Cryptocurrency and Virtual Digital Asset Fund Tracing in Delhi ED Investigations: PMLA Procedure, Wallet Evidence and Legal Defence
Direct Answer: In a Delhi-based Enforcement Directorate investigation, cryptocurrency and other Virtual Digital Assets may be traced by combining public blockchain records with information obtained from crypto exchanges, banks, payment platforms, card issuers, mobile devices, email accounts, IP logs, company records and P2P counterparties. A blockchain transaction may reveal the movement of funds between wallet addresses, but the Enforcement Directorate must ordinarily connect those addresses to an identifiable person, entity, device, exchange account or bank transaction before alleging ownership, control or participation in money laundering.
Crypto tracing is therefore not limited to viewing Bitcoin, Ethereum or USDT transactions on a block explorer. A complete investigation generally attempts to connect the on-chain trail with the off-chain identity and financial trail. The material may include exchange KYC, deposit and withdrawal records, bank statements, debit-card payments, chats, invoices, wallet-recovery information, mobile-phone data, company documents, property purchases and statements recorded under the Prevention of Money Laundering Act, 2002.
This distinction is also central to legal defence. The movement of cryptocurrency through a wallet does not, by itself, conclusively establish who controlled the wallet, whether the funds represented proceeds of crime, or whether a particular recipient knowingly participated in laundering them.
Why Cryptocurrency Fund Tracing Has Become Important in Delhi ED Investigations
Cryptocurrency increasingly appears in investigations involving cyber fraud, phishing, illegal investment schemes, online betting, narcotics, mule bank accounts, shell entities, cross-border payment arrangements and unauthorised financial platforms.
Delhi is particularly relevant because investigations may involve the Enforcement Directorate Headquarters Unit in New Delhi, Delhi-based companies and professionals, payment and banking infrastructure, foreign fintech platforms, overseas crypto exchanges, designated Special Courts under the PMLA and proceedings before the Delhi High Court.
Recent public actions disclosed by the Directorate of Enforcement illustrate the manner in which a conventional bank trail may be converted into a cryptocurrency trail and thereafter converted back into cash, bank balances or immovable assets.
What Is a Virtual Digital Asset?
The expression “Virtual Digital Asset” or “VDA” is broader than the word “cryptocurrency.” It may include cryptocurrencies, digital tokens, specified non-fungible tokens and other electronically transferable or tradable representations of value falling within the applicable statutory definition.
On 7 March 2023, the Ministry of Finance issued Notification S.O. 1072(E), bringing specified VDA-related business activities within the anti-money-laundering reporting framework. The notified activities include:
- Exchange between virtual digital assets and fiat currencies;
- Exchange between one or more forms of virtual digital assets;
- Transfer of virtual digital assets;
- Safekeeping or administration of virtual digital assets or instruments enabling control over them; and
- Participation in, or provision of financial services connected with, an issuer’s offer and sale of a virtual digital asset.
The notification adopted the VDA definition then contained in Section 2(47A) of the Income-tax Act, 1961. The Income-tax Act, 2025 came into force on 1 April 2026 and continues the statutory recognition and tax treatment of Virtual Digital Assets. Tax treatment, however, is distinct from criminal liability under the PMLA.
Important: Payment of income tax on cryptocurrency does not automatically prove that every transaction was lawful. Equally, a tax irregularity or failure to disclose a crypto transaction does not, without the required scheduled-offence foundation and proceeds-of-crime nexus, automatically establish money laundering under the PMLA.
When Does a Cryptocurrency Transaction Become a PMLA Matter?
Cryptocurrency trading, holding or transfer is not, merely because it involves a digital asset, an offence of money laundering. The PMLA inquiry ordinarily requires a connection with “proceeds of crime.”
Under Section 2(1)(u) of the PMLA, proceeds of crime broadly refer to property derived or obtained, directly or indirectly, as a result of criminal activity relating to a scheduled offence, including the value of such property and, in appropriate circumstances, equivalent-value property.
