The blockchain market in India has been rapidly growing, despite facing challenges from the government of India and certain regulators. While there were concerns about the government potentially prohibiting/banning the blockchain market, it is now clear that it is here to stay.
That said, the blockchain market has been affected by the hack against the cryptocurrency exchange WazirX, which wiped out USD325 million and affected 15 million investors in 2024 – and is currently subject to ongoing litigation. There has also been litigation initiated against the cryptocurrency exchange BitBNS over allegations that users have been unable to withdraw funds from their wallets since a cyber-attack that took place in 2022.
The regulatory framework around the Indian blockchain market is scattered, with certain regulators issuing piecemeal regulations particularly focused on tax and money laundering. However, there has been pressure on Indian banking and securities regulators to formulate an overarching framework to regulate the blockchain market, which will likely set the tone for the market over the next 12–24 months.
The blockchain market in India today is primarily focused on blockchain-based investments and trading activities. Blockchain technology-based payment is not a major business model, particularly since cryptocurrency is not a widely accepted payment method.
Most popular cryptocurrency exchange platforms in India operate as custodial exchanges and offer a variety of financial products related to cryptocurrencies and other digital assets, such as non-fungible tokens (NFTs). Many cryptocurrency exchange platforms also facilitate person-to-person (P2P) cryptocurrency-fiat transactions, where the cryptocurrency exchange platform serves as an escrow agent in order to hold cryptocurrency in escrow until the purchaser-to-seller fiat transaction can be confirmed. This model of P2P transactions became especially popular in India because, until recently, Indian banks did not support fiat transactions related to cryptocurrency.
Ownership of a digital asset based on a blockchain network is determined solely based on general contract law. India does not have blockchain-specific regulations to determine the finality of the transfer of a digital asset via a blockchain network. Therefore, a digital asset would be considered transferred on the basis of contractually agreed parameters/the blockchain network protocol.
India’s Information Technology Act, 2000 (the “Information Technology Act”) legally recognises the validity of contracts formed through electronic means, stating that:
“Where in a contract formation, the communication of proposals, the acceptance of proposals, the revocation of proposals and acceptances, as the case may be, are expressed in electronic form or by means of an electronic record, such contract shall not be deemed to be unenforceable solely on the ground that such electronic form or means was used for that purpose”.
Therefore, blockchain-based contracts and transactions will be considered valid under Indian law, provided such contracts/transactions meet general requirements related to valid contracts – ie, offer and acceptance based on free will and lawful consideration and objects.
Indian law currently does not distinguish between digital assets based on a blockchain network. All digital assets on a blockchain network are subject to similar treatment under law, irrespective of their nature. Applicable regulations are not concerned with the nature of the digital asset, instead being primarily focused on income tax, prevention of money laundering and cybersecurity relating to digital assets.
The Securities and Exchange Board of India (SEBI), which regulates publicly traded Indian securities, currently does not have regulations for tokenised securities. Consequently, tokenised securities are not specifically classified or regulated under Indian law. However, SEBI does not permit publicly traded entities to tokenise their listed securities.
Stablecoins are also not specifically regulated under Indian law, and would be treated in the same manner as any other digital asset based on a blockchain network.
NFTs and other digital assets are also treated uniformly under applicable law in India.
Cryptocurrencies are not legal tender in India (other than the central bank digital currency of the Reserve Bank of India (RBI) – ie, fiat Indian rupees issued by the RBI in crypto form on a blockchain network, which will not be covered in this chapter). Legal tender must be accepted by the recipient as consideration to discharge a debt or financial obligation.
However, there is no restriction of the use of cryptocurrencies as consideration in a contract, since the consideration required to conclude a contract need not be cash or other forms of legal tender. That said, since cryptocurrencies are not legal tender, the recipient must agree to accept cryptocurrency as legal tender for the purpose of discharging the payer’s debt or obligation with respect to such contract.
Therefore, in theory, cryptocurrencies can be used to make payments. However, practically, there are challenges in using cryptocurrencies to make payments – particularly in view of the fact that the recipient of the cryptocurrency will be required to deduct 1% of the value of the cryptocurrency and deposit the same with tax authorities in favour of the payer.
