A ₹1-lakh Baner company, a hundred-crore fraud pipe, and a ₹60-lakh freeze: the ED’s late arrest of Ram U. Ramdhani
The ₹1-lakh company, the hundred-crore pipe, and the ₹60-lakh freeze
Ram U. Ramdhani is in judicial custody. No court has convicted him. What the Enforcement Directorate has put on record is uglier than a late press note admits: a Baner private company with ₹1 lakh paid-up capital is alleged to have been the PayIn/PayOut throat for an online betting trap, a digital-arrest pipeline, task fraud, investment fraud and USDT movement. The agency froze about ₹60 lakh. It is talking about hundreds of crores. That gap is the story.
A press release that arrived after the custody clock ran out
On 6 October 2026, the ED’s Mumbai Zonal Office announced that it had arrested Ram U. Ramdhani on 28 September 2026 under the Prevention of Money Laundering Act, 2002, in a probe into an online gaming and betting operation run through All Panel Exchange (APX) and related cyber fraud. The Special Court (PMLA), Mumbai, remanded him to ED custody for seven days and then to judicial custody. The investigation, the agency said, rests on two FIRs in which complainants lost crores. Funds, it said, moved through mule accounts and then into Edsom Fintech Pvt. Ltd., a company it says he founded and controlled. Evidence “indicates” he exercised management and control over the company, its business and its operations.
Read the date again. The arrest was 28 September. The public note is 6 October. By then the seven-day custody window the court had given the agency was already over. Free Press Journal, reporting the remand hearing, said the Special PMLA Court sent him to ED custody till 3 October specifically so investigators could trace further parking and layering of alleged proceeds of crime exceeding ₹958.66 crore. ED prosecutors Arvind Aghav and Rishabh Shukla told the court that 11 accounts linked to Edsom had received ₹958.66 crore, of which ₹341.66 crore came through payment gateways.
So the public was told of the arrest only after the accused had already been shifted to judicial custody. That is not transparency. It is a bulletin issued once the uncomfortable part of the timetable was complete.
How the trap is described, in the agency’s own words
The July search note is blunter than the October arrest note. The Mumbai Zonal Office said the probe begins with All Panel Exchange, at allpanelexch.com. A Jalgaon Police FIR records the method. A complainant was pulled in by a WhatsApp message, handed login credentials, allowed small withdrawals “to build trust,” pushed to put in larger sums, and then blocked. Withdrawals were refused. The operators went silent.
That is not a gaming product. On the ED’s account it is a confidence trick with a login screen: a small payout to anaesthetise doubt, then a locked door. The same July note says a second FIR, by Bengaluru Police, names Edsom Fintech and others in an online gaming fraud in which the complainant was cheated of ₹5.30 crore.
From there the agency’s map is monotonous and, if true, industrially efficient. Victim money enters mule accounts. It is layered through entities the ED describes as paper companies with dummy directors, some of them not even existing at their registered addresses. It lands in bank accounts maintained by Edsom, which the July note says received hundreds of crores. Part of the alleged proceeds is converted into virtual digital assets on crypto platforms and moved offshore.
The October note widens the stain. Edsom’s accounts, the ED says, are linked not only to gaming but to investment fraud, online task fraud, digital-arrest fraud and crypto/USDT fraud. The company provided PayIn and PayOut through Easebuzz, Cashfree, PineLabs, and payment channels of banks “like” Muslim Cooperative Bank. The funds, the agency says, passed through multiple entities and “ultimately through the banking/payment network of Edsom Fintech.”
The gateways and the bank are named as rails, not as accused. That distinction should not comfort anyone. If a Pune firm with a lakh of paid-up capital can sit on top of mainstream payment pipes and a cooperative-bank channel while the ED is alleging hundreds of crores of fraud-linked flow, the compliance theatre around those pipes has questions to answer. Merchant onboarding, velocity checks, mule-account detection: either they failed, or they were never built for this volume of dirt.