Section 3 addresses involvement in any process or activity connected with proceeds of crime, including concealment, possession, acquisition, use, projecting or claiming the property as untainted.
The following questions therefore become material:
- What is the alleged scheduled or predicate offence?
- What property was allegedly derived from that criminal activity?
- When and how was the cryptocurrency acquired?
- Which wallet received it?
- Who owned or controlled that wallet?
- Was the recipient aware of the alleged criminal source?
- Was the VDA merely received, or was it concealed, layered, converted or projected as lawful?
- What part of the wallet balance can actually be linked to the alleged offence?
- Are lawful and allegedly tainted funds mixed within the same wallet or account?
How ED Traces Cryptocurrency and VDA Funds
1. Identification of the Initial Fiat Entry Point
Many cryptocurrency investigations begin with an ordinary banking transaction. Victims may have transferred money to a bank account, UPI ID, payment gateway, shell entity, mule account or prepaid-card platform.
The investigation may first identify:
- The victim’s originating bank account;
- The first beneficiary or mule account;
- UPI handles and payment-gateway merchant IDs;
- Debit or credit cards used to acquire cryptocurrency;
- Cash deposits followed by crypto purchases;
- Company accounts used for apparently unrelated invoices; and
- Transfers to foreign payment or wallet platforms.
2. Linking Bank Transactions to a Crypto Exchange
Where funds enter a centralised exchange, investigators may seek account-opening records, PAN details, identity documents, mobile numbers, email addresses, device information, deposit records, order histories, conversion records and withdrawal addresses.
The bank entry may show payment to an exchange, but the exchange record may reveal what happened next: whether the user purchased Bitcoin, Ether, USDT or another token and whether the VDA remained on the exchange or was withdrawn to an external wallet.
3. Collection of Exchange KYC and Account Records
A regulated or FIU-registered VDA service provider may hold information that is not visible on the blockchain, including:
- Customer name and identity details;
- Beneficial-owner information;
- Registered mobile number and email address;
- Bank accounts used for deposits and withdrawals;
- Login IP addresses and device identifiers;
- Internal transfers between exchange users;
- Crypto-to-crypto conversion records;
- Withdrawal wallet addresses;
- P2P advertisements and counterparty records;
- Risk alerts and suspicious-transaction reports; and
- Customer-support correspondence.
Internal exchange transfers may not appear as separate on-chain transactions. Consequently, an investigation based only on a public block explorer may be incomplete without the exchange’s internal ledger.
4. Blockchain Transaction Analysis
Once a wallet address or transaction hash is identified, investigators may examine the public blockchain trail. Depending on the network, the record may disclose:
- Transaction hash;
- Sending and receiving addresses;
- Date and time recorded on the blockchain;
- Token and quantity transferred;
- Transaction fee;
- Smart-contract interaction;
- Subsequent movement through other wallets;
- Transfers to known exchange clusters; and
- Cross-chain bridge or decentralised exchange activity.
Blockchain analytics may be used to organise large volumes of transactions, identify address clusters, detect exposure to reported illicit wallets and follow funds through multiple hops.
Analytics output must nevertheless be examined carefully. A risk label, cluster attribution or exposure score generated by analytical software is an investigative lead. The reliability of the data source, clustering method, chain of custody and underlying transactions may still require legal and evidentiary scrutiny.
5. Wallet Attribution
A wallet address is pseudonymous. It ordinarily does not display the legal name of the person controlling it. Attribution therefore becomes one of the most important stages of the investigation.
Investigators may attempt attribution through:
- Exchange KYC linked to the wallet;
- A withdrawal address saved in an exchange account;
- A wallet application found on a seized phone or computer;
- Seed phrases, private keys or recovery information;
- Screenshots and transaction messages;
- Chats sending or receiving a wallet address;
- IP logs and device data;
- A small test transaction followed by a larger transfer;
- Statements of P2P counterparties;
- Bank credits matching the crypto sale value;
- Invoices or agreements mentioning the wallet; and
- Control over the subsequent destination of the funds.
