It started with something that looked harmless.
A pop-up appeared on a computer screen, warning the user that something was wrong with the system. The message offered a solution and displayed a toll-free number.
For someone sitting at home in the USA or Canada, it could easily look like a genuine technical-support alert.
But according to the Directorate of Enforcement (ED), the people on the other end of those calls were allegedly not providing genuine technical support.
They were allegedly part of a fraudulent call-centre operation based in Mohali, Punjab.
And what began as an alleged technology-support fraud eventually attracted the attention of India's financial-crime investigators under the Prevention of Money Laundering Act, 2002 (PMLA).
The ED Search Across Three Locations
On 21 August 2026, the ED's Chandigarh Zonal Office conducted search operations at eight premises located across Chandigarh/Mohali, Punjab, and Madhya Pradesh.
According to the ED press release, the premises were linked to Vijay Raj Kapuria, Varinder Raj, M/s Infimum Enterprises LLP and other associated persons and entities.
The investigation was initiated on the basis of an FIR registered by Police Station Sohana, SAS Nagar, Punjab, under various provisions of the IPC and the Information Technology Act, 2000.
The FIR related to the alleged operation of a fraudulent call centre from Plot No. 29, Emaar, Sector 108, Mohali, Punjab.
The Punjab Police had also filed a charge-sheet against the accused persons.
For investigators, however, the question was no longer limited to how the alleged victims were deceived.
The bigger question was:
Where did the money go after it was collected?
How the Alleged Tech-Support Scam Worked
According to the ED's investigation, the operation allegedly targeted customers in the USA and Canada with the help of overseas associates.
The alleged method was relatively simple but designed to create urgency.
Customers were shown deceptive pop-ups or links suggesting that their computers or devices had technical problems.
The messages reportedly referred to products such as printers and iPads and also presented themselves as purported Apple or Microsoft technical support.
The objective, according to the ED, was to convince the customer that immediate assistance was required.
Once the customer contacted the displayed toll-free number, operators allegedly used pre-designed scripts to continue the deception.
The ED alleges that victims were persuaded to provide remote access to their computer systems and to make payments for services that were either unnecessary or fictitious.
This is where a seemingly ordinary customer-support interaction allegedly turned into a financial transaction.
And once money started moving across borders, the matter became considerably more complicated.
From Customer Payments to Cross-Border Fund Flows
According to the ED, funds obtained from victims were received and transferred through multiple channels.
These allegedly included:
- PayPal
- Stripe
- Banking channels
- Bitcoin/cryptocurrency
- Hawala
The funds were subsequently routed through accounts of various overseas entities, predominantly based in the USA, including RHL Operating Solutions and RG Security Solutions LLC.
This multi-channel movement of funds is one of the most important aspects of the case.
When money generated through an alleged fraud moves through several payment systems, bank accounts, overseas entities and alternative channels, tracing its original source and ultimate beneficiary becomes significantly more difficult.
That is precisely why financial trail analysis becomes critical in money-laundering investigations.
The Infimum Enterprises LLP Connection
The ED's investigation also examined the financial activity associated with M/s Infimum Enterprises LLP.
According to the agency, the bank account of the LLP received foreign remittances from several overseas entities that were identified as suspected dummy or shell entities.
A shell entity, by itself, does not automatically establish wrongdoing.
The important issue for investigators is how an entity is being used — who controls it, what genuine business it conducts, what transactions flow through it and whether those transactions correspond with actual commercial activity.
In cases involving alleged cyber fraud and money laundering, investigators can therefore look beyond the name of a company and examine the complete financial ecosystem surrounding it.
The Searches Produced More Than Digital Evidence
The ED searches reportedly resulted in the seizure of approximately ₹20 lakh in unaccounted cash.
Investigators also seized incriminating documents and electronic devices.
In addition, bank balances of approximately ₹50 lakh were frozen during the operation.
These actions show why financial investigations increasingly involve both traditional and digital evidence.
A laptop, mobile phone, server record, payment account, bank statement, cryptocurrency transaction or physical document can potentially help investigators connect different parts of a financial trail.
In an alleged technology-enabled fraud, the evidence is rarely limited to one place.
Why This Case Matters Under PMLA
The Prevention of Money Laundering Act is not simply about identifying the original fraud.
The financial investigation can also focus on the handling, movement and projection of funds allegedly connected with criminal activity.
That makes the distinction between business revenue and proceeds of crime extremely important.
A company may have bank accounts, invoices, foreign customers and payment gateways. On the surface, those elements can resemble a legitimate international service business.
But if investigators allege that the underlying revenue was generated through fraudulent activity, the nature of the funds becomes a much more serious question.
This is why businesses handling significant international payments, cryptocurrency, payment gateways or overseas remittances need strong transaction documentation and transparent ownership structures.
The Compliance Lesson for Businesses
The case offers an important warning beyond the alleged fraud itself.
Companies operating internationally need to be able to answer basic questions about their money:
Who paid us?
Why did they pay us?
What service was provided?
Which entity received the money?
Who ultimately benefited from it?
Can every significant transaction be supported by genuine documentation?
If those answers cannot be established clearly, a transaction that initially appears routine can become difficult to explain during a regulatory investigation.
This is particularly important for businesses involved in IT services, BPOs, call centres, fintech, cryptocurrency, international remittances and cross-border payments.
Shunyatax's View: Financial Transparency Cannot Be an Afterthought
At Shunyatax Global, we believe financial compliance goes beyond maintaining books and filing returns.
For businesses dealing with cross-border transactions, foreign remittances, payment gateways, cryptocurrency, overseas entities or complex ownership structures, maintaining a clear and defensible financial trail is essential.
If your business is facing a PMLA, ED, Income Tax, GST, FEMA or other regulatory issue, Shunyatax can assist with reviewing financial records, transaction trails and compliance documentation and help you understand the professional steps required for your situation.
If your business has received a regulatory notice or your transactions are being questioned, do not wait until the investigation becomes more complicated.
Talk to Shunyatax Global for professional Financial & Regulatory Advisory.
📞 +91 9461514198
Book a Confidential Advisory Call → https://shunyatax.in/appointments