In a significant regulatory move, India’s Financial Intelligence Unit‑India (FIU‑IND) has formally flagged fifteen cryptocurrency exchanges and related service providers for falling short of the country’s anti‑money‑laundering (AML) requirements. The action, announced in early September 2026, underscores the Indian government’s growing determination to bring the rapidly expanding digital asset sector under the same rigorous oversight applied to traditional financial institutions. The FIU‑IND, which functions as the nation’s central body for collecting, analysing, and disseminating financial intelligence, issued non‑compliance notices to the fifteen entities after a comprehensive audit revealed a series of lapses. These lapses range from inadequate customer due‑diligence procedures and insufficient transaction monitoring to the failure to file timely suspicious transaction reports (STRs).
While the notice does not name the platforms publicly, industry observers have identified a mix of domestic exchanges, international operators with Indian user bases, and a few wallet providers that facilitate peer‑to‑peer crypto transactions. ### Why the crackdown matters India’s cryptocurrency market has exploded over the past few years, with an estimated 150 million users and a daily trading volume that frequently surpasses $5 billion. This growth has attracted both legitimate investors and illicit actors seeking to exploit the perceived anonymity and speed of blockchain‑based transfers. The government’s earlier attempts to regulate the sector—most notably the 2022 amendment to the Income Tax Act that imposed a 30 percent tax on crypto gains and a 1 percent TDS on transactions—were largely aimed at revenue generation and basic oversight.
However, the FIU‑IND’s latest move signals a shift toward a more granular, compliance‑driven framework that aligns with global standards set by the Financial Action Task Force (FATF). ### Specific AML deficiencies identified The FIU‑IND’s audit highlighted several recurring deficiencies across the fifteen platforms: 1.
**Weak Know‑Your‑Customer (KYC) protocols** – Many platforms relied on superficial identity verification, often accepting only basic information without robust document validation or biometric checks. 2. **Inadequate transaction monitoring** – The entities failed to implement real‑time monitoring systems capable of flagging high‑risk patterns, such as rapid, large‑value transfers or repeated transactions to known high‑risk jurisdictions.
3. **Delayed or missing Suspicious Transaction Reports** – Several platforms either did not file STRs within the statutory 30‑day window or omitted critical details, hampering the FIU‑IND’s ability to trace potentially illicit flows.
4. **Insufficient record‑keeping** – Audit logs, wallet addresses, and transaction histories were not retained for the mandated five‑year period, contravening both Indian law and FATF recommendations. 5.
**Lack of internal AML controls** – Many firms did not have dedicated compliance officers or formal AML policies, resulting in ad‑hoc decision‑making rather than systematic risk assessment. These shortcomings collectively expose the Indian financial system to heightened risk of money‑laundering, terrorist financing, and other illicit activities.
By issuing non‑compliance notices, the FIU‑IND is effectively giving the flagged platforms a statutory deadline—typically 30 days—to rectify the identified gaps, submit corrective action plans, and demonstrate adherence to the Prevention of Money Laundering Act (PMLA) and the associated rules for virtual digital asset service providers (VDASPs). ### Potential consequences for non‑compliant platforms If a platform fails to meet the FIU‑IND’s remediation timeline, the consequences can be severe. Under the PMLA, the FIU‑IND is empowered to impose monetary penalties of up to ₹10 crore (approximately $1.2 million) per violation, suspend the entity’s licence, or even direct the seizure of assets.
Moreover, repeated non‑compliance could trigger criminal proceedings against senior executives, including imprisonment of up to five years. The regulatory environment is further complicated by the upcoming Digital Asset Regulation Bill, expected to be tabled in Parliament later this year, which would introduce a licensing regime and stricter reporting obligations for all crypto‑related entities operating in India.
### Industry reaction and next steps The crypto community’s response has been a mixture of concern and cautious optimism. Major exchanges have publicly pledged to cooperate with the FIU‑IND, emphasizing that they have already invested heavily in compliance infrastructure.
Some smaller platforms, however, have expressed anxiety over the cost and technical challenges of overhauling their AML frameworks, warning that the heightened regulatory burden could drive them out of the Indian market. Analysts predict that the FIU‑IND’s crackdown will accelerate consolidation within the sector, with larger, well‑capitalised exchanges acquiring smaller, less compliant players to achieve economies of scale in compliance. In parallel, fintech firms that specialize in AML technology are likely to see a surge in demand for solutions such as AI‑driven transaction monitoring, automated KYC verification, and blockchain analytics tools that can trace the movement of funds across multiple wallets and chains. ### Broader implications for global crypto regulation India’s decisive action adds to a growing global trend of regulators tightening AML oversight of digital assets.
The United States, the European Union, and several Asian economies have recently introduced or are in the process of implementing stricter reporting standards for crypto transactions, often referencing the FATF’s “Travel Rule.” By aligning its enforcement with these international norms, India not only protects its own financial system but also positions itself as a responsible participant in the global crypto ecosystem, potentially attracting institutional investors who seek jurisdictions with clear, enforceable rules. ### What users and investors should do For crypto users in India, the FIU‑IND’s notices serve as a reminder to conduct due diligence when selecting a platform.
Investors should verify that an exchange is registered with the Reserve Bank of India (RBI) as a recognized VDASP and that it has a documented AML policy, a dedicated compliance officer, and a track record of filing timely STRs. Users are also encouraged to retain their own transaction records, employ hardware wallets for long‑term storage, and stay informed about regulatory updates that may affect the legality or tax treatment of their holdings. In summary, the FIU‑IND’s identification of fifteen crypto platforms for AML lapses marks a pivotal moment in India’s effort to bring the burgeoning digital asset sector under robust regulatory scrutiny.
By demanding concrete remedial actions, the agency aims to close critical gaps that could otherwise be exploited for illicit purposes, thereby safeguarding the integrity of the nation’s financial system while fostering a more transparent and trustworthy environment for legitimate crypto innovation.