There are no legal/regulatory issues relating to the use of digital assets in collateral arrangements in India. However, it is uncommon for banks and non-banking financial companies in India to issue loans secured against digital assets.
Smart contracts – ie, private contractual arrangements made in whole or in part by utilising agreed-upon computer code that executes across multiple “nodes” on a blockchain network – are enforceable under Indian law.
As discussed in the foregoing, the Information Technology Act recognises the validity of contracts formed through electronic means, as long as they are based on an offer and acceptance (involving free consent) with lawful consideration and objects. That said, Indian law requires all contracts to be stamped. Contracts that are not stamped are not admissible before a court of law and, consequently, would not be enforceable. Therefore, it is recommended that applicable stamp duty also be paid on smart contracts.
The blockchain market in India is currently regulated under three separate frameworks – the Income Tax Act, 1961 (the “Income Tax Act”), the Prevention of Money Laundering Act, 2002 (the “Prevention of Money Laundering Act”) and Directions by the Indian Computer Emergency Response Team, 2022 (the “CERT-In Cyber Security Directions”)
Each of these frameworks is particularly focused on virtual digital assets (VDAs) – ie, cryptocurrencies and NFTs – defined under the Income Tax Act as “(a) any information or code or number or token (not being Indian currency or foreign currency), generated through cryptographic means or otherwise, by whatever name called, providing a digital representation of value exchanged with or without consideration, with the promise or representation of having inherent value, or functions as a store of value or a unit of account including its use in any financial transaction or investment, but not limited to investment scheme; and can be transferred, stored or traded electronically; (b) a non-fungible token or any other token of similar nature, by whatever name called; (c) any other digital asset, as the Central Government may, by notification in the Official Gazette specify”.
Notably, the Finance Bill, 2025 seeks to expand the definition of VDA from 1 April 2026 to include “(d) any crypto-asset being a digital representation of value that relies on a cryptographically secured distributed ledger or a similar technology to validate and secure transactions, whether or not such asset is included in sub-clause (a) or sub-clause (b) or sub-clause (c)”.
Income Tax Act
The taxability of VDAs under the Income Tax Act is discussed in detail in 6. Tax.
Prevention of Money Laundering Act
The Prevention of Money Laundering Act regulates entities that engage in the following activities when carried out for or on behalf of another natural or legal person in the course of business:
The Prevention of Money Laundering Act applies equally to foreign companies where any of the above-mentioned activities occur outside India, to the extent that there is any nexus between such activities and India (eg, if they have customers in India). The Financial Intelligence Unit – India (FIU-IND) has clarified that VDA service providers operating in India (both offshore and onshore) and engaged in activities such as (i) exchange between VDAs and fiat currencies; (ii) transfer of VDAs; (ii) safekeeping or administration of VDAs; or (iv) instruments enabling control over VDAs are required to be registered with FIU-IND as “reporting entities” (REs), and to comply with the obligations mandated under the Prevention of Money Laundering Act. This obligation is activity-based and is not contingent on having a physical presence in India.
CERT-In Cyber Security Directions
The CERT-In Cyber Security Directions apply to:
The CERT-In Directions apply to entities located in India, and to those located outside India that have a territorial nexus to India (eg, if they render services to Indian customers). CERT-In has clarified that the CERT-In Directions are applicable to foreign firms that service Indian customers.
Entities engaged in the above activities are required to verify the identities of their users (KYC) and maintain KYC records for a period of five years. With respect to transaction records, such entities are required to maintain accurate information in a way that individual transactions can be reconstructed along with relevant elements, comprising information relating to identification of the relevant parties including:
An RE must register with FIU-IND to comply with its obligations under the Prevention of Money Laundering Act. To do so, the RE will need to set up an in-person meeting at the office of FIU-IND after submitting the following documents/information thereto:
FIU-IND is empowered to request any information/document it deems necessary to complete the registration process, and it can deny registration if it finds that the registering entity is not compliant with the Prevention of Money Laundering Act.
Advertisements of digital assets are not regulated in India. However, the Advertising Standards Council of India (ASCI), a self-regulatory body for advertisers, has published the Code for Self-Regulation in Advertising (the “ASCI Code”), which covers advertisements relating to digital assets. Advertisements broadcast over television networks are required to be compliant with the ASCI Code. Additionally, most large digital advertisement platforms are ASCI members bound by the ASCI Code.
