ALL PANEL EXCHANGE: ₹958 CRORE UNDER THE LENS, 200-PLUS “MERCHANTS” IN THE MAZE—WHO REALLY CONTROLLED THE MONEY?

A betting platform can operate behind a website. A payment intermediary can operate behind a merchant label. A bank account can appear perfectly ordinary in a statement. A company can project the image of a technology business. But when investigators begin following the money through hundreds of alleged front entities, mule accounts, cooperative-bank channels, suspicious cash withdrawals and cryptocurrency transfers, the question becomes considerably more uncomfortable: who was actually receiving the money, who was moving it, and who ultimately benefited?

That is the central question confronting investigators in the Directorate of Enforcement’s (ED) ongoing investigation into the alleged online betting and cyber-fraud network linked to All Panel Exchange and MGM91.

In its press release dated 17 October 2026, the ED disclosed that it had conducted searches at 20 premises across Mumbai, Pune, Mehsana, Surat and Hyderabad on 13 October. The investigation, initiated under the Prevention of Money Laundering Act, 2002, concerns allegations that money collected from victims of the two betting platforms was routed through a Pune-based company, Edsom Fintech Private Limited, and its in-house payment-intermediary platform, iPaisa.

The agency alleges that iPaisa onboarded more than 200 shell or front entities, internally described as “merchants”, on behalf of online gaming, betting and cyber-fraud operators and their agents.

That figure alone demands serious scrutiny. More than 200 alleged merchant entities are not a trivial bookkeeping detail. If investigators establish that those entities were created or used to disguise the origin, destination or beneficiaries of illicit funds, the case could reveal a sophisticated financial network operating beneath the appearance of routine commercial payments.

But the full truth will not emerge from the number of raids, the size of the headlines or the arrest of one individual. It will emerge only when investigators identify the people behind the entities, reconstruct the transactions, establish the beneficial ownership of the accounts and prove which individuals knowingly participated in the alleged offences.

Until then, the central questions remain unanswered.

1. The ₹958.66-crore question: What exactly passed through the financial network?

One of the most significant figures reported in connection with the investigation is ₹958.66 crore.

A report published by Free Press Journal on 1 October 2026 stated that the ED was examining transactions worth ₹958.66 crore received in 11 accounts linked to Edsom Fintech. The report attributed ₹341.66 crore of those receipts to payment gateways.

These are reported financial dealings under investigation, not a judicially established loss, not proven criminal proceeds and not a finding that the entire amount was stolen from customers.

Nevertheless, the scale warrants a detailed accounting.

The appropriate question is not merely whether a particular bank account received money. Investigators need to establish how much entered each account, which entity initiated each transfer, what commercial purpose was declared, where the money went next, whether any goods or services were actually supplied, and who ultimately controlled or benefited from the funds.

A transaction volume of ₹958.66 crore can include repeated movements of the same money through multiple accounts. That is why the number cannot simply be described as the total amount of fraud.

But it cannot be dismissed as an insignificant technicality either.

The reported ₹341.66 crore attributed to payment gateways also requires transaction-level reconciliation. Which payments originated with individual customers? Which were refunds, settlements or merchant payouts? Which merchants were genuine businesses? Which transactions were subsequently returned, withdrawn in cash, converted to digital assets or remitted abroad?

These are questions that bank statements alone cannot answer. They require complete payment-gateway settlement records, merchant contracts, know-your-customer documents, account-opening records, transaction references, tax invoices and evidence of the underlying commercial activity.

If a merchant received money for a legitimate sale, there should ordinarily be a corresponding transaction trail explaining the goods or services. If the declared transaction does not match the actual activity, the discrepancy deserves investigation.

The most important task now is to publish a coherent, legally permissible account of what the agency has established—distinguishing gross transaction volumes from suspected proceeds of crime, identified victims’ losses and money actually recovered or frozen.

A large number attracts attention. A reconciled money trail establishes facts.