Legal Principle: A wallet address appearing in a transaction does not automatically prove ownership, beneficial control, knowledge of the source of funds or participation in laundering. Attribution must be supported by reliable evidence.
6. Tracing Stablecoins and USDT
Stablecoins such as USDT are frequently examined because they allow value to be transferred without the same price volatility associated with some other cryptocurrencies. Investigators may follow USDT across supported blockchain networks and examine whether the asset was:
- Purchased through an exchange or P2P counterparty;
- Transferred to an unhosted wallet;
- Converted into another token;
- Bridged to another blockchain;
- Sent to an overseas exchange;
- Sold for Indian rupees through P2P trading;
- Converted into foreign currency or cash; or
- Used to acquire another movable or immovable asset.
7. Examination of P2P Transactions
In a P2P crypto transaction, the exchange may connect a buyer and seller while the fiat payment moves directly between their bank accounts. This creates two trails:
- The VDA transfer or exchange-ledger entry; and
- The direct bank transfer between the buyer and seller.
Investigators may compare the P2P order time, token quantity, agreed price, bank credit, counterparty identity, chats and subsequent wallet movement.
A person who genuinely sold cryptocurrency through P2P may receive money from an unknown counterparty whose bank account is later connected with fraud. That receipt requires careful examination, but it should not automatically be equated with knowing involvement in the underlying offence.
8. Identification of Layering and Conversion
ED may allege layering where funds are fragmented, transferred through multiple accounts or wallets, converted between assets, routed through shell entities, moved abroad or used to purchase property.
Commonly investigated patterns include:
- Rapid movement through numerous wallet addresses;
- Conversion between different tokens without a clear investment purpose;
- Use of multiple exchange accounts or mule identities;
- Transfer through unhosted wallets;
- Use of decentralised exchanges or cross-chain bridges;
- Payments through foreign prepaid-card or fintech platforms;
- Crypto-to-cash settlements through informal channels;
- Multiple P2P trades designed to fragment the value;
- Transfers to company or family-member accounts; and
- Purchase of land, flats, vehicles, jewellery or business assets.
Recent Delhi-Based ED Example: Cyber Fraud Funds Converted into VDAs
According to an ED press release dated 5 March 2026, the Headquarters Unit in New Delhi investigated an alleged cyber-enabled fraud involving investment schemes, part-time job fraud, QR-code scams and phishing operations.
ED publicly alleged that approximately ₹641 crore was initially credited into mule accounts and layered through dummy or shell entities. The funds were allegedly transferred using Indian bank-issued cards to a UAE-based fintech platform. From that platform, the money was allegedly withdrawn abroad or converted into VDAs through a cryptocurrency exchange and routed through custodial and non-custodial wallets.
The press release further referred to more than 20 entities operating from common addresses in Bijwasan, Delhi, and stated that the entities showed overlapping KYC documentation, mobile numbers, email addresses and authorised signatories.
This public account demonstrates how investigators may combine:
- Victim transfers;
- Mule bank accounts;
- Shell-company records;
- Card payments;
- Foreign fintech wallets;
- Crypto exchange records;
- Custodial and non-custodial wallet trails; and
- Delhi-based company and KYC connections.
The allegations contained in an ED press release remain subject to proof before the competent court and should not be treated as a final determination of guilt.
Recent New Delhi Example: Coinbase Phishing and P2P Conversion
In another press release dated 15 June 2026, ED stated that its Headquarters Unit filed a prosecution complaint before the Special Court at Dwarka District Courts, New Delhi, in connection with an alleged Coinbase phishing scam.
According to the public release, fake websites resembling the Coinbase platform were allegedly used to obtain login credentials and authentication information. Cryptocurrency was allegedly transferred from victims’ accounts to wallets controlled by the accused and their associates, converted into other VDAs, moved through multiple wallets and ultimately converted into Indian rupees through P2P cryptocurrency transactions.
