Crypto in India: The Complete Legal and Practical Guide

Every few weeks someone asks the same question in a family group or office canteen: is crypto even legal in India now? The honest answer is a paragraph, not a word — and the paragraph matters more than most beginner explainers admit. Buying and selling crypto is legal. It is also taxed harder than almost anything else you can buy, serviced by platforms that answer to an anti-money-laundering law rather than an investor-protection law, and entirely unprotected by any regulator if something goes wrong.

This guide is the hub for our crypto cluster. It walks the full legal timeline, explains what FIU-IND registration does and does not guarantee, shows how a purchase actually works end to end, and puts the tax and risk picture in plain terms. The deep dives live in two sibling posts — one on the 30% tax and 1% TDS, one on wallets and custody — and I link out to them where a topic deserves its own treatment instead of repeating it here.

Is crypto legal in India? The honest answer

As of November 2026, you can legally buy, sell and hold crypto assets in India through Indian platforms. There is no ban and no licensing law either. The government's own words are the cleanest summary: in a September 2026 press release, it repeated for the public that crypto products and NFTs are unregulated and can be highly risky. Source: Press Information Bureau, FIU-IND release on notices to offshore Virtual Digital Asset Service Providers, September 9, 2026.

Three consequences follow from that single fact, and most crypto marketing quietly ignores all three:

• Your rupees are on your own risk. No SEBI-style regulator supervises exchanges, no investor compensation fund stands behind them, and no ombudsman hears your complaint if an exchange freezes withdrawals. Deposits in a savings account carry DICGC insurance up to ₹5 lakh; crypto balances carry nothing of the sort.
• The state's interest so far is tax and money-laundering, not investor protection. India has recognised crypto as "virtual digital assets" for two limited purposes — taxation (from 2022) and anti-money-laundering compliance (from 2023). A working paper from IIM Ahmedabad puts it bluntly: the legal regime recognises these assets only for those limited purposes. Source: IIM Ahmedabad working paper on VDA service providers under Indian insolvency law, October 2025.
• The Reserve Bank has never stopped disliking it. RBI wanted a ban in 2018, lost that fight in the Supreme Court in 2020, and continues to flag crypto-market turmoil as a financial stability risk in its periodic reports. It has not changed the legal position, but it explains why bank support for crypto transactions can be inconsistent.

So: legal to trade, unregulated as an asset class, taxed at special rates, and indemnified by nobody. Anyone telling you otherwise — in either direction, hype or fear — is selling something.

The road here: how the legal position actually evolved

The current arrangement was not designed; it accreted, one crisis at a time. The timeline is worth knowing because each step explains one rule you will meet today:

Source for the 2018 circular and its 2020 quashing: RBI notification of April 6, 2018, and the Supreme Court judgment in Internet and Mobile Association of India v Reserve Bank of India, Writ Petition (Civil) No. 528 of 2018, decided March 4, 2020, reported in [2020] 2 SCR 297. Source for the 2023 notification and 2026 position: Ministry of Finance answers in Lok Sabha Unstarred Question 5805, March 30, 2026.

Two moments in that table deserve a sentence each. First, the Supreme Court case: the court did not rule that crypto is legal or a good idea — it held that RBI's blanket banking ban failed the constitutional test of proportionality and set the circular aside. Banking restarted because the prohibition was struck down, not because crypto was blessed. Second, the 2022 tax: when a government starts taxing something at a special rate instead of banning it, that is a policy signal of tolerance — nothing more. India still has no dedicated crypto statute; a standalone bill floated in 2021 never reached Parliament, and successive finance ministers have said any law will follow global consensus rather than lead it.

FIU-IND registration: the one check that matters before you open an account

Since March 7, 2023, any platform providing VDA services in India is a "reporting entity" under the Prevention of Money Laundering Act, 2002, answerable to the Financial Intelligence Unit — India (FIU-IND). Registration obliges the platform to verify your identity (KYC), keep records, and report specified and suspicious transactions to law enforcement. Source: Lok Sabha Unstarred Question 5805, Ministry of Finance, March 30, 2026, which cites the notification of March 7, 2023.

