← Regulations / India / Operating Models / CEX

Centralized exchange in India

Order-book exchange that takes custody of user assets and matches trades between users.

Conditional AI-Generated · Unreviewed

CEX is conditionally permitted in India with a local entity, subject to AML obligations and medium licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
Medium
Last updated
2026-07-13

AML Obligations

  • Register as a VDA Service Provider (reporting entity) with FIU-IND under the Prevention of Money Laundering Act (PMLA), 2002 as amended March 7, 2023
  • Implement transaction monitoring systems (risk-based, real-time) to flag suspicious activity including large transfers and structuring
  • Deploy blockchain analytics tools to identify high-risk patterns (e.g., chain-hopping, mixer usage)
  • Implement Travel Rule solutions for all VDA transfers — share originator/beneficiary details (name, account, address) via secure channels with screening, recordkeeping, and rejection of incomplete data
  • Screen wallets, addresses, and counterparties against OFAC SDN List and 50% Rule
  • Screen against UN Consolidated List (terrorists, proliferators)
  • Screen against EU Consolidated Financial Sanctions List
  • Freeze sanctioned cryptoassets immediately and report to relevant authorities
  • Comply with 1% TDS on transactions above INR 50,000 under Finance Act 2022 Section 115BBH
  • Report suspicious transactions (SARs) to FIU-IND; penalties up to 3x contravention value + imprisonment of 3-7 years under PMLA

Key Restrictions

  • Must be registered with FIU-IND as a VDA Service Provider; offshore exchanges not registered were blocked in January 2024 (Binance, KuCoin, etc.)
  • No comprehensive crypto custody framework exists — custody is covered only under FIU registration with no specific segregation rules
  • No specific framework for stablecoins, DeFi, or token issuance — RBI remains historically hostile to private crypto
  • RBI attempted outright ban in 2018 (reversed by Supreme Court 2020) — residual enforcement risk remains
  • Securities-classified tokens may fall under SEBI jurisdiction, adding potential dual-licensing burden
  • 30% flat tax on virtual digital assets under Finance Act 2022; 1% TDS on transactions above INR 50,000

Key Risks

  • No comprehensive crypto legislation exists despite being 'upcoming' since 2021 — regulatory ambiguity persists
  • RBI hostility to private crypto creates ongoing policy risk and potential future restrictions
  • Offshore exchanges blocked in 2024 demonstrate active enforcement against non-compliant VASPs
  • No specific custody or asset segregation rules — user asset protection framework is unclear in case of insolvency
  • Dual regulatory oversight possible (FIU-IND for AML, SEBI for token classification, RBI for payments/stablecoins) creates compliance complexity
  • PMLA penalties (up to 3x contravention value + 3-7 years imprisonment) and FEMA penalties (up to 3x amount) are severe

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 20% confidence

VASP: VDA Service Provider registration with FIU-IND (1-3 months, no minimum capital). Offshore exchanges blocked in 2024 for non-compliance (Binance, KuCoin, etc.) — most subsequently registered. No comprehensive crypto legislation despite being 'upcoming' since 2021.

licensing 20% confidence

EXCHANGE: FIU-IND registration required; offshore exchanges blocked if non-compliant. RBI attempted outright ban in 2018 (reversed by Supreme Court 2020).

licensing 20% confidence

CUSTODY: No specific custody framework; covered under FIU registration. No framework for stablecoins, DeFi, or token issuance.

licensing 70% confidence

FIU-IND — VDA Service Provider registration, AML/CFT, blocked 9 offshore exchanges in Jan 2024

licensing 40% confidence

SEBI — Securities-classified tokens

licensing 70% confidence

RBI — Stablecoins, payments, Digital Rupee CBDC pilot — historically hostile to private crypto

licensing 20% confidence

Prevention of Money Laundering Act (amended 2023) (2023) — VDA SP registration with FIU-IND — mandatory

licensing 20% confidence

Finance Act 2022 (Section 115BBH) (2022) — 30% flat tax on virtual digital assets; 1% TDS on transactions above INR 50,000

licensing 20% confidence

Travel Rule Solutions: Explicitly required under FATF standards. VASPs must share originator/beneficiary details (e.g., name, account, address) for virtual asset transfers via secure channels, with screening, recordkeeping, and rejection of incomplete data.

licensing 20% confidence

Transaction Monitoring Systems: Confirmed as a standard requirement for VASPs. Sources describe risk-based, real-time, AI-powered systems to flag suspicious activities like large transfers, structuring, or high-risk patterns, tailored to customer risk levels.