₹800 crore through a cooperative society’s papers
The July record contains a figure the October press release does not repeat. The ED said a credit cooperative society’s KYC, together with fabricated documents, was used by an individual to open an account and wallet on a crypto-exchange platform. Through that society’s bank account, the agency said, ₹800 crore was routed, and a substantial part of it was directly linked to proceeds of illegal gaming and betting platforms.
Free Press Journal’s July report put Edsom at the centre of that trail: shell entities, conversion to cryptocurrency, offshore transfer, and the ₹800-crore cooperative-society passage.
These numbers must not be added up as if they were separate, audited loot. “Hundreds of crores” into Edsom, ₹958.66 crore received in 11 linked accounts, ₹341.66 crore via gateways, and ₹800 crore through a cooperative-society account are agency and courtroom claims from different filings. Some of the money may be the same money counted at different hops. What they are not is a ₹60-lakh case. The only attachment the October note quantifies is “approx. 60 Lakhs” frozen in various bank accounts after searches in Pune, Mumbai and Bengaluru, plus “incriminating documents.”
Sixty lakh against a trail the agency itself describes in hundreds of crores is not a result. It is a receipt for what was still sitting in an account when the team arrived. If the layering and the offshore crypto leg are even partly as alleged, the rest had already left. Freezing the residue and calling it enforcement is how these files go cold.
A fintech on paper, a pipe in practice
Ministry of Corporate Affairs aggregator records for Edsom Fintech Private Limited, CIN U74999PN2020PTC197096, show a company incorporated on 22 December 2020 with the Registrar of Companies, Pune. Authorised capital: ₹10 lakh. Paid-up capital: ₹1 lakh. Registered office, on those records: 201, Golden Empire, Baner Road, Pune 411045. An email on the same records uses the name [email protected]. Directors listed across aggregators include Kalpana Omprakash Jaiswal from incorporation, Sonal Shailesh Ramdhani on older extracts, and Sanchita Nayak as an additional director from 27 October 2025.
The ED does not need his name on today’s board to allege control. Its case is that he founded the company and exercised management and control. The corporate clothing is the point. A ₹1-lakh paid-up entity, classified under “other business activities,” is a strange vessel for PayIn/PayOut across national gateways if the flow even approaches what prosecutors described in court. Either the capital is a fiction beside the real money, or the real money was never meant to stay on this balance sheet. Both readings are an indictment of how easily a private limited company becomes a drain.
In the remand hearing, the ED alleged onward transfers to entities it called shells with no genuine business and multiple cybercrime complaints against them: SB Finwealth Services Pvt Ltd, Marudhar Timber Pvt Ltd and Perento Dispositions Pvt Ltd.
A timber company and a “dispositions” company in a betting-and-USDT file is not subtle. It is the usual Indian layering costume: a respectable noun on a letterhead, no business at the address, and a bank account that does the only work the company was created to do.
What the defence has actually said
Ramdhani’s lawyer, Sumitkumar Nimbalkar, disputed the joins. He told the court that the iPaisa platform was a third-party merchant trading platform and had no connection with CloudS/Cloudcity. He said his client had no connection with companies sold to Siddhesh Bohara in March 2025, or with Venketlaxmi Urban Pune Nidhi Ltd in 2023.
That is a severance defence: sold companies, third-party platforms, old nidhi links, nothing to do with us. It is a legitimate line to run, and it has not been adjudicated. It also does not answer the agency’s central claim, which is not that Ramdhani personally ran the WhatsApp pitch. It is that money from the pitch, and from digital-arrest and task fraud, arrived in accounts of a company he founded and controlled, and left again through shells, gateways and crypto. Distance from the shopfront is not distance from the till. If the defence is right, the ED has stitched the wrong man to the pipe. If the ED is right, the sale-and-separation story is the oldest cloak in a laundering file. A court has to decide. It has not.
