Directorate of Enforcement, Headquarters Office, New Delhi has issued a Provisional
Attachment Order on 02.08.2025 attaching assets valued at Rs. 42.8 Crore belonging to
Chirag Tomar, his family members, and associated entities. The provisionally attached assets
include 18 immovable properties in Delhi and credits in bank accounts.
ED initiated investigation on the basis of newspaper report that an Indian National named
Chirag Tomar was arrested in USA for stealing more than $20 million through use of fake or
spoofed websites mimicking the cryptocurrency exchange website Coinbase. The
Investigation revealed that Chirag Tomar, currently in custody in USA, was involved in a largescale cyber fraud by spoofing the website of the cryptocurrency exchange “Coinbase” and
stealing cryptocurrency worth approximately USD 20 million.
ED investigation revealed that the trusted websites were spoofed in such a way by search
engine optimization that when the website would be searched, the spoofed website would
appear at the top. The spoofed website appeared exactly similar to the trusted website except
the contact details. When the users would enter the login credentials, the spoofed website
would show it wrong. Therefore, the users would contact the number given in the spoofed
website which would eventually connect them to the designated call centre managed by
Chirag Tomar. Once the fraudsters gained access to the victim’s accounts, the fraudsters
quickly transferred the victim’s cryptocurrency holdings to crypto currency wallets under their
control. The stolen crypto currency would then be sold on various P2P crypto platforms and
converted to INR. Subsequently the money was transferred in the bank accounts of Chirag
Tomar and his family members and used to buy immovable properties.
