The Directorate of Enforcement (ED) has arrested a Dubai-based Indian national, Nihal V.N., for allegedly running a cross-border crypto-hawala pipeline that funneled Indian narcotics proceeds to drug suppliers in Brazil and Thailand. The Goa Zonal Office of the ED took him into custody under the Prevention of Money Laundering Act (PMLA), 2002, and the Special PMLA Court in Goa remanded him to seven days of agency custody until July 28.
According to the ED report, Nihal V.N. operated as the “primary financial node” for international drug lords with footprints across multiple continents. Investigators say he received cash collected from narcotics sales inside India, converted it into cryptocurrency and foreign exchange, and routed the value abroad to bankroll fresh consignments of high-grade narcotics and synthetic drugs meant to be smuggled back into the country.
Forensic and digital tracing carried out so far has flagged multiple illicit crypto wallets, offshore bank accounts and a set of domestic shell entities allegedly used to layer the proceeds of crime.
The Goa origin of the case
The arrest is the latest strand in a probe that began with an FIR filed by the Anti-Narcotics Cell of the Goa Police under the Narcotic Drugs and Psychotropic Substances (NDPS) Act, 1985, and was later escalated by the ED’s Panaji office as ECIR/PJZO/02/2025 against Madhupan Suresh Sasikala and others.
Police investigators had earlier seized narcotics worth about Rs 1.1 crore in Goa, including 1,825 LSD blots along with cocaine, charas, and DMT, described at the time as the largest LSD recovery in the state in recent years.
Working from that FIR, the ED had on January 16 conducted simultaneous searches at 26 premises across Goa, Maharashtra, Kerala, Tamil Nadu, Karnataka, Odisha, and Delhi, recovering around Rs 3 crore in cash along with incriminating documents and digital devices.
The main accused, Madhupan S.S., was arrested a day later on January 17 under Section 19 of the PMLA and remains in judicial custody. That leg of the investigation was flagged early by The Crypto Times, which reported that the ED had already begun tracing digital-asset transfers connected to the syndicate.
Corporate-style syndicate, B2B distribution
The ED alleges the group ran a business-to-business (B2B) supply model across Goa, Himachal Pradesh, Maharashtra, Karnataka, Tamil Nadu, Odisha and Kerala, distributing MDMA, ecstasy, cocaine, hash, kush, mushrooms, “super cream” and other high-end substances. Officials have said the syndicate relied on ordinary courier and postal services to shift stock, and used encrypted messaging platforms and darknet channels to negotiate deals, insulating higher-ups from street-level exposure.
Nihal V.N., the agency says, sat at the top of the money-movement layer of this network. Cash collected from sales inside India was moved into cryptocurrencies and then out to suppliers in Brazil and Thailand, allowing the syndicate to procure fresh narcotics without touching the formal banking system on either side of the border.
Part of a wider ED pivot to crypto-enabled crime
The Nihal V.N. arrest lines up with the ED’s stated policy shift. At the 70th ED Day event on May 1, ED Director Rahul Navin publicly named cryptocurrency frauds, terror financing, cyber-enabled crimes, and narcotics trafficking as the agency’s new priority areas, marking a move away from its traditional bank-fraud focus.
That pivot has been visible in a string of recent actions. On July 13, the ED announced it had cracked open a transnational cyber-fraud syndicate that had laundered more than Rs 303 crore through 216 mule accounts and shell companies, with the crypto trail ending in wallets controlled from Dubai, a pattern that closely mirrors the routing described in the Goa case.
Days later, the agency reported seizing about Rs 3.35 crore in digital assets and recovering seed phrases during 19 coordinated raids in a cyber-fraud probe drawn from FIRs in Tamil Nadu and Telangana.
The Union government has also placed narcotics squarely inside the crypto-risk conversation. In a statement in Parliament this week, the Home Ministry said drug trafficking networks in Punjab and adjoining states are increasingly using cryptocurrency, VPNs, and encrypted apps such as WhatsApp, Telegram, Snapchat and Zangi to plan operations and settle payments.
The Narcotics Control Bureau (NCB) has since inducted cyber experts, and a dedicated darknet and cryptocurrency task force has been set up under the Multi Agency Centre mechanism.
The regulator has been vocal too. At the Parliamentary Standing Committee on Finance’s July 2 sitting, senior RBI officials backed a containment-leaning approach on virtual digital assets, telling MPs that privately issued cryptocurrencies carry risks of being used for terror funding and narcotics smuggling, a framing enforcement agencies have leaned on to justify the crypto-first approach in ongoing PMLA probes.
What the ED is chasing next
The agency has said further investigation is under way to identify all beneficiaries and facilitators in the Goa-linked network, trace additional assets built from the illicit proceeds, and map the Brazil and Thailand supply nodes with the help of foreign counterparts.
The Nihal V.N. remand until July 28 is expected to focus on custodial questioning around wallet ownership, counterparties on offshore exchanges, and the identities behind the shell entities used to layer funds inside India.
Disclaimer: This article reports on publicly available information released by the Directorate of Enforcement, Government of India. All allegations described herein are those made by investigative authorities and have not been adjudicated by a court of law. Entities and individuals named are presumed innocent unless and until proven guilty.
Also Read: India’s ED Probes $35M (₹337 crore) Crypto Scam Run by Self-Styled ‘Key Opinion Leaders’
