Apply for AI Grants India

India’s crypto framework is best understood as a regulated-taxed-but-not-legal-tender model. Virtual digital assets (VDAs), including many cryptocurrencies, tokens and NFTs, are not recognised as currency or legal tender, yet transactions can create tax obligations and certain crypto businesses fall within anti-money-laundering supervision.

For investors, founders, exchanges and Web3 teams, the central challenge is regulatory overlap. Income-tax rules govern gains and withholding; the Prevention of Money Laundering Act (PMLA) can apply to specified VDA service providers; company, consumer-protection, data, advertising, foreign-exchange and securities rules may also become relevant depending on the product.

This guide explains Indian crypto regulations, the current compliance architecture, practical obligations and key risks. It is informational—not legal or tax advice—and businesses should obtain advice based on their exact activities, customers and transaction flows.

What Are Indian Crypto Regulations?

“Indian crypto regulations” refers to the collection of laws, tax rules, regulatory notices and enforcement practices affecting crypto assets and related businesses in India. Unlike jurisdictions with one comprehensive crypto-assets act, India currently uses a multi-regulator and activity-based approach.

The legal treatment depends on what an asset or business actually does:

• Investment or trading: usually raises income-tax, reporting and source-of-funds questions.
• Exchange or transfer services: may trigger PMLA obligations when the activity falls within a specified VDA service.
• Custody or wallets: can create cybersecurity, user-protection and AML risks.
• Payments or settlement: may collide with the Reserve Bank of India’s rules on payment systems, money and foreign exchange.
• Tokenised fundraising: may involve securities-law, company-law or collective-investment concerns.
• Gaming, NFTs and DeFi: require analysis of the underlying business model, not merely the label “crypto.”

The same token can therefore have different regulatory consequences depending on its use, issuer, users and economic rights.

Is Cryptocurrency Legal in India?

Crypto ownership and trading are not generally prohibited merely because an asset is a cryptocurrency. However, crypto is not legal tender in India. Private virtual currencies cannot be represented as Indian rupees, and businesses cannot assume that a token is automatically permitted for payments or settlement.

This distinction matters:

• You may be able to hold or transfer a crypto asset, subject to applicable law.
• A crypto transaction may be taxable even if the asset is not legal tender.
• A business dealing in crypto may need AML registration and controls.
• A token may create additional obligations if it resembles a security, deposit, payment instrument or investment product.

The absence of a blanket prohibition should not be treated as a blanket approval. A compliant operating model must examine each activity separately.

India’s Main Crypto Regulatory Authorities

Several authorities may influence crypto activity in India:

Ministry of Finance and Department of Revenue

The Ministry of Finance shapes the tax and AML framework. The Department of Revenue has issued notifications bringing specified VDA-related activities within the PMLA framework and administers important tax provisions.

Financial Intelligence Unit–India

The Financial Intelligence Unit–India (FIU-IND) receives and analyses reports connected with suspicious financial activity. VDA service providers covered by the PMLA must generally register with the FIU-IND and maintain prescribed AML and reporting systems.

Income Tax Department

The Income Tax Department administers VDA taxation, including the special rate on certain gains and tax deducted at source (TDS) under Section 194S of the Income-tax Act, 1961.

Reserve Bank of India

The RBI regulates banking, payment systems, foreign exchange and monetary matters. It does not treat private crypto assets as sovereign currency. Crypto businesses must be especially careful when their product involves INR wallets, payment aggregation, remittances, lending, deposits or cross-border settlement.

Securities and Exchange Board of India

SEBI may become relevant where a token or arrangement has characteristics of a security, investment contract, collective investment scheme or regulated market activity. Token labels do not determine legal classification.

Other authorities

Depending on the model, businesses may also need to consider the Ministry of Corporate Affairs, Competition Commission, consumer authorities, cybercrime agencies, state regulators and data-protection requirements.

Crypto Tax Rules in India

India introduced specific tax provisions for VDAs through the Finance Act, 2022. The key rules are as follows.

30% tax on VDA income

Section 115BBH generally taxes income from the transfer of a VDA at 30%, plus applicable surcharge and health and education cess. The provision applies broadly to income from transfer rather than only to conventional spot trading profits.

Important restrictions include:

• No deduction is generally allowed for expenses other than the cost of acquisition.
• Loss from VDA transfers cannot generally be set off against income under another head.
• Such loss cannot generally be carried forward for future adjustment.
• Transaction-by-transaction records are essential for calculating taxable income.

The exact result can depend on the asset, transaction structure, residency and nature of the income. Professional advice is particularly important for derivatives, mining, staking, airdrops, lending and DeFi activity.

