A single WhatsApp message saying, “Hello… this is Divya speaking,” was all it took to draw a respected chartered accountant from Gwalior into one of India’s biggest cryptocurrency investment scams. Over the next seven months, what appeared to be a profitable digital investment opportunity slowly turned into a financial catastrophe, leaving the 70-year-old professional poorer by more than Rs 21 crore and exposing the growing sophistication of cyber fraud networks operating across the country.
The victim, Ashok Vijayvargiya, serves as the Chief Returning Officer of the Madhya Pradesh Chamber of Commerce and Industries. Investigators believe he became the target of a carefully planned investment fraud that combined psychological manipulation, fake cryptocurrency trading platforms, and an extensive network of bank accounts used to rapidly move stolen funds beyond the reach of investigators.
According to the complaint filed with the Gwalior State Cyber Cell, the fraud began in December 2025 when Vijayvargiya received a WhatsApp message from a woman identifying herself as “Divya.” She introduced herself as an investment adviser and claimed to have expertise in cryptocurrency trading, particularly USDT Tether, a digital currency whose value is generally linked to the US dollar.
Initially, the conversation appeared harmless. The woman explained how cryptocurrency investments could generate attractive returns within a short period. She gradually built trust through regular conversations before directing the victim to shift communication onto different WhatsApp numbers, including one carrying a United States country code. Investigators are now examining whether that foreign number actually originated from the United States or whether it was generated through internet-based calling services designed to disguise the fraudsters’ true location.
Soon after, Vijayvargiya received a link to what appeared to be a professional cryptocurrency trading portal. The website displayed charts, investment dashboards, account balances and profit calculations that looked similar to legitimate trading platforms. Believing he was entering a genuine investment opportunity, he created an account with assistance from the individuals guiding him through the process.
Like many sophisticated investment scams, the operation relied on earning the victim’s confidence through small transactions before encouraging larger financial commitments. On December 25, Vijayvargiya transferred four separate payments of Rs 10,000 each. Shortly afterwards, another investment of nearly Rs 1 lakh was routed through a friend’s UPI account. Every transaction reflected healthy profits on the online dashboard, reinforcing the impression that the investment strategy was working exactly as promised.
The turning point came on January 7, when the fraudsters transferred Rs 1.88 lakh directly into Vijayvargiya’s HDFC Bank account. Unlike the fictional profits displayed on the portal, this was genuine money credited to his account. Investigators believe this payment was deliberately made to convince him that withdrawals were possible and that the platform was trustworthy.
Receiving real returns transformed cautious optimism into complete confidence. According to investigators, Vijayvargiya began transferring significantly larger sums over the following months. One of the major transactions included an RTGS transfer of Rs 15 lakh made on December 31. As his investments increased, so did the profits displayed on the online portal.
Over time, the dashboard suggested that his investments had grown into a fortune worth approximately Rs 33.25 crore. The impressive figures convinced him that his financial decisions had delivered extraordinary success. Business associates later informed investigators that more than 35 acquaintances may also have invested money in the same platform after learning about Vijayvargiya’s apparent success.
The illusion collapsed only when he attempted to withdraw his earnings.
Instead of processing the withdrawal, the platform informed him that he first needed to pay Rs 10.84 crore as income tax before the amount could be released. Every attempt to recover his funds resulted in another demand for additional payments. At one stage, the operators reportedly sought another Rs 1 crore under the pretext of a “risk margin” payment.
By then, investigators believe the fraudsters had already achieved their objective. The enormous profits shown on the platform never actually existed. They were merely numbers generated to persuade the victim to continue depositing larger amounts of money.
Police say this pattern reflects a growing category of cryptocurrency investment scams in which victims are shown fake profits while being prevented from withdrawing funds. Once victims attempt to access their money, they are repeatedly asked to pay taxes, processing charges, security deposits or verification fees. These demands continue until victims either run out of money or realise they have been deceived.
What has particularly alarmed investigators is the extraordinary scale of financial movement uncovered during the investigation.
According to Gwalior State Cyber Cell, the stolen money travelled through an intricate four-layer financial network involving more than 20,000 individual transactions spread across multiple states. Authorities traced transactions linked to Karnataka, Tamil Nadu, Uttar Pradesh, Rajasthan, West Bengal and several other parts of the country, indicating the involvement of an organised cybercrime infrastructure rather than isolated fraudsters.
State Cyber Cell DSP Sanjeev Nayan Sharma described the money trail as highly complex. He said investigators have identified 77 first-layer bank accounts that directly received money from the victim. Those accounts now represent the starting point of the investigation as officials work to identify the individuals and organisations controlling them.
So far, investigators have managed to freeze approximately Rs 2 crore. However, police believe the remaining amount was quickly dispersed through multiple banking channels before being converted into cryptocurrency, withdrawn through ATMs, spent using shopping vouchers, or transferred through digital payment systems that make tracing considerably more difficult.
Cybercrime experts believe many of these bank accounts may belong to so-called “money mules”—individuals who knowingly or unknowingly rent out their bank accounts in exchange for commissions. Such accounts are frequently used by organised cybercriminals to hide the true destination of stolen money. Shell companies and digital wallet operators are also suspected to have played a role in laundering the proceeds.
Vijayvargiya has submitted WhatsApp conversations, screenshots of the trading platform, investment records and bank account statements to investigators. These digital records are expected to play a crucial role in tracing communication patterns, identifying technical infrastructure used by the fraudsters and establishing how the fake investment platform operated.
Police have registered a case against unidentified persons under Sections 318(4) and 319(2) of the Bharatiya Nyaya Sanhita along with Section 66D of the Information Technology Act, which deals with cheating through computer resources.
Investigators are now examining the WhatsApp numbers, internet protocol addresses, hosting infrastructure and digital footprint of the investment portal to determine where the operation originated and whether it has links to larger international cybercrime syndicates.
The case serves as another reminder that cryptocurrency fraud has evolved far beyond simple phishing messages or fake websites. Modern investment scams increasingly rely on carefully cultivated relationships, realistic trading interfaces and occasional genuine payments designed to build credibility before victims are persuaded to invest life-changing amounts of money.
Cybersecurity specialists have repeatedly warned that fraudsters now exploit messaging platforms such as WhatsApp and Telegram to establish personal relationships before introducing investment opportunities. Their methods often resemble legitimate financial advisory services, making it increasingly difficult even for financially experienced professionals to recognise deception until substantial losses have already occurred.
The Gwalior case underscores that cybercriminals are no longer targeting only inexperienced internet users. Professionals, business owners and senior citizens with decades of financial expertise are also becoming victims of sophisticated psychological manipulation backed by advanced digital infrastructure and nationwide money-laundering networks.
As investigators continue tracking the missing funds, the case stands as one of the largest reported cryptocurrency investment frauds in India. It also highlights the urgent need for stronger digital financial awareness, stricter monitoring of suspicious banking activity and greater public caution before trusting unsolicited investment offers that begin with nothing more than a simple message on a mobile phone.