Apply for AI Grants India

India’s crypto policy is not a single law. It is a layered framework involving virtual digital asset (VDA) taxation, anti-money-laundering obligations, reporting requirements, advertising scrutiny and ongoing regulatory discussions. For crypto exchanges, Web3 startups, investors and users, understanding how these rules fit together is essential for operating responsibly in India.

This guide explains the current position, the main compliance duties and the practical implications for crypto businesses. It is educational information, not legal or tax advice; regulations and enforcement practices can change, so businesses should obtain advice from qualified Indian professionals.

What Are India Crypto Regulations?

“India crypto regulations” refers to the collection of laws, tax provisions, regulatory notices and enforcement practices that apply to cryptocurrencies, tokens, exchanges and related virtual digital asset services. India has not generally treated private cryptocurrencies as legal tender, but it has imposed a formal tax and compliance framework around many digital-asset activities.

The most important elements are:

• VDA taxation: Income-tax rules apply to gains from transfers of specified virtual digital assets.
• Tax deducted at source (TDS): Section 194S generally requires 1% TDS on consideration for transfers of qualifying VDAs, subject to applicable thresholds and transaction structure.
• Anti-money-laundering controls: Certain VDA service providers are reporting entities under the Prevention of Money Laundering Act, 2002 (PMLA).
• FIU-IND registration: Covered crypto businesses serving the Indian market may need registration with the Financial Intelligence Unit–India (FIU-IND) and must meet AML/CFT duties.
• Consumer and advertising risk: Claims about returns, safety or legality can create regulatory and reputational exposure.
• Sector-specific oversight: Activities involving payments, securities, lending, derivatives or investment advice may trigger additional rules and regulators.

Are Cryptocurrencies Legal in India?

Buying, holding or selling crypto is not broadly prohibited for individuals, but this does not mean cryptocurrencies are legal tender or government-backed money. The Reserve Bank of India continues to express significant concerns about private cryptoassets, including monetary, financial-stability, consumer-protection and foreign-exchange risks.

The legal analysis depends on the activity. Holding tokens for personal use, operating an exchange, providing custody, offering a token linked to an investment scheme, facilitating cross-border transfers and marketing a crypto product are materially different activities. A business should not assume that a token’s label—such as “utility token,” “governance token” or “stablecoin”—determines its regulatory treatment.

Before launching, founders should map:

1. The token’s economic rights and use cases.
2. Whether the product involves custody or control of customer assets.
3. Whether the business executes or arranges transfers.
4. Whether users in India are targeted or onboarded.
5. Whether fiat payments, lending, derivatives or investment advice are involved.
6. Whether offshore entities, Indian employees or Indian vendors create local obligations.

VDA Taxation in India

India’s tax treatment of VDAs is one of the clearest parts of the framework. Section 115BBH of the Income-tax Act generally taxes income from the transfer of a VDA at a flat rate of 30%, plus applicable surcharge and health and education cess. The provision is designed to apply to gains from transfers, rather than treating crypto profits like ordinary business income with a broad deduction regime.

Key features commonly associated with VDA taxation include:

• A 30% tax rate on income from transfer of specified VDAs, subject to the applicable statutory provisions.
• Limited ability to claim deductions: the cost of acquisition is generally relevant, while expenses such as platform fees and other costs may not receive the same treatment as ordinary business expenses.
• Losses from VDA transfers generally cannot be set off against other income or carried forward in the same way as many conventional investment losses.
• Crypto-to-crypto swaps can be taxable because a transfer may occur even when no Indian rupees are received.
• Gifting and airdrops require careful analysis because tax treatment can vary based on the facts, value and applicable provisions.

Users should maintain a transaction-level record containing dates, quantities, wallet addresses, exchange statements, acquisition cost, sale value, fees, token swaps and INR conversion methodology. Records from multiple exchanges and self-custody wallets often need to be reconciled before filing a return.

