Blogs

FIU-IND Registration for Crypto Exchanges: The Compliance Guide

17/11/2025 - By Ajith Samuel Abraham, CAMS

FIU-IND Registration for Crypto Exchanges (The Compliance Guide)

Crypto exchanges must register with FIU-IND because they are legally designated as Reporting Entities under India’s Prevention of Money-Laundering Act (PMLA). Registration is mandatory for any VDA (Virtual Digital Asset) platform serving Indian users and failure to comply can lead to heavy fines, access blocks and enforcement actions — including those issued against major offshore exchanges.

Key Takeaways

FIU-IND registration is mandatory for crypto exchanges and VDA service providers operating in or serving India.
The FIU enforces AML/CFT compliance, including KYC/CDD/EDD, record keeping and Suspicious Transaction Reports (STRs).
Non-compliance can trigger penalties, show-cause notices, app store takedowns and service blocks.
Compliance7 delivers end-to-end FIU registration support, AML support, sanctions screening setup and outsourced Compliance Officer support.

What Is FIU-IND and Why Must Crypto Exchanges Register?

The Financial Intelligence Unit – India (FIU-IND) is the country’s central agency for monitoring, collecting, analyzing and disseminating financial intelligence related to suspicious transactions and potential money laundering.

In March 2023, the Ministry of Finance officially designated Virtual Digital Asset (VDA) service providers as Reporting Entities under the Prevention of Money-Laundering Act (PMLA) — making FIU registration not optional, but mandatory.

This includes:

Crypto exchanges
VDA custodians
Wallet providers
On/off-ramp platforms
Platforms serving Indian residents even if operating offshore

The FIU strengthened enforcement in 2024–2025 through notices, fines and takedowns of offshore platforms that failed to register.

What Does FIU-IND Registration Require?

FIU compliance is not just a one-time registration — it’s an ongoing AML/CFT regime. Here’s the compliance checklist crypto exchanges must meet immediately:

Core Obligations Under PMLA

KYC / CDD / EDD programs (customer identity verification and risk assessment)
Record maintenance (typically 5+ years)
STR/CTR reporting through the FIU reporting portal
Appointment of a Compliance Officer
Internal AML/CFT policy & annual training
Periodic independent audits
Ongoing monitoring of high-risk behavior
Sanctions & PEP screening with documented decision logs

FIU-IND Registration Document Checklist

Incorporation documents
PAN, GST (if applicable)
Directors, shareholders & UBO details
AML/CFT policy (must be robust and audit-ready)
KYC/CDD/EDD documentation
Transaction monitoring rulebook
Organizational chart with Compliance Officer details
Data security, logs & record retention framework

What Are the Penalties for Not Registering with FIU-IND?

Failure to register as a Reporting Entity can result in:

Monetary penalties under PMLA
Show-cause notices and inspection orders
Bank and asset freeze actions
App takedowns from Google Play/Apple Store
Domain blocking / access restriction
Seizure of assets under AML/CFT laws
Permanent market exclusion in India

FIU-IND has already taken action against major offshore platforms, demonstrating that geographical location is not a shield.

Who Must Register with FIU-IND? (Clear Rules)

FIU registration is mandatory for all Virtual Digital Asset Service Providers (VDA SPs) serving Indian customers, including:

Domestic crypto exchanges
International exchanges with Indian users
Wallet & custody providers
NFT marketplaces
DeFi platforms with identifiable operators
OTC desks
VDA payment gateways

Common Triggers That Require Registration

You must register if you:

Serve Indian customers
Accept INR
Market to Indian users (ads, influencer campaigns, events)
Allow onboarding using Indian KYC documents
Have Indian UBOs

How Compliance7 Helps You Get Registered?

Compliance7 specializes in AML/CFT, VDA regulatory compliance and FIU-IND implementation.

What Compliance7 Delivers

✔ End-to-End FIU Registration (documentation + filing + liaison)
✔ AML Templates — reduce your time-to-compliance by up to 60%
✔ Compliance Officer Support (fractional / outsourced)
✔ KYC Program – CDD & EDD setup with automated workflows
✔ Sanctions & PEP Screening Consulting
✔ AML grievance support (handling notices, show-cause responses)
✔ Risk Assessment + Transaction Monitoring consulting tailored to your platform

Frequently Asked Questions (FAQs)

1. Do crypto exchanges need FIU-IND registration?

Yes. All exchanges serving Indian users must register. Under PMLA, VDA platforms are Reporting Entities. FIU compliance is mandatory regardless of location.

2. What documents are needed for FIU registration?

Incorporation docs, AML policy, UBO details, KYC/EDD flows. FIU requires a full AML/CFT framework, monitoring rules and Compliance Officer details.

3. How long does FIU registration take?

4–12 weeks depending on documentation quality. Compliance7 can accelerate timelines through complete filing support.

4. What penalties apply for non-registration?

Fines, freezes, access blocks, legal action. FIU has already acted against major exchanges.

5. Do offshore platforms need FIU registration?

Yes, if Indian users can access the service. FIU has taken cross-border actions showing strong extraterritorial enforcement.

6. What is an STR?

Suspicious Transaction Report filed to FIU. Exchanges must identify, review and file STRs within prescribed timelines.

7. How often must AML policies be updated?

At least annually. Update after audits, new rules or major product/market changes.

8. What is CDD vs. EDD?

Basic vs. enhanced customer checks. PEPs, high-risk geographies or unusual patterns require EDD.

9. Can Compliance7 act as our Compliance Officer?

Yes—fractional or outsourced support is available. We implement PMLA-compliant org structures and reporting workflows.

10. What triggers an FIU audit?

Suspicious behavior, STR quality issues or non-registration. FIU may also review exchanges with rapid user or transaction growth.

11. How does FIU view decentralized exchanges?

Operators with control must comply. If a DeFi platform has identifiable controllers or revenue mechanisms, obligations apply.

12. Is KYC mandatory for every user?

Yes. PMLA requires identity verification before enabling transactions.

13. What tech logs are required?

Immutable transaction & KYC logs. Logs must be auditable, tamper-resistant and retained per FIU guidelines.

14. Can small startups meet FIU requirements?

Yes. Compliance7 provides scalable AML programs aligned to startup companies.

15. What are PMLA threshold triggers?

Monetary and behavioral triggers. Includes high-value flows, structuring, IP anomalies or repeated unusual activity.

16. Can FIU registration improve investor confidence?

Yes. Registered status signals regulatory safety and improves bank/on-ramp partnerships.

17. How often are STRs reviewed?

Real-time + periodic review. Exchanges must maintain a rapid escalation workflow.

18. Do Indian tax rules interact with FIU reporting?

Yes. Tax agencies may leverage FIU intelligence.

19. Is sanctions screening required?

Absolutely. Screening must cover UN, domestic lists and PEPs.

20. How can Compliance7 simplify FIU compliance?

By handling end-to-end registration and AML setup. We provide filing support, FIU-vetted templates, monitoring rules and officer training.

Ready to register with FIU-IND?

Let Compliance7 streamline your compliance journey with:

AML frameworks
End-to-end registration filing
Fractional / Outsourced Compliance Officer support
KYC/CDD/EDD setup
Sanctions & PEP screening integration

Disclaimer

This article is for general informational purposes only and does not constitute legal advice. FIU-IND rules evolve frequently. Always consult Compliance7 or legal counsel for tailored guidance.