Regional Body members. This creates a feedback loop between India's enforcement experience and global standards.
Sources: PIB / FATF PSCF Mumbai 2025 | ComplyAdvantage / FATF February 2026 Plenary
Gap Analysis: Where India's Framework Falls Short
Despite FATF's Regular Follow-Up designation, material gaps remain. The 99.3% of PMLA investigations that have never reached a verdict, the absence of dedicated crypto legislation protecting 119 million users, and the less-than-1% Black Money Act recovery rate represent systemic failures that undermine the deterrent value of India's enforcement framework.
Judicial Backlog - Detailed Analysis: The 99.3% Problem
- 7,771 ECIRs filed since PMLA enactment (2005)
- ~1,739 prosecution complaints at trial stage
- 58 cases fully decided
- Conviction rate: 94.82% (of 58 decided cases)
- But:99.3% of all ECIRs have never reached verdict
- Cascade dependency: PMLA trials must wait for predicate offence trial progress
- Judicial density: India has only ~21 judges per million people vs. global standard 50+
- Special court overload: 100 PMLA courts handle multiple law jurisdictions simultaneously
- Asset disputes: Rs 3,803.91 crore in orders under court-ordered stay due to adjudicating authority disputes
"Several PMLA investigations are pending for a very long time." - ED Director Rahul Navin, acknowledging systemic delays despite 94% conviction rate in completed cases.
ED continues to attach assets of corporate debtors even after IBC resolution plans are approved. Despite Section 32A (2020) immunity provision, enforcement agencies maintain aggressive attachment posture. Buyers price "ED risk" into IBC auction valuations, reducing creditor recovery.
92,828 pending cases at Supreme Court level (record high, January 2026). Total Indian judiciary: 54 million pending cases. Cases pending 30+ years: 180,000+.
Source:New Indian Express / ED Director on PMLA Delays
Crypto Regulation Gaps: 119 Million Users Without Dedicated Protection
| Gap | Current Status | Risk Level | Comparable Jurisdiction |
|---|---|---|---|
| No dedicated Crypto Asset law | Trading legal; patchwork PMLA/IT/SEBI | HIGH | EU: MiCA (2024); UAE: VARA framework |
| DeFi regulation | No explicit rules; activity-based test ambiguous | HIGH | MiCA partially addresses; US still unclear |
| Stablecoin framework | No dedicated rules; RBI monitoring UPI impact | MEDIUM-HIGH | UK: stablecoin bill in progress |
| P2P/DEX monitoring | 91.5% of volume offshore; significant blind spot | HIGH | No jurisdiction fully resolved this |
| NFT regulation | No classification or rules | MEDIUM | Most jurisdictions similarly behind |
| RBI position | Opposes formal regulation ("may confer legitimacy") | HIGH | Diverges from global regulatory trend |
-
Delhi HC (Feb 2026): Declined to mandate CBI inquiry into Bitbns withdrawal freeze - no legal hook without dedicated statute
-
Madras HC (Oct 2025): Recognized crypto as "property" under Indian law - important precedent but no statutory framework follows
-
119 million crypto users in India (2025) - world's largest
-
~$2.6 billion Indian crypto market size
-
Rs 4.87 lakh crore offshore crypto volume by Indian users (FY2024-25)
-
CBDT detected Rs 888.82 crore in undisclosed VDA income
Source:CoinGeek / India Crypto Regulation Analysis
Inter-Agency Coordination: Data Silos and Structural Fragmentation
India's financial crime enforcement is distributed across at least 10 agencies with overlapping mandates. FATF noted improvement in coordination (MoUs, joint operations) but structural fragmentation creates systemic inefficiency.