The ASCI Code requires its members to ensure that advertisements for digital assets carry the following disclaimer:
“Crypto products and NFTs are unregulated and can be highly risky. There may be no regulatory recourse for any loss from such transactions”.
Additionally, the ASCI Code requires its members to comply with the following obligations in relation to advertisements of digital assets.
The Prevention of Money Laundering Act requires REs to register with FIU-IND and:
In view of the fact that FIU-IND registration of an RE is based on its corporate structure (including any beneficial interest), it would be advisable to appraise FIU-IND within seven days of any changes to the same.
There are no specific resolution or insolvency requirements/regimes for digital asset firms in India.
Digital asset firms will be subject to the standard corporate insolvency resolution process applicable to all corporate entities under the Insolvency and Bankruptcy Code, 2016. Digital assets in a corporate insolvency resolution process will be treated as property/assets and may be liquidated to pay off the debts of the insolvent entity.
There are no other applicable regulatory requirements in this jurisdiction.
While there is no restriction on the exposure to digital assets of entities regulated by the RBI, it would be advisable for such entities to refrain from any such exposure in view of the RBI’s negative stance on digital assets. The RBI has reportedly informally instructed its regulated entities to ensure that they do not facilitate transactions involving digital assets.
SEBI-regulated entities (such as mutual funds and alternative investment funds) are currently not permitted to have exposure to digital assets.
There are currently no regulatory sandboxes in India geared towards non-government-driven, blockchain-based projects.
India has implemented the Financial Action Task Force’s Recommendation 16 (Travel Rule) by requiring VDA service providers to register with and report VDA transactions to FIU-IND under the Prevention of Money Laundering Act. The AML & CFT Guidelines for Reporting Entities Providing Services Related to Virtual Digital Assets issued by FIU-IND specifically reference the Travel Rule and state that VDA service providers must ensure they include “required and accurate originator information, and required beneficiary information, on wire transfers and related messages”.
Further, VDA service providers are also required to monitor wire transfers to detect those that lack the required originator and/or beneficiary information, and to screen transactions to ensure compliance with United Nations Security Council Resolution (UNSCR) resolutions.
The information required to be obtained and held relating to such transfers includes:
India’s central bank, the RBI (which regulates banking and payments) – and the securities regulator, SEBI – have been reluctant to specifically regulate tokens/VDAs based on their nature as currency, securities, etc.
However, in response to a petition filed before the Delhi High Court by users calling for the regulation of VDAs, in January 2025, the Delhi High Court sought responses from the RBI, SEBI and the Ministry of Finance (MoF) for their views on the regulation of VDAs. It is currently unclear whether these regulators and/or the MoF will take a clear stance on VDAs as a result of this petition.
There are no legally recognised self-regulatory bodies in India that perform regulatory or quasi-regulatory roles with respect to businesses or individuals using blockchain in the country.
In 2017, a high-level committee, the Inter-Ministerial Committee (IMC), was constituted to study issues relating to cryptocurrency and to recommend regulatory action. Thereafter, in 2019, the IMC proposed the Banning of Cryptocurrency & Regulation of Official Digital Currency Bill 2019 (the “2019 Crypto Bill”), which sought to prohibit the mining, generation, holding, selling, dealing, issuance, transfer, disposal and use of cryptocurrency in India.
While the 2019 Crypto Bill was never enacted as law, entry 12 of the list of bills to be introduced in Lok Sabha (the Indian lower house of the Indian Parliament), published in the Lok Sabha Bulletin – Part II, dated 29 January 2021, made reference to the Cryptocurrency and Regulation of Official Digital Currency Bill, 2021 (the “2021 Crypto Bill”). The purpose of the 2021 Crypto Bill was to “create a facilitative framework for creation of the official digital currency to be issued by the Reserve Bank of India. The Bill also seeks to prohibit all private cryptocurrencies in India, however, it allows for certain exceptions to promote the underlying technology of cryptocurrency and its uses”.
Therefore, while the 2021 Crypto Bill had dropped the word “Banning” from its title, this change was mere form over substance. The principal intent of the 2021 Crypt Bill appeared very similar to that of the 2019 Crypto Bill – ie, to prohibit private cryptocurrencies.