2. Edsom Fintech and iPaisa: When an ordinary-sounding payment service becomes central to a criminal investigation

Edsom Fintech Private Limited was incorporated on 22 December 2020, according to publicly available corporate-information records. Its corporate identification number is U74999PN2020PTC197096, and it is registered with the Registrar of Companies, Pune.

Company-information databases have listed authorised capital of ₹10 lakh and paid-up capital of ₹1 lakh. Those figures, standing alone, establish neither wrongdoing nor financial misconduct. Payment intermediaries can process transactions many times larger than their capital base.

Yet they become relevant when considered alongside the scale and character of the transactions now reportedly under examination.

The ED identifies Edsom as the Pune-based entity through whose bank accounts funds originating from users of All Panel Exchange and MGM91 were allegedly routed. According to the agency, Edsom developed and operated an in-house payment-intermediary platform called iPaisa.

The company’s public-facing business description presents iPaisa as a payment facility, including bill-payment services. That commercial description is not proof of wrongdoing, but it is also not a substitute for examining the actual activity conducted through the system.

The critical question is what the platform did in practice.

Which merchants were onboarded? Who submitted their KYC documents? Who verified the existence and business activity of those merchants? Who approved their transaction limits? Who controlled settlement accounts? Were the merchants receiving payments consistent with their declared businesses? Did the platform have systems capable of detecting suspicious transaction patterns? Were warning signs escalated, investigated or ignored?

The answers matter because payment intermediaries occupy a crucial position in the digital financial system. They can provide legitimate businesses with the infrastructure needed to collect and disburse money. But the same infrastructure, if deliberately abused, can also create multiple layers between the original payer and the final beneficiary.

The ED’s allegation that more than 200 shell or front entities were onboarded through iPaisa makes these questions particularly serious.

It is essential, however, to distinguish the agency’s allegations from established corporate misconduct. The existence of a merchant account, an association with iPaisa, or a transaction processed by Edsom does not establish that the merchant or the company knowingly participated in a criminal scheme.

The investigation must determine which entities were genuine, which were allegedly fictitious or fronts, who controlled them and what each person knew about the transactions being processed.

If the alleged merchant network was deliberately built to conceal illicit payments, the question is not simply why the network existed. It is who designed it, who maintained it, who controlled its financial relationships and who received the economic benefit.

That is the level of accountability this case demands.

3. More than 200 alleged merchant entities: A network that requires a name-by-name examination

The ED’s description of more than 200 shell or front entities is one of the most consequential features of the investigation.

A shell entity is not automatically illegal. Companies may legitimately operate through special-purpose entities, subsidiaries, trading businesses and separate merchant accounts. The relevant issue is whether the entities had genuine commercial substance or were allegedly being used to conceal the movement of money.

Investigators should therefore examine each merchant individually rather than treating the total number as sufficient proof of a coordinated criminal network.

Each entity’s directors, shareholders, beneficial owners, registered address, bank accounts, tax registrations, declared business, invoices, contracts and actual business operations need to be reconciled.

Did the entity maintain a functioning office or business operation? Did it have employees, suppliers or customers appropriate to its declared activity? Were its invoices matched by actual supplies? Did its transactions exhibit a plausible commercial pattern? Were the same individuals or contact details repeatedly used across multiple ostensibly separate companies?

These questions can reveal whether companies were genuinely independent or merely presented as separate merchants while operating under common control.

The same scrutiny should extend to the persons responsible for onboarding, approving, monitoring and settling transactions. If a merchant was fictitious, investigators must determine who created or supplied its documentation and who benefited from its account activity.

At the same time, an address shared by several companies, a common accountant or a common service provider must not automatically be treated as evidence of criminality. Legitimate businesses can share professional advisers and registered-office services.

What matters is the combination of evidence: common control, implausible business activity, false documents, coordinated transactions and an identifiable connection to the alleged criminal proceeds.

The public deserves to know how investigators intend to establish these links without turning suspicion into guilt by association.