ED further alleged that the resulting bank funds were layered through multiple accounts and used for purchasing movable and immovable property. The agency stated that movable and immovable properties valued at approximately ₹64.55 crore had been provisionally attached at that stage.
The case illustrates the potential evidentiary importance of:
- Foreign criminal-investigation material;
- Mutual Legal Assistance Treaty channels;
- Victim exchange-account records;
- Two-factor authentication data;
- Wallet transaction histories;
- Crypto-to-crypto conversion records;
- P2P counterparties;
- Indian bank accounts; and
- Properties allegedly purchased from the converted funds.
Custodial and Non-Custodial Wallets: Why the Difference Matters
Custodial Wallet
In a custodial arrangement, an exchange or service provider controls or administers the private keys on behalf of the customer. The provider may maintain KYC information, internal account records, login details and transaction histories.
Where legally directed, the provider may be capable of restricting an account or preventing withdrawals, subject to the applicable law and technical circumstances.
Non-Custodial or Unhosted Wallet
In a non-custodial wallet, the user ordinarily controls the private key. There may be no central intermediary capable of freezing the wallet merely by changing an account setting.
Investigators may instead seek to:
- Seize the device containing the wallet;
- Recover the seed phrase or private key;
- Trace the wallet’s subsequent transfers;
- Identify an eventual transfer to a custodial exchange;
- Connect the wallet with a known person or device; or
- Proceed against other property alleged to represent equivalent value.
The inability of an intermediary to centrally freeze an unhosted wallet does not make its transaction history invisible. Conversely, visibility of the transaction history does not automatically reveal the identity of the person controlling the private key.
FIU-IND’s 2026 VDA Compliance Framework
FIU-IND issued updated AML and CFT Guidelines for reporting entities providing VDA-related services on 8 January 2026. The framework places increased emphasis on practical implementation of customer due diligence, transaction monitoring, blockchain analytics, the Travel Rule, sanctions screening and risk controls for transfers involving unhosted wallets.
For legitimate VDA service providers, the compliance framework may require attention to:
- Registration as a reporting entity where applicable;
- Identification of customers and beneficial owners;
- Risk classification and enhanced due diligence;
- Monitoring of deposits, trades and withdrawals;
- Collection of originator and beneficiary information;
- Analysis of transfers involving unhosted wallets;
- Screening for high-risk or sanctioned addresses;
- Suspicious-transaction reporting;
- Record preservation; and
- Governance responsibilities of the principal officer and designated director.
Compliance with FIU obligations does not prevent ED from investigating a transaction where proceeds of crime are suspected. However, complete KYC, source-of-funds records, transaction-monitoring alerts and internal decision records may become important evidence demonstrating whether a service provider acted lawfully and in good faith.
ED’s Principal Powers in a Cryptocurrency PMLA Investigation
Section 50: Summons and Production of Records
ED may summon a person to give evidence or produce records. In a crypto matter, the required records may include wallet addresses, exchange statements, transaction hashes, bank statements, invoices, device information, company records and explanations of specific transfers.
A person should not ignore a summons or provide an improvised explanation without first reconciling the digital and banking records. Inaccurate explanations may create serious complications when compared with exchange data or blockchain records.
Section 17: Search, Seizure and Freezing
Where the statutory conditions are asserted to exist, ED may conduct a search and seize records or property. Where seizure is not practicable, a freezing order may be issued under the statutory framework.
In a VDA investigation, the search may concern:
- Mobile phones and computers;
- Hardware wallets;
- Seed phrases and private keys;
- Exchange login credentials;
- SIM cards and email accounts;
- Bank cards and cheque books;
- Company documents;
- Accounting records; and
- Digital communications with counterparties.
Section 17(4) requires an application to the Adjudicating Authority within the prescribed thirty-day period for retention of seized property or continuation of freezing. The exact dates of search, seizure, freezing, forwarding and filing should therefore be independently verified.
