What Are the New Rules, Exactly?
The government has officially brought Virtual Digital Asset Service Providers (VDASPs)—which includes crypto exchanges, wallet providers, and even some NFT platforms—under the Prevention of Money Laundering Act, 2002 (PMLA). This means they are now considered
‘Reporting Entities,’ similar to banks and other financial institutions. Consequently, all crypto platforms operating in India, including international exchanges serving Indian users, must register with the Financial Intelligence Unit-India (FIU-IND). Their core obligations now include conducting thorough customer due diligence, monitoring transactions, and reporting any suspicious activity to the authorities.
Why Is This Happening Now?
The primary goal is to curb illicit financial activities. Cryptocurrencies, with their pseudo-anonymous nature, can be misused for money laundering and terror financing. By bringing the crypto ecosystem under the PMLA framework, the government aims to increase transparency and track the flow of funds, just as it does with the traditional banking system. This isn't about banning crypto; it's about integrating it into a regulated environment to enhance financial security and integrity. Platforms that fail to comply with these regulations face significant penalties, including having their websites and apps blocked for Indian users.
Stricter KYC Is Now Mandatory
For the average trader, the most immediate impact is a much stricter Know Your Customer (KYC) process. Basic document uploads are no longer enough. Under the new guidelines, exchanges must perform enhanced verification. This includes mandatory PAN, a secondary government ID like an Aadhaar or passport, and live selfie verification with liveness detection (like blinking or head movements) to prevent deepfake fraud. Exchanges are also required to collect geo-tagging data and IP addresses during onboarding and verify your bank account through a 'penny-drop' transaction, where a small amount is sent to confirm ownership.
Your Transactions Are Being Monitored
As reporting entities, exchanges are now legally required to monitor all transactions for patterns that might be considered suspicious. This includes unusually large or frequent trades, transactions linked to high-risk wallets, or attempts to obscure the origin of funds using mixers and tumblers. If a transaction is flagged, the exchange must file a Suspicious Transaction Report (STR) with the FIU-IND. For the vast majority of traders, this monitoring happens in the background and won't affect regular trading activity. It's a system designed to catch bad actors, not to inconvenience legitimate investors.
What This Means for Your Data
With enhanced regulation comes increased data collection. Exchanges are now mandated to maintain records of your identity and all your transactions for a period of at least five years. This is a standard requirement within the PMLA framework and applies to all financial institutions. While this raises privacy considerations, it also provides a clear transaction history that can be crucial for regulatory and tax purposes. It ensures that there is a verifiable trail for all activities on the platform, which can protect both the user and the financial system.
A Safer, More Legitimate Market
While these new rules add a few extra steps to the trading process, they signal a major step towards the maturation of India's crypto market. By aligning with global anti-money laundering standards, the regulations increase the credibility of the entire ecosystem. For traders, this means using a compliant exchange is more important than ever. It ensures your funds are on a platform that operates within the legal framework, reducing the risk of sudden shutdowns or regulatory crackdowns. Choosing an FIU-registered exchange provides a layer of security and signals that you are trading in a safer, more transparent environment.
