India guide / Regulation and access10 min read • Reviewed 2 Aug 2026
Is crypto legal in India? What FIU registration means
“Legal or illegal” is too blunt for the current Indian framework. Tax rules, anti-money-laundering duties, banking checks, legal-tender status and consumer protection answer different questions.
Start by asking: legal for which activity?
Holding an asset, operating an exchange, accepting payment, moving money across borders, advertising a product and deducting tax are not the same legal activity. A useful answer identifies the transaction, the parties, the service and the date instead of applying one label to the entire crypto ecosystem.
The current framework recognizes VDAs in tax law and brings specified service-provider activities into anti-money-laundering reporting. It also leaves material market, custody and customer-protection risks.
Six statements that should not be mixed together
Indian income-tax rules expressly address VDAs, including tax on transfer, TDS and transaction reporting.
Specified VDA services operating for Indian users fall within PMLA reporting and record-keeping requirements.
Registration identifies a VDA service provider as a reporting entity for AML/CFT compliance.
Crypto is not sovereign Indian currency and should not be described as RBI-backed money.
Tax or FIU treatment does not certify a token, exchange, reserve, custody model or return.
Government notices continue to warn that crypto products can be highly risky and regulatory recourse may be limited.
What FIU-IND registration actually covers
India brought activities such as VDA-to-fiat exchange, VDA-to-VDA exchange, transfers, safekeeping or administration, and specified issuer-related financial services into the PMLA framework when carried on as a business for another person. Providers serving Indian users can have obligations even when based offshore.
Registration makes the provider a reporting entity responsible for measures such as customer due diligence, record keeping, suspicious transaction reporting and other AML/CFT controls described by FIU-IND. It is a compliance status—not a rating of the product.
What registration does not prove
- That customer assets are fully reserved or segregated.
- That withdrawals will always remain available.
- That the platform is solvent or immune from a cyber incident.
- That a listed token is lawful in every use case or suitable for you.
- That losses are insured or covered by an investor-protection fund.
- That FIU-IND, RBI or the Government recommends the provider.
Banking access still involves due diligence
RBI clarified that banks should not rely on the former 2018 circular that was set aside by the Supreme Court. Banks and other regulated entities may still apply KYC, AML, CFT and applicable FEMA checks. That is why a transfer can be reviewed even when a platform remains accessible to Indian customers.
A practical verification sequence
- Identify the provider’s exact legal entity and the service you will use.
- Check current FIU-IND notices and provider disclosures rather than an old screenshot.
- Read withdrawal, custody, complaint, suspension and governing-law terms.
- Confirm tax records and INR/crypto exit routes before depositing.
- Use a controlled operational test and limit concentration on one platform.
- Get professional advice for cross-border, business, token-issuance or enforcement questions.
Check the source