ED Arrests Mumbai Advocate at Airport in Nationwide Cyber Fraud Money-Laundering Probe; Alleged ‘Lien-Fixer’ Remanded to Custody till October 29
Seventh Arrest in Goa ‘Digital Arrest’ Fraud Case; ED Alleges Advocate Facilitated Bribery to Unfreeze Fraud-Linked Bank Accounts Across the Country
(By Syed Ali Taher Abedi)
Panaji/Mumbai, October 27, 2026: In a significant development in its investigation into an alleged nationwide cyber fraud and money-laundering network, the Directorate of Enforcement (ED), Panaji Zonal Office, has arrested Mumbai-based advocate Rashesh Bharatkumar Upadhyay alias Rashesh Shah, who is alleged to have acted as a key intermediary in securing the release of bank accounts frozen in connection with cyber fraud complaints.
The advocate was arrested on October 24, 2026, under the provisions of the Prevention of Money Laundering Act, 2002 (PMLA), after ED officials intercepted him at the boarding gate of Chhatrapati Shivaji Maharaj International Airport, Mumbai.
He was allegedly attempting to leave Mumbai on an early-morning connecting flight to Delhi without a return booking.
The interception was carried out with the timely assistance of Mumbai Customs and the Central Industrial Security Force (CISF).
Following his arrest, the Special Court under the PMLA at North Goa remanded him to ED custody until October 29, 2026, enabling the agency to pursue further investigation into the alleged money-laundering operations, suspected bribery transactions and the wider network of intermediaries.
‘Digital Arrest’ Fraud: Forged Supreme Court Order Used to Extort ₹2.6 Crore
The ED investigation originated from an FIR registered by the Goa Police concerning an alleged ‘digital arrest’ fraud in which cybercriminals impersonated officials of the Telecom Regulatory Authority of India (TRAI) and the Central Bureau of Investigation (CBI).
According to the investigation, the fraudsters subjected a Goa-based woman and her husband to continuous video surveillance, creating an atmosphere of intimidation and purported official scrutiny.
They allegedly displayed a forged order purportedly issued by the Supreme Court of India and coerced the woman into transferring approximately ₹2.6 crore into bank accounts falsely represented as “Secret Supervision Accounts”.
The episode illustrates the increasingly sophisticated methods allegedly employed by cybercriminals, who exploit the credibility of law-enforcement institutions and judicial authorities to intimidate victims and extract substantial sums of money.
The ED subsequently traced the suspected proceeds of the fraud through more than 400 mule bank accounts, which allegedly served as conduits for transferring and layering the illicit funds before they entered a broader network of commercial entities.
Over ₹28,000 Crore in Banking Transactions Under Scanner
The ED’s probe has allegedly uncovered a sprawling financial network comprising commodity-trading, travel and foreign-exchange companies controlled by Fahim Moin Hussain Sayed and Naim Mueen Sayyed through dummy directors.
According to the agency, the network undertook banking transactions worth nearly ₹28,000 crore and deposited approximately ₹2,900 crore in cash.
Its bank accounts have reportedly surfaced in more than 300 complaints lodged by victims and over 160 FIRs registered across 20 States and Union Territories.
The complaints involve reported losses exceeding ₹400 crore, pointing to the alleged geographical reach and financial scale of the network under investigation.
The ED is examining the role played by the various companies, account holders, banking intermediaries and other persons allegedly involved in moving, concealing or restoring access to funds linked to cyber fraud.
Advocate Allegedly Operated as a ‘Lien-Fixer’ for Frozen Accounts
Investigators have identified Upadhyay as an alleged key intermediary whose role was to facilitate the unfreezing of bank accounts belonging to the network whenever law-enforcement agencies froze them following cyber fraud complaints.
According to the ED, he allegedly arranged cash bribes for certain suspected officials of the agencies concerned, with the payments routed through angadiyas informal cash couriers or intermediaries used to transfer funds.
He is alleged to have coordinated the amounts involved, designated collection points and arranged onward payments.
