India Tightens Regulatory Oversight of Cryptocurrency Exchanges

Crypto Exchanges in India Face Stricter Scrutiny Under FIU's Revised AML Rules

On January 12, 2026, the Financial Intelligence Unit (FIU) of India rolled out revised Anti-Money Laundering (AML) and Combating the Financing of Terrorism (CFT) guidelines for cryptocurrency exchanges. The regulations mandate measures such as identity verification via "liveness detection," geo-location tracking during onboarding, and restrictions on anonymity-focused crypto tokens. These steps aim to tackle money laundering and terrorist financing risks linked to the burgeoning virtual digital asset (VDA) market — a market that remains officially unrecognized as legal tender under Indian law.

Why This Is Not 'Business as Usual'

The guidelines mark a departure from India’s previously ambiguous regulatory stance on cryptocurrencies. While VDAs were classified under the Prevention of Money Laundering Act (PMLA) in 2023 — a significant regulatory step in itself — the new FIU rules emphasize granular operational protocols. The "liveness detection" requirement, which leverages technologies like eye blinking or head movement during account creation, is an unprecedented move globally, thrusting India into the role of a trailblazer in crypto oversight. Additionally, the explicit discouragement of high-risk practices such as Initial Coin Offerings (ICOs) and anonymity-enhancing tokens signals the government’s active intent to de-risk the sector, moving beyond mere passive taxation or legislative classification.

The implications are profound. Until now, India’s crypto regulation mirrored a defensive posture: taxing and vaguely monitoring without clarity on licensing or operational practices. The new standards elevate this fragmented approach into a coordinated enforcement mechanism. But the move raises questions about resource requirements, implementation gaps, and whether oversight will unintentionally stifle innovation in blockchain-based systems.

The Institutional Machinery Behind Oversight

At the centre of this regulatory shift is the Financial Intelligence Unit (FIU), established under the PMLA to combat financial crimes. Tasked with ensuring compliance from VDA service providers, the FIU now requires crypto exchanges in India to:

• Identity Verification: Demand an additional identity and address proof, such as a passport or Aadhaar, beyond mobile and email verification via OTP.
• Liveness Detection: Capture a live selfie during onboarding to confirm physical presence and ownership.
• Geo-Location Tracking: Record latitude, longitude, timestamp, and IP address during account setup to ensure traceable onboarding.
• Records Preservation: Maintain client identifiers and transaction histories for at least five years.

Under the terms of the AML mandate incorporated in the PMLA, violations could invite significant penalties, including prosecution. But how effectively the FIU enforces compliance — particularly against platforms operating primarily overseas — is yet to be tested.

What the Data Shows Versus the Official Narrative

India’s framing of these guidelines claims compliance with Financial Action Task Force (FATF) standards — an international benchmark for combating financial crimes. But actual compliance readiness in India’s VDA sector is uncertain. A 2025 Ministry of Finance study revealed that over 40% of cryptocurrency transactions in India were routed through unregulated offshore platforms. Similarly, the FIU’s 2024 annual report noted only 72% of registered VDA providers submitted Suspicious Transaction Reports (STRs), despite their drawn-out obligations under the PMLA.

Beyond data gaps, operational scale matters. India hosts an estimated 150 million crypto investors, the second-largest globally. Yet, regulatory manpower within the FIU is limited to less than 300 officials. Bureaucratic capacity, or its lack thereof, remains the elephant in the room.

The Uncomfortable Questions

Skepticism is warranted when examining the implications of geo-location tracking, live selfies, and "penny-drop" bank verification mechanisms. On paper, these measures bolster oversight. In practice, they could disproportionately burden smaller exchanges with high compliance costs. Does the government risk driving crypto platforms underground or out of India entirely?

Additionally, adherence to FATF’s anti-terror financing mandates is undoubtedly necessary, but the guidelines fail to address the structural limitations around cross-border activity. For instance, anonymity-enhancing tokens may not be issued via Indian exchanges, but users can easily access them through international platforms. Without global harmonization, unilateral measures appear porous.

Lastly, the timing of these guidelines — ahead of Assembly Elections set for mid-2026 — may not be entirely apolitical. The narrative of cracking down on financial crimes could serve as a populist appeal, particularly when juxtaposed with earlier allegations accusing the government of regulatory inertia on crypto risks.

What South Korea Learned the Hard Way

India’s move mirrors efforts undertaken by South Korea in 2021, following revelations of widespread tax evasion and money laundering in its crypto market. Seoul implemented strict identity verifications, parallel to India’s "liveness detection." However, compliance costs forced nearly 75% of smaller exchanges out of operation within two years, concentrating market power among a few large players. This precedent cautions against overly severe crackdowns that inadvertently consolidate monopolies.

South Korea’s strategy also involved landmark collaboration between its Financial Supervisory Authority and foreign exchanges to track cross-border transfers — something India’s framework noticeably lacks. This gap could undermine enforcement against offshore evasion, even as domestic oversight strengthens.

Practice Questions for UPSC

Prelims Practice Questions

Frequently Asked Questions