What are the FIU and PMLA?
The Financial Intelligence Unit-India (FIU-IND) is a national agency under the Ministry of Finance. Its primary job is to track and analyse financial transactions to combat money laundering, terrorism financing, and other financial crimes. In March 2023,
the Indian government brought all Virtual Digital Asset (VDA) providers—which includes crypto exchanges, wallet providers, and other related platforms—under the Prevention of Money Laundering Act, 2002 (PMLA). This move effectively turned crypto platforms into 'reporting entities,' making them subject to the same strict compliance rules as banks and other financial institutions. Operating a crypto business in India without registering with the FIU is now illegal.
How These Rules Change Crypto Exchanges
Under the PMLA framework, every crypto exchange serving Indian users, even those based offshore, must register with the FIU-IND. This registration obligates them to implement a robust compliance infrastructure. Their key responsibilities now include conducting stringent Know Your Customer (KYC) checks on all users, maintaining detailed transaction records for at least five years, and continuously monitoring for unusual activity. They must also appoint a Designated Director and a Principal Officer responsible for ensuring compliance. This framework is designed to increase transparency and prevent the misuse of digital assets for illegal activities.
What This Means for You, the Trader
For individual traders, the biggest change is the end of anonymity. When you sign up for an FIU-compliant exchange, you must complete a multi-layered KYC process. This typically includes providing your PAN card, an additional ID like an Aadhaar card or passport, and completing a live selfie verification to prevent fraud. Exchanges must also verify your bank account, often through a 'penny-drop' confirmation where a small amount is deposited. Your transaction patterns will be monitored, meaning less privacy but a more secure trading environment. Essentially, trading crypto is now much closer to trading securities on a regulated stock exchange in terms of identity verification.
Understanding 'Suspicious' Transactions
A key mandate for exchanges is to identify and report Suspicious Transaction Reports (STRs) to the FIU. But what makes a transaction 'suspicious'? There is no single definition, but regulators have highlighted several red flags. These can include unusually large transactions that don't match your user profile, rapid movement of funds between multiple accounts, frequent small deposits that appear designed to avoid detection (a practice called 'structuring'), or using services like crypto mixers that obscure the origin of funds. Transactions linked to high-risk jurisdictions may also be flagged. If an exchange's automated systems or compliance team flags your activity, they must investigate and may report it to the authorities without tipping you off.
Choosing a Compliant Exchange
Using an FIU-registered exchange is now critical for legal and safe trading in India. In early 2024, the government took action against several major global exchanges that were operating in India without FIU compliance, eventually blocking their websites and apps for Indian users. Choosing a platform that is registered with the FIU ensures that it adheres to Indian law and provides a baseline of security for your funds and data. These exchanges are required to have robust systems to protect against fraud and misuse, which ultimately builds a more trustworthy crypto ecosystem for everyone involved.
