The 28000 crore cyber fraud case has drawn attention across India. The Enforcement Directorate (ED) has arrested advocate Rashesh Upadhyay, also known as Rashesh Shah, in connection with an alleged nationwide cybercrime network.
The agency arrested him at Mumbai airport on October 24, 2026. He was preparing to board a flight to Delhi. Officials from the ED, Customs and the Central Industrial Security Force assisted in the operation.
According to investigators, the alleged network handled banking transactions worth nearly ₹28,000 crore. The agency also reported cash deposits of about ₹2,900 crore.
However, these figures do not represent confirmed losses suffered by victims. The ED has linked accounts associated with the network to reported losses exceeding ₹400 crore.
The investigation focuses on digital arrest scams, suspicious bank accounts and alleged money laundering. Investigators are also examining whether intermediaries helped release frozen accounts by bribing officials. <Cite refs={[“turn703287search0″,”turn703287search2”]}/>
28000 Crore Cyber Fraud Case: What Happened?
The Enforcement Directorate arrested Rashesh Upadhyay as part of its investigation into an alleged cyber fraud and money-laundering network.
The agency’s Panaji unit led the operation. After the arrest, officials took Upadhyay to Panaji for further proceedings.
A special court under the Prevention of Money Laundering Act (PMLA) sent him to ED custody until October 29, 2026, according to published reports.
The arrest brought the total number of arrests in the case to seven.
During the remand proceedings, the ED described Upadhyay as a key participant in the alleged network. The agency claimed that he helped arrange the release of bank accounts that authorities had frozen after receiving complaints.
However, these allegations have not been established as proven facts by a final court judgment.
How Did the Investigation Begin?
The investigation began with a complaint involving a woman from Goa.
According to the ED, cyber fraudsters allegedly placed the woman under digital arrest and pressured her into transferring ₹2.60 crore. She transferred the money to several bank accounts between May 21 and June 2, 2025.
Goa Police registered an FIR on June 9, 2025. The ED then investigated the movement of the funds and the accounts that received the money.
During the investigation, officials identified a much wider network of bank accounts.
The agency alleges that the money passed through hundreds of accounts before individuals withdrew it in cash and converted it into foreign currency. Investigators are now working to trace the funds and identify everyone involved. <Cite refs={[“turn703287search0″,”turn703287search6”]}/>
How Did the Alleged Fraud Network Work?
The ED alleges that the network used multiple bank accounts to move money linked to cybercrime.
Investigators have described a process involving four main stages.
1. Fraudsters targeted victims
Scammers allegedly impersonated law-enforcement officials. They threatened victims with arrest or legal action and demanded money.
As a result, victims believed they had to transfer funds to avoid serious consequences.
2. Money moved through mule accounts
The ED alleges that the money from the Goa victim passed through approximately 400 mule accounts.
A mule account is a bank account used to receive or transfer money for other people. Criminals may use such accounts to hide the original source of funds.
According to the agency, these accounts were linked to commodity, travel and foreign-exchange businesses.
3. The network withdrew cash
Investigators allege that the money moved through the accounts before individuals withdrew it in cash.
Multiple transfers can make it harder to follow the money trail. Therefore, investigators must examine bank records and identify the people who controlled each account.
4. Funds were converted into foreign currency
The ED alleges that the funds were later converted into foreign currency through money changers licensed by the Reserve Bank of India.
Investigators are examining these transactions to determine where the money went and who benefited from it.
These details reflect the agency’s allegations. The investigation must establish the role of each person involved.
What Role Did the Arrested Advocate Allegedly Play?
The ED claims that Upadhyay helped release bank accounts that authorities had frozen following cybercrime complaints.
According to the agency, he allegedly arranged payments to officials through intermediaries known as Angadiyas.
Angadiyas operate private networks that deal in cash transfers and deliveries. However, their involvement in a transaction does not automatically establish wrongdoing. Investigators must determine whether particular individuals participated in illegal activity.
The ED is also examining whether officials accepted bribes to release the accounts.
In addition, the agency alleged that Upadhyay had enrolled as an advocate but had not appeared in court or filed a Vakalatnama for the accused individuals or their companies.
A Vakalatnama is a document that authorises a lawyer to represent a client in legal proceedings.
These claims form part of the ongoing investigation. The court process will determine the legal consequences of the evidence.
What Does the ₹28,000 Crore Figure Mean?
The reported transaction value is one of the most significant aspects of the case. However, readers should distinguish transaction volume from actual losses.
The ED has cited the following figures:
- Nearly ₹28,000 crore: Banking transactions allegedly handled by the network.
- About ₹2,900 crore: Cash deposits reported by the agency.
- More than ₹400 crore: Reported losses linked to complaints involving associated accounts.
- Over 300 complaints: Victim complaints linked to the accounts.
- More than 160 FIRs: Cases reported across 20 states and Union Territories.
- Seven arrests: Total arrests reported in the case as of October 24, 2026.
These figures describe different aspects of the investigation. They should not be treated as interchangeable.
For example, money may pass through several bank accounts. Each transfer can add to the total transaction volume.
Therefore, a network that handles ₹28,000 crore in transactions has not necessarily stolen ₹28,000 crore from victims. Investigators must establish the actual losses and trace the suspected proceeds of crime. <Cite refs={[“turn703287search0″,”turn703287search2”]}/>
What Is a Digital Arrest Scam?