Section 5: Provisional Attachment
ED may provisionally attach property where the statutory requirements are claimed to be satisfied. Depending upon the alleged trail, the property may include crypto assets, bank balances, shares, vehicles, real estate or other property said to represent the proceeds of crime or their value.
An attachment should be examined for:
- The identified scheduled offence;
- The amount of alleged proceeds of crime;
- The specific trail relied upon;
- The connection between the attached property and the alleged criminal activity;
- The date and source of acquisition;
- Third-party or family ownership;
- Whether equivalent-value attachment is legally invoked; and
- Whether lawful funds have been indiscriminately included.
Section 8: Adjudication
After the statutory complaint is filed, the Adjudicating Authority may issue notice and consider whether the property is involved in money laundering. The affected person should ordinarily place a structured response supported by banking, exchange, tax, contractual and ownership documents.
Section 19: Arrest
Arrest under Section 19 is a distinct statutory step. It requires compliance with the statutory safeguards governing the authorised officer’s recorded reasons, possession of material and communication of the grounds of arrest.
Section 45: Bail
Bail in a PMLA prosecution is governed by Section 45, including its twin conditions, subject to constitutional principles and the facts of the case. The Delhi High Court’s 2 February 2026 decision in Bhaskar Yadav v. Directorate of Enforcement, arising from the cyber-fraud investigation discussed above, examined anticipatory bail in the context of an ongoing PMLA investigation and the asserted need for custodial interrogation.
Bail analysis remains fact-specific. The court may examine the accused’s role, the available material, the alleged proceeds of crime, conduct during investigation, risk of evidence tampering, length of custody, expected duration of trial and applicable statutory exceptions.
Essential Legal Tests in a Crypto Money-Laundering Case
A proper defence analysis should separately examine the following legal questions:
- Scheduled-offence foundation: Is there a valid scheduled offence capable of generating proceeds of crime?
- Identification of property: What precise cryptocurrency, bank balance or asset is alleged to have been derived from the scheduled offence?
- Tracing: Is there a demonstrable transactional link, or only a general association?
- Wallet attribution: What evidence establishes ownership or control of the wallet?
- Knowledge and role: What material shows knowing involvement in a process or activity connected with proceeds of crime?
- Amount: Has the alleged proceeds-of-crime figure been calculated accurately?
- Lawful funds: Have legitimate balances and transactions been segregated?
- Equivalent value: If substitute property is attached, have the statutory conditions and valuation been correctly applied?
- Procedure: Were reasons, authorisation, timelines, service and adjudicatory requirements complied with?
- Evidence: Are blockchain analytics and electronic records supported by underlying data and proper evidentiary foundations?
Why Wallet Ownership Cannot Be Presumed from One Transaction
Several innocent or commercially explainable situations may create an apparent wallet connection:
- A person may have sent cryptocurrency to an exchange-generated deposit address;
- A merchant may have received payment on behalf of a company;
- An employee may have operated an account under company instructions;
- A P2P seller may have received a bank payment from an unknown buyer;
- A wallet may be jointly controlled or administered;
- A device may contain an old or watch-only wallet;
- An address may have been copied or forwarded without control over it; and
- An exchange may have pooled customer assets in an omnibus wallet.
The defence should therefore obtain the complete transactional context rather than answering only from memory.
Documents to Preserve Immediately After an ED Summons or Search
- Every summons, search authorisation, panchnama, seizure memo and freezing communication;
- Complete exchange statements in downloadable form;
- Wallet addresses and transaction hashes;
- Bank statements covering the full transaction period;
- P2P order records and counterparty chats;
- Invoices, loan documents and sale or service agreements;
- Income-tax returns and VDA disclosures applicable to the relevant period;
- Source-of-funds records for each major crypto purchase;
- Company board resolutions and accounting entries;
- Beneficial-owner and KYC documentation;
- Proof of custody or control arrangements;
- Device invoices and wallet-creation records where available;
- Communications with exchanges and payment providers;
- Evidence of fraud complaints previously made by the person;
- Property purchase and payment records; and
- A chronological transaction table reconciling bank and blockchain entries.