Section 194S and Crypto TDS

Section 194S generally introduces 1% TDS on consideration paid to a resident for the transfer of a VDA, subject to statutory thresholds and exemptions. In exchange-based transactions, the platform may facilitate deduction and reporting. Peer-to-peer, decentralized or cross-border arrangements can be more difficult because the person responsible for withholding may not be obvious.

A company should not treat TDS as a final tax. TDS is generally a withholding and reporting mechanism; the recipient’s ultimate tax liability can be different. Businesses should document who is responsible for deducting, depositing and reporting TDS, especially where the transaction involves an offshore platform, an intermediary or payment in another token.

FIU-IND Registration and AML Compliance

The Prevention of Money Laundering Act framework is central to India’s crypto compliance landscape. VDA service providers carrying out specified activities for or on behalf of another person may fall within the reporting-entity framework. Covered activities can include exchange between virtual digital assets and fiat currencies, exchange between one or more VDAs, transfer of VDAs, safekeeping or administration of VDAs, and participation in or provision of financial services related to an issuer’s offer or sale of a VDA.

A covered business may need to register with FIU-IND and implement a risk-based AML/CFT programme. Typical controls include:

• Customer identification and verification under applicable know-your-customer procedures.
• Beneficial-owner identification for companies, partnerships, trusts and similar structures.
• Customer due diligence and enhanced due diligence for higher-risk customers or transactions.
• Transaction monitoring for suspicious patterns, sanctions exposure, mixers, high-risk jurisdictions and unusual wallet activity.
• Record retention and retrieval procedures.
• Appointment of a principal officer and a designated director where required.
• Suspicious transaction reporting and other regulatory reporting.
• Internal controls, employee training, independent review and periodic risk assessment.

Registration is not a substitute for compliance. A platform should be able to demonstrate how onboarding decisions are made, how wallet risk is assessed, how alerts are investigated and how suspicious-transaction reports are escalated.

Offshore Crypto Platforms Serving Indian Users

An offshore incorporation does not automatically remove Indian obligations. If an overseas exchange actively serves Indian customers or carries out covered VDA activities in relation to India, it may face Indian AML and enforcement expectations. Authorities have previously scrutinized offshore platforms operating without meeting applicable compliance requirements.

Before using or partnering with an offshore platform, assess:

• Whether it is registered with FIU-IND where required.
• Whether it has an Indian compliance contact and grievance process.
• The legal entity contracting with Indian customers.
• Custody, withdrawal and insolvency arrangements.
• Whether the platform restricts Indian residents or accepts Indian payment flows.
• The quality of its KYC, sanctions screening and transaction monitoring.

For founders, serving Indian customers without a documented market-entry and compliance plan can create banking, enforcement and fundraising risk.

RBI, SEBI and the Regulatory Perimeter

The Reserve Bank of India and the Securities and Exchange Board of India have different mandates, and crypto products can cross regulatory boundaries. A token or platform may raise issues beyond the basic VDA tax rules.

RBI-related considerations

RBI concerns are especially relevant where a product involves payment systems, stored value, money transmission, foreign exchange, lending or stable-value instruments. A crypto business should not describe its product as a payment instrument or bank substitute without examining licensing and authorization requirements.

SEBI-related considerations

A token that provides profit rights, debt-like returns, pooled investment exposure or other investment characteristics may invite analysis under securities laws. Platforms offering tokenized securities, derivatives, investment products or advice should obtain a formal legal classification before launch.

Other laws

Depending on the model, additional areas may include:

• Foreign exchange and overseas investment rules.
• Companies Act and corporate governance requirements.
• Goods and Services Tax (GST) treatment of services, commissions and platform fees.
• Consumer protection and unfair-trade-practice rules.
• Information Technology Act obligations and cybersecurity expectations.
• Data protection and privacy requirements.
• Intellectual property, employment and contract law.

The correct approach is activity-based classification rather than relying on a general statement that “crypto is unregulated.”

Compliance Checklist for Crypto Startups in India

A practical launch checklist should cover legal, technical and operational controls.

