Indian Bank Employee Crypto Theft: How a Joint Custodian Siphoned Rs 8.7 Crore From an RBI Chest

Indian bank employee crypto theft has sent shockwaves through the financial sector after a joint custodian at Bank of Baroda siphoned off a massive fortune from a regional currency chest. As of May 26, 2026, legal authorities have uncovered a complex insider scheme involving falsified data portals, contract accomplices, and high-value real estate acquisitions. This investigative report details how the theft bypassed traditional security, how regulatory portals were manipulated, and what measures are currently underway to recover the stolen assets.

How Did the Indian Bank Employee Steal Rs 8.7 Crore From the Currency Chest?

• On January 13, 2026, the main accused, Harsiddh Kadiyar, a 15-year veteran and joint custodian at the Bank of Baroda Kalupur branch in Ahmedabad, orchestrated a massive asset theft from the Reserve Bank of India (RBI) currency chest.
• The heist involved the unauthorized removal of 174 reams of Rs 500 notes, totaling an immense Rs 8.70 crore in cash resources.
• Harsiddh Kadiyar collaborated with two contract labourers, Zulfikar Ansari (aged 57) and his son Sultan Ansari (aged 26), to physically smuggle the currency out of the secure vault.
• The team packed the currency into multiple transport boxes and successfully deceived bank colleagues and security personnel by claiming the packages contained worthless scrap material meant for immediate disposal.

What Technical Methods Were Used to Conceal the Currency Chest Deficit?

• To successfully cover up the severe cash shortage, Harsiddh Kadiyar systematically manipulated regulatory records over a period of several months.
• The rogue employee repeatedly uploaded fraudulent balance certificates to the official RBI e-Kuber portal, which allowed the automated ledger books to appear fully compliant during high-level electronic check-ins.
• Operating under the mistaken assumption that the internal CCTV security footage would automatically overwrite and delete itself after a standard 90-day retention cycle, the employee continued to report for duty normally for three months.
• On April 13, 2026, precisely tracking the expiration of the video storage window, he applied for a five-day medical leave citing health issues and disappeared entirely, ignoring subsequent emails and urgent phone calls from Bank of Baroda corporate management.

How Was the Financial Fraud Discovered and What Assets Have Been Recovered?

• The multi-crore embezzlement came to light during a routine internal audit and verification process conducted ahead of an impending, mandatory Reserve Bank of India (RBI) field inspection.
• A newly appointed in-charge of the currency chest noticed the massive physical deficit, prompting the branch chief manager to file a formal First Information Report (FIR) at the Kalupur Police Station on May 15, 2026.
• During intense police interrogation following his arrest in the Sola area, Harsiddh Kadiyar confessed that the stolen funds were directly used to purchase a luxurious bungalow in Chandkheda worth over Rs 2 crore, a prime commercial shop worth Rs 1.40 crore, a small transport truck, and substantial investments in high-risk cryptocurrency.
• The perpetrator also distributed a sum of Rs 28 lakh to an unsuspecting co-worker named Vaishali Ben.
• As of late May 2026, the Ahmedabad Police have arrested the main culprit alongside both contract labourers and recovered Rs 2.85 crore in hard cash, a Maruti Suzuki Ertiga car valued at Rs 6 lakh, and three mobile devices, bringing the total recovered property value to Rs 2.91 crore.
• Specialized cybercrime units are actively tracking the suspect’s digital footprints and transactions to locate, trace, and freeze his private crypto wallet addresses.

Why the Indian Bank Employee Crypto Theft Demands Immediate Industry Action

The strategic significance of this unprecedented insider breach at Bank of Baroda highlights severe systemic vulnerabilities within public sector banking networks and regulatory frameworks. This topic matters critically right now because traditional security measures are failing to counteract sophisticated insider manipulation, especially as bad actors increasingly look to leverage decentralized digital tokens for fast asset laundering. For banking institutions, risk management professionals, and financial regulators, taking timely action to enforce multi-factor physical authorization protocols and transition to continuous, immutable auditing systems is an absolute necessity to secure institutional trust and prevent catastrophic asset drainage.

How did the main suspect in the Indian bank employee crypto theft bypass regulatory audits?

The perpetrator bypassed detection by uploading falsified data logs and fake balance certificates directly into the RBI e-Kuber portal to conceal the missing cash reserves. This electronic manipulation allowed the records to look perfectly synchronized during remote digital verification checks until an in-person physical ledger review exposed the multi-crore deficit. To prevent this type of insider financial fraud, institutions must mandate dual-custodian cross-verification for all uploaded portal certificates.

What assets have the Ahmedabad Police seized following the Indian bank employee crypto theft?

As of late May 2026, law enforcement agencies have successfully recovered Rs 2.85 crore in hard cash from an Ertiga vehicle and arrested three individuals connected to the heist. In addition to freezing luxury properties worth over three crore rupees, specialized cyber divisions are utilizing advanced blockchain forensics to isolate the suspect’s private crypto wallet addresses. Recovering these funds requires a coordinated approach combining traditional physical asset seizures with digital ledger tracing to fully mitigate the illicit capital flight.

Why did the security cameras fail to stop the Indian bank employee crypto theft immediately?

The suspect circumvented immediate detection by exploiting a human vulnerability, telling on-site bank guards that the heavy boxes containing the cash were merely worthless scrap material. Additionally, he safely remained at his job for 90 days because he falsely believed that the automated bank surveillance system would overwrite the critical CCTV video data before an audit took place. This failure demonstrates that upgrading a bank’s surveillance retention policy to a minimum of one year is vital to identifying delayed insider discrepancies.