A digital arrest scam is a type of cybercrime. Fraudsters pretend to be police officers, government officials or investigators.
They often contact victims through phone calls or video calls. Then, they use threats and fake documents to make the victims believe they face criminal charges.
The scammers may tell victims to remain on video calls. They may also ask them to avoid contacting family members or other people.
Next, the criminals demand money for supposed verification, investigation or legal clearance.
A video call cannot place someone under lawful arrest. People should never transfer money simply because a caller claims to represent the police or another government agency.
Warning signs of a digital arrest scam
Look out for these common warning signs:
- A caller threatens immediate arrest over the phone.
- Someone demands money to clear your name in an investigation.
- A caller asks you to share an OTP, PIN or banking password.
- Someone pressures you to keep the conversation secret.
- A caller asks you to install an unfamiliar application or share your screen.
If you notice these signs, end the call. Then, verify the claims through official contact details that you find independently.
How Can You Protect Yourself From Cyber Fraud?
You can take several steps to reduce the risk of financial fraud.
Never transfer money under pressure
Fraudsters rely on fear and urgency. They want victims to act before checking the facts.
Take a moment to stop and verify the caller’s identity. Never send money to avoid an alleged arrest or investigation.
Protect your banking information
Do not share your OTPs, PINs, passwords or card details with callers.
Also, avoid installing applications at the request of an unknown person. Some applications can give scammers access to your screen or sensitive information.
Contact your bank immediately
If you have already transferred money, contact your bank as soon as possible. Ask the bank to report the suspicious transaction and take any available protective action.
Quick action may help, although it cannot guarantee recovery.
Report the incident
In India, you can report suspected cyber fraud through the national cybercrime helpline at 1930.
You can also submit a complaint through the official website: cybercrime.gov.in.
Provide the available transaction details, phone numbers and other evidence. Keep copies of bank messages and payment records for investigators.
Why Is the ED Investigating Money Laundering?
Cybercriminals may try to hide the source of stolen money. They can transfer funds between accounts, withdraw cash or convert the money into other currencies.
Money laundering investigations aim to identify and trace suspected proceeds of crime.
In this case, the ED is examining the alleged use of mule accounts, businesses and cash transactions. The agency is also investigating the suspected role of intermediaries and officials.
Because the alleged transactions span several states, investigators may need to examine records from multiple banks and businesses.
The agency’s next task is to establish how the network operated and who controlled the funds.
What Happens Next in the ₹28,000 Crore Case?
The investigation remains ongoing following the arrest.
The ED is trying to trace the suspected proceeds of crime. It is also seeking to identify intermediaries and officials who allegedly helped release frozen accounts.
Investigators may examine bank statements, business records and communications to establish the roles of different individuals.
Meanwhile, the legal process will determine the next steps for the accused. Arrest and custody allow investigators to pursue their inquiries, but they do not prove guilt.
Further developments will depend on the evidence collected and decisions made by the courts.
Conclusion
The 28000 crore cyber fraud case highlights the scale of an alleged nationwide network linked to digital arrest scams and money laundering.
The ED has arrested advocate Rashesh Upadhyay and alleges that the network used hundreds of bank accounts to move suspected proceeds of crime. Investigators are also examining claims of bribery and the release of frozen accounts.
However, the reported ₹28,000 crore figure represents transaction volume, not confirmed victim losses. The agency has cited reported losses exceeding ₹400 crore linked to complaints involving associated accounts.
For the public, the case offers an important warning. Fraudsters may impersonate officials and use threats to pressure people into transferring money.
Always verify suspicious calls independently. Never pay money to avoid an alleged digital arrest, and report suspected cyber fraud promptly.
Frequently Asked Questions (FAQs)
1. What is the 28000 crore cyber fraud case?
It is an ongoing ED investigation into an alleged nationwide cyber fraud and money-laundering network. The agency says the network handled banking transactions worth nearly ₹28,000 crore.
2. Who was arrested in the case?
The ED arrested advocate Rashesh Upadhyay, also known as Rashesh Shah, at Mumbai airport on October 24, 2026.
3. How did the investigation begin?
The investigation followed a Goa Police FIR registered on June 9, 2025. A woman from Goa had allegedly transferred ₹2.60 crore to multiple accounts after fraudsters placed her under digital arrest.
4. Does ₹28,000 crore represent confirmed losses?
No. The figure represents the approximate transaction volume reported by the ED. The agency has cited more than ₹400 crore in reported losses linked to complaints involving associated accounts.
5. What is a mule bank account?
A mule account is a bank account used to receive or transfer money for another person. Criminals may use such accounts to make it harder to trace the source and destination of funds.
6. Is digital arrest legal in India?
A digital arrest scam is not a lawful arrest procedure. Fraudsters use this term to intimidate victims through calls and video calls and pressure them into sending money.
7. How can I report a digital arrest scam?
Call India’s national cybercrime helpline at 1930 or visit cybercrime.gov.in. If you have transferred money, contact your bank immediately.
8. Has the court found the accused guilty?
The reports describe an ongoing investigation and custody proceedings. An arrest does not establish guilt; the allegations must be tested through the legal process.