The timeline is an accusation against the agencies too
25 July 2026: searches in Mumbai, Pune and Bengaluru. Documents, devices, freezes. The ED already has the Jalgaon FIR, the Bengaluru FIR for ₹5.30 crore, the mule path, the shell path, the crypto path, and the ₹800-crore cooperative-society allegation.
28 September 2026: arrest. Sixty-five days later.
1–3 October 2026: custody remand, with the court itself recording that the parking and layering above ₹958.66 crore still has to be traced.
6 October 2026: press release. Further investigation “under progress.” About ₹60 lakh frozen. No provisional attachment figure for the larger trail. No named co-accused. No charge sheet. No restoration to a single victim.
This is the part that should anger anyone who has watched a withdrawal button die on a betting app, or a parent emptied by a “digital arrest” call. The architecture was on the agency’s own paper in July. The man the agency calls the controller was arrested at the end of September. The public note came in October, after judicial custody had begun. The money the agency describes had, on its own theory, already been layered, converted and in part sent offshore. Victims do not get their crores back from a 60-lakh freeze.
PMLA was written for speed against exactly this: mule accounts, payment aggregators, cooperative-bank channels, crypto off-ramps. A file that can name Easebuzz, Cashfree, PineLabs and a cooperative-bank channel, and still produce a freeze of ₹60 lakh, is a file that has not yet done the work the statute allows. Attachment is not a press-conference word. It is a section. Use it, or explain why the hundreds of crores are no longer attachable.
What a serious investigation would do next, and has not shown it has done
Name the two FIRs in full, with police stations and sections, instead of “02 FIRs.” Publish the account-level split behind ₹958.66 crore and ₹341.66 crore, and say whether the ₹800-crore cooperative-society flow is inside that figure or beside it. Identify the individual who, on the July note, used the society’s KYC. Examine the gateway merchant files: who onboarded Edsom, what MCC was declared, what velocity alerts fired, and who ignored them. Examine Muslim Cooperative Bank’s channel the same way, without pretending a named rail is a bystander by default. Trace the onward legs into SB Finwealth, Marudhar Timber and Perento Dispositions, and the crypto hop the July note says ended offshore. Test the defence on the March 2025 sale and the 2023 nidhi, with documents, not adjectives. And put a restitution number next to the victim number. There is not one in either press note.
Until that is done, the 6 October release is a custody announcement dressed as a dismantling. The network it describes — WhatsApp lure, trust withdrawal, locked wallet, mule, fintech, shell, cooperative-society KYC, USDT, offshore — does not get dismantled by one arrest and a ₹60-lakh freeze. It gets a new set of accounts.
The demand is not theatrical. It is procedural. File the complaint. Attach what can still be attached. Charge who can be charged. Try the case. The Special Court has already recorded that the layering above ₹958.66 crore still has to be traced. That is the court’s observation, not a headline writer’s. Sixty-five days from search to arrest, and a public note only after judicial custody, is not the pace this statute was meant to run at. Victims of a locked betting wallet and a digital-arrest call are not obliged to wait for the next quarterly conference to be told that enforcement is steadfast.
Disclaimer
Everything above that describes fraud, laundering, control, mule accounts, shells, crypto movement and offshore transfer is an allegation by the Enforcement Directorate, or a claim recorded in court reporting of ED submissions. It is not a finding of guilt. Ram U. Ramdhani has been arrested under the PMLA and remanded, first to ED custody and then to judicial custody. No court of law has convicted him. He is presumed innocent until proved guilty. His lawyer has disputed links to named platforms and companies. Those denials are also on the record and are also unadjudicated. Payment gateways and banks named as channels are not, on these documents, accused. Figures of ₹958.66 crore, ₹341.66 crore, ₹800 crore and ₹5.30 crore are figures reported from ED statements and remand proceedings, not audited losses and not amounts judicially determined to be proceeds of crime. The only freeze quantified in the 6 October 2026 press release is about ₹60 lakh. This article calls for a faster, tighter investigation, attachment of traceable proceeds, a charge sheet, a speedy trial and restitution. It does not pronounce a verdict.