| Agency | Primary Mandate | Overlap With | Coordination Mechanism |
|---|---|---|---|
| ED | PMLA/FEMA enforcement | CBI, NCB, NIA, IT Dept | Shared predicate offences; joint task forces |
| CBI | Corruption; major fraud predicate crimes | ED, SFIO, NIA | FIR sharing; joint investigation teams |
| IT Department | Tax evasion; benami | ED, FIU-IND, CBDT | CBDT-ED MoU; Project Insight data sharing |
| FIU-IND | Financial intelligence | All enforcement agencies; RBI; DoT | Finnex 2.0; bilateral MoUs with RBI and DoT |
| SEBI | Securities fraud | ED, CBI, SFIO | SEBI-ED PMLA coordination; STR sharing |
| RBI | Banking supervision | FIU-IND, ED, SEBI | FIU-RBI MoU (Apr 2025); MuleHunter.AI |
| NCB | Narcotics | ED, DRI, NIA, State Police | Joint operations; MoU with NCB-ED-DRI |
| DRI | Customs/smuggling | ED, NCB, BSF, CBIC | COIN network; CBIC oversight |
| NIA | Terror financing | ED, IB, R&AW, State ATS | Joint investigation; PMLA predicate FIRs |
| I4C | Cybercrime coordination | FIU-IND, ED, State Police | FRI data sharing; ASTR-FIU integration |
Source:Atlas Institute / India AML-CFT Framework Analysis | FATF India MER 2024
Projections 2026-2030
Forward-looking analysis of India's financial crime risk trajectory based on market growth forecasts, technology adoption curves, regulatory pipeline, and the Secretariat's Global Financial Crime Outlook 2025. India currently sits at 2.31/4.00 on the SECI index - classified as a "Reactive Reformer."
AML Technology and Market Size Projections
| Market / Metric↕ | Current (2025)↕ | Projection (2030-31) | CAGR | Source |
|---|---|---|---|---|
| India AML market | $4.72 billion | $9.88 billion (2031) | 12.8% | Mobility Foresights |
| Global AML market | $4.13 billion | $9.38 billion | 17.8% | Grand View Research |
| India crypto market | ~$2.6 billion | $15 billion | ~34% | CCN/Yahoo Finance |
| India crypto exchange platform | $1.3 billion | $7.5 billion | 28.3% | Grand View Research |
| India digital forensics | Rs 1,603 crore | Rs 11,829 crore (2030) | ~40% | N-CoE / Govt India |
| India GenAI in banking | Emerging | $12 billion (2033) | High | Multiple analysts |
| Global illicit financial flows | ~$3.1 trillion (2023) | $4.5-6 trillion | +6-12% pa | Secretariat / Nasdaq |
| India offshore crypto volume share | 91.5% offshore | 70-80% offshore (with CARF) | Declining | Ainvest analysis |
Three Scenarios for India's Financial Crime Enforcement (2026-2030)
Conditions: Crypto legislation enacted; CARF 2027 operational; judicial reforms reduce PMLA trial backlog; TTUs established with UAE/Singapore; unified financial crime command created.
- Offshore crypto volume falls to <60% within 3 years
- PMLA verdict count multiplies 5x by 2030
- Black Money Act recovery rate improves to 10%+
- India upgrades from "Reactive Reformer" to "Active Enforcer" on SECI
- Crypto-hawala pipeline disrupted through on-chain analytics and CARF data
Conditions: Incremental improvements; no major legislation; CARF implementation but limited effectiveness; judicial backlog persists; DNFBP gaps unresolved.
- ED attachments continue to grow but conviction rate stays near zero at system level
- Crypto regulation patchwork expands but no dedicated law
- India stays at SECI 2.31-2.50 range ("Reactive Reformer")
- Hawala-crypto convergence continues unchecked for non-FIU platforms
- Swiss bank anomaly persists; Black Money Act recovery <2%
Conditions: Political will weakens; CARF delayed; courts overwhelmed; DeFi adoption outpaces any regulatory response; India-Russia-China TBML grows via sanctions workaround vectors.