licensing 20% confidence

Blockchain Analytics Tools: Supported indirectly. Sources highlight blockchain monitoring (e.g., SaaS models analyzing wallets, histories, and typologies like chain-hopping or mixers) as essential for VASP compliance, often integrated with transaction monitoring.

aml 60% confidence

Prevention of Money Laundering Act (PMLA), 2002 (amended March 7, 2023): Core legislation extending AML/CFT to VDAs and VASPs. https://www.ikigailaw.com/article/592/the-implementation-of-the-fatf-travel-rule-to-vasps-in-india

aml 60% confidence

FIU-IND AML & CFT Guidelines for VDA Service Providers: Operational guidance post-amendment. https://fiuindia.gov.in/pdfs/downloads/VDA08012026.pdf

aml 60% confidence

Adopted and Effective Date: Adopted via PMLA amendment on March 7, 2023, explicitly to comply with the FATF Travel Rule by including VDA service providers (often termed VASPs) in the PMLA framework.

aml 60% confidence

VASPs Covered: All Virtual Digital Asset Service Providers (also called VDA-SPs), now classified as reporting entities under PMLA. Several VASPs have registered with the Financial Intelligence Unit - India (FIU-IND), while non-compliant ones faced website blocks.

aml 60% confidence

Technical Implementation Requirements: FIU-IND issued specific AML & CFT Guidelines for VDA-related service providers, covering transaction monitoring systems, blockchain analytics tools, and Travel Rule compliance. VASPs must adhere to these and any subsequent FIU-IND directives on implementation status.

aml 20% confidence

Screening obligations: Continuous screening of wallets, addresses, and counterparties against the Specially Designated Nationals (SDN) List (https://sanctionssearch.ofac.treas.gov), plus the 50% Rule (block entities owned ≥50% by SDN-listed persons) (https://ofac.treasury.gov/faqs/topic/1626). No crypto exceptions; includes sanctioned jurisdictions like Iran, North Korea, Syria, Cuba, Crimea/Donbas (https://ofac.treasury.gov/sanctions-programs-and-country-information).

aml 20% confidence

Screening obligations: Screen against UN Consolidated List (https://www.un.org/securitycouncil/content/un-sc-consolidated-list); covers terrorists, proliferators (e.g., North Korea).

aml 20% confidence

Screening obligations: Screen against EU Consolidated Financial Sanctions List (https://data.europa.eu/data/datasets/consolidated-list-of-persons-groups-and-entities-subject-to-eu-financial-sanctions?locale=en); ≥50% ownership threshold codified in 19th Russia package (Oct 2025), banning crypto exchanges/transactions with targets like Rosneft (https://amlwatcher.com/blog/ofac-ofsi-eu-un-sanctions-screening-guide/). Sectoral bans (e.g., Russian LNG/crypto) apply.

aml 20% confidence

Penalties: PMLA fines (up to 3x contravention value) + 3-7 years imprisonment; FEMA violations up to 3x amount.

travel-rule 20% confidence

Travel Rule adopted — threshold: INR 50,000 (1% TDS threshold)

travel-rule 70% confidence

Covered VASPs: All VDA service providers registered with the Financial Intelligence Unit - India (FIU-IND), including exchanges and other entities handling VDA activities; non-compliant VASPs have faced website blocks by FIU-IND.

travel-rule 70% confidence

Technical Implementation Requirements: VASPs must implement Transaction Monitoring systems, Blockchain Analytics tools, and Travel Rule solutions, with ongoing compliance status reporting to FIU-IND as per periodic guidelines; FIU-IND issued specific AML/CFT Guidelines for VDA-related reporting entities post-amendment.

travel-rule 60% confidence

Prevention of Money Laundering Act (PMLA), 2002 (amended March 7, 2023): https://www.ikigailaw.com/article/592/the-implementation-of-the-fatf-travel-rule-to-vasps-in-india

travel-rule 60% confidence

FIU-IND AML & CFT Guidelines for VDA service providers: Referenced in implementation overview.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a centralized exchange may operate in India only after registering as a VDA Service Provider with FIU-IND (mandatory under PMLA), complying with stringent AML/CFT obligations including Travel Rule implementation and transaction monitoring, and navigating the absence of a comprehensive crypto framework plus residual RBI hostility.

Questions this verdict aims to answer

  • What exchange / VASP license applies?
  • What custody segregation rules apply to user assets?
  • What market-conduct and listing rules apply?
  • What travel-rule obligations apply on withdrawals?