Ahmedabad: In a major crackdown on cyber-enabled financial crimes, the Cyber Centre of Excellence (CCoE) of CID Crime, Gandhinagar, has unearthed an international cryptocurrency syndicate. This network was allegedly operating on the Dark Web for narcotics distribution, money laundering, and financing designated international terrorist organizations. Nine accused have been arrested in connection with the case. Special investigation teams used blockchain analysis and human intelligence to track and dismantle the network.

According to investigators, the probe began after authorities traced suspicious cryptocurrency transactions linked to a dark web narcotics marketplace identified as “ARTEMISLAB.CC” to a crypto wallet belonging to Ahmedabad resident Mohsin Sadiq Molani. Detailed technical analysis later revealed financial links with several other cryptocurrency users across India, exposing a wider network.

Police said the syndicate allegedly used anonymous cryptocurrencies such as Monero, worth around ₹2 crore, to conceal financial trails and evade law enforcement scrutiny. Investigators claim these digital assets were used extensively for dark web activities and illicit international fund transfers.

The investigation also uncovered alleged terror financing links. Officials stated that one of the wallets linked to accused Mohammed Zuber Mohammedhussein Popatiya had previously been frozen in 2025 by Israel’s National Bureau for Counter Terror Financing (NBCTF). The wallet reportedly had transaction links with a Dubai-based entity allegedly associated with the Hamas terror network.

Investigators further claimed that the syndicate received funds from several entities sanctioned internationally, including Yemen’s Houthi group, Iran’s IRGC-QF, Russia-based exchange Garantex, and wallets connected with the Ilan Shor network.

Police alleged that the accused converted proceeds generated from cyber fraud, dark web trade, and smuggling activities into stable cryptocurrencies such as USDT. These funds were routed through multiple wallets in an attempt to conceal their origin before being transferred into international criminal channels.

During the investigation, officials also uncovered evidence of an alleged narcotics trafficking operation in the United Kingdom. According to police, Molani procured drug orders through Telegram and online channels before forwarding them to Dubai-based accused Mohammed Zuber Popatiya, who allegedly managed supplies through a UK network.

Investigators claimed that Salman Gulamali Ansari, currently serving a prison sentence in the UK, continued to operate parts of the network from jail. Authorities said proceeds generated through the operation were moved to India through hawala and Angadia channels.

The CID Crime said the total financial transaction volume traced in the case stood at approximately $23.96 million, or about ₹226.54 crore. Among the accused, Mohammedzaid Abdulkaderbhai Siddi recorded the highest individual transaction volume at over $7.5 million.

A cross-verification with the National Cyber Crime Reporting Portal (NCCRP) found that bank accounts linked to the accused were allegedly connected to 935 cyber fraud complaints across the country, involving digital scams and identity theft.

A case has been registered under Sections 111(2)(B), 153, and 61 of the Bharatiya Nyaya Sanhita (BNS), along with Sections 66(C) and 66(D) of the Information Technology Act. Further investigation is underway.

Police said some of the accused also have previous criminal records, including earlier cases involving fraud, kidnapping, and cheating. DeshGujarat