​The North Goa special PMLA court has remanded 46-year-old Thane resident Mukesh Kumar Pukhraj Jain, alias Mukesh Bhai, to three days of Enforcement Directorate (ED) custody till October 19, 2026, following his arrest in connection with an alleged multi-crore rupees nationwide cybercrime and money-laundering syndicate. ​Jain was arrested on Friday night by the Goa ED under Prevention of Money Laundering Act (PMLA). Produced before the Special Court at Merces on Saturday morning, the court allowed the agency’s plea for custodial interrogation after verifying compliance with arrest procedures and constitutional safeguards. ​The money-laundering probe stems from a June 2025 FIR registered by the Cyber Crime Police Station, North Goa. Fraudsters impersonating officials from the Telecom Regulatory Authority of India (TRAI) and the Central Bureau of Investigation (CBI) placed a Margao resident, and her husband under round-the-clock video surveillance. After presenting a forged Supreme Court order, the fraudsters coerced the complainant into transferring ₹2.60 crore into multiple fictitious "Secret Supervision Accounts". ​The ED recorded an Enforcement Case Information Report (ECIR) on September 2, 2025, to trace the proceeds of crime. Digital forensics and banking analyses revealed that the extorted funds were initially directed into nine dormant or newly formed first-layer accounts, before being layered and dispersed across more than 400 mule accounts, payment gateways, and cash withdrawals. ​Subsequent investigation led agency officials to an interconnected network of trading, travel, and foreign exchange entities operated by Mumbai-based brothers Fahim Moin Hussain Sayed and Naim Mueen Sayyed, who were arrested by the ED in August 2026. According to the agency, this syndicate handled banking transactions exceeding ₹27,850 crore and cash deposits of approximately ₹2,904 crore. The accounts used by the group have surfaced in at least 330 cybercrime complaints and 163 FIRs registered across 20 States and Union Territories, accounting for reported losses of around ₹417.49 crore. ​ ​Investigators identified Jain as a key RTGS entry operator who facilitated transactions for the syndicate against cash deliveries. In his statements to investigators, Jain admitted to facilitating approximately ₹300 crore in RTGS entries for Fahim Sayed's firms, charging a commission while coordinating with multiple brokers and receiving cash consignments through couriers. ​The agency alleged that Jain was fully aware of the illicit origins of the money, noting that accounts had faced bank liens and freezes repeatedly due to reported cyber frauds. When accounts were lien-marked by law enforcement agencies following complaints on the National Cyber Crime Reporting Portal (NCRP), Jain allegedly liaised with suppliers and brokers to negotiate and obtain the lifting of liens so that fund flows could continue. ​ ​The ED told the court that custodial interrogation is essential due to evidence tampering and lack of cooperation. The agency detailed that Jain routinely destroyed mobile devices and rotated numbers across multiple anonymous SIM cards. Following search operations and the arrest of co-accused associates in August 2026, Jain allegedly cloned his handset data onto a new device, installed a virtual private network (VPN) to mask his location, purged call logs and thousands of contacts, and handed over the handset to an associate for disposal. ​The special court granted the agency custody till October 19 to enable further interrogation regarding the money trail, unidentified brokers, and hidden cash proceeds.