Notably, the 2021 Crypto Bill was expected to be taken up by the Indian Parliament in December 2021. However, the 2021 Crypto Bill has not yet been officially presented before the Indian Parliament, and there have been no further developments in this regard since 2021.
In 2018, the RBI had sought to prohibit its regulated entities (such as banks and payment systems) from facilitating transactions involving cryptocurrencies, resulting in fiat-cryptocurrency transactions grinding to a halt.
The RBI directive was challenged before the Supreme Court of India in the 2020 case of Internet and Mobile Association of India v Reserve Bank of India (AIR 2021 SUPREME COURT 2720), wherein the Supreme Court set aside the RBI prohibition but stated that the government of India is free to pass legislation to prohibit cryptocurrencies.
FIU-IND has undertaken enforcement action against numerous cryptocurrency platforms for their failure to comply with registration and reporting requirements. For example, Binance was fined INR18,82,00,000 (approximately USD2,170,000), and Bybit was fined INR9,27,00,000 (approximately USD1,070,000), for failure to comply with the Prevention of Money Laundering Act. Both platforms are now FIU-IND-registered.
Income on VDAs has been taxed since 2022 at a rate of 30% (plus 4% cess), with no deductions permitted other than the cost of acquisition. Additionally, tax deducted at source at a rate of 1% is chargeable on crypto transactions.
There are no legal ESG/sustainable finance requirements in India that apply to digital assets.
Data protection laws in India (including the incoming Digital Personal Data Protection Act, 2023 – the “DPDP Act”) do not have specific provisions relating to blockchain-based products and services.
While the DPDP Act is primarily consent-based, personal data that has been made publicly available by the data subject (referred to as a “Data Principal” under the DPDP Act) to whom it relates is exempt from the scope of the DPDP Act. Therefore, personal data made available on a blockchain by the data subject to whom it relates (such as public keys) will not be subject to the DPDP Act.
18th Floor, SKAV 909
No 9/1 Residency Road
Richmond Circle
Bengaluru 560025
Karnataka
India
+91 80 4350 3600
pro-team@jsalaw.com www.jsalaw.comPast Volatility and Recent Stability of Virtual Digital Asset Regulations in India
Introduction
Similar to the volatility associated with cryptocurrency and non-fungible token (NFT) markets, the government of India and Indian regulators have also had a volatile relationship with virtual digital assets (VDAs).
Indian regulations on VDAs have come a long way since the attempts of the Reserve Bank of India (RBI) to prohibit cryptocurrency in 2018 and the government of India’s plan to introduce a bill to prohibit cryptocurrency in 2021. Transactions involving VDAs, such as cryptocurrencies and NFTs, are now permitted and taxed in India – though there remain areas of law that continue to be unclear.
Evolution of VDA regulations in India
Past volatility
I) RBI public cautions: 2013–17
On 24 December 2013, the RBI issued its first public caution regarding cryptocurrency (“RBI Public Caution 1”), stating that holders of cryptocurrency (referred to as “virtual currencies”) expose themselves to “potential financial, operational, legal, customer protection and security related risks”. RBI Public Caution 1 specifically referenced Bitcoin and stated that the creation, trading and use of cryptocurrencies pose several risks, including:
The RBI issued another public caution on 1 February 2017 (“RBI Public Caution 2”), stating:
“The Reserve Bank of India advises that it has not given any licence / authorisation to any entity / company to operate such schemes or deal with Bitcoin or any virtual currency. As such, any user, holder, investor, trader, etc. dealing with Virtual Currencies will be doing so at their own risk”.
RBI Public Caution 2 was again followed by another public caution by the RBI on 5 December 2017 (“RBI Public Caution 3”), wherein the RBI reiterated its earlier public cautions in view of the surge in initial coin offerings seen at the time.
II) RBI prohibition: 2018–20
Soon after RBI Public Caution 3, the RBI published a circular on 6 April 2018 – Prohibition on dealing in Virtual Currencies (VCs) (“Crypto Prohibition”) – prohibiting its regulated entities (such as banks, payment system providers and non-banking financial companies) from providing financial services in relation to cryptocurrency. RBI’s Crypto Prohibition refers to VDAs as “Virtual Currencies (VCs)”, stating the following:
“In view of the associated risks, it has been decided that, with immediate effect, entities regulated by the Reserve Bank shall not deal in VCs or provide services for facilitating any person or entity in dealing with or settling VCs. Such services include maintaining accounts, registering, trading, settling, clearing, giving loans against virtual tokens, accepting them as collateral, opening accounts of exchanges dealing with them and transfer / receipt of money in accounts relating to purchase / sale of VCs”.
