Mumbai | In a rare and significant move within India’s financial markets, the National Stock Exchange (NSE) and other clearing corporations have withheld nearly ₹78 crore in fund payouts following a police complaint alleging unauthorised trading activity in a client’s demat and trading account. The development has sparked fresh concerns around account security, derivatives trading risks and oversight mechanisms within the country’s rapidly expanding retail investment ecosystem.
According to people familiar with the matter, the settlement freeze has affected more than 3,000 investors connected to over 160 brokerage firms. NSE Clearing Corporation has reportedly withheld around ₹72 crore, while the Indian Clearing Corporation Limited (ICCL), linked to the Bombay Stock Exchange (BSE), has frozen nearly ₹6 crore in payouts. Market officials indicated that the action was taken under the joint Standard Operating Procedure framed by Market Infrastructure Institutions (MIIs), which comes into effect when police or enforcement agencies issue directions in cases involving suspected fraud or unlawful trading.
Registration Begins for FutureCrime Summit 2026, India’s Largest Cybercrime Conference
The incident is said to be linked to trades executed on May 5, 2026 — the expiry day for weekly Nifty options contracts, a session typically marked by extremely high trading volumes and volatility. The complainant alleged that derivatives trades were carried out in the account without authorisation, prompting police intervention on the same day. Following the complaint, the exchange was reportedly instructed to halt payouts connected to the disputed trades until further investigation.
In a circular issued after receiving the police communication, NSE stated that the exchange had been advised to stop transactions linked to alleged fraudulent activity carried out in the complainant’s trading account on May 5. As a result, payouts related to certain counterparties involved in the concerned equity derivatives contracts were temporarily withheld. However, the exchange did not publicly disclose the identity of the investor or the brokerage involved in the complaint.
Industry experts say that while payout freezes occasionally occur in the cash market segment during fraud investigations, such large-scale intervention in the derivatives market is highly unusual. Several brokerage executives reportedly described the move as unprecedented in the F&O segment, especially given the number of clients and intermediaries affected simultaneously. Market participants are now awaiting clarity from exchanges and investigating authorities regarding the eventual release of the blocked funds.
Financial crime specialists note that unauthorised trading cases are increasingly linked to cyber-enabled fraud techniques. In many such incidents, fraudsters gain access to investor accounts through phishing calls, fake customer support interactions, screen-sharing applications, compromised login credentials or deceptive KYC update requests. Once access is obtained, high-risk options trades are often executed rapidly to rotate funds before the victim detects suspicious activity.
Experts tracking cyber fraud in financial markets warn that the sharp rise in retail participation in the derivatives segment has also increased systemic vulnerabilities. Over the past few years, millions of first-time investors have entered options trading platforms attracted by the possibility of quick profits, but many remain unaware of operational and cybersecurity risks associated with leveraged products. Analysts believe this incident may push regulators and exchanges to tighten safeguards around client authentication, unusual trading alerts and broker-level monitoring systems.
Market observers also point out that the case highlights the growing complexity of modern financial fraud investigations, where cybercrime, trading infrastructure and regulatory compliance intersect. Investigators are expected to examine trading logs, IP activity, login histories, communication records and fund movement patterns to determine whether the disputed transactions were the result of external hacking, internal misuse or coordinated manipulation.
The investigation is currently being handled by police authorities along with concerned market entities. Exchange officials have indicated that the frozen payouts will remain on hold until further instructions are received from law enforcement agencies. The episode has once again underlined how digital expansion in India’s financial markets is making cybersecurity, investor awareness and robust brokerage surveillance systems more critical than ever before.