The hard question for the ED is whether the alleged 200-plus merchant network can be translated into a verifiable map of companies, accounts, controllers and transactions.

A number in a press release is a starting point. A legally sustainable case requires evidence against the relevant individuals and entities.

4. The alleged three-route mechanism: Trade invoices, cash withdrawals and cryptocurrency

The ED’s 17 October press release describes three principal methods through which the alleged proceeds of online betting, gaming and cyber fraud were moved or siphoned abroad.

First, funds were allegedly remitted through trade transactions disguised by over-invoicing.

Second, money was allegedly withdrawn in cash through mule accounts opened under the guise of Agricultural Produce Market Committee (APMC) units.

Third, funds were allegedly converted into cryptocurrency and transferred outside India.

These alleged routes are materially different, but they raise a common issue: whether the transaction descriptions reflected genuine commercial activity or concealed the movement of money.

The over-invoicing route

In an over-invoicing arrangement, the declared value of goods or services is allegedly inflated beyond the genuine commercial value. In an illicit remittance scheme, this can provide an apparent trade-related explanation for transferring money.

The existence of an import-export company or an invoice is not, in itself, suspicious. Investigators need to compare declared values with the goods supplied, customs records, shipping documentation, contracts, counterparties, market pricing and actual settlement of the transaction.

Free Press Journal reported on 17 October that investigators had examined two Surat-based diamond import-export companies suspected of importing lower-grade diamonds at inflated values as part of an alleged mechanism to transfer money overseas.

That remains an investigative allegation, not proof that the companies committed a crime.

If the alleged arrangement is substantiated, the questions become specific: what goods were imported, who valued them, what was the genuine value, who paid the invoices and where did the difference ultimately go?

An invoice should not become an all-purpose explanation for a transfer merely because it exists. Its supporting evidence must establish that the commercial transaction was genuine.

The APMC-linked cash route

The ED says funds were also withdrawn through accounts opened under the guise of APMC units.

Free Press Journal separately reported that investigators had identified approximately ₹182 crore in cash withdrawals through accounts allegedly linked to the APMC network.

That figure is not the same as a proven loss, nor does a cash withdrawal itself establish money laundering. Agricultural trading businesses can legitimately conduct substantial transactions.

The critical issue is whether the accounts were attached to genuine businesses, whether their holders controlled the underlying transactions, whether the withdrawals matched declared commercial activity and whether the money could be traced to the original betting deposits.

Investigators should reconstruct the dates, amounts, account holders, withdrawal instruments and recipients associated with the alleged cash trail.

Cash can make the reconstruction more difficult because it can obscure the connection between an electronic receipt and the person who finally takes possession of the money. That is precisely why the origin and destination of the reported ₹182 crore must be tested against documentary and witness evidence.

The cryptocurrency route

The ED also alleges that money was converted into cryptocurrency and transferred overseas.

Free Press Journal’s reporting of 25 July described an alleged ₹800-crore trail routed through the account of a credit cooperative society and a cryptocurrency-exchange wallet, reportedly involving fabricated KYC documents.

The report also described alleged transfers through shell entities and offshore destinations.

That ₹800-crore figure must not be added to the ₹958.66-crore transaction figure without a verified reconciliation. The reported flows may overlap, and the public material reviewed does not establish that they represent separate sums.

Cryptocurrency is a technology, not proof of an offence. Its use can be legitimate. The issue here is whether investigators can demonstrate that particular digital-asset transactions represented alleged proceeds of crime, who initiated them, which wallets received them and who controlled those wallets.

A rigorous reconstruction should identify the exchange accounts, wallet addresses, transaction hashes, timestamps, conversion rates and subsequent transfers. Where evidence supports attribution, investigators should establish who controlled the relevant accounts and whether the digital assets were ultimately converted into other forms of value.

The movement of funds beyond India may create additional investigative challenges, particularly where records or beneficiaries are located abroad. Those challenges make timely preservation of transaction records, exchange-account information and relevant international evidence all the more important.