How big is the registered universe? In that same March 2026 answer, the government stated that 54 VDA service providers were registered with FIU-IND as on March 9, 2026 — and, notably, that the list itself is not made public, because the registration database exists for law-enforcement and supervisory use. So you cannot pull up an official roster and match names. What you can do:

• Prefer platforms that publicly claim FIU-IND registration and show a KYC process that actually runs — PAN, Aadhaar, liveness check. A platform that skips KYC is skipping the one legal obligation you can observe from outside.
• Be suspicious of offshore apps that were in enforcement headlines. FIU-IND issued show-cause notices to 9 offshore exchanges in 2022-23, compliance notices to 25 offshore platforms in October 2025 and 15 more in September 2026, and has directed takedowns of 53 VDA service providers found operating illegally in India without PMLA compliance. Source: PIB releases of December 2023, October 1, 2025 and September 9, 2026, and Lok Sabha Unstarred Question 5805 (March 30, 2026).
• Remember that registration is compliance, not endorsement. Binance and KuCoin registered with FIU-IND only in 2024, after being flagged for operating unregistered and paying penalties of ₹18.82 crore and ₹34.5 lakh respectively (Source: Reuters, June 20, 2024, and CoinDesk, May 10, 2024). Registration bought them back into the legal market; it did not erase the episode.

The practical test is boring and effective: if a platform has FIU-IND registration, a working KYC flow, INR deposits through proper banking channels, and a visible transaction-reporting trail in your account statements, you are dealing with the legitimate face of an unregulated market. If any of those is missing, walk away, however slick the app.

How a purchase actually works

For a regulated-market investor, the mechanics will feel familiar with one or two twists:

1. KYC first. Because the exchange is a PMLA reporting entity, it must identify you before any transaction — PAN is mandatory, Aadhaar is the usual second leg, and a selfie or video check is standard. This is the same identity trail your bank already has.
2. Fund the account in rupees. Registered exchanges accept INR via UPI, IMPS, NEFT or RTGS. Individual banks occasionally restrict crypto-linked transactions, and the RBI's public caution keeps this area frosty — if a transfer fails, it is more likely bank policy than illegality.
3. Place the order. You are buying a crypto asset with rupees at the market price, paying trading fees and, since the government clarified GST treatment, 18% GST on the exchange's service fee component — the GST applies to the service, not to the crypto value itself (cross-checked against Legal500 and International Tax Review analyses and tax-portal summaries as on 3 November 2026 — no single official CBIC page fetchable).
4. Decide where it lives. Your purchase sits in the exchange's custody by default. You can withdraw on-chain to a self-custodied wallet, at a network fee. That decision — custodian versus self-custody — is the single most consequential choice in crypto, and our wallets and custody guide covers it in full.
5. Watch the 1% TDS on the way out. Every sale, swap or spend triggers 1% tax deducted at source on the consideration, which the exchange deducts and reports. It appears in your Form 26AS and Annual Information Statement as creditable tax — not an extra charge, but a prepayment against your final liability. Source: Section 194S, Income-tax Act, read with the Income Tax Department's VDA brochure (January 2026).

A word on peer-to-peer (P2P) trading, where you buy from another individual and pay by UPI or bank transfer: it exists because it existed before banking access was restored, and it persists because some platforms route around gaps. It is not illegal by itself, but it is where most Indian crypto fraud complaints begin — the buyer's TDS obligation under Section 194S falls on the individual, scam payments are hard to reverse, and a random stranger's UPI payment can get your account frozen in someone else's fraud investigation. For a first-time buyer, the P2P route saves pennies and creates risks that are wildly out of proportion.

Where your crypto sits: exchange custody vs self-custody

Here is the sentence that reorganises how you think about all of this: your exchange balance is a claim against a company, not coins in a vault with your name on them. The exchange holds the cryptographic keys; you hold an account payable. For most Indian users this is the right default to start with — the exchange handles security, taxes, TDS and rupee rails, exactly the way a broker holds your shares.

Self-custody flips the model: the keys (a seed phrase, typically 12 or 24 words) live with you, and nobody — not an exchange, not a bank, not a support desk — can recover them if you lose them. You take on counterparty-free ownership and, with it, every operational risk yourself. Neither option is free: exchange custody carries the risk that the exchange fails or gets hacked; self-custody carries the risk that you fail. Our dedicated guide on hot vs cold wallets walks through that trade-off, backup planning and what your heirs would actually need.