- India risks slipping from Regular Follow-Up in next FATF evaluation cycle
- Crypto crime losses to Indian consumers double
- Narco-terror financing through Myanmar and Pakistan corridors intensifies
- AI-deepfake fraud exceeds Rs 10,000 crore annually
- Offshore crypto share stays above 90%; privacy coin usage grows
Top 10 Emerging Financial Crime Typologies for India (2026-2030)
| # | Typology | India-Specific Risk | Existing Countermeasure |
|---|---|---|---|
| 1 | AI-Deepfake Fraud | Automated deepfake-enabled identity theft; synthetic KYC documents already causing Indian bank losses | RBI FREE-AI Framework (Aug 2025); limited |
| 2 | DeFi / Unhosted Wallet ML | Privacy coins, cross-chain bridges, CEX-to-DEX bridges used to obscure India-origin crypto flows | Privacy coin ban (Jan 2026); FIU has no DEX visibility |
| 3 | Real-Time Payment Laundering | UPI/IMPS 24x7 instant payments create T+0 laundering window; mule accounts activated within seconds | MuleHunter.AI; FRI data sharing (FIU-DoT) |
| 4 | India-Russia-China TBML | Post-Ukraine sanctions: India-Russia bilateral trade creates new TBML vectors; ruble/rupee invoicing gaps | SWIFT monitoring; I/EDPMS; inadequate for new routes |
| 5 | Proliferation Financing | India's tech exports; dual-use goods; SCOMET controls; China-Pakistan supply chain concerns | DGFT SCOMET controls; DRI seizures |
| 6 | ESG / Carbon Credit Fraud | Greenwashing; carbon credit double-counting; ESG reporting manipulation as new IFF vector | SEBI ESG disclosure rules; enforcement nascent |
| 7 | Stablecoin Money Flows | USDT already dominant in hawala settlement; CBDC competitors to UPI create new monitoring gaps | Privacy coin ban covers some; stablecoins unregulated |
| 8 | Pig Butchering Scams | Myanmar/Cambodia scam compounds targeting Indian victims; Rs 1,000+ crore estimated losses annually | I4C operations; limited; funds exit via hawala |
| 9 | Corporate Fraud / White-Collar | 30% of ED caseload is corporate fraud (Business Standard Aug 2025); growing IBC exploitation | SFIO; ED; SEBI; IBC Section 32A |
| 10 | Cross-Border CARF Evasion | Post-CARF 2027, sophisticated operators will migrate to non-CARF jurisdictions or DeFi structures | FATF VASP guidance; CARF not yet live |
Source:Secretariat Global Financial and Economic Crime Outlook 2025
CBDC / e-Rupee: AML Benefits vs. Privacy Risks (2026-2030)
-
Inherent transaction traceability at the network level
-
Real-time monitoring capability for RBI/FIU-IND
-
Reduces black money scope (programmable spending limits possible)
-
Cross-border CBDC corridors being explored with UAE, Singapore, Mauritius
-
By 2028-2030: potential for real-time cross-border monitoring of compliant flows
-
Privacy concerns could drive users to privacy coins / unhosted wallets
-
Centralized surveillance risk creating political misuse potential
-
Cybersecurity vulnerabilities at RBI level - single point of failure
-
Potential financial disintermediation of commercial banks
-
Criminal flows will migrate to privacy-enhanced alternatives; CBDC only covers compliant users
RBI actively piloting e-Rupee (retail CBDC). Adoption slow due to UPI competition (UPI processes 16+ billion transactions/month - already a dominant payment rail).
Sources: PwC India / CBDC Context | FTI Consulting / India CBDC Analysis
Case Study Repository
Nine landmark cases from 2024-2026 documenting India's financial crime enforcement in practice. Each case illustrates distinct money laundering typologies, enforcement mechanisms, and cross-border dimensions. Drawn from ED, NCB, DRI, FIU-IND, and NIA operations.
4th Bloc Consultants - India's Most Sophisticated Crypto Ponzi
21 premises simultaneously raided across Karnataka, Maharashtra, and Delhi. Follow-up raids December 24, 2025 in Haryana (Ambala, Kurukshetra, Karnal, Chandigarh).
Source:MEXC News|New Indian Express
ED: 26 Fake Crypto Investment Platforms - Pan-India Syndicate
wozur.com | paymara.com | growmore.com | bitrobix.com | zylotrade.com | bitleeds.com | fincorp.com | cryptobrite.com | goldxcapital.com | cubigains.com | turbominers.com | bitminerclub.com | primetrades.com | hydrominers.com | bixotrade.org | metaaibox.com | +10 more
Victim bank transfers → 50+ mule accounts → crypto wallets → hawala networks → P2P exchanges → UAE/Singapore/Mauritius
Investigation originated partly from an unrelated hawala/terrorism financing probe in mid-2023 - demonstrating cross-crime intelligence value.
Source:Free Press Journal / ED 26 Fake Platforms
FIU-IND vs Binance and KuCoin: Offshore Exchange Enforcement
Before the ban, Binance alone accounted for approximately 90% of estimated $4 billion in crypto holdings of Indian nationals.
FIU-IND issued non-compliance notices to 25 additional offshore VDA service providers. Significant inclusion: Huione (Cambodia) - a key node in Southeast Asian pig-butchering scam money flows.
FIU-IND imposed total penalties of Rs 28 crore on non-compliant VDA SPs; 49 exchanges registered (45 domestic, 4 offshore).