The objective should not be to produce another impressive-sounding cryptocurrency figure. It should be to show exactly how the alleged money moved and what evidence connects the movement to the underlying offences.

5. The cooperative-bank question: Infrastructure is not guilt, but the transaction trail must be explained

Two cooperative institutions named in reporting on the investigation are Muslim Cooperative Bank in Pune and Nagarbhavi Credit Cooperative Society in Bengaluru.

Free Press Journal reported on 17 October that investigators were examining alleged arrangements involving Edsom Fintech, the two institutions and payment-in/payment-out services. Its account described approximately ₹150 crore allegedly routed through a pool account associated with Muslim Cooperative Bank.

The same report described an approximately ₹37-crore trail associated with Nagarbhavi Credit Cooperative Society, allegedly routed through a suspected bogus account and converted into cryptocurrency. A separate trail of approximately ₹6.5 crore was reportedly linked to an individual account and transfers involving USDT.

These are reported investigative figures, and their relationship to the ₹958.66-crore total needs to be established before anyone treats them as additional sums.

The presence of a financial institution in a reported transaction trail is not proof that its management knowingly participated in money laundering. A bank or cooperative institution may process transactions without knowing that the original source of funds is illicit.

But where investigators identify suspicious accounts, questionable KYC documentation or unexplained payment flows, the institution’s records become essential evidence.

Who opened the accounts? What documents were supplied? Were those documents independently verified? Who were the authorised signatories? Who initiated the transfers? Did internal monitoring systems generate warnings? Were unusual transactions escalated in accordance with applicable requirements?

If the evidence identifies failures in internal controls, the relevant authorities should examine them. If it establishes deliberate assistance by particular individuals, responsibility should be determined through due process. If the institution’s staff had no knowledge of wrongdoing and followed their obligations, the findings should reflect that as well.

The correct approach is neither to declare an entire institution guilty because its accounts appear in a transaction chain nor to dismiss the matter as a routine banking issue.

The evidence must decide.

6. The reported ₹5.30-crore complaint and other cybercrime leads

The earlier reporting on the ED investigation also described a Bengaluru police FIR involving an alleged online-gaming fraud in which a complainant reportedly lost ₹5.30 crore.

According to Free Press Journal’s report of 25 July, Edsom Fintech’s accounts and those of associated entities were linked in investigative material to multiple cybercrime complaints concerning online gaming, investment scams, share-trading fraud, cryptocurrency-related fraud and task-based scams.

These claims require careful treatment.

An entity’s appearance in a complaint database does not establish that the complaint is genuine, that the alleged amount has been proved, that the company committed an offence or that different complaints form part of the same criminal network.

A rigorous investigation should disclose, where legally permissible, the relevant FIR numbers, investigating police stations, alleged offences, transaction dates, beneficiary accounts and current status of each matter.

It should then establish whether the complaints share bank accounts, merchant identifiers, devices, telephone numbers, directors, beneficial owners or other evidentiary links.

The alleged ₹5.30-crore loss deserves investigation on its own evidence. It should not be used as a substitute for proving a separate transaction or automatically attributed to every entity associated with the payment chain.

The same standard applies to companies reportedly named in the financial investigation, including SB Finwealth Services Private Limited, Marudhar Timber Private Limited and Perento Dispositions Private Limited. Their names appear in reporting on alleged transfers to companies described by investigators as shell entities.

Whether those entities had genuine operations, whether particular transfers were legitimate and whether their controllers knowingly participated in any offence must be established independently.

In a serious financial investigation, a complaint is a lead. A verified transaction is evidence of a transaction. A criminal charge requires proof of the applicable legal elements. A conviction requires proof to the standard demanded by law.

Those distinctions must remain intact, particularly when numerous entities and individuals may appear in the same transaction trail.

