ED Crypto Searches in India: FEMA Rules Explained Simply

On 29 October 2026, India's Enforcement Directorate (ED) confirmed searches that put a sharp new question in front of every Indian crypto user: when does using crypto cross the line from an investment into an unauthorised foreign-exchange transaction? The ED's Bengaluru Zonal Office searched four premises — three in Bengaluru and one in Madhya Pradesh — on 27 October 2026, under Section 37 of the Foreign Exchange Management Act (FEMA), 1999. The entities and brands named in the ED's statement, as reported by IANS and carried by several outlets the same day, included Mudrex, Saber.money, Fluid and Instadapp. The investigation, the ED said, was opened after complaints alleging large-scale FEMA violations by Bengaluru-based RPFAS Technologies Private Limited, which operates the Mudrex and Saber.money platforms.

The scale cited in the reports is large: alleged FEMA contraventions involving more than $40 million, with unauthorised crypto balances on foreign platforms reported at more than Rs 4,600 crore. The ED's own social-media post put the figure at more than Rs 5,000 crore approximately, and mentioned shell entities in tax-haven countries and payouts through foreign platforms. The two figures differ because they describe the case at different levels of approximation, and both come from the agency's preliminary findings — they are not final adjudicated amounts.

This guide explains what the ED alleged, how FEMA works for crypto users in India, and what the searches do and do not mean for an ordinary Indian who simply buys and holds crypto. Everything about the case itself is presented as allegation and preliminary finding, because that is what it is at this stage: a search and an investigation, not a conviction.

> Educational content only. This is not financial advice. This article explains a developing enforcement action and the law around it in general terms; it is not legal advice for any individual's situation.

What the ED Alleged, Step by Step

According to the ED's statement as reported, the alleged mechanism worked roughly like this. Users registered on the platforms and deposited money into the company's bank accounts. Those funds were then used to purchase virtual digital assets (VDAs), particularly stablecoins such as Tether's USDT or USD Coin (USDC). The acquired digital assets were subsequently sold on Indian cryptocurrency exchanges, and the proceeds were remitted to the intended recipients abroad. The ED's case is that this chain moved money across India's borders without using the authorised channels that the Reserve Bank of India (RBI) requires for inward and outward remittances.

Three elements of the allegation are worth understanding separately, because each one maps to a different rule:

1. The remittance itself was allegedly unauthorised. Under FEMA, sending money out of India, or bringing it in, must go through authorised persons and approved channels — in practice, banks and other entities the RBI has authorised for foreign-exchange business. The ED alleges these platforms offered cross-border transfer services without that authorisation, advertising services that let users convert currency into crypto, buy and sell crypto, and exchange between crypto tokens, with the practical effect of moving value internationally.

2. The structure allegedly routed around the authorised route. The ED said several entities bypassed official channels by operating through related companies registered in foreign jurisdictions but controlled and managed from India. It also pointed to evidence of shell companies in countries such as Canada, Lithuania and the United States, and to crypto assets held on foreign trading platforms. From an enforcement perspective, this matters because it suggests the arrangement was designed to sit outside the reporting and control framework that applies to authorised remittances.

3. The amounts involved were large and cross-border by design. The ED cited more than $40 million in alleged contraventions, unauthorised crypto balances on foreign platforms above Rs 4,600 crore, and, in its own post, a total above roughly Rs 5,000 crore. The size is part of why the case drew attention: this is not a dispute about one user's transfer, but an allegation about a system for moving money at scale.

It is equally important to state what has not happened. A search under FEMA is an investigative step. It is not a finding of guilt, and the platforms and individuals named have the opportunity to respond through the legal process. News reports of the searches describe allegations and preliminary findings, and this guide follows that framing throughout.

What FEMA Is, in Plain Language

FEMA is the law that governs foreign-exchange transactions in India. Its basic idea is simple: money moving between India and the rest of the world must move through recognised, authorised routes so that the RBI and the government can see it, tax it where applicable, and prevent misuse. The law does not ban Indians from dealing with the rest of the world financially — India has a large, legal system for trade payments, education fees, family support, investment abroad, and travel spending. What FEMA requires is that those flows go through authorised dealers, principally banks, and within the limits and purposes the RBI sets.