The tax picture, in one section

India taxes crypto like almost nothing else, and the rules do not care whether you made ₹500 or ₹50 lakh:

• 30% flat tax on gains. Income from transferring a VDA is taxed at 30% plus surcharge and 4% cess, with no distinction between short-term and long-term — holding for years buys you nothing tax-wise. Source: Section 115BBH, Income-tax Act (now restated in the Income-tax Act, 2025, effective April 1, 2026), and the Income Tax Department's VDA brochure, January 2026.
• Only the purchase cost is deductible. No trading fees, no internet bills, no subscription costs. Just what you paid for the asset.
• Losses are stranded. A crypto loss cannot be set off against any other income — salary, capital gains, anything — nor against other crypto gains, and cannot be carried forward. Sell one coin at a ₹40,000 profit and another at a ₹30,000 loss in the same year, and you owe 30% on the full ₹40,000.
• 1% TDS on transfers above ₹50,000 a year for most individuals (₹10,000 for others such as firms), deducted by the exchange on the sale consideration.
• Disclosure is transaction-wise. The ITR carries a dedicated Schedule VDA where every transfer is listed; losses are entered as nil. Gifts of crypto above ₹50,000 from non-relatives are taxed in the receiver's hands.

The sibling post works through each of these with worked examples, the exact thresholds, the ITR mechanics, and what changed (and did not) through the 2024-2026 budget cycles. If you read only two sections of that post, make them the loss rules and the TDS-credit mechanics — they are where the expensive mistakes live.

The risk stack, in plain terms

Every asset has risks; crypto's are unusual in kind, not just degree. Run down the list honestly:

• Price risk of a different order. Crypto drawdowns of 50-80% from peak have happened repeatedly, including in assets that survived. Equity feels volatile until you have watched an asset lose half its value in a week and not recover for years. Nothing about Indian regulation cushions this.
• Platform failure. The global precedent is FTX, which filed for bankruptcy in November 2022 with roughly $8 billion of customer money missing (Source: Reuters, November 11-12, 2022, and subsequent US bankruptcy and criminal proceedings). India has its own previews: WazirX lost about $235 million — roughly ₹2,000 crore — to a North Korea-linked hack in July 2024 (Source: Elliptic, July 18, 2024, and contemporaneous reporting), and CoinDCX lost about $44 million, reported between ₹368-380 crore, from an operational wallet in July 2025 (Source: Halborn's incident analysis, July 28, 2025, and Mint's reporting). Users of both waited through frozen withdrawals, socialised losses or restructuring — with no compensation fund behind them.
• Operational risk when it matters most. Indian platforms have historically wobbled exactly when trading was hottest — order placement lagging, logins failing during sharp moves. In an unregulated market, outages cost you money and cost the platform nothing.
• Regulatory flux. The rules can change faster than other markets because there is no settled statute underneath. Transaction-reporting obligations (Section 285BAA, restated as Section 509 in the 2025 Act) keep tightening, and a dedicated law remains a matter of when, not if. What is legal and lightly touched today may carry new compliance burdens tomorrow.
• Scam density. Fake apps, impersonation "support agents", seed-phishing pages, doubling schemes — crypto's scam economy is industrial in scale, and recovery is poor. India's reporting rails are the 1930 helpline and cybercrime.gov.in; both exist, and both work best when you call within hours, not weeks. Source: Indian Cyber Crime Coordination Centre (I4C) public advisories.

None of these risks is hidden. They are simply absent from the advertising.

Who this is, and is not, for

Strip the ideology away and crypto in India is a legal, unregulated, high-variance speculative asset with punitive tax symmetry. That description sorts people quickly.

It is not for money that matters within any fixed horizon: your emergency fund, your EMI buffer, the house down payment, school fees, retirement's core. It is not for borrowed money — 30% tax on gains and no loss offset against the interest you paid is a terrible structure for leverage. It is not for anyone unwilling to file transaction-wise tax disclosures, because Schedule VDA non-filing is a compliance problem that only compounds. And it is not for people who would genuinely not sleep through a 60% drawdown — that is a temperament test only you can administer.

It can arguably have a place as a small, capped, honest-to-yourself satellite position — sized so that total loss is an annoyance, held through a FIU-registered platform, with a custody decision made deliberately rather than by default, and taxes paid without shortcuts. If you get to that stage, read the taxation post before your first sale and the wallets post before your first large withdrawal.

And if the honest framing leaves you cold — good. The boring core of Indian household wealth-building, the systematic mutual fund investing we cover across this site, exists precisely because it does not require you to underwrite exchange failure, regulatory flux and scam density at the same time. Crypto will still be there, in some legal form, after your SIPs have compounded for a decade.

This guide is educational, not investment advice. Crypto assets are unregulated and highly risky; consult a qualified financial advisor about your specific situation.