1% TDS under Section 194S

Section 194S generally requires 1% TDS on consideration for transfer of a VDA, subject to statutory conditions and thresholds. The obligation may be operationally difficult where an exchange, broker, buyer or intermediary is involved.

Businesses should establish:

• Who is the deductor in each transaction flow.
• Whether the transaction crosses the applicable threshold.
• How TDS is handled for INR and crypto consideration.
• How Form 26Q, certificates and customer statements are reconciled.
• How failed, reversed or partially settled trades are reported.

Incorrect TDS handling can expose a platform to interest, penalties, customer disputes and reconciliation failures.

GST considerations

GST treatment can vary according to the supply. Trading of crypto assets, exchange fees, custody charges, brokerage, software services and subscription products should not be assumed to have identical treatment. Businesses should document the service supplied, place of supply, invoice flow and whether the transaction is principal-to-principal or agency-based.

Because GST treatment for many novel crypto models can be fact-specific, obtain a written tax position before launching a product.

PMLA and FIU-IND Compliance for Crypto Businesses

India’s AML framework is one of the most important parts of the current crypto regime. Specified VDA activities can make a business a “reporting entity” under the PMLA framework.

Covered activities may include, depending on the statutory notification and actual business model:

• Exchange between VDAs and fiat currencies.
• Exchange between one or more forms of VDAs.
• Transfer of VDAs.
• Safekeeping or administration of VDAs or instruments enabling control over VDAs.
• Participation in or provision of financial services related to an issuer’s offer and sale of a VDA.

A covered business should generally build an AML programme before serving customers, not after receiving an FIU query.

Core AML controls

A robust programme normally includes:

• Customer identification and verification.
• Beneficial-owner identification for companies and trusts.
• Risk-based customer classification.
• Enhanced due diligence for high-risk customers and jurisdictions.
• Transaction monitoring and blockchain analytics.
• Sanctions and politically exposed person screening.
• Suspicious transaction reporting where required.
• Record retention and audit trails.
• A designated compliance officer and escalation process.
• Employee training and periodic control testing.

Blockchain transparency does not replace KYC. A public ledger can show movement of funds, but it may not identify the real person controlling an address or explain the source of wealth.

FIU registration is not a universal business licence

FIU-IND registration should not be described as a general approval of a crypto product. Registration supports AML supervision; it does not automatically confirm that the business is compliant with tax, securities, payments, consumer, data or foreign-exchange laws.

Indian Crypto Regulations for Exchanges and Custodians

Crypto exchanges operating in India face a combination of customer-protection, AML, tax, technology and governance expectations. Offshore incorporation does not necessarily eliminate Indian exposure if the platform targets Indian customers, supports INR flows, markets in India or conducts covered activities involving Indian users.

An exchange should assess:

1. Business scope: spot trading, derivatives, lending, staking, custody, OTC or token launches.
2. Customer geography: India-only, global, or mixed restricted jurisdictions.
3. Funds flow: bank accounts, payment processors, wallets and third-party settlement.
4. Control environment: KYC, AML, fraud prevention, complaints and incident response.
5. Tax operations: TDS, invoices, statements and reconciliation.
6. Asset governance: listing due diligence, market manipulation controls and delisting procedures.
7. Technology risk: key management, access controls, smart-contract review and disaster recovery.

Customer terms should clearly disclose volatility, custody risks, withdrawal limitations, cyber incidents, conflicts, fees and the absence of sovereign protection. Marketing should not imply guaranteed returns or regulatory endorsement.

Crypto, Securities and Token Offerings

A token can be regulated according to its economic rights rather than its technical design. If holders expect returns from the managerial efforts of an issuer or receive rights resembling shares, debt, units or other investment interests, securities-law analysis may be necessary.

Founders considering a token launch should document:

• The token’s rights and restrictions.
• Allocation, vesting and treasury controls.
• Whether proceeds finance a common enterprise or project.
• Governance and promoter involvement.
• Secondary-market arrangements.
• Investor location and solicitation strategy.
• Whether the token is marketed as an investment.

Avoid relying on labels such as “utility token” or “governance token” without analysing the actual economics and promotional language.

Foreign Exchange and Cross-Border Issues

Crypto businesses with overseas entities, foreign investors, Indian residents or cross-border wallets should review the Foreign Exchange Management Act (FEMA), overseas investment rules, import-export treatment and transfer-pricing implications.