7. The arrest of Ram U. Ramdhani: A significant step, not the end of the investigation

The ED identifies Ram U. Ramdhani as the founder of Edsom Fintech. According to the agency’s official press release dated 6 October 2026, he was arrested on 28 September under the Prevention of Money Laundering Act.

The agency stated that he had been remanded to seven days of ED custody and subsequently to judicial custody. Its 17 October press release also referred to his continued judicial custody at that time.

The arrest represents a significant procedural development. It does not, by itself, establish guilt.

The investigation must determine the precise role allegedly played by Ramdhani, including his control over the company and iPaisa, his knowledge of the merchant network, his involvement in approving or overseeing transactions and whether he personally benefited from the alleged financial flows.

Company formation, formal directorship, shareholding and operational control are different matters. Each requires documentary evidence.

The company was incorporated in December 2020. Public corporate-information databases have listed capital figures of ₹10 lakh authorised and ₹1 lakh paid up. They have also displayed older annual-return and financial-filing markers, including an annual general meeting dated 2 September 2022. These database entries merit verification through current Ministry of Corporate Affairs records, including company filings, annual returns, financial statements and director appointment or resignation documents.

The available records should not be used to imply that a low paid-up capital necessarily indicates misconduct. Nor should old filing information from a commercial directory be treated as a definitive finding of non-compliance without checking the underlying MCA record and applicable filing obligations.

The more consequential inquiry concerns actual control of the transaction infrastructure and the alleged money trail.

Ramdhani’s defence, as reported by Free Press Journal on 1 October, disputed alleged connections between iPaisa and other named platforms and companies. His lawyer argued that iPaisa was a third-party merchant trading platform and denied the alleged links. Those submissions must be considered alongside the prosecution’s claims.

The agency should test the defence against merchant-onboarding documents, payment contracts, internal communications, account records, source-code or platform logs where relevant, and evidence of transaction authorisation.

A serious case must withstand that scrutiny. It cannot depend solely on the title of a company, the scale of its transaction flows or the fact of an arrest.

The latest ED material located for this report places Ramdhani in judicial custody as of 17 October. Any subsequent custody or bail development should be verified from the relevant court record before publication.

8. The earlier searches: Why the October operation cannot be viewed in isolation

The October searches followed earlier enforcement action.

On 21 July 2026, the ED reportedly searched 11 premises: three in Mumbai, six in Pune and two in Bengaluru. Free Press Journal reported that the searches targeted suspected platform operators, payment handlers, mule-account providers, technical personnel and other entities believed to be connected with the alleged betting network.

The agency reportedly seized financial records, banking documents, digital devices and other material for examination.

A report published on 25 July described an alleged ₹800-crore trail involving a credit cooperative society and a cryptocurrency wallet. The reporting also stated that the financial investigation had identified multiple shell or associate entities and alleged transfers to offshore destinations.

The arrest of Ramdhani followed on 28 September, as later confirmed by the ED. Reports published in late September and early October discussed transactions allegedly received into accounts associated with Edsom and the investigation into onward transfers.

Then came the 13 October searches at 20 premises across five cities, announced in the ED’s 17 October release.

The sequence matters because it suggests an investigation that has developed across multiple stages: initial police allegations, financial searches, examination of accounts, arrest and subsequent expansion of searches.

However, the number of searches is not a measure of guilt or the eventual strength of a prosecution. What matters is whether each stage produces admissible evidence, whether the evidence is preserved correctly and whether the prosecution can demonstrate the relevant legal elements against each accused.

The question now is whether the investigators can turn a growing volume of material into a clear, coherent and independently testable account of the alleged network.

9. A geographic discrepancy that must be clarified

There is also a discrepancy in the published accounts of the 13 October searches.

The ED’s official press release names Mumbai, Pune, Mehsana, Surat and Hyderabad.

Free Press Journal’s 17 October report on account freezes, by contrast, describes searches across Mumbai, Pune, Bengaluru, Surat and Unjha in Gujarat. It reports 75 frozen bank accounts distributed as follows: 23 in Mumbai, 17 in Pune, 16 in Surat and 19 in Unjha.