Do Not: Delete wallet applications, reset devices, alter chats, move funds after becoming aware of the investigation, create retrospective invoices or submit edited screenshots. Preservation of the original material is essential.
How to Prepare a Wallet and Bank Reconciliation
A useful reconciliation should identify each disputed transfer through a common reference table containing:
- Date and time;
- Blockchain network;
- Token and quantity;
- Transaction hash;
- Sending wallet;
- Receiving wallet;
- Exchange order or P2P order number;
- Corresponding bank debit or credit;
- Identity of known counterparty;
- Commercial purpose;
- Supporting document; and
- Subsequent use or destination of the funds.
The purpose is not merely to show that a transaction occurred. It is to explain who controlled each stage, why the transfer occurred, what consideration was exchanged and whether the transaction has any connection with the alleged scheduled offence.
Remedies Against Freezing, Seizure or Attachment
The available remedy depends upon the order, procedural stage and forum. It may include:
- A detailed representation before the investigating officer;
- Submission of lawful source-of-funds and ownership material;
- Request for release of unrelated devices, records or accounts;
- Reply before the Adjudicating Authority under Section 8;
- Request for segregation of legitimate funds;
- Application for limited operation where business continuity, salary, tax or essential payments are affected;
- Appeal to the Appellate Tribunal under Section 26;
- Appeal to the competent High Court under Section 42; and
- Appropriate constitutional or criminal proceedings where maintainable on the specific facts.
An appeal under Section 26 is ordinarily required to be filed within forty-five days from receipt of the challenged order, subject to the statutory power of condonation. A Section 42 appeal is ordinarily required within sixty days from communication of the Appellate Tribunal’s decision, with the statute permitting a further period not exceeding sixty days where sufficient cause is established.
Limitation should be calculated from the actual date of receipt or communication of the relevant order. A party should not wait for negotiations with the investigating agency to conclude before protecting the statutory appellate deadline.
Applicable Courts and Forums in Delhi
Depending upon the stage, a Delhi-related crypto PMLA matter may involve:
- The concerned ED Headquarters Unit or Delhi Zonal Office;
- The Adjudicating Authority under the PMLA;
- The Appellate Tribunal dealing with PMLA appeals;
- The designated Special Court under the PMLA;
- The Delhi High Court where statutory or territorial jurisdiction exists; and
- The Supreme Court of India.
The mere fact that an investigation is conducted by an ED unit located in New Delhi does not automatically determine every subsequent forum. The scheduled offence, location of property, residence or business of the affected person, place of filing, designated Special Court and statutory jurisdiction provisions must all be examined.
In the June 2026 Coinbase phishing matter, ED publicly stated that its prosecution complaint was filed before the Special Court at Dwarka District Courts, New Delhi. That does not mean every Delhi PMLA prosecution will necessarily be filed before the same court.
Common Mistakes in Cryptocurrency ED Investigations
- Assuming that blockchain transactions are anonymous and cannot be traced;
- Assuming that every wallet connected with a transaction belongs to the person whose bank account was used;
- Ignoring a summons because the crypto exchange is located outside India;
- Producing only screenshots instead of complete exchange statements;
- Giving an oral explanation that contradicts the blockchain record;
- Failing to distinguish custodial, non-custodial and exchange omnibus wallets;
- Treating every P2P receipt as ordinary business income without verifying the counterparty;
- Moving crypto assets after learning of the investigation;
- Deleting wallet or messaging applications;
- Failing to preserve the seed phrase or device safely;
- Mixing personal and company crypto transactions;
- Ignoring the Section 8 notice or appellate limitation period;
- Failing to prove the original lawful source of investment funds; and
- Assuming that tax disclosure alone answers the PMLA allegation.