Potential issues include:

• Receiving investment from non-residents.
• Moving intellectual property or software between group companies.
• Paying overseas vendors in crypto or fiat.
• Indian residents investing through foreign exchanges.
• Cross-border remittances disguised as token transfers.
• Repatriation of proceeds and valuation of digital assets.

A crypto transfer is not automatically outside foreign-exchange regulation simply because it occurs on a blockchain.

Data Protection, Cybersecurity and Consumer Protection

Crypto platforms process identity documents, financial data, device information, wallet addresses and behavioural data. They should implement privacy notices, purpose limitation, access controls, vendor governance, retention schedules and breach-response procedures consistent with applicable Indian data-protection requirements.

Security controls should include:

• Multi-party approval for treasury movements.
• Hardware security modules or secure key-management systems.
• Privileged-access management.
• Cold-storage policies and withdrawal limits.
• Independent smart-contract and infrastructure audits.
• Penetration testing and vulnerability disclosure.
• Immutable compliance and transaction logs.
• Tested incident-response and business-continuity plans.

Consumer compliance also matters. Platforms should provide a transparent grievance process, clear risk disclosures and accurate fee and execution information. Dark patterns, misleading yield claims and “guaranteed profit” messaging can create substantial enforcement and reputational risk.

Practical Compliance Checklist for Indian Crypto Startups

Before launch, a founder should complete the following workstream:

• Map every product feature to its legal and regulatory implications.
• Classify tokens and document the classification rationale.
• Determine whether the business performs a covered VDA service.
• Complete FIU-IND registration where applicable.
• Appoint responsible AML and compliance personnel.
• Implement KYC, sanctions screening and beneficial-owner checks.
• Configure transaction monitoring and suspicious-activity escalation.
• Build tax, TDS, GST and accounting processes.
• Review FEMA and cross-border payment flows.
• Prepare customer agreements, privacy notices and risk disclosures.
• Establish listing, custody, treasury and incident-response policies.
• Restrict high-risk jurisdictions and customers where necessary.
• Test controls through internal audits and independent reviews.

Keep an evidence file containing policies, risk assessments, training records, vendor due diligence, customer files, monitoring alerts, reports and board-level approvals. Regulators and banking partners typically assess whether controls work in practice, not merely whether a policy exists.

Common Mistakes to Avoid

• Treating crypto as unregulated because no single crypto law exists.
• Assuming offshore incorporation removes Indian obligations.
• Confusing FIU registration with full regulatory approval.
• Ignoring TDS because the platform settles trades in crypto.
• Listing tokens without legal, technical and sanctions due diligence.
• Using blockchain analytics as a substitute for KYC.
• Marketing yield products without analysing lending, securities or deposit risks.
• Commingling customer and company assets.
• Failing to preserve records and explain transaction histories.
• Launching first and designing compliance after a bank, auditor or regulator asks questions.

What Could Change in India’s Crypto Policy?

India’s framework may evolve through legislation, tax amendments, judicial interpretation, FIU directions, RBI policy and international coordination. Global standards from the Financial Action Task Force, travel-rule implementation, stablecoin developments and central-bank digital currency policy may also influence future requirements.

Businesses should monitor official notifications rather than relying on social-media summaries. A quarterly regulatory review, change log and documented owner for each compliance obligation can prevent outdated assumptions from becoming operational failures.

Frequently Asked Questions

Is crypto banned in India?

India does not generally treat all crypto ownership or trading as an outright criminal offence, but crypto is not legal tender. Tax, AML and other laws can apply, and particular products or activities may be prohibited or regulated.

Do Indian crypto investors pay tax?

Income from transfer of VDAs is generally subject to the special tax regime, including a 30% rate under Section 115BBH, subject to applicable surcharge and cess. Section 194S may also require 1% TDS on consideration, subject to conditions and thresholds.

Must every crypto startup register with FIU-IND?

Not every blockchain company performs a covered VDA service. However, businesses carrying out specified exchange, transfer, custody or related financial activities may be reporting entities and need FIU-IND registration and AML controls.

Can an Indian company launch a token?

Possibly, but the answer depends on the token’s rights, distribution, marketing, users, funds flow and economic substance. Securities, AML, tax, foreign-exchange, consumer and company-law analysis may all be required.

Is a foreign crypto exchange outside Indian law?

Not necessarily. Indian users, Indian marketing, INR access, covered activities and other connecting factors can create Indian legal and compliance exposure. The platform should obtain a jurisdiction-specific assessment before targeting India.

Apply for AI Grants India

Building compliance, risk-monitoring or blockchain infrastructure for the Indian market? Apply to AI Grants India for support and opportunities designed for Indian AI founders.