How to Start a Crypto Exchange in India: Legal Requirements & Complete Compliance Guide (2026)

India has one of the largest and fastest-growing cryptocurrency user bases in the world. Millions of Indians actively trade digital assets, and interest in building and operating a crypto exchange in India has grown steadily since the Supreme Court lifted the RBI’s banking ban in 2020. Yet many founders and entrepreneurs are unsure about what the law actually requires, which licenses they need, and what compliance steps must be completed before going live.

This guide answers those questions directly. It covers the current legal status of crypto in India, the exact registrations and compliances required, the tax rules, and the practical steps to set up a compliant exchange. Every answer is based on current Indian law as of 2026. No speculation, no filler.

Is Crypto Trading Legal in India?

Yes. Crypto trading is legal in India as of 2026. There is no law that bans individuals from buying, selling, or holding cryptocurrencies. The confusion around legality stems from two historical events: the RBI circular of 2018 that prohibited banks from dealing with crypto businesses, and years of government uncertainty about whether to ban or regulate digital assets.

The RBI circular was struck down by the Supreme Court in March 2020 in the Internet and Mobile Association of India v. Reserve Bank of India case.^[1] Since then, banks have been permitted to provide services to crypto businesses. There is no blanket ban on private cryptocurrency in India, though the government has reserved the right to introduce one through future legislation.

What does exist is a tax framework and an anti-money laundering registration requirement. These are the two most important legal pillars every exchange must address.

Current Cryptocurrency Laws in India

India does not yet have a single dedicated cryptocurrency law. Instead, several existing laws have been extended or amended to cover virtual digital assets (VDAs), which is the official term the Indian government uses for cryptocurrencies and NFTs.

Finance Act 2022: The VDA Tax Framework

The Finance Act 2022 introduced Sections 115BBH and 194S into the Income Tax Act, 1961. These sections define virtual digital assets and establish the tax treatment for all transactions involving them. Key provisions are:

• All gains from the transfer of VDAs are taxed at a flat rate of 30%, regardless of the holding period or the taxpayer’s income slab.
• A 1% Tax Deducted at Source (TDS) applies on every VDA transaction above specified thresholds. Exchanges are responsible for deducting and remitting this TDS.
• Losses from one VDA cannot be offset against gains from another VDA or any other income head.
• The cost of acquisition can be deducted, but no other expenses are allowed as deductions.

This framework makes India’s crypto tax regime one of the strictest in the world. It does not make crypto illegal; it simply treats gains as taxable income at a high fixed rate.

Prevention of Money Laundering Act (PMLA): FIU-IND Registration

In March 2023, the Ministry of Finance brought Virtual Digital Asset Service Providers (VDA-SPs) under the Prevention of Money Laundering Act, 2002.^[2] This means every entity operating as a crypto exchange, custodian, or VDA transfer service in India must register with the Financial Intelligence Unit of India (FIU-IND) as a Reporting Entity.

After this notification, several major international exchanges that had not completed their FIU-IND registration received show-cause notices and had their URLs blocked by Indian authorities. This is now the single most critical compliance step for any exchange operating in India.

Crypto Regulation India: Key Authorities

Multiple regulators have jurisdiction over different aspects of a crypto exchange. Understanding which authority governs what is essential before you start.

Step-by-Step Compliance for a Crypto Exchange in India

The following steps represent the minimum legal requirements to operate a crypto exchange in India lawfully in 2026. Skipping any of these steps exposes the business to regulatory action, blocking, or criminal liability under PMLA.

Step 1: Incorporate a Legal Entity Under Companies Act 2013

You must register a company in India before operating an exchange. Most founders choose a Private Limited Company under the Companies Act 2013, as it offers limited liability, credibility with banking partners, and a clear structure for future investment. The registration is done through the Ministry of Corporate Affairs (MCA) portal. You will need a Director Identification Number (DIN), a Digital Signature Certificate (DSC), and a Memorandum of Association (MoA) that includes VDA or fintech-related objects in its business activity description.

An LLP is also legally possible, but banks and payment gateways tend to be more cooperative with Private Limited Companies in the crypto sector, given the compliance scrutiny involved.