These are not identical location lists.

The discrepancy may reflect differences between the searches conducted in separate rounds, or it may be a reporting inconsistency. The material reviewed does not conclusively resolve the issue.

It should not be silently corrected or reconciled by assumption.

The official list should be used when describing the operation announced in the ED’s press release. The additional location and account figures should be attributed to the specific report until clarified by the agency.

A straightforward clarification would improve the public record: which locations were covered by each search round, which searches resulted in account freezes, and whether the 75 accounts relate entirely to the 13 October operation?

This is not a minor editorial issue. Accurate geographic and procedural information matters when reporting a multi-city financial investigation.

10. Separate court cases mention All Panel Exchange—but must not be confused with the ED prosecution

The name All Panel Exchange has also appeared in publicly available Chhattisgarh High Court proceedings concerning separate local online-betting cases.

These proceedings are relevant to understanding the broader presence of the platform in reported betting activity. They are not, on the material reviewed, findings that Ramdhani or Edsom committed the offences alleged in those local cases.

The Raipur case: Crime No. 191/2026

A Chhattisgarh High Court order dated 24 August 2026 records proceedings arising from Crime No. 191/2026 at New Rajendra Nagar Police Station, Raipur, under Section 112 of the Bharatiya Nyaya Sanhita, 2023, and Section 7 of the Chhattisgarh Gambling (Prohibition) Act, 2022.

The prosecution alleged that several individuals were found in a vehicle while engaged in online cricket betting during the IPL. Mobile phones, cash and a vehicle were seized. The court record states that a preliminary examination of the phones revealed links, IDs and records relating to All Panel Exchange and other betting platforms.

The High Court rejected the regular-bail applications of Imam Ahmed and Karan Pinjani on 24 August. In its order, the court considered the material then available, the alleged organised nature of the activity, the wider investigation and the possibility of interference with the investigation.

A later order dated 10 September rejected Sheikh Asif’s regular-bail application in the same crime.

These were bail decisions at an interlocutory stage. They were not convictions. The court’s assessment of prima facie material for bail purposes must not be presented as a final determination of guilt.

A separate Raipur proceeding: Crime No. 62/2026

A Chhattisgarh High Court order dated 7 October 2026 concerns Crime No. 62/2026, also registered in Raipur, under Section 7 of the state gambling law and Section 112(2) of the Bharatiya Nyaya Sanhita.

The prosecution alleged that the applicant, Lucky Pahuja, had purchased an All Panel Exchange ID through which betting was conducted. The applicant disputed the allegation and claimed he had been implicated on the basis of a co-accused’s statement.

The High Court granted anticipatory bail, subject to conditions, without deciding the merits of the prosecution case.

This outcome is equally important to report. The mere appearance of an All Panel Exchange ID in a criminal proceeding does not establish guilt, and courts can reach different procedural conclusions based on the facts and material placed before them.

Why these cases matter—and why their limits matter too

Taken together, the Raipur proceedings demonstrate that the platform’s name has appeared in multiple public court records concerning alleged online betting activity.

They do not establish that all these matters are part of the ED’s money-laundering prosecution, that all the accused persons are connected to Edsom or iPaisa, or that the same people controlled every platform using the All Panel Exchange name.

Those questions require separate evidence.

The court records are valuable leads for investigators examining the wider ecosystem. They should be used to identify verifiable intersections—such as account numbers, merchant IDs, transaction references, operators and digital infrastructure—not to assume that every case has a common controller.

The distinction between an online bettor, a local agent, a platform operator, a payment intermediary and a person who allegedly controls the proceeds is fundamental. Treating them as interchangeable would weaken, rather than strengthen, an investigative report.

11. The questions that the investigation must now answer

The evidence described so far raises a number of urgent investigative questions.

