Full Breakdown
Enforcement Directorate Attaches Rs 1.06 Crore in Global Media App Crypto Ponzi Scam
5/11/2026, 9:11:58 PM
Core Event: Asset Attachment in Shillong
On 9 May 2026, the Enforcement Directorate’s (ED) Shillong Sub-Zonal Office provisionally attached properties valued at Rs 1.06 crore under the Prevention of Money Laundering Act (PMLA). The attachment follows a complaint lodged at Madanrting Police Station concerning the “Global Media App” fraud that allegedly siphoned over Rs 45.33 crore from investors.
Scheme Mechanics and International Links
The Global Media App was marketed as an online advertising platform that promised daily passive income for watching videos and for purchasing “VIP membership” plans with high-return assurances and referral commissions. Operating from 3 June 2022 to 12 October 2022, the scheme functioned as a Ponzi operation. Funds were routed through rented bank accounts and merchant IDs (“mule accounts”), payment-gateway services, and cryptocurrency wallets on the TRON blockchain. Approximately Rs 2.45 crore was collected directly as USDT (Tether) tokens before being transferred to foreign crypto exchanges. Telegram channels used to attract investors were administered by individuals whose mobile numbers were registered in Cambodia and Malaysia, and the Google accounts managing the app’s backend were registered in Cambodia, indicating overseas control.
Key Actors and Operational Structure
- Enforcement Directorate, Shillong Sub-Zonal Office – leading the investigation and asset attachment.
- Madanrting Police Station – received the initial local complaint.
- Telegram channel administrators – four persons with Cambodian (+855) and Malaysian (+60) numbers.
- Mule account operators – providers of rented bank and merchant accounts.
- Victims – investors who paid for VIP memberships and transferred funds via bank, UPI, and crypto wallets.
Timeline of Fraud and Enforcement
- 3 June 2022 – Global Media App launches.
- 12 October 2022 – Application shut down; operators disappear with funds.
- 9 May 2026 – ED attaches assets worth Rs 1.06 crore.
- May 2026 onward – Ongoing tracing of the remaining Rs 44 crore and identification of end-recipients on foreign exchanges.
Financial Scope of the Scam
- Total proceeds of crime: Rs 45.33 crore.
- USDT collected: Rs 2.45 crore via the TRON blockchain.
- Assets attached: Rs 1.06 crore.
- Unrecovered amount: Approximately Rs 44 crore, still under investigation.
Why It Matters
The case highlights the vulnerability of investors to cross-border cryptocurrency fraud, the use of layered financial structures to obscure money trails, and the challenges faced by Indian authorities in tracking digital assets held abroad. It underscores the need for coordinated international regulatory mechanisms to combat crypto-enabled money laundering.
Official Statements & Responses
The ED reported that the attached funds were identified through analysis of financial transactions and blockchain transfers. Investigators uncovered multiple bank accounts, merchant IDs, payment-gateway accounts and crypto wallets used for layering. Enquiries were conducted with banks, payment gateways, Google, Telegram and cryptocurrency exchanges. KYC details of immediate recipients on the foreign exchange have been obtained, and the onward movement of those funds is being traced.
Conflicting Reports & Gaps
All sources agree on the Rs 45.33 crore figure and the Rs 1.06 crore attachment. A gap remains regarding the ultimate beneficiaries of the unrecovered Rs 44 crore, as their identities and locations have not been disclosed.
Verbatim Quotes
- “The scheme remained operational from June 3, 2022, to October 12, 2022, after which the perpetrators abruptly shut down the application and absconded with the collected funds,” it said.” — Enforcement Directorate, Shillong Sub-Zonal Office
- “The Telegram channel through which the application was promoted was administered by four individuals whose mobile numbers were registered in Cambodia (+855) and Malaysia (+60),” — Enforcement Directorate, Shillong Sub-Zonal Office
- “Investigation identified multiple bank accounts, merchant IDs, payment gateway accounts and crypto wallets used for collection and layering of the proceeds of crime,” the ED said.” — Enforcement Directorate, Shillong Sub-Zonal Office
- “KYC particulars of the immediate end recipients on the said exchange have been obtained, and the onward movement of the funds is being traced as investigation is under progress,” — Enforcement Directorate, Shillong Sub-Zonal Office
- “The ED said the attached funds were identified through analysis of financial transactions and blockchain transfers.” — Enforcement Directorate, Shillong Sub-Zonal Office
What’s Next
The ED will continue tracing the remaining proceeds, pursue further asset attachments where possible, and cooperate with foreign cryptocurrency exchanges to locate the ultimate recipients. Ongoing investigations may lead to additional enforcement actions against individuals or entities linked to the scheme.