Practical Defence Checklist
- Obtain every ED document and record the date of service;
- Identify the scheduled offence and accused persons named in it;
- Prepare a complete wallet inventory;
- Download exchange and P2P records before access is restricted;
- Preserve devices without altering their data;
- Reconcile each blockchain transfer with its bank entry;
- Separate lawful funds from the amount alleged as proceeds of crime;
- Collect KYC, invoices, contracts and tax records;
- Identify whether each wallet was custodial, non-custodial or exchange-controlled;
- Document the commercial purpose of every disputed transfer;
- Examine whether wallet attribution is supported by reliable material;
- Review statutory timelines for freezing, retention, adjudication and appeal;
- Prepare a consistent written chronology before recording a statement; and
- Take case-specific legal advice before filing any reply or undertaking.
Frequently Asked Questions
Can ED trace Bitcoin or USDT transferred through several wallets?
Public blockchain transfers can ordinarily be followed from one address to another. Multiple transfers may make the analysis more complex, but they do not necessarily erase the transaction history. The more difficult issue is establishing who controlled each wallet and whether the funds were connected with proceeds of crime.
Can ED freeze a cryptocurrency exchange account?
A custodial exchange may be capable of restricting an account or withdrawal when it receives a legally operative direction. The validity, scope and continuation of the restriction depend upon the applicable statutory process and facts.
Can ED freeze a non-custodial wallet?
A non-custodial wallet generally has no central operator capable of changing an account status. Investigators may instead seize the controlling device or keys, trace subsequent transfers, seek action when funds reach a custodial platform or proceed against other property under the PMLA.
Is receiving money from a P2P crypto buyer an offence?
Not automatically. The transaction must be examined for its genuine commercial purpose, the seller’s ownership of the crypto, the exchange order, the bank trail, the identity of the counterparty and the seller’s knowledge. An unexplained or structured pattern may create suspicion, but suspicion is not itself a final finding of money laundering.
Does a bank account credit prove that crypto was sold?
No. The exchange or P2P order, wallet transfer, token quantity, timing, price and counterparty communication should correspond with the bank credit.
Can ED rely on blockchain analytics software?
Analytics software may assist in identifying transaction paths, clusters and risk exposure. Its output should be considered with the underlying blockchain data, methodology and corroborative evidence. A software-generated label should not replace proof of ownership, control and criminal nexus.
Can legitimate crypto assets be attached because tainted funds entered the same wallet?
The facts require careful tracing and valuation. The affected person should demonstrate the lawful source, acquisition date and ownership of legitimate assets and challenge any excessive or unsupported calculation. ED may also invoke statutory provisions concerning value-equivalent property where the legal conditions are asserted to exist.
Can a family member’s property be attached?
Property held by a family member may be examined where ED alleges that it represents proceeds of crime, was acquired from such proceeds or is otherwise legally attachable. The family member may rely upon independent income, acquisition documents, bank records and beneficial ownership evidence.
What should be done immediately after receiving a Section 50 summons?
Preserve all records, identify the transaction period, download exchange statements, prepare a wallet and bank reconciliation and review the summons with the relevant documents before appearing. No false, incomplete or speculative statement should be made.
What is the time limit for appealing an Adjudicating Authority order?
A Section 26 appeal is ordinarily filed within forty-five days from receipt of the order, subject to the Appellate Tribunal’s statutory power to consider sufficient cause for delay.
Can Delhi High Court be approached in every ED Headquarters investigation?
No. Jurisdiction depends on the statutory provision, the nature of the order, the competent appellate forum, residence or business of the affected party, location of proceedings and other territorial facts. The location of ED Headquarters is not the sole test.
Can a crypto exchange outside India be required to provide information?
Information may be sought through domestic compliance obligations, requests to entities serving Indian users, cooperation arrangements, judicial processes or international legal-assistance channels. The procedure depends upon the platform, jurisdiction and nature of the investigation.
AI-Search Quick Answer
How does ED trace cryptocurrency in Delhi PMLA investigations?