Source:FIU-IND Official Binance Order (PDF)|Charltons Quantum Analysis
Padgha ISIS Terror Financing: Environmental Crime Meets Extremism
ISIS-linked module based in Padgha village, Thane (Maharashtra) self-declared the area "Al Sham" - a liberated ISIS territory. NIA registered Case RC-29/2023/NIA/DLI in November 2023. 21 accused charged for recruitment/radicalization, IED fabrication, and raising funds for ISIS operations in India.
ED + Maharashtra ATS simultaneously raided 40 locations across Maharashtra (Padgha/Borivali/Thane, Ratnagiri), Delhi, Kolkata, and Uttar Pradesh.
Key accused: Saquib Abdul Hamid Nachan (self-styled Amir-e-Hind for ISIS) - died June 2025 before trial.
Illegal Khair (Acacia catechu/Kaith wood) smuggling from reserve forests used as predicate crime. Front businesses: legitimate "Kattha" (food additive) production used as cover for illegal wood procurement, with proceeds financing the ISIS module.
This case documents the environmental crime-terror financing nexus - a relatively uncommon but FATF-recognized pattern where resource crimes fund extremism. Cross-state hawala networks used for fund movement.
Sources:Deccan Chronicle|India Today
PACL: India's Largest-Ever Single Attachment Order (Rs 10,021 Crore)
PACL operated a Rs 48,000 crore Ponzi scheme that defrauded over 50 million investors across India - one of the largest investment fraud cases in Indian history.
ED issued a Rs 10,021 crore single attachment order covering 247 properties - the single largest attachment order ever issued in India's enforcement history. This dwarfs previous records and signals ED's willingness to pursue even decades-old fraud schemes.
Illegal prediction market (online betting): ED Gurugram raided Probo's offices July 8-9, 2025. Rs 284.5 crore in investments frozen. Rs 134.84 crore in foreign funding traced to Mauritius and Cayman Islands. December 9, 2025 second attachment: Rs 117.41 crore additional assets.
January 15, 2026: ED chargesheet at Ahmedabad Special PMLA Court. Pakistani directors operating from UAE. Hawala + crypto used for fund diversion back to Pakistan.
Source:Economic Times / ED PACL Record Attachment
Pawan Thakur: Rs 2,500 Crore Drug Racket + CJNG Cartel Connection
October 2024: NCB + Delhi Police seized 95.5 kg amphetamine. CJNG (Jalisco New Generation Cartel, Mexico) funded via crypto → Dubai OTC → hawala to Delhi in 3 installments.
Sources:NDTV / Pawan Thakur Dubai|NDTV / CJNG Asset Freeze
Ranya Rao: 127 kg Gold Smuggling Ring (Rs 102.55 Crore)
Gold sold in domestic market → cash proceeds → hawala → layered through multiple bank accounts and entities.
Rs 34.12 crore in immovable properties attached.
Sources:Indian Express / Ranya Rao DRI Probe|Latestly / ED Chargesheet
Faisal & Alfiya Shaikh: Dawood Ibrahim Network + Drug-Money Laundering
NCB arrested Faisal Javed Shaikh in 2023 for drug trafficking linked to the Dawood Ibrahim gang. Faisal procured MD (mephedrone) from Salim Dola - a drug kingpin linked to Dawood Ibrahim and Chhota Shakeel, currently wanted by NCB. Alfiya Faisal Shaikh (wife) co-accused in managing drug distribution network.
ED attached properties worth Rs 5.88 crore in ongoing case. Investigation remains active with Dawood Ibrahim network connections under continued scrutiny.
Source:India Today / Dawood Network ED Raids
Goa-Pan-India Narcotics Network: B2B Drug Model Across 7 States
Well-organised inter-state drug trafficking via B2B (business-to-business) model - treating drug distribution as a franchise/supply chain rather than individual transactions. This model creates greater operational security for kingpins and makes financial flows appear more legitimate.
The B2B narcotics model creates a legitimate-appearing layering structure: wholesale drug suppliers create fake invoicing for goods/services through shell companies. Retail drug proceeds are integrated via hawala back to the wholesale level, creating a circular economy of illicit finance.
February 26, 2026: ED attached Rs 7.17 crore in immovable properties in a narcotics trafficking PMLA case (Prasad Walke case, Goa). Demonstrates continuing prosecution pipeline.
Sources:Millennium Post|Deccan Herald
Methodology, Glossary & Data Appendix
Research methodology, key term definitions, primary source directory, and data transparency notes for this intelligence report.