For individuals, the best-known part of this framework is the Liberalised Remittance Scheme (LRS), under which a resident Indian can remit up to $250,000 per financial year abroad for permitted purposes, through an authorised dealer. That limit, that channel, and that paperwork exist precisely so that outward transfers are visible and lawful. A transfer that avoids the authorised channel entirely — whatever technology it uses — is what FEMA is designed to catch.

Why This Case Is Different From Ordinary Crypto Trading

A natural worry for readers is whether this enforcement action means ordinary crypto activity in India is now risky. The distinction the ED's own framing draws is important, and it is worth stating clearly:

Activity	How FEMA sees it
Buying Bitcoin or other crypto on an FIU-registered Indian exchange with INR, for your own investment	A domestic purchase on a registered platform; not the cross-border transfer the ED alleged
Holding crypto in your own wallet	Ownership of a digital asset; the FEMA question arises when value moves across borders, not from holding alone
Sending crypto abroad to move money for someone else, bypassing authorised remittance channels	The kind of unauthorised cross-border transfer the ED alleged in this case
Using a platform that advertises instant international transfers via stablecoins, without RBI authorisation	A red flag: remittance services need authorisation, whatever the technology
Remitting money abroad through your bank under the LRS, within limits	The authorised route for permitted outward transfers

The dividing line is not "crypto versus no crypto". It is "authorised channel versus unauthorised channel". A rupee transfer through a bank and a stablecoin transfer through an unlicensed platform can have the same economic effect — money ends up abroad — but only one of them goes through the system FEMA requires. That is the distinction the ED is enforcing.

There is a related distinction worth keeping in mind. India taxes crypto gains at a flat 30%, with 1% TDS on many transactions, and losses generally cannot be set off against other income. Tax compliance and FEMA compliance are separate obligations: paying tax on a trade does not make an unauthorised cross-border transfer lawful, and using an authorised channel does not remove your tax duties. Tax note: crypto tax rules can change — the 30% rate and 1% TDS described here were current as of September 2026. Verify the latest rules before filing.

What Searches Mean — and What They Do Not Mean

Enforcement news is easy to misread, so here is a careful reading of each piece:

A search is not a conviction. The ED searched premises and recorded statements under FEMA. The investigation continues, and any final determination would come through the adjudication process, where the parties can present their side. Treating the allegations as proven fact would be unfair and inaccurate.

Preliminary figures are not final amounts. The Rs 4,600 crore figure in the reports and the roughly Rs 5,000 crore figure in the ED's own post are both described as preliminary or approximate. Investigations revise figures as evidence is examined, and the final number, if the case proceeds, may differ.

The case targets a business model, not a technology. Nothing in the ED's statement says that stablecoins, DeFi platforms, or crypto trading are illegal in India. The allegation is about a specific set of platforms allegedly providing unauthorised remittance services through crypto. Fluid and Instadapp, for example, are DeFi platforms whose ordinary functions — lending, borrowing and swapping tokens through smart contracts — are a separate matter from the remittance allegation.

What Ordinary Indian Users Should Actually Do

The practical takeaways from this case are straightforward, and none of them require panic:

1. Use FIU-registered exchanges for Indian trading. Before depositing rupees anywhere, check that the exchange is registered with FIU-IND. Registration is the minimum bar for serving Indian users, not a guarantee of safety, but an unregistered platform serving Indians is already operating outside the expected framework.

2. Never use crypto to move money abroad outside authorised channels. If someone offers to send money to family abroad, pay a foreign invoice, or receive foreign funds "instantly via USDT" without involving a bank or authorised dealer, that is the pattern the ED alleged. Legitimate remittances go through banks under the LRS or trade-payment routes, with paperwork. The paperwork is the point.

