Goa digital arrest leads ED to pan-India cyber fraud network
The Enforcement Directorate arrested two individuals in Goa under PMLA as part of a money-laundering probe. The ED says the investigation uncovers a nationwide network linked to over 160 FIRs and 330 victims, with losses over Rs 417 crore.
Key takeaways
- ED arrested two suspects under PMLA in connection with a Goa digital-arrest case and broader cyber fraud probe.
- The scheme is said to involve over 160 FIRs across 20 states/UTs, affecting 330 victims with losses over Rs 417.49 crore.
- The money trail moved through RBI-licensed money changers and linked entities in commodity, trading, travel and forex sectors.
- Seizures included Rs 3.25 crore in cash and several digital devices; searches covered Mumbai and Goa.

What Happened
The Enforcement Directorate (ED) arrested Fahim Moin Hussain Sayed and Naim Mueen Sayyed under the Prevention of Money Laundering Act (PMLA), 2002. The suspects were produced before a Goa court on a Monday following the arrests made as part of a money-laundering probe that originated from a digital arrest case in Goa. The probe has identified a pan-India network of cyber fraudsters whose activities are the subject of more than 163 FIRs across 20 states and union territories, with reported losses exceeding Rs 417.49 crore. The case stems from an FIR filed with Goa’s cyber-crime police last year after a local woman was allegedly coerced into transferring Rs 2.6 crore in what authorities described as a “digital arrest” scheme. The incident is said to have occurred between May 21, 2025, and June 2, 2025, with the money routed into accounts described to the victim as “secret supervision accounts.”
The ED’s description of the money trail indicates that funds entered an organised framework designed to convert cyber-fraud proceeds from banking credits first into cash and then into foreign currency. RBI-licensed entities were used as money changers for this purpose. Investigators noted that many companies involved appeared to be owned by ostensibly ordinary individuals who were shown as directors, while control of the accounts and business affairs lay with others. The network was described as involving a mix of commodity, trading, travel and forex entities.
Why It Matters
The ED said that the Goa victim’s funds moved quickly through an initial layer of dormant and newly opened accounts before being dispersed across more than 400 beneficiary accounts. According to the agency, the total banking transactions within this network surpassed Rs 27,850 crore, while cash deposits totalled around Rs 2,904 crore. In addition, Rs 584.70 crore were purportedly deposited through 61,448 bulk note acceptance machine transactions at multiple locations. The arrests and seizures illustrate how cyber-enabled frauds can generate substantial cross-state financial activity and involve layered structures intended to obscure money trails.
Background
The investigation traces back to an earlier Goa case in which a local woman was allegedly coerced into transferring funds in a digital-arrest scenario. The ED’s inquiry extended to multiple premises across Mumbai and Goa, where searches under PMLA Section 17 were conducted on July 17 and August 21. The search operation yielded Rs 3.25 crore in cash and digital devices, along with records and registers that are currently under examination. The ED described the money flow as involving a wide array of entities that appeared to be connected but managed by others behind the scenes.
Key Facts
- The ED arrested Fahim Moin Hussain Sayed and Naim Mueen Sayyed under PMLA Section 19 and produced them before a Goa court on a Monday.
- The probe relates to an FIR filed in Goa’s cyber-crime police station last year linked to a digital-arrest case.
- Reported losses exceed Rs 417.49 crore across 330 victim complaints and 163 FIRs in 20 states/UTs.
- Funds moved through a network described as involving commodity, trading, travel and forex entities; accounts were controlled by others while DIR/owners appeared as directors.
- Banking transactions within the network totalled more than Rs 27,850 crore; cash deposits approximated Rs 2,904 crore, including Rs 584.70 crore via 61,448 bulk-note transactions.
- Rs 3.25 crore in cash and various digital devices/records were seized during searches conducted under PMLA.
- The original incident occurred between May 21, 2025, and June 2, 2025.
What Happens Next
The ED indicated ongoing examination of seized material and records. The agency’s statement described the investigation as continuing, with further procedural steps likely as the network’s links across states are pursued.
Sources reviewed
Project Chintan independently synthesized and analyzed information cross-checked across the sources listed above.
Related stories

ED arrests two in pan-India cyber fraud crackdown case

Congress questions prorogation delay, questions 2/3 majority for delimitation bill
SIT Kalaburagi hosts two-day internal SIH 2026 for student solutions