Research Methodology
This report draws exclusively from publicly available information across four categories:
- Official Government Publications: PIB press releases, ED Annual Reports, NCB Year-End Press Releases, FIU-IND Annual Reports, DRI Smuggling in India Reports, FATF Mutual Evaluation Report (India 2024), Ministry of Finance notifications
- Regulatory Documents: FIU-IND penalty orders, RBI circulars, SEBI guidelines, official court orders
- Institutional Research: FATF typology papers, UNODC reports, Egmont Group publications, UNCTAD IFF framework documents, GFI trade data reports
- Media and Analysis: Indian Express investigative series, Economic Times, Business Standard, NDTV, Reuters, Bloomberg; analytical publications from KPMG, Secretariat International, Atlas Institute, Charltons Quantum, Cyril Amarchand Blogs, ZIGRAM, LexisNexis Risk, ComplyAdvantage, Napier AI, Chainalysis
Data is current as of February 27, 2026. Financial year data uses India's April-March fiscal year convention. All rupee amounts are as reported (nominal); USD equivalents are approximate conversions at prevailing rates.
- Illicit financial flow estimates by definition rely on indirect measurement methods and carry significant uncertainty ranges
- Hawala volumes are inherently unmeasurable with precision; all hawala estimates should be treated as indicative ranges
- ED conviction data is current as of December 2025; earlier counts may differ from current official figures
- GFI India country-specific data is current only to 2015; no updated India-specific GFI report has been published since
- This report contains no classified, non-public, or restricted government information
All statistics, case details, and institutional data in this report are traceable to cited primary or secondary sources. No data points have been fabricated or estimated without source attribution.
Glossary of Key Terms
PMLA
Prevention of Money Laundering Act, 2002. India's primary AML legislation. Amended multiple times; VDA amendment March 2023. Enforced by the Enforcement Directorate.
ECIR
Enforcement Case Information Report. ED's equivalent of a police FIR - the internal document ED registers to begin a PMLA investigation. As of FY2025: 7,771 ECIRs registered since 2005.
PAO
Provisional Attachment Order. ED's power to freeze/seize "proceeds of crime" during investigation before trial. Valid for 180 days unless confirmed by Adjudicating Authority.
FEMA
Foreign Exchange Management Act, 1999. Regulates foreign exchange and cross-border payments. Violations are civil (not criminal) offences, but ED can prosecute serious FEMA violations.
STR
Suspicious Transaction Report. Filed by banks, financial institutions, and VDA SPs to FIU-IND when a transaction raises AML/CFT concerns. Rs 4,36,287 STRs disseminated by FIU-IND in FY2024-25.
CTR
Cash Transaction Report. Filed for cash transactions above Rs 10 lakh. Separate from STR - CTR is volume-triggered; STR is suspicion-triggered.
CBWTR
Cross-Border Wire Transfer Report. Filed for all cross-border wire transfers above Rs 5 lakh. Provides FIU-IND with visibility on international capital flows.
VDASP / VDA SP
Virtual Digital Asset Service Provider. India's terminology (per PMLA 2023 amendment) for crypto exchanges, wallet providers, and VDA transfer services. 49 registered with FIU-IND as of March 2025.
Hawala
Informal value transfer system (IVTS) operating outside banking, using a network of brokers (hawaldars) in different countries. No physical money crosses borders; settlement via periodic balancing through trade, gold, or crypto. Estimated 20-40% of India's formal remittance volume equivalent moves through hawala.
TBML
Trade-Based Money Laundering. Using international trade transactions (import/export invoices, shipping documents) to disguise the transfer of illicit value across borders. Methods include over/under-invoicing and phantom shipments.
FICN
Fake Indian Currency Notes. Counterfeit Indian currency manufactured and circulated as economic warfare and to fund criminal/terror activities. Pakistan and Bangladesh-origin FICN historically documented; February 2025 DRI operation revealed Hong Kong as security paper source.
DNFBP
Designated Non-Financial Businesses and Professions. Under FATF standards, certain non-bank businesses (real estate agents, lawyers, accountants, jewelers, casino operators) are subject to AML obligations. India's DNFBP supervision rated Partially Compliant by FATF.
PEP
Politically Exposed Person. A person who holds or has held a prominent public function and therefore carries higher corruption/bribery/ML risk. Banks must apply Enhanced Due Diligence (EDD) to PEPs. India's PEP identification system rated Partially Compliant (FATF R.12).