Step 2: Obtain GSTIN Registration

A crypto exchange earns revenue primarily through trading fees charged to users. These fees are classified as a service under the GST framework and attract an 18% GST rate. GSTIN registration is compulsory once your annual turnover crosses ₹20 lakh (₹10 lakh for special category states), but in practice, any exchange with active users will cross this threshold quickly. You should register for GST before going live rather than after. GST returns must be filed monthly (GSTR-1 and GSTR-3B), and non-compliance attracts interest and penalties.

Step 3: Register with FIU-IND Under PMLA

This is the most critical compliance step for any crypto exchange in India. After the March 2023 PMLA notification, all VDA Service Providers must register on the FIU-IND reporting portal at fintechwithfiu.in. The registration requires:

• Details of the entity, its directors, and ultimate beneficial owners
• A written AML (Anti-Money Laundering) and CFT (Countering the Financing of Terrorism) policy
• Appointment of a Principal Officer responsible for PMLA compliance and suspicious transaction reporting
• Evidence of KYC procedures for user onboarding

Once registered, the exchange must file regular reports with FIU-IND, including Cash Transaction Reports (CTRs) and Suspicious Transaction Reports (STRs) whenever applicable. Operating without this registration is a direct violation of PMLA and has already resulted in blocking of major exchange websites in India.

Step 4: Implement KYC and AML Procedures

Under PMLA, all registered Reporting Entities must conduct know-your-customer (KYC) verification for every user before allowing them to trade. The KYC requirements for a crypto exchange in India include:

• Government-issued photo ID (Aadhaar, PAN card, Passport, or Voter ID)
• Proof of address
• PAN card is particularly important as it links to the Income Tax database and enables TDS compliance
• For high-value accounts: Enhanced Due Diligence (EDD) with source of funds documentation

Transaction monitoring must also be ongoing. The exchange must flag and report unusual transaction patterns, large cash equivalents, and transactions involving high-risk geographies or sanctioned individuals. Crypto exchange compliance procedures must be documented in a written policy reviewed at least annually.

Step 5: TDS Compliance Under Section 194S

Every exchange operating in India is responsible for deducting 1% TDS on VDA transactions above the prescribed thresholds and depositing it with the Income Tax Department. The current thresholds are ₹50,000 per year for specified persons (individuals or HUFs with turnover below ₹1 crore or profession income below ₹50 lakh) and ₹10,000 for all other users. The exchange must file Form 26QE or 26Q quarterly and issue TDS certificates to users. Failure to deduct or deposit TDS on time attracts interest at 1.5% per month plus penalties.

Step 6: Open a Business Bank Account

Since the Supreme Court ruling in 2020, Indian banks are legally permitted to serve crypto businesses. However, in practice, many public sector banks remain cautious. Private banks and new-age digital banks are generally more willing to open accounts for registered crypto companies with proper compliance documentation. You will need your Certificate of Incorporation, GSTIN, FIU-IND registration acknowledgment, and AML policy document when approaching a bank. Having all compliance paperwork ready before approaching banks significantly improves the chances of account approval.

Step 7: Obtain Payment Gateway Integration

Users need to deposit and withdraw Indian Rupees (INR) on the exchange. This requires a payment gateway that supports UPI, NEFT, RTGS, and IMPS. Several payment gateway providers work with compliant crypto exchanges in India. You will be required to submit your FIU-IND registration, KYC policy, AML framework, and company documents during their onboarding process. Some gateways also require a minimum transaction history or escrow arrangement before activation.

SEBI and the Future of Crypto Regulation India

The Indian government has signalled on multiple occasions that it intends to create a formal regulatory framework for crypto assets rather than ban them.^[3] In 2023, the government submitted a synthesis paper to the G20 on crypto regulation, recommending a globally coordinated approach. SEBI has been identified as the likely primary regulator for crypto assets, particularly those that function similarly to securities or investment products.

As of 2026, SEBI has not yet issued binding regulations specifically for crypto exchanges. However, the Inter-Ministerial Committee and SEBI’s own consultation papers suggest that a licensing regime similar to stock brokers or investment advisors may be introduced. Exchanges planning to operate long-term in India should monitor SEBI circulars and the progress of the proposed Cryptocurrency and Regulation of Official Digital Currency Bill, which has been listed on Parliamentary business agendas multiple times.