As a result of Crypto Prohibition, VDA service providers (such as cryptocurrency and NFT exchanges) were no longer supported by banks and payment system providers – rendering fiat deposits, fiat withdrawals and VDA-to-fiat conversion impossible.
III) Supreme Court judgment against RBI’s crypto prohibition: 2020
Industry stakeholders were quick to challenge the constitutional validity of RBI’s Crypto Prohibition, which resulted in a landmark judgment by the Supreme Court of India relating to VDAs, namely Internet and Mobile Association of India v Reserve Bank of India (AIR 2021 SUPREME COURT 2720) (“IAMAI v RBI”).
In IAMAI v RBI, the Honourable Supreme Court set aside RBI’s Crypto Prohibition on the grounds of it being disproportionate and violative of citizens’ fundamental rights under the Constitution of India. That said, the judgment did not prohibit the government of India from banning VDAs – which it had been considering since 2017.
IV) Government of India considers prohibition: 2021
In 2017, a high-level committee, the Inter-Ministerial Committee (IMC), was constituted to study issues relating to cryptocurrency and to recommend regulatory action. Thereafter, in 2019, the IMC proposed the Banning of Cryptocurrency & Regulation of Official Digital Currency Bill, 2019 (the “2019 Crypto Bill”), which sought to prohibit the mining, generation, holding, selling, dealing, issuance, transfer, disposal and use of cryptocurrency in India.
While the 2019 Crypto Bill was never enacted as law, entry 12 of the list of bills to be introduced in Lok Sabha (the Indian lower house of the Indian Parliament), published in the Lok Sabha Bulletin – Part II, dated 29 January 2021, made reference to the Cryptocurrency and Regulation of Official Digital Currency Bill, 2021 (the “2021 Crypto Bill”). The purpose of the 2021 Crypto Bill was to “create a facilitative framework for creation of the official digital currency to be issued by the Reserve Bank of India. The Bill also seeks to prohibit all private cryptocurrencies in India, however, it allows for certain exceptions to promote the underlying technology of cryptocurrency and its uses”.
The 2021 Crypto Bill was expected to be taken up by the Indian Parliament in December 2021. However, it has not yet been officially presented before the Indian Parliament, and there have been no further developments in this regard since 2021.
V) (Alleged) RBI shadow ban: 2022
Despite the legal success in IAMAI v RBI, VDA service providers continued to face difficulty with engaging banks and payment system providers to facilitate transactions to and from their platforms. To this end, there were reports of the RBI informally asking banks to exercise caution when facilitating VDA transactions and onboarding platforms. Coinbase’s CEO, Brian Armstrong, also referred to this in an earnings call on 10 May 2022, where he discussed the RBI’s “shadow ban” and said that it may be in violation of IAMAI v RBI.
Coinbase eventually ceased operations in India, but other VDA exchange platforms continued to operate in a limited capacity by facilitating person-to-person (P2P) VDA-fiat transactions. In such P2P transactions, the VDA exchange platform connected buyers and sellers of VDAs, and served as an escrow agent in order to hold the VDAs in escrow until an off-platform buyer-to-seller fiat transaction was confirmed. This enabled users to buy and sell cryptocurrency using fiat currency through their own bank accounts by transacting directly with sellers and buyers. Banks also had little visibility regarding the nature of the transactions and, for the most part, could not distinguish such transactions as VDA-related transactions.
Current stability
I) Income tax on VDAs: 2022 to present
Notwithstanding the RBI’s alleged “shadow ban”, the government of India began taxing income from VDA-related transactions from 1 April 2022. The tax regime was not very friendly, with VDA-related income being taxed at 30%, no deductions being permitted other than the cost of acquisition, and a requirement for tax to be deducted at source (at a rate of 1%) in all VDA-related transactions (with the documentation associated with the same adding significant friction to day-to-day transactions).
