India’s Tamil Nadu Economic Offences Wing (EOW) has formally taken over the investigation into an alleged multi-level marketing (MLM)-cum-cryptocurrency trading racket that ran across four southern districts for about seven months, after Director General of Police (DGP) and Head of Police Force Dr. Mahesh Kumar Aggarwal transferred all six registered First Information Reports (FIRs) to the specialised wing on Monday, August 31, 2026.
The operation, allegedly run under the banners “FQL Investment Trading,” “FQL Exchange App” and “VG Investment Group Syndicate,” collected money in cash and through Google Pay (G-Pay) and Unified Payments Interface (UPI) transfers, converted part of the proceeds into the dollar-pegged stablecoin Tether (USDT), and credited those balances to in-app wallets that investors could later neither withdraw nor see once the application was switched off, according to the official press note issued from the DGP’s office on Monday.
What the DGP’s Order Actually Says
The transfer order is the single formal document that anchors every subsequent report. According to the press release from the DGP’s office in Chennai, the cases registered in Madurai, Virudhunagar, Dindigul and Sivagangai districts over the last seven months have been moved to the EOW “in order to ensure systematic, in-depth investigation and in the interest of public.”
The prima facie findings
The note lists local agents as having induced members of the public to invest in purported cryptocurrency trading by promising abnormally high daily rewards and telling them their capital could double in 40 to 45 days.
Money was collected in cash and through G-Pay and UPI, with part of it allegedly converted into Tether (USDT) and credited to FQL and VG in-app wallets. Withdrawals subsequently failed, on-screen balances became inaccessible, and additional payments were demanded before the application was shut down.
So far, 17 accused have been arrested and remanded to judicial custody, and 13 bank accounts linked to the accused have been frozen. The Tamil Nadu Police official handle @tnpoliceoffl mirrored the release the same day.
Why the EOW
The DGP’s stated grounds for centralising the probe with the EOW are the role of each accused, the size of the network, the inter-district spread, the large number of victims, the reported financial loss, the involvement of USDT and Binance wallets, and suspected international linkages.
The Economic Offences Wing is a specialised unit of the Tamil Nadu Police that handles large-value financial fraud with an inter-district or state-wide footprint. Its most recent comparable file was the ₹2,438-crore Aarudhra Gold Trading case, in which the wing arrested 21 accused and froze bank accounts worth about ₹96 crore.
How the Alleged FQL–VG App Worked
Field reporting from the Melur taluk of Madurai district and the Natham belt of Dindigul district fills in the operational details the DGP’s note leaves out. Agents in villages including Kattayampatti, Kottanathampatti, A. Vallalapatti, Ayyapatti and Melavalam walked residents through downloading the FQL Exchange application, hosted on the domain fqlin.com, according to district-level reporting collated by Tamil-language outlets such as Minnambalam and Etv Bharat Tamil.
The dashboard illusion
A typical ticket size was ₹50,000 on the FQL scheme and about ₹1 lakh (₹100,000) on VG. Once the deposit was made — often in cash to the agent, not through the app itself — the interface displayed a dollar-denominated balance (for instance, ₹50,000 shown as roughly $500), a daily “bonus” of a few dollars, and referral commissions that gave the operation its multi-level marketing shape. Small early withdrawals and screen-based “payouts” reinforced the illusion.
The pivot to VG
When doubts began to rise, agents allegedly rolled locked FQL balances into a second product called VG Investment. Investigators are now examining whether VG was stood up as a successor vehicle in anticipation of an FQL collapse, or as a parallel brand, the ₹150 crore FQL crypto scam coverage published by The Crypto Times on August 29 recorded.
Some investors were later told that customer data had been “lost” and asked to pay about $200 to recover their balances. The app was first paused as a “network issue” and then shut down entirely.
Regional broadsheets have also reported that agents put groups of prospective investors on calls with foreign nationals who were introduced as the designers of the returns model — one concrete basis for the DGP’s “suspected international linkages” line, alongside the USDT rails and Binance-linked wallets identified in the release.
72 Hours of Escalation
Between Thursday, August 28 and Tuesday, September 1, the reported scale of the case rose sharply, but from many separate sources rather than one official tally.
The first formal police wave came on August 28, when the Madurai cybercrime unit picked up seven intermediaries after about 500 residents of Melur and adjoining villages filed complaints, and Natham residents alleged that around 8,000 people had put in close to ₹150 crore, according to reporting summarised in the earlier Crypto Times report on the FQL scam.
By August 29, Dindigul district police told regional media that they were examining a ₹30 crore trail from about 15,000 residents in that district alone, and arrested three more agents. By August 30, complaint totals across the four-district belt were approaching 25,000.
On the evening of August 31, the DGP signed the transfer order. His release put the arrest count at 17 and the frozen-account count at 13, but attached no rupee figure to the fraud. On September 1, New Indian Express reported the complaint count at approximately 40,000 and cited an unofficial loss estimate of about ₹400 crore.
The same morning, a senior officer told NDTV that the confirmed loss “on complaints filed so far” was “at least ₹25 crore,” and that 21 people had been arrested, including a promoter described as a US-returnee.
The ₹25 crore–₹400 crore gap is itself part of the story. Only the EOW’s reconstruction of cash, UPI and on-chain USDT flows, once complete, will settle it. Until then, every rupee figure above the DGP’s silent quantum is either an estimate or a rolling complaint total, not a charge-sheeted loss.