CBDC India: The Digital Rupee (e-Rupee)

The Reserve Bank of India launched its Central Bank Digital Currency, called the Digital Rupee or e-Rupee, in 2022 as a pilot.^[4] The CBDC India pilot has expanded in scope through 2024 and 2025, with participation from multiple banks and retail use cases being tested.

The e-Rupee is not a cryptocurrency in the traditional sense. It is a digital form of the Indian Rupee issued and backed by the RBI. It carries the same legal tender status as physical currency. Private crypto exchanges are not involved in the issuance or distribution of the e-Rupee. However, exchanges should be aware of the CBDC framework because future payment integration requirements or settlement mechanisms for INR deposits and withdrawals may involve CBDC rails as the RBI scales the program.

Blockchain Regulation India: What the Law Says

India does not have a specific blockchain regulation law. The technology itself is unregulated. Blockchain is used across government initiatives including land records, supply chain, and identity management projects. The National Blockchain Framework was released by MeitY (Ministry of Electronics and Information Technology) in 2021 as a policy document, but it carries no binding legal force for private crypto businesses.

What this means practically is that building and operating a blockchain-based exchange is legally permissible, but the activities the exchange enables (trading, custody, transfer of VDAs) are subject to the tax and PMLA laws described in this guide. The technology layer is free; the financial activity layer is regulated.

How to Start a Crypto Exchange in India: Checklist

Below is a condensed checklist for anyone planning to start a crypto exchange in India in 2026. This covers both legal and operational requirements.

For the technical side, a fully functional Crypto Exchange Platform Development project requires a matching engine, wallet system, KYC module, admin dashboard, and trading interface as core components. The compliance stack (TDS engine, AML monitoring, STR reporting) must be built into the platform from day one, not added later.

Common Mistakes Founders Make

Launching Before FIU-IND Registration

Several exchanges have made the mistake of launching to users before completing FIU-IND registration. The PMLA applies from the first day of operation, not from the day you choose to register. Operating without registration is a criminal offence under PMLA with penalties including fines and imprisonment for directors.

Not Deducting TDS From Day One

The 1% TDS obligation applies from the first transaction. Many early-stage exchanges delay implementing the TDS engine, assuming they will add it once trading volumes grow. This is incorrect. The TDS obligation exists regardless of volume, and retrospective penalties for non-deduction are significant.

Using a Personal Bank Account

Running exchange operations through a personal or director’s bank account is a serious mistake. It creates tax and PMLA liability for the individual and makes regulatory audits extremely difficult to manage. A separate business account is mandatory from day one.

No Written AML Policy

FIU-IND requires a documented AML and CFT policy as part of registration. A vague or copy-pasted policy document is insufficient. The policy must reflect your actual user onboarding process, transaction monitoring thresholds, and reporting procedures. Regulators have rejected registrations and issued penalties for inadequate policies.

Cost and Timeline to Launch a Compliant Exchange

These figures are estimates based on current market rates in India. Legal and compliance costs vary depending on the complexity of your structure and the experience of your advisors. The platform build cost depends heavily on whether you are building from scratch or using a white label base. Understanding the full process to build a crypto exchange from scratch will help you plan your budget and timeline more accurately before committing to a development partner.^[5]

Ongoing Compliance Obligations After Launch

Getting registered is not the end of your compliance obligations. A crypto exchange in India must maintain the following on an ongoing basis after going live.

Annual and Periodic Filings

• Monthly GST returns (GSTR-1 and GSTR-3B)
• Quarterly TDS returns (Form 26QE or 26Q) and TDS certificates to users
• Annual Income Tax Return for the company
• Annual FIU-IND compliance report (if applicable under your registration category)
• Regular STR and CTR filings with FIU-IND whenever thresholds are triggered
• Annual ROC filings under Companies Act 2013 (MGT-7, AOC-4)

Policy Reviews and Staff Training

PMLA requires Reporting Entities to train their staff on AML and KYC procedures at regular intervals. Your AML policy must be reviewed and updated whenever there is a material change in the regulatory environment or your business model. A compliance audit once a year by a qualified CA or legal firm is recommended.

Staying updated on crypto regulation in India requires following SEBI, RBI, and MCA official channels directly. Exchanges that rely on secondary news sources for regulatory updates often miss critical compliance notifications until after the deadline.^[6]