#What is Chirag Tomar's Current Legal Situation?
Chirag Tomar has been facing significant legal challenges in recent years. Currently serving a five-year sentence in a US federal prison for a conspiracy involving wire fraud, he now confronts further prosecution in India. The country’s Enforcement Directorate has formally charged Tomar and seven others in relation to an alleged Coinbase spoofing scheme involving $20 million.
#How Did the Spoofing Scheme Operate?
The scam orchestrated by Tomar and his associates commenced in June 2021 and continued until his arrest at Atlanta airport on December 20, 2023. They developed counterfeit websites that mirrored the legitimate Coinbase Pro trading platform, deceiving victims into providing their login credentials on these fake sites. The counterfeit domain included variations like coinbasepro.com, effectively luring users.
Obtaining passwords was just the initial phase. The perpetrators also used social engineering tactics to extract two-factor authentication codes from victims, breaching the essential security that protects their accounts. With both their login credentials and authentication codes, they gained unauthorized access and unlawfully drained funds from over 542 victims across various countries. Initial estimates of losses from this operation range as high as $37 million, with the current legal focus set around the $20 million figure in the prosecution complaint.
#What Happens Next with the Funds?
Investigations by US authorities traced the stolen funds back to multiple real estate holdings and individuals in India, allowing for jurisdictional action by the ED. In November 2025, they seized assets valued at approximately 21.71 crore rupees (about $2.6 million) connected to Tomar and his associates. Reports further suggest these illicit proceeds were laundered and converted into luxury goods such as high-end cars and watches.
The prosecution complaint initiated in June 2026 names all eight individuals and entities involved, pushing matters from asset seizure into formal criminal proceedings in India. This dual prosecution means Tomar is now facing severe consequences across two continents.
#What are the Broader Implications for Cryptocurrency Security?
Importantly, the operation did not compromise Coinbase itself, as the attackers targeted users rather than the exchange’s systems. For potential investors and current users, this case serves as a stark reminder that risks in the cryptocurrency sphere often lie with user security practices. It is advisable to bookmark your exchange URLs, utilize hardware-based security keys instead of SMS-based two-factor authentication, and treat unsolicited requests for credentials as suspicious.
The ED's active pursuit of money laundering charges in this case illustrates that regulatory authorities are enhancing their capabilities to handle complex prosecutions in the crypto sector. Tomar's situation exemplifies how engaging in cross-border operations no longer guarantees immunity from accountability; instead, it can lead to facing legal actions in multiple jurisdictions.