3. Be suspicious of "instant international transfer" marketing. Platforms that advertise cross-border money movement as a feature, rather than as a regulated service with named authorisations, deserve scepticism. Ask which RBI authorisation covers the remittance, and walk away if the answer is vague.

4. Keep complete records. For every deposit, trade, withdrawal and transfer, keep the INR value, date, platform, and transaction identifiers. Good records help with tax filing, and they are essential if you ever need to show that your own activity was ordinary domestic trading rather than part of any cross-border arrangement.

5. Keep tax and FEMA separate in your head. File your crypto taxes correctly, and separately make sure any money you send abroad goes through authorised channels. Doing one does not cover the other.

6. If you may have used such a service, get professional advice. This guide cannot assess any individual's position. A chartered accountant or lawyer experienced in FEMA can look at your specific transactions and advise. Do not rely on social-media summaries of an ongoing case for decisions about your own money.

Red Flags to Watch For

Red flag	Why it matters
A platform promises instant money transfers abroad via crypto	Remittances require RBI authorisation; speed is not a substitute for it
No named authorised dealer or bank partner for cross-border flows	Legitimate remittance routes name their authorised channel
You deposit INR into a company's bank account, not your own exchange wallet	The ED's alleged mechanism started exactly this way
The service is marketed for "bypassing" banks or limits	Bypassing authorised channels is the core of a FEMA violation
The platform is run through foreign entities but controlled from India	The ED cited this structure as part of the alleged circumvention
Returns or fees that only make sense if controls are being avoided	If the pitch depends on avoiding the system, the system is the issue

## Frequently Asked Questions

What did the ED allege in the October 2026 crypto searches? According to the ED's statement as reported on 29 October 2026, platforms linked to a Bengaluru company allegedly facilitated unauthorised cross-border money transfers using cryptocurrencies, particularly stablecoins, in violation of FEMA. The ED said searches at four premises in Bengaluru and Madhya Pradesh related to transactions worth more than $40 million, with unauthorised crypto balances on foreign platforms reported above Rs 4,600 crore. These are allegations and preliminary findings, not a court verdict.

Is buying crypto on an Indian exchange against FEMA? No — the ED action is not about ordinary Indians buying crypto on domestic exchanges. FEMA governs foreign-exchange transactions, and the allegation here is specifically about moving money across borders through crypto while bypassing the authorised remittance channels that the RBI requires. Buying crypto for yourself on an FIU-registered Indian exchange, within Indian rules, is a different activity from using crypto to send money abroad outside those channels.

What should an ordinary Indian crypto user check after this news? Use exchanges that are registered with FIU-IND, keep records of every deposit, trade and withdrawal, and never use a platform that promises to move money internationally through crypto outside authorised banking channels. If a service offers instant cross-border transfers via stablecoins without explaining its RBI authorisation, treat that as a red flag and stay away. If you think you may have used such a service, speak to a qualified professional rather than guessing about your position.

The Bottom Line

The ED's October 2026 searches are a significant India crypto story because they draw a clear line that many beginners had never seen: crypto's borderlessness does not remove it from foreign-exchange law. Moving value across India's borders requires authorised channels, and the ED alleges that a set of well-known platforms built a business on bypassing them, at a scale running into thousands of crores.

For the ordinary Indian user, the message is reassuring rather than alarming, provided the distinction is kept clear. Buying crypto on a registered Indian exchange, holding it, and following Indian tax rules is not what this case is about. Using crypto — or any technology — to send money abroad outside the authorised system is. The safest response is not to stop learning about crypto, but to be more careful about channels: registered platforms, authorised remittance routes, complete records, and scepticism toward any service whose selling point is avoiding the system. As the investigation develops, the details may change; the principle — authorised channels for cross-border money — will not.

Keep Learning

• How to Check If an Exchange Is FIU-Registered in India
• NRI Crypto Rules in India: Accounts, Tax and FEMA Guide
• CoinDCX Hack Explained: What Happened, Are Funds Safe?