Who ultimately controlled All Panel Exchange and MGM91? Investigators must identify the individuals responsible for the platform infrastructure, betting accounts, agent networks and settlement arrangements. Reports of Dubai-based direction need to be tested against communications, financial flows, digital records and evidence establishing actual control.

Who owned or controlled the 200-plus alleged merchant entities? The answer requires beneficial-ownership analysis, company records, bank mandates, KYC documents, shared-control indicators and evidence of actual business activity.

What did iPaisa know about the transactions it processed? This question requires examination of merchant onboarding, risk assessments, transaction monitoring, internal alerts, payment contracts and communications. The mere processing of a transaction cannot establish criminal knowledge.

What was the complete money trail? Investigators should reconcile the reported ₹958.66 crore in transactions, ₹341.66 crore attributed to payment gateways, the alleged ₹800-crore cooperative-society and cryptocurrency trail, the approximately ₹150-crore pool-account trail, the approximately ₹37-crore cooperative-society trail, the reported ₹6.5-crore individual-account trail and ₹182 crore in APMC-linked cash withdrawals. These figures must be mapped to determine which overlap and which represent distinct flows.

Who received the proceeds? Tracing transfers to intermediary accounts is not the same as identifying the ultimate beneficiary. Investigators should establish the final destination of each material transaction and the evidentiary basis for attributing control to any individual or entity.

Were trade documents genuine? The alleged over-invoicing route requires examination of invoices, customs records, shipping documents, goods, valuations and commercial counterparties.

Were KYC records genuine and complete? The reported allegation involving fabricated cooperative-society KYC documents should be tested through the original account-opening files, verification records, responsible personnel and relevant digital evidence.

What assets can be traced and recovered? Frozen accounts and assets should be distinguished from money actually recovered, finally confiscated or returned to victims. The process must follow the applicable legal requirements and permit affected parties to challenge action where the law provides.

What happened to each police complaint? A consolidated schedule of predicate FIRs, related cybercrime complaints, charge sheets, closure reports, court proceedings and current procedural status would prevent unrelated allegations from being treated as one proven conspiracy.

These questions are neither rhetorical flourishes nor accusations against every institution named in a report. They are the obvious lines of inquiry raised by the financial network the ED says it is investigating.

12. Enforcement agencies must move faster—but speed must produce evidence, not merely headlines

The ED’s searches, account freezes and arrest represent substantive investigative steps. They should not be dismissed.

Yet a multi-layered financial investigation cannot be considered complete merely because searches have been conducted or a suspect has been arrested.

The public interest demands a timely, comprehensive and legally sustainable investigation.

First, the investigating agencies should prioritise preservation and examination of bank statements, transaction records, merchant contracts, KYC documents, digital devices, relevant platform logs and cryptocurrency records. Delay can increase the risk that records become harder to obtain or that the trail becomes more difficult to reconstruct.

Second, the financial analysis should be consolidated into a single reconciled schedule that distinguishes total transaction volumes, suspected proceeds of crime, identified victim losses, frozen balances, attached assets and money actually recovered.

Third, every alleged shell entity should be examined individually. Investigators must establish who controlled it, what transactions it processed and whether it had a legitimate commercial purpose.

Fourth, the ED and the relevant state police and cybercrime units should coordinate their records so that the predicate offences, victim complaints and financial trails can be compared without duplicating amounts or confusing unrelated cases. Where lawful and necessary, cooperation with banking authorities, cryptocurrency exchanges and overseas counterparts should be pursued through appropriate channels.

Fifth, agencies should distinguish the role of each person. A local bettor, a payment-system employee, a merchant, a bank official and an alleged principal operator cannot be assigned the same role simply because their names appear in connected records.

Sixth, the prosecution should disclose and file the material required by law in a timely manner, and the courts should endeavour to ensure expeditious proceedings consistent with due process, fair-trial rights and the legitimate interests of victims.

Speedy trials do not mean rushing to a predetermined conclusion. They mean avoiding unnecessary delay, ensuring that evidence is properly presented and allowing courts to decide cases on their merits.

