MUMBAI — A meticulously orchestrated cryptocurrency fraud, initiated through a single WhatsApp message, has drained over Rs 21 crore from investors in Maharashtra, with Mumbai police managing to freeze just Rs 2 crore before the remaining funds vanished through a labyrinth of digital transactions. The case, now under investigation by the city’s Cyber Crime Unit, exposes the vulnerabilities of India’s rapidly expanding crypto market, where regulatory gaps and social engineering tactics continue to enable large-scale financial crimes.
What Happened
The scam began with an innocuous WhatsApp message sent to multiple victims: “Hello… This is Divya.” Posing as a financial advisor or cryptocurrency expert, the sender lured targets into investing in a fraudulent scheme promising exorbitant returns. Once victims transferred funds—often through bank deposits or direct crypto wallets—the money was swiftly moved across multiple accounts, converted into other digital assets, or withdrawn before authorities could intervene.
Mumbai Police have registered a case under Sections 420 (cheating), 406 (criminal breach of trust), and 66D (impersonation using computer resources) of the Indian Penal Code, along with relevant provisions of the Information Technology Act. While the identities of the accused remain unclear, investigators suspect the involvement of a coordinated network operating through shell companies, peer-to-peer (P2P) crypto exchanges, and overseas transfers to obscure the money trail.
Why It Matters
The case underscores three critical failures in India’s financial and digital security landscape:
1. Regulatory Lag in Crypto Oversight – Despite the Reserve Bank of India’s (RBI) warnings and the government’s push for a crypto regulatory framework, India lacks a centralized mechanism to track cross-border digital asset movements. The absence of real-time monitoring tools allows fraudsters to exploit gaps in enforcement, particularly in P2P transactions where intermediaries are bypassed.
2. Exploitation of Trust in Digital Platforms – WhatsApp, with over 500 million users in India, has become a preferred tool for scammers due to its ubiquity and perceived legitimacy. Unlike traditional phishing emails, WhatsApp messages often evade suspicion because they appear to come from personal contacts or trusted sources. The “Divya” scam leveraged this trust, using personalized greetings to lower victims’ guard.
3. Speed of Financial Laundering – The Rs 19 crore that evaded recovery was moved within hours, suggesting either insider assistance or the use of automated transaction layers. Cryptocurrency’s inherent anonymity and the lack of interoperability between Indian and global financial tracking systems make it nearly impossible to reverse fraudulent transfers once they cross borders.
Background and Context
India’s cryptocurrency market has grown exponentially despite regulatory uncertainty. A 2025 report by Chainalysis estimated that Indian crypto transactions exceeded $260 billion in the past year, with retail investors accounting for nearly 60% of the volume. However, this growth has been accompanied by a surge in fraud:
– Rise of “Pig Butchering” Scams – Named after the practice of fattening a pig before slaughter, these schemes involve scammers building long-term relationships with victims before convincing them to invest in fake crypto platforms. The “Divya” case mirrors this model, where initial trust is established before financial exploitation.
– Enforcement Challenges – India’s Enforcement Directorate (ED) has investigated over 50 crypto-related frauds since 2023, recovering less than 15% of the total defrauded amount. The lack of a dedicated crypto police unit and the slow pace of international cooperation in freezing assets have hindered recoveries.
– Regulatory Flip-Flops – The government’s stance on cryptocurrency has oscillated between outright bans and cautious acceptance. While the 2022 introduction of a 30% tax on crypto gains signaled de facto recognition, the absence of a comprehensive regulatory bill has left investors exposed to fraud.
Competing Claims and Uncertainty
The investigation has revealed several unresolved questions:
– Identity of the Perpetrators – While the WhatsApp number used in the scam has been traced to a virtual private network (VPN), police have not confirmed whether the fraudsters are based in India or operating from abroad. Cybersecurity experts suggest the involvement of transnational syndicates, given the sophistication of the laundering techniques.
– Role of Crypto Exchanges – Some victims reported transferring funds through Indian crypto exchanges, raising concerns about whether these platforms complied with Know Your Customer (KYC) norms. While exchanges like WazirX and CoinDCX claim to follow RBI guidelines, critics argue that loopholes in P2P trading allow bad actors to bypass scrutiny.
– Government’s Response – The Ministry of Home Affairs has yet to issue a public advisory on WhatsApp-based crypto scams, despite similar cases being reported in Delhi, Bengaluru, and Hyderabad. The delay has prompted calls for a centralized cybercrime reporting portal with real-time tracking capabilities.
What to Watch Next
1. Regulatory Action – The case may accelerate the passage of India’s long-pending Cryptocurrency and Regulation of Official Digital Currency Bill, which proposes a licensing regime for crypto exchanges and mandatory transaction reporting. However, given the government’s cautious approach, any new rules are unlikely to be retroactive, leaving past victims with little recourse.
2. WhatsApp’s Role – Meta, WhatsApp’s parent company, has faced criticism for its slow response to fraudulent accounts. While the platform has introduced features like message forwarding limits and suspicious link warnings, experts argue that more proactive measures—such as AI-driven detection of mass messaging campaigns—are needed.
3. Victim Compensation – Legal experts predict that victims may pursue civil suits against banks and crypto exchanges for negligence. However, given the anonymity of crypto transactions, recovery efforts are expected to be protracted and largely unsuccessful.
4. International Cooperation – The ED has sought assistance from Interpol and foreign financial intelligence units to trace the laundered funds. Success will depend on the willingness of jurisdictions like Dubai, Singapore, and the British Virgin Islands—common havens for crypto fraud—to share information.
Conclusion
The “Divya” WhatsApp scam is not an isolated incident but a symptom of deeper systemic issues: the unchecked growth of India’s crypto market, the inadequacy of digital fraud prevention mechanisms, and the government’s reactive rather than proactive approach to financial crimes. While the Rs 2 crore recovery offers a glimmer of hope, the Rs 19 crore still missing serves as a stark reminder of the risks posed by unregulated digital investments.
For investors, the case reinforces the need for skepticism toward unsolicited financial advice, particularly on platforms like WhatsApp. For policymakers, it underscores the urgency of bridging regulatory gaps before the next “Divya” emerges. Until then, the message is clear: in the world of crypto, trust is a liability, and due diligence is the only defense.
Story synopsis gathered from: [NDTV — India News](https://www.ndtv.com/india-news/from-a-hello-this-is-divya-whatsapp-text-to-a-rs-21-crore-crypto-fraud-11768629#publisher=newsstand) — source.
Corrections
If you believe this article contains an error, contact Herald Express with the source URL and supporting evidence.
Story synopsis gathered from: NDTV – India News — source.
