Billionaire’s Wellness Resort Searched by FCC for 23 Hrs Despite Targeted Cyber Attack

Financial investigators have successfully bypassed a sophisticated “cyber-sabotage” attempt during a marathon 23-hour raid on properties linked to billionaire businessman Avinash Gopee.

The Financial Crimes Commission (FCC) conducted simultaneous searches between Tuesday 7 April and Thursday 9 April at the Nundan Gopee Tower in Ébène and the Royal Green Wellness Resort.

During the operation, investigators discovered that the group’s IT servers had been targeted by a virus—specifically a ransomware attack—designed to block authorities from accessing sensitive financial data.

Despite the attempt to encrypt or vanish the records, FCC digital forensic experts managed to secure the data by identifying and accessing a cloud backup platform.

High-Stakes Investigation

The raids mark a significant escalation in a long-running probe into a suspected large-scale money laundering scheme.

At the heart of the investigation is Mr Gopee, whose fortune is estimated at several billion rupees. Avinash Gopee has been under a “Notice Upon Departure” since February 2025.

Detectives at the FCC’s Réduit Triangle headquarters are currently scrutinising investments made by Mr Gopee across his vast corporate portfolio between 2020 and 2024.

Preliminary findings suggest strong suspicions regarding the transfer of funds abroad. Investigators are particularly focused on whether financial facilities granted during the post-COVID-19 period (2021–2024) were diverted.

Focus on MIC Funding

A key element of the case involves a 350 million MUR (Mauritian rupees) loan granted by the Mauritius Investment Corporation (MIC) in 2020-2021.

The funds were intended for the Luxury Retirement Village and Royal Green Luxury Retirement Estate project.

The FCC is now conducting a “fine-tooth comb” analysis of transactions involving a web of companies, including:

• NG Holdings Ltd
• NG Tower IX Ltd and NG Tower VIII Ltd
• St Antoine Housing Development Ltd
• Société Horizon Suites Ltd
• PSh Investment Ltd

Separate Cybercrime Inquiry

The FCC has confirmed it is launching a distinct cybersecurity investigation following the ransomware discovery.

Authorities noted that this tactic mirrors “similar facts” observed in another ongoing inquiry involving a separate hotel group.

The Digital Forensic Laboratory is now performing an in-depth analysis of the recovered files to trace the authors of the sabotage.

While the attempt aimed to render files inaccessible, the FCC maintains that the recovery of the cloud data ensures the primary money laundering investigation remains on track.

Further developments in the case are expected within the coming days as experts finalise their analysis of the recovered financial flows.

Source: Defi Media