1. Define the product

Document the token, custody model, transaction flow, jurisdictions, revenue model and customer segments. Identify whether the product is an exchange, broker, wallet, protocol, marketplace, analytics provider, lender or infrastructure vendor.

2. Perform a legal classification

Obtain written analysis covering VDA treatment, AML applicability, securities risk, payments and foreign exchange. Revisit the analysis whenever the token economics or product flow changes.

3. Build an AML programme

Create KYC standards, risk scoring, sanctions screening, transaction monitoring, escalation procedures, suspicious-transaction reporting controls and record-retention schedules.

4. Secure the technology

Use segregated wallets, multi-signature approvals, hardware security modules where appropriate, least-privilege access and tested key-recovery procedures. Commission smart-contract audits, penetration tests and incident-response exercises.

5. Prepare tax and accounting systems

Capture cost basis, transfers, swaps, fees, TDS data and customer statements at transaction level. Reconcile blockchain data with the company’s ledger and exchange records.

6. Review marketing

Avoid guaranteed returns, misleading “risk-free” claims, undisclosed influencer compensation and statements suggesting government approval. Explain volatility, custody risks, liquidity risk and the possibility of regulatory change.

7. Establish governance

Assign responsibility for compliance, security, finance, complaints and incident response. Maintain board-level oversight for material AML, cyber and customer-asset risks.

Common Mistakes to Avoid

• Assuming crypto is illegal because it is not legal tender—or assuming it is fully approved because it is taxed.
• Launching an exchange before determining FIU-IND and AML obligations.
• Treating a decentralized architecture as automatic exemption from customer-facing responsibilities.
• Failing to track crypto-to-crypto swaps and transfers between personal wallets.
• Ignoring TDS because the transaction did not involve rupees.
• Marketing a token as a guaranteed investment or substitute for regulated financial products.
• Mixing customer and company assets without clear custody controls.
• Using offshore entities without analyzing Indian user targeting and regulatory nexus.
• Retaining inadequate records for tax audits, law-enforcement requests or customer disputes.

What India’s Crypto Policy Means for AI and Web3 Founders

AI and blockchain startups increasingly combine token incentives, decentralized infrastructure, data marketplaces and automated financial features. This creates additional complexity: a token may reward model contributors, pay for compute, govern a protocol or provide access to an investment-like ecosystem.

Founders should separate technical architecture from legal assumptions. A non-custodial protocol may reduce certain operational risks, but a front end, hosted wallet, rewards programme, Indian marketing campaign or controlled treasury can still create obligations. Build compliance into the product requirements: identity flows, transaction limits, audit logs, sanctions controls, data minimization and user disclosures should be designed before launch rather than retrofitted after a regulator, bank or investor raises concerns.

Frequently Asked Questions

Is crypto legal in India?

Private cryptoassets are not generally treated as legal tender or government-backed currency. Individuals may hold and transfer many digital assets, but activity is subject to tax, AML and potentially other sector-specific requirements.

What is the crypto tax rate in India?

Income from transfer of specified VDAs is generally taxed at 30%, plus applicable surcharge and cess, under the relevant Income-tax Act provisions. The treatment of deductions, losses and particular transactions should be reviewed with a tax professional.

Do crypto exchanges need FIU-IND registration?

A VDA service provider carrying out covered activities for or on behalf of another person may need to register with FIU-IND and comply with PMLA-related AML obligations. The answer depends on the exact business model and customer flow.

Is crypto trading taxed even when I swap one token for another?

A token-for-token exchange can constitute a transfer for tax purposes. Keep detailed records of both assets, their fair value, acquisition cost and the transaction date.

Are offshore exchanges safe for Indian users?

Offshore status does not guarantee compliance, asset protection or access to withdrawals. Users should assess registration, KYC controls, custody, terms, tax reporting and the platform’s ability to serve Indian residents.

Apply for AI Grants India

Building an AI, Web3 or deep-tech company in India? Apply to AI Grants India for support and opportunities designed to help ambitious Indian founders move from research and prototype to responsible growth.