A major breakthrough has been achieved by the Cyber Centre of Excellence in exposing an international terror financing and dark web-linked cryptocurrency racket involving transactions worth more than ₹226 crore. Investigators described it as one of the biggest crackdowns so far related to terror financing through cryptocurrency channels.
According to officials, nine accused persons have been arrested for allegedly converting “dirty cryptocurrency” into USDT (Tether), a stable digital currency widely used in global crypto transactions. The investigation began after agencies traced suspicious transactions linked to an illegal online narcotics-selling website operating on the dark web.
During the probe, investigators found that cryptocurrency funds had been transferred to a wallet operated by Mohsin Molani. Further examination of linked wallets and bank accounts reportedly revealed financial transactions connected to nine individuals involved in the network.
Authorities said the terror financing module extensively used Monero cryptocurrency, known for its privacy-focused features that make transactions difficult to trace. Investigators also found that a wallet belonging to Mohammad Zuber Popatiya had earlier been frozen in 2025 by an Israeli agency.
The probe allegedly uncovered links with Hamas-linked financial transactions, as well as dealings connected to Yemen’s banned Houthi group, Iran’s IRGC-QF network, and a sanctioned Russian crypto exchange. Officials claimed the accused routinely converted illicit crypto assets into USDT to move funds internationally.
Investigators further revealed that the accused were involved in large-scale drug trafficking operations in Britain since 2023. Mohsin Molani allegedly accepted narcotics orders through Telegram and transmitted operational details to Dubai-based Mohammad Zuber Popatiya.
Another accused, Salman Ansari, was allegedly involved in drug trafficking and money laundering activities in Britain since 2024. Shockingly, officials claimed Ansari continued to run parts of the narcotics trade even while lodged in a British jail.
The investigation identified Salman Ansari and Mohammad Zuber Popatiya as the key masterminds behind the terror finance and Monero cryptocurrency network. Authorities said the syndicate also relied on angadia and hawala channels for moving funds discreetly across borders.
Officials stated that Mohsin Molani allegedly routed money through angadia operators to Gulam Ansari, father of Salman Ansari, as part of the financial chain under investigation.
The probe is continuing, and agencies are examining international links, digital evidence, cryptocurrency trails, and possible connections with global terror financing operations.
Investigating agencies have detected suspicious cryptocurrency transactions linked to illegal online narcotics-selling websites, with several crypto wallets traced to Gujarat. Officials revealed that funds were transferred into the wallet of Mohsin Molani, and further investigation uncovered multiple suspicious transactions connected to the wallet network.
According to officials, transactions were also found in crypto wallets belonging to nine other users across India. Authorities suspect links between these financial activities and international terror-financing networks connected to countries such as Iran, Yemen, and Israel.
Speaking on the matter, Rajdeepsinh Zala stated that “dirty crypto” transactions associated with terror funding, darknet operations, and online drug trafficking are under investigation. Authorities also found evidence related to dark web and online narcotics trade activities in Ahmedabad.
Main Accused and Suspicious Crypto Transactions
- Mohsin Sadik Maulani (Ahmedabad) – $670,549
- Mohammad Zuber Mohammadhusen Popatia (Ahmedabad) – $4,879,387
- Zeeshan Siraj Motiwala (Mumbai, Maharashtra) – $2,355,393
- Chisti Faizahmad Nassaruddin (Ahmedabad) – $3,833,461
- Shah Yasarkhan Shahnazarkhan Pathan (Ahmedabad) – $1,944,360
- Naved Ayubkhan Pathan (Ahmedabad) – $951,150
- Lovepreet Darshansingh (Karnal, Haryana) – $598,768
- Pathan Ejaz Aslamkhan (Ahmedabad) – $1,143,677
- Mohammad Zaid Abdulkadarbhai Sindhi (Ahmedabad) – $7,520,534
Additionally, a crypto wallet linked to Talaja in Bhavnagar recorded suspicious transactions worth $65,101.
Total Suspicious Transactions
The combined suspicious transactions across all identified wallets amount to approximately $23,962,383 (around ₹226.54 crore).
Investigating agencies are continuing to probe possible links between these crypto transactions, darknet drug trafficking, and international terror-financing networks.