The Death Reported in Natham
On Monday, August 31, the file turned from a mass-complaint story into a fatality story. A young man from the Natham / Kasampatti belt in Dindigul district died by suicide, and relatives blocked the Natham–Madurai National Highway near Vathipatti for several hours before police reinforcements arrived.
The NDTV report on the death, the Times of India, DT Next and Tamil-language outlets including IPD Tamil and Vikatan have carried slightly divergent details on age, name and role — variously described as a 25- or 26-year-old — including one account that he had persuaded others to invest and was being pressed to return their money.
The Natham police have registered a case. Until either the EOW or Natham police issue a single, consolidated identification, the responsible reading is that at least one death in the Natham cluster is being treated as linked to FQL losses and investor pressure, and that it accelerated the political and administrative response the same day the DGP signed the transfer order.
The USDT and Binance Link
FQL did not need users to understand wallets or private keys. It only needed them to trust a neighbour, see a dollar-denominated ticker on a phone screen, and hand over cash. The crypto layer — the USDT credits, the Binance-linked wallets and an app that could be switched off from outside the district — is what made the freeze-and-flee possible, and what justified moving six otherwise-local FIRs to the EOW.
A familiar template
That template is not new to Indian enforcement. In the past two months alone, the Enforcement Directorate (ED) has seized about ₹3.35 crore in cryptocurrency during raids across 16 locations in Tamil Nadu, two in Kerala and one in Srinagar in a ₹14.95-crore fake investment and work-from-home probe, dismantled a ₹303 crore transnational cyber-fraud syndicate whose Tether, Ethereum and Solana trail ran through Dubai, and reopened the ₹113.10 crore Money Trade Coin (MTC) file eight years after the original exposé.
In August, cryptocurrency exchange Binance publicly confirmed that it had assisted Gujarat CID’s Cyber Centre of Excellence in tracing about ₹226.54 crore ($23.96 million) in alleged illicit crypto flows, with 14 arrests to date.
The broader backdrop
Government data cited on the National Cyber Crime Reporting Portal (NCRP), maintained by the Ministry of Home Affairs at cybercrime.gov.in, shows that more than 24 lakh (2.4 million) cybercrime complaints were filed across India in calendar year 2025, with reported losses of about ₹22,495 crore, only a small fraction of which has so far been returned to victims.
Who Was Hit
This was not a crypto-native user base. According to field reporting from Melur, Alanganallur, Samayanallur, Natham, Kasampatti and Singampunari — the hotspots most frequently named by district police — the affected group is largely rural: homemakers, daily-wage workers, autorickshaw drivers and small contractors.
Nearly 5,000 people, largely women, gathered at a single marriage hall in Melur ahead of the police escalation. Highway blockades hit both the Madurai–Trichy stretch near Melur and, later, the Natham–Madurai National Highway. In Kasampatti village, crowds gheraoed the homes of alleged agents and, according to some reports, damaged property.
Threads still to reconcile on the record
District reporting from Vikatan, Tamil Oneindia and other regional outlets has named local operators including Ranjith, Arun and Sathya (of Kattayampatti near Melur), and separately in Dindigul a cluster including Ramesh, Anitha and Vijay booked by the Dindigul Crime Branch.
NDTV’s Tuesday briefing that “the promoter is a person who returned from the US” and that he and 20 others are in custody has not yet been formally squared with the earlier lookout circulars issued against Ranjith and Arun, who were described in district reporting as having encountered the app while working in Saudi Arabia. The EOW will need to publish a consolidated arrest and wanted list to settle this.
What the EOW Is Now Chasing
Beyond the 13 frozen bank accounts, senior officers have publicly indicated that investigators have moved to freeze cryptocurrency wallets, issued a non-transaction request so that immovable property linked to the accused cannot be sold or mutated, and circulated Lookout Circulars (LOCs) for absconders. Special complaint camps continue at the Madurai Collectorate.
The political overlay
The Communist Party of India (Marxist–Leninist) Liberation’s Madurai district secretary K. Meiyyar has already demanded a Special Investigation Team (SIT) rather than a plain EOW transfer, and the case is being framed politically as the first large economic scam under the three-month-old Tamilaga Vettri Kazhagam (TVK) state government, even though the police timeline places the operation itself in the previous administration.
The questions that will decide recovery
For the EOW’s investigators, the questions that will decide whether any meaningful recovery is possible are specific: who controlled the FQL and VG hot wallets and on which blockchain and exchange venue; how much USDT actually moved on-chain versus how much was only painted on a fake dashboard; whether VG Investment is a successor entity to FQL or a parallel product operated by an overlapping team; where the Saudi Arabia work-return thread meets the US-returnee promoter thread; and whether frozen bank accounts, combined with wallet freezes and property attachments, can recover any meaningful fraction of the ₹25 crore–₹400 crore range now in public circulation.
Until those answers exist, the roughly 40,000 complaint slips being logged across Madurai, Dindigul, Virudhunagar and Sivagangai remain a crowd, not a balance sheet.
What Investors Can Do Now
Madurai and Dindigul district administrations have asked residents who invested through the FQL or VG applications to come forward with transaction records, dashboard screenshots and the names of the intermediaries who onboarded them.
Complaints can be filed at the local police station, through the national cybercrime helpline 1930, or online at the Ministry of Home Affairs portal cybercrime.gov.in. Cybercrime officials across Tamil Nadu have previously advised the public to avoid investment platforms promoted through WhatsApp groups, Telegram channels, or unverified mobile applications that promise fixed or doubling returns.
Also Read: India Tops Willy Woo’s Bitcoin Ownership Table With 68 Million Owners at a 4.6% Rate
