24 March 2026·PIB

CYBERCRIME PROCEEDS LINKED TO MONEY LAUNDERING NETWORKS

In this note

1. At a Glance

Cybercrime proceeds are increasingly laundered through layered banking, crypto and mule-account networks; the Directorate of Enforcement (ED) investigates such laundering under the Prevention of Money Laundering Act, 2002 (PMLA) [1].
Cyber fraud is now a predicate offence category large enough to generate over ₹35,925 crore in identified Proceeds of Crime (PoC) — a UPSC-relevant intersection of internal security, financial regulation, and federal coordination [1].

PIB release dated 24 March 2026 (Ministry of Home Affairs / Ministry of Finance reply): ED data till 28.02.2026 shows ~257 cybercrime cases under PMLA with PoC of ₹35,925.58 crore [1].
Parallel I4C disclosure (till 31.01.2026): >₹8,690 crore saved across 24.65 lakh complaints via CFCFRMS [2].

2002: PMLA enacted; cyber offences under IT Act, 2000 are scheduled offences triggering PMLA jurisdiction [1].
2018: Indian Cyber Crime Coordination Centre (I4C) approved as MHA scheme [2].
2021: CFCFRMS ("Citizen Financial Cyber Fraud Reporting and Management System") launched; helpline 1930 operationalised [2].
1 July 2024: I4C notified as an Attached Office of MHA [2].
2026: ED cumulative PoC under cyber-PMLA cases crosses ₹35,000 crore mark [1].

Nodal investigative agency (laundering leg): Directorate of Enforcement, Department of Revenue, Ministry of Finance [1].
Nodal coordination body (cyber leg): I4C, MHA [2].
Enabling Act: Prevention of Money Laundering Act, 2002 [1].
Information-sharing provision: Section 66(2), PMLA — ED shares info with relevant agencies on detecting contraventions [1].
Inter-agency mechanism: ED–LEA Nodal Officer framework [1].
Key portal/helpline: National Cybercrime Reporting Portal + Helpline 1930 [2].
Coordination MIS: Samanvaya Platform — analytics & inter-state linkages of cyber crimes/criminals [2].
Headline numbers (Feb 2026): 257 PMLA cybercrime cases; PoC ₹35,925.58 cr; State-wise break-up not maintained by ED [1].
CFCFRMS (Jan 2026): ₹8,690 cr saved across 24.65 lakh complaints [2].

Economic: Scale of PoC (~₹36,000 cr) signals systemic leakage from formal banking via mule accounts, fintech wallets and crypto off-ramps; erodes consumer trust in digital payments [1].
Legal/Constitutional: Cyber offences in IT Act / IPC-BNS schedules become predicate offences under PMLA Schedule, allowing ED attachment & prosecution parallel to police FIRs [1].
Administrative/Federal: Policing is a State subject (List II) but money laundering is Union; coordination runs through ED↔State LEAs via nodal officers and I4C Samanvaya [1][2].
Strategic/Geopolitical: Many cyber frauds originate from trans-border call-centre/scam compounds; laundering links require FATF-aligned international cooperation (MLATs, FIU-IND).
Ethical/Governance: Absence of State-wise PoC data at ED limits accountability and parliamentary oversight [1].

1 Jul 2024: I4C made an Attached Office of MHA [2].
2024-25: I4C foundation-day launches — Samanvaya, Cyber Commandos, Suspect Registry [2].
31 Jan 2026: CFCFRMS cumulative savings cross ₹8,690 cr [2].
24 Mar 2026: PIB confirms 257 ED-PMLA cybercrime cases; PoC ₹35,925.58 cr [1].

ED is the agency that investigates cybercrime proceeds under PMLA, not the substantive cyber offence [1].
PoC identified by ED in cybercrime PMLA cases till 28.02.2026: ₹35,925.58 crore [1].
Number of such ED cases: ~257 [1].
Section 66(2) of PMLA governs ED's information sharing with other agencies [1].
ED does not maintain State-wise data on cybercrime proceeds [1].
I4C is an Attached Office of MHA since 1 July 2024 [2].
CFCFRMS launched in 2021 under I4C [2].
Cybercrime helpline number: 1930 [2].
Samanvaya Platform: MIS + data repository for inter-state cybercrime analytics, under I4C [2].
CFCFRMS has saved ₹8,690 crore+ across 24.65 lakh complaints till 31.01.2026 [2].
PMLA enacted in 2002; administered by ED under Department of Revenue, Ministry of Finance [1].
I4C scheme approved by MHA in 2018 [2].

GS-III: Internal Security — Money laundering and its prevention; Role of external state and non-state actors in creating challenges to internal security; Basics of cyber security.
GS-II: Governance — Important aspects of governance, transparency and accountability (inter-agency coordination).
Plausible stems: 1. "Cybercrime is no longer merely a law-and-order issue but a money-laundering challenge. Discuss with reference to the role of the Directorate of Enforcement and I4C." 2. "Examine the adequacy of the PMLA framework in tackling proceeds generated from digital and cyber-enabled frauds." 3. "Federal coordination remains the weakest link in India's anti-cyber-laundering architecture. Critically evaluate."

PMLA, 2002 — Schedule offences, attachment, Adjudicating Authority; foundational statute [1].
Financial Intelligence Unit-India (FIU-IND) — receives STRs feeding ED cases.
I4C verticals (CFCFRMS, Samanvaya, Cyber Commandos, Suspect Registry) — operational arms [2].
FATF Mutual Evaluation of India (2024) — international yardstick for AML.
Digital Personal Data Protection Act, 2023 — data leak feeding cyber fraud.
Bharatiya Nyaya Sanhita (BNS), 2023 — new cyber-fraud provisions replacing IPC.
RBI Digital Payments Security Guidelines / mule-account crackdown.
Crypto regulation & VDA inclusion under PMLA (2023 notification).

ED ≠ investigator of cyber offence itself — that is State police / I4C-supported units; ED handles only the laundering of proceeds [1].
I4C is under MHA, not MeitY; CERT-In is under MeitY — do not confuse [2].
Helpline 1930 (cyber-financial fraud) ≠ 155260 (older number, since merged).
Section 66(2) PMLA is about info-sharing, not Section 66 of IT Act (hacking) — common conflation [1].
CFCFRMS figure (₹8,690 cr saved/held) is not the same as ED's PoC identified (₹35,925 cr) — different metrics, different agencies [1][2].