Key Takeaways
- • Telangana CID arrested multiple individuals in connection with a ₹95-crore cryptocurrency fraud scheme involving fake investment platforms and fraudulent wallet verification schemes.
- • Victims were deceived through spoofed websites (notably Trontag.org, mimicking legitimate Tron blockchain infrastructure) designed to capture cryptocurrency wallet credentials and execute unauthorized transfers.
- • At least three named accused have been apprehended across separate phases of the investigation: Kurrimela Ramesh Goud (47, Jangoan district), Kodavatikanti Sudhakar (42), and Karnati Ramesh Reddy (49), with the latter two arrested May 18.
- • A documented case involved a Hyderabad investor losing over 21 lakh USDT through credential compromise on the fraudulent Trontag.org platform, illustrating the scale of individual losses.
- • The investigation reveals a coordinated operation using mule bank accounts and layered cryptocurrency transfers to obscure fund flows and complicate recovery.
Summary
The Telangana Crime Investigation Department has dismantled a cryptocurrency investment fraud ring with an aggregate scam value of ₹95 crore, resulting in multiple arrests spanning May 2026 and beyond. The scheme operated through meticulously crafted phishing infrastructure, particularly fake websites designed to impersonate legitimate blockchain platforms. The primary mechanism involved convincing victims to "verify" their cryptocurrency wallets on fraudulent domains, with Trontag.org being a documented example that closely mimicked legitimate Tron blockchain services.
Individual losses were substantial, with at least one documented case of a Hyderabad-based investor losing over 21 lakh USDT (approximately $2.6 million USD equivalent) after credentials were compromised through the fake verification website. Once access to wallets was obtained, perpetrators executed unauthorized fund transfers, systematically draining cryptocurrency holdings held by unsuspecting victims across the Hyderabad region and beyond.
The investigation identified key perpetrators operating across state lines. Kurrimela Ramesh Goud, 47, from Jangoan district in Telangana, was apprehended during initial investigative phases. Subsequently, on May 18, a special CID task force arrested Kodavatikanti Sudhakar (42) and Karnati Ramesh Reddy (49) from Ramesh Reddy's residence, indicating coordinated surveillance and precision in execution. The operational structure involved maintenance of mule bank accounts used to launder proceeds and fragment transaction trails, a sophisticated approach designed to complicate fund recovery and law enforcement attribution.
The investigation remains ongoing, with law enforcement agencies continuing to trace the full scope of the criminal network, identify additional perpetrators, and pursue asset recovery efforts. This case exemplifies broader vulnerability vectors within the cryptocurrency ecosystem, where social engineering targeting wallet authentication represents a material threat to both retail and institutional cryptocurrency holdings in India.
Individual losses were substantial, with at least one documented case of a Hyderabad-based investor losing over 21 lakh USDT (approximately $2.6 million USD equivalent) after credentials were compromised through the fake verification website. Once access to wallets was obtained, perpetrators executed unauthorized fund transfers, systematically draining cryptocurrency holdings held by unsuspecting victims across the Hyderabad region and beyond.
The investigation identified key perpetrators operating across state lines. Kurrimela Ramesh Goud, 47, from Jangoan district in Telangana, was apprehended during initial investigative phases. Subsequently, on May 18, a special CID task force arrested Kodavatikanti Sudhakar (42) and Karnati Ramesh Reddy (49) from Ramesh Reddy's residence, indicating coordinated surveillance and precision in execution. The operational structure involved maintenance of mule bank accounts used to launder proceeds and fragment transaction trails, a sophisticated approach designed to complicate fund recovery and law enforcement attribution.
The investigation remains ongoing, with law enforcement agencies continuing to trace the full scope of the criminal network, identify additional perpetrators, and pursue asset recovery efforts. This case exemplifies broader vulnerability vectors within the cryptocurrency ecosystem, where social engineering targeting wallet authentication represents a material threat to both retail and institutional cryptocurrency holdings in India.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.