Gujarat crypto probe: Two more arrested in ₹226-crore dark web network
Synopsis
Key Takeaways
Two more accused have been arrested in Gandhinagar as part of a widening cybercrime investigation into an alleged cryptocurrency network valued at over ₹226 crore, which authorities say is linked to suspected terrorist funding channels, international drug trafficking operations, and transactions routed through the dark web. The arrests, confirmed on 5 June 2026, bring the total number of accused in custody to 12.
Key Developments
The case — registered as FIR 33/2026 at the Cyber Centre of Excellence under CID Crime, Gujarat — was initiated following detailed blockchain and technical analysis of cryptocurrency movements. According to officials, 10 accused had already been arrested earlier in the investigation before the latest detentions.
Superintendent of Police Sanjay Keshwala confirmed the arrests, stating that the probe was being conducted under instructions from Director General of Police K. L. N. Rao for a detailed and intensive investigation.
Who Was Arrested
The two newly arrested accused have been identified as Hadirja Sabir Ali Sarani, aged 23, and Mohammad Zamin Abbas Ali Jigar, aged 36, both residents of Bhavnagar. According to SP Keshwala, Sarani allegedly used the KYC credentials of his father to operate a Binance cryptocurrency wallet and carry out layered transactions alongside his associate Jigar.
Approximately 5,000 USDT was reportedly moved through these layered transactions, which investigators have described as 'dirty crypto'. The accused are currently on remand following their arrest.
International Linkages Under Scrutiny
Officials stated that the transactions were routed through multiple stages and linked to entities flagged in international financial monitoring systems. These reportedly include references to the Office of Foreign Assets Control (OFAC), as well as alleged connections to Ansarullah — the Houthi movement — and the cryptocurrency exchange Garantex. Both Garantex and entities linked to Ansarullah have previously faced international sanctions.
This is a significant escalation in the probe's scope, connecting a domestic cybercrime case to globally sanctioned networks. Notably, Garantex was sanctioned by the US Treasury in 2022 for facilitating transactions linked to ransomware and darknet markets.
What Investigators Are Doing Next
The Cyber Centre of Excellence is continuing forensic blockchain analysis to map additional wallets, identify counterparties, and trace cross-border financial flows connected to the case. Officials said further custodial interrogation of the two newly arrested accused is underway, alongside ongoing technical analysis to establish the full extent of the network's international linkages.
With the investigation still active and the accused on remand, further arrests in the case cannot be ruled out as authorities expand their digital forensics sweep.