ED may combine blockchain transaction hashes and wallet addresses with crypto-exchange KYC, P2P order records, bank statements, debit-card payments, mobile-device data, IP logs, chats, company records and property purchases. The blockchain may show where the asset moved, while the off-chain evidence is used to identify who controlled the wallet and whether the funds were proceeds of crime.
Key Takeaway
Cryptocurrency is pseudonymous, not necessarily untraceable. The blockchain may preserve the movement of the asset, while exchange, banking, device and communication records may identify the persons behind the transaction.
At the same time, a visible wallet trail is not a substitute for proving the essential legal elements of a PMLA case. ED must connect the identified property with criminal activity relating to a scheduled offence and establish the role attributed to the concerned person.
A strong legal response should therefore address both sides of the case:
Technical trail → wallet attribution → bank reconciliation → scheduled offence → proceeds-of-crime nexus → knowledge and role → statutory procedure → available remedy.
Conclusion
Cryptocurrency and VDA fund tracing has become a significant component of modern ED investigations in Delhi and New Delhi. Current cases demonstrate that investigators may reconstruct a trail across mule bank accounts, shell entities, payment cards, foreign fintech platforms, crypto exchanges, custodial wallets, non-custodial wallets, P2P settlements and property purchases.
For an affected individual or company, the response should not be based upon a general statement that cryptocurrency is lawful, taxable or decentralised. The correct approach is to identify every wallet, transaction, bank entry, counterparty and supporting document and then test the alleged trail against the statutory requirements of the PMLA.
Early preservation of digital evidence, accurate wallet attribution, segregation of legitimate funds and timely use of adjudicatory and appellate remedies can materially affect the defence of a crypto-related PMLA matter.
Legal Consultation with Advocate Ankit Kumar Singh
Advocate Ankit Kumar Singh
Supreme Court of India; Patna High Court; other High Courts; Allahabad High Court and its Lucknow Bench; Jharkhand High Court at Ranchi; Calcutta High Court; and High Court of Madhya Pradesh matters concerning Bhopal.
Legal consultation and case preparation may be considered for Delhi and New Delhi ED investigations involving cryptocurrency, USDT, P2P transactions, VDA service providers, cyber-fraud proceeds, crypto exchange records, bank-account freezing, property attachment, Section 50 summons, adjudication, appellate proceedings and PMLA defence.
Contact: 8294431232
Email: ankitsingh.legum@gmail.com
Website: advocateankitkumarsingh.in
Book a legal consultation with Advocate Ankit Kumar Singh
No judicial, investigative or administrative result can be guaranteed. Legal strategy depends upon the documents, transaction trail, allegations and procedural stage of the individual matter.
Related Legal Resources
- PMLA, ED and white-collar-crime legal services
- Important PMLA sections governing ED investigation, attachment, arrest and trial
- Proceeds of crime and scheduled offences under PMLA
- Important Supreme Court judgments on ED and PMLA
- Service areas of Advocate Ankit Kumar Singh
- Complete legal blog and research index
Follow legal updates from Advocate Ankit Kumar Singh: Add advocateankitkumarsingh.in as a Preferred Source on Google
Official Sources
- Prevention of Money Laundering Act, 2002 — India Code
- Ministry of Finance Notification S.O. 1072(E), dated 7 March 2023
- FIU-IND AML and CFT Guidelines for VDA Reporting Entities, dated 8 January 2026
- ED Headquarters Unit, New Delhi cyber-fraud and VDA investigation press release dated 5 March 2026
- ED Coinbase phishing and cryptocurrency tracing press release dated 15 June 2026
- Delhi High Court decision dated 2 February 2026 in Bhaskar Yadav and connected bail proceedings
- Supreme Court judgment in M/s Nav Nirman Builders & Developers Pvt. Ltd. v. Union of India, 2026 INSC 130
- Official announcement regarding commencement of the Income-tax Act, 2025 from 1 April 2026
Legal Information Note: This article provides general legal information. It does not constitute advice on any particular investigation, wallet, exchange account, summons, freezing order, attachment or prosecution.