If the evidence establishes criminal conduct, the prosecution should seek the consequences prescribed by law. If the evidence does not support an allegation against a particular person, the case must be assessed accordingly.

The credibility of enforcement does not depend on how aggressively an agency announces a raid. It depends on whether its investigation survives scrutiny in court.

13. The uncomfortable bottom line: The money trail deserves answers, not assumptions

The All Panel Exchange investigation presents a serious set of allegations: funds allegedly collected from users of betting platforms, a payment intermediary reportedly connected to more than 200 merchant entities, financial dealings reported at approximately ₹958.66 crore, suspected mule accounts, alleged over-invoicing, cash withdrawals and cryptocurrency transfers.

It also raises questions about corporate controls, merchant verification, the use of cooperative-bank infrastructure and the identification of the people who allegedly controlled the platforms and benefited from the transactions.

But the difference between suspicion and proof must remain visible at every stage.

The reported financial figures should be reconciled. The geographic discrepancy in reporting on the searches should be clarified. The corporate-record information should be checked against primary MCA filings. The relationship between the core PMLA investigation and separate state-level betting cases should be established through evidence rather than inference.

The public should not be expected to accept a list of spectacular figures as a substitute for an explanation of what those figures actually represent.

At the same time, the scale of the reported transactions makes a fragmented or unnecessarily slow investigation unacceptable. Victims deserve clarity about their complaints, and the public deserves a credible account of whether the financial infrastructure was knowingly abused.

A website can disappear. An agent can change a telephone number. A merchant company can become inactive. Cryptocurrency can cross borders in minutes. But bank records, corporate filings, payment logs, transaction references and evidence of control can provide a path to the people who made decisions and received the money.

That path must be followed rigorously.

The ED now faces the central test of this investigation: to turn a complex and troubling transaction map into a transparent, evidence-led case that identifies the actual wrongdoers, protects innocent parties from unsupported allegations, and stands up in court.

The demand is straightforward: tighter financial scrutiny, faster evidence-based investigation, coordinated enforcement and expeditious trials. No person should be condemned by a press release; equally, no credible lead should be allowed to languish behind layers of merchant accounts, corporate labels and unexplained transactions.

The money trail must be followed to its lawful conclusion, and every allegation must be tested against evidence.

STRONG LEGAL DISCLAIMER

This article is based on the publicly available Enforcement Directorate press release dated 17 October 2026, reported developments concerning the investigation, corporate-information records and publicly available court proceedings reviewed for this publication. The allegations described herein remain allegations unless and until established through the applicable legal process.

No statement in this article should be interpreted as a declaration that Ram U. Ramdhani, Edsom Fintech Private Limited, iPaisa, any named financial institution, merchant entity or any other person mentioned has been convicted of the offences alleged in the All Panel Exchange PMLA investigation. No conviction in that investigation was identified in the public records reviewed as of 21 October 2026. This statement describes the material reviewed; it is not a representation that every court or agency record worldwide has been exhaustively searched.

The arrest of an individual, the conduct of a search, the freezing of an account, the appearance of a company in a complaint, or the rejection or grant of bail does not, by itself, establish guilt. Bail proceedings are not final trials. Separate cases involving alleged use of All Panel Exchange IDs must not be treated as proof that the persons or entities named in the ED investigation committed the same offences.

All figures attributed to media reports or investigative allegations are described as such. The reported financial amounts may overlap and should not be aggregated without a verified transaction-level reconciliation. No named bank, cooperative institution, payment gateway, company or individual should be considered criminally responsible solely because a transaction, account or business association is under investigation.

The article calls for a thorough, impartial and expeditious investigation, fair-trial safeguards, appropriate action where the evidence supports it, and timely judicial determination. Any affected person or entity should be afforded a fair opportunity to respond to specific allegations. The publication should incorporate any material response or correction received before publication and update the report if subsequent court orders, agency statements or verified records materially change the factual position.