That said, the fact that the government was taxing income from VDAs was a significant step towards legitimising the industry in India, creating a sense of stability within the Indian cryptocurrency market.
II) KYC/AML requirements relating to VDAs: 2023 to present
Despite the government of India taxing income from VDAs, VDA platforms continued to receive notices from the Directorate of Enforcement of the government of India – particularly relating to investigations into money laundering and violations of Indian foreign exchange control requirements.
Being unregulated, there was no legal requirement for VDA platforms to undertake customer due diligence or implement “know-your-customer” (KYC) processes. However, noting the regulatory scrutiny, many VDA platforms undertook KYC of their own accord in an effort to mitigate the risk of inadvertently enabling money laundering.
This eventually led to the government of India, on 7 March 2023, formally regulating (via the “2023 AML Framework”) entities that engage in the following activities, when carried out for or on behalf of another natural or legal person in the course of business:
Such VDA service providers are required to register with the Financial Intelligence Unit – India (FIU-IND), undertake KYC of their clients and report transactions to FIU-IND periodically.
Notably, since the implementation of the FIU-IND registration framework for VDA service providers, banks have reportedly eased off the shadow ban and now enable customers to make deposits and withdraw fiat currency from FIU-IND-registered VDA platforms. Interestingly, P2P transactions, which drove the cryptocurrency market in India during the shadow ban, reportedly now result in bank account freezes in view of such transactions triggering fraud/high-risk alerts within banks’ systems. This is likely because there is now an increased risk associated with P2P VDA transactions, and bank accounts used for the same may be linked to illegal/fraudulent activity.
Future uncertainty
Recently, the Indian VDA market was affected by a cyber-attack on WazirX, a major cryptocurrency exchange used in India. The cyber-attack resulted in a loss of over USD200 million, and WazirX, based in Singapore, has proposed a restructuring plan before the courts in Singapore. WazirX’s restructuring plan was met with resistance and litigation from users in India, which is currently ongoing. It is pertinent to note that when the Honourable Delhi High Court sought views from the RBI, the RBI informed the Honourable Court that it would not regulate VDA platforms, with the judge remarking that this was “unfortunate” in view of the potential threat to India’s financial system in the absence of regulations.
India’s securities regulator, the Securities and Exchange Board of India (SEBI), has also remained silent regarding the regulation of VDAs. SEBI currently doesn’t allow mutual funds to invest in VDAs. Further, SEBI-registered alternative investment funds are also prohibited from investing in VDAs, resulting in regulatory uncertainty relating to pooled VDA investment vehicles.
FIU-IND has also updated its registration and reporting framework, requiring registering entities to explain why they need to be registered under the 2023 AML Framework. The authors understand that this is because FIU-IND has received numerous registration applications from VDA service providers that do not squarely fit within the scope of the 2023 AML Framework, but are unsure about where they stand owing to the complex and continuously evolving nature of the industry.
Conclusion
In conclusion, the regulatory journey for VDAs in India has been characterised by significant volatility, transitioning from outright prohibition attempts by the RBI and the government to a phase of relative stability marked by taxation and AML regulations. The Supreme Court’s quashing of the RBI ban in IAMAI v RBI was a pivotal moment, yet the path forward has seen continued uncertainty, including alleged informal restrictions and evolving legislative proposals.
The current landscape, defined by income tax on VDAs and the formal AML framework requiring registration and KYC for service providers, suggests a move towards acknowledging and regulating the industry. However, uncertainties persist, highlighted by cybersecurity incidents, ongoing legal challenges and the cautious stance of key regulators like the RBI and SEBI. While a foundational regulatory structure is now in place, the long-term trajectory and comprehensive legal clarity for the VDA ecosystem in India remain subject to ongoing development and observation.
The resilience of the VDA industry has been demonstrated by its continued growth despite regulatory hurdles and set-backs. To ensure continued growth while protecting investor interests and the Indian financial system, the government of India and sectoral regulators should collaborate to develop a uniform, clear and predictable framework to regulate VDAs in India.
18th Floor, SKAV 909
No 9/1 Residency Road
Richmond Circle
Bengaluru 560025
Karnataka
India
+91 80 4350 3600
pro-team@jsalaw.com www.jsalaw.com