The agency’s investigation further indicates that Upadhyay admitted to arranging the unfreezing of approximately 100 bank accounts for various agents associated with the network. In one instance, the payment allegedly exceeded ₹60 lakh.
The ED suspects that these arrangements enabled the network to regain access to accounts containing suspected proceeds of crime, thereby allowing the alleged money-laundering infrastructure to continue operating despite account freezes triggered by complaints from victims.
The alleged role of the advocate is therefore central to the investigation into how the network purportedly overcame one of the principal financial safeguards available to investigators in cyber fraud cases: the freezing of suspicious bank accounts.
Alleged Dealings Continued After ED Searches
The ED has further alleged that Upadhyay continued his dealings even after the agency conducted searches in the case, including in relation to accounts frozen by the ED itself.
Investigators suspect that he deleted chat communications with co-accused persons and switched off all his known mobile numbers before attempting to leave Mumbai.
The circumstances surrounding the alleged deletion of electronic communications, the disabling of mobile numbers and the airport interception are likely to form part of the agency’s continuing examination of the accused’s activities, his communications with other members of the network and the suspected movement of proceeds of crime.
The agency is expected to investigate the financial trail associated with the alleged bribes, identify the persons who facilitated the transactions and examine whether the account-unfreezing arrangements were part of a systematic effort to obstruct or circumvent ongoing cyber fraud investigations.
Professional Status No Shield for Alleged Criminal Conduct
The ED has emphasised that although Upadhyay was enrolled as an advocate, he had allegedly never appeared in court or filed any vakalatnama on behalf of the co-accused persons or their companies.
According to the agency, his professional standing was allegedly used as a cover for brokering bribes and facilitating the release of funds linked to suspected cyber fraud.
The investigation raises an important legal distinction between legitimate professional legal services and alleged participation in unlawful financial transactions.
The confidentiality and professional privilege ordinarily associated with advocate-client communications do not provide blanket protection to communications made in furtherance of an illegal purpose or those that disclose the commission of a crime or fraud, subject to the applicable law and the facts of the case.
The allegations, if established through admissible evidence, could have significant implications for the investigation into the alleged use of professional credentials and intermediary networks to facilitate the movement of illicit funds.
Seventh Arrest as ED Widens Probe into the Network
The arrest of Upadhyay marks the seventh arrest in the case. The ED had earlier arrested six persons, including the alleged controllers of the network, Fahim Moin Hussain Sayed and Naim Mueen Sayyed, as well as agents suspected of supplying banking entries to the network and arranging the release of frozen accounts.
With the latest arrest, the investigation appears to be extending beyond the alleged principal operators and account-handling agents to the intermediaries suspected of enabling the network to continue accessing funds despite enforcement action.
The agency is now pursuing further leads to identify the officials who allegedly received bribes, establish the role of the angadiyas and other intermediaries, and trace the full extent of the suspected proceeds of crime.
Investigation Continues: Accountability and Financial Trail Under Scrutiny
The ED’s investigation remains ongoing, with the agency seeking to establish the complete chain of transactions connecting the original cyber fraud, the movement of money through mule accounts, the corporate entities allegedly used for layering funds, and the suspected bribery arrangements for releasing frozen accounts.
The case brings into focus the challenges faced by law-enforcement agencies in tackling organised cyber fraud, particularly where illicit financial flows allegedly depend on multiple bank accounts, commercial entities and intermediaries operating across jurisdictions.
The central question before investigators is whether the alleged account-unfreezing arrangements formed an organised mechanism to preserve access to fraud-linked funds and frustrate enforcement efforts.
As the investigation progresses, the identification of suspected public servants and intermediaries, the recovery of electronic and financial evidence, and the tracing of the complete proceeds of crime will be critical to establishing the alleged money-laundering chain.
The allegations against the arrested advocate and other accused persons remain subject to investigation and adjudication in accordance with law. Their guilt must ultimately be determined by the competent court on the basis of admissible evidence.