FATF
Financial Action Task Force. Paris-based intergovernmental body that sets global AML/CFT standards. 40 Recommendations. India became FATF member in 2010; achieved Regular Follow-Up (highest tier) in June 2024.
MER
Mutual Evaluation Report. FATF's peer-review assessment of a country's AML/CFT framework. India's MER adopted June 2024, published September 2024. Next India MER: part of 5th round evaluations (post-2030).
Egmont Group
International network of 182 Financial Intelligence Units enabling information exchange on money laundering and terrorist financing via the Egmont Secure Web (ESW). FIU-India joined in May 2007; won runner-up BECA award in 2025.
MLAT
Mutual Legal Assistance Treaty. Bilateral treaties enabling evidence sharing and asset seizure cooperation between countries for criminal prosecution. India has MLATs with 45+ countries. Requests typically take 2-5 years to process.
FEO
Fugitive Economic Offender. Designation under the Fugitive Economic Offenders Act 2018 for persons who owe Rs 100+ crore and flee India to evade prosecution. 24 applications filed; 14 declared FEOs; Rs 900+ crore confiscated.
Benami
Property owned by one person in the name of another (benamidar) to conceal true ownership. Regulated by the Prohibition of Benami Property Transactions Act (PBPTA) 2016. 24 dedicated Benami Property Units under IT Department.
CARF
Crypto-Asset Reporting Framework. OECD-developed standard for automatic exchange of information on crypto assets between tax authorities, similar to CRS for financial accounts. India committed to implementation by April 2027.
Travel Rule
FATF requirement that VDA SPs collect and transmit originator and beneficiary information for virtual asset transfers. India implemented Travel Rule via March 7, 2023 PMLA amendment with NO minimum threshold.
IFF
Illicit Financial Flows. Value that is illegally earned, transferred, or utilized, crossing international borders. SDG indicator 16.4.1 measures IFFs. India estimated at $9.8 billion annual outflows (GFI 2015 data; no updated India-specific figure available).
SECI
Secretariat Economic Crime Index. A 177-country composite index measuring financial and economic crime risk. India scores 2.31/4.00 (2025), classified as "Reactive Reformer" (tier: 2.19-2.83).
Primary Source Directory
| Institution | Document | URL |
|---|---|---|
| Enforcement Directorate | Annual Report FY2024-25 | enforcementdirectorate.gov.in |
| FIU-IND | Binance Penalty Order (PDF) | fiuindia.gov.in |
| PIB / Finance Ministry | FATF India MER Press Release | pib.gov.in |
| FATF | India MER 2024 Full Report | fatf-gafi.org |
| PIB | DRI FICN Operation Press Release | pib.gov.in |
| PIB | ED Day FY2025 Annual Performance | pib.gov.in |
| PIB | FIU-IND / DoT MoU | pib.gov.in |
| PIB | FATF PSCF Mumbai 2025 | pib.gov.in |
| Egmont Group | 2025 Plenary Luxembourg Statement | egmontgroup.org |
| NCB | Year End Press Release 2025 | narcoticsindia.nic.in |
| DRI | Annual Smuggling Report FY2024-25 | dri.nic.in |
| GFI | India Country Case Study | gfintegrity.org |
| UNCTAD | IFF Statistics Portal | unctad.org |
| Secretariat International | Global Financial and Economic Crime Outlook 2025 | secretariat-intl.com |
| KPMG India | ML Models in Financial Crime Compliance | kpmg.com |
| Cyril Amarchand | FIU-IND Annual Report 2024-25 Analysis | cyrilamarchandblogs.com |
| Atlas Institute | India AML/CFT Frameworks Analysis | atlasinstitute.org |
| ComplyAdvantage | FATF February 2026 Plenary Update | complyadvantage.com |
| FinCEN | IVTS Advisory (Hawala/Hundi) | fincen.gov |
| TRM Labs | Crypto Crime Report 2025 | trmlabs.com |
| Chainalysis | 2025 Crypto Crime Report | chainalysis.com |
| Napier AI | AI-AML Index 2025-2026 | napier.ai |
This intelligence report is compiled from publicly available information and is intended for informational and research purposes only. All data points are attributed to their respective source organizations. Nothing in this report constitutes legal advice, investment advice, or official government guidance. All enforcement data should be verified against primary source documents before use in formal reporting or legal proceedings. The compiler makes no warranty regarding the accuracy, completeness, or currency of third-party data.
Report compiled: February 27, 2026. Data current as of research date.