In India, crypto businesses dealing in Virtual Digital Assets are classified as "Reporting Entities" under the PMLA, and the operative requirement is registration with FIU-IND — not a license in the traditional sense. Once registered, you're legally recognized to operate, but you also take on ongoing reporting and compliance duties that don't disappear after day one.
So when people search for "how to get a crypto license in India," what they usually need is:
- FIU-IND registration as a Reporting Entity
- A compliant KYC/AML program
- Proper business incorporation and tax structuring
- Ongoing transaction monitoring and reporting systems
Who Actually Needs to Register?
You need FIU-IND registration if your business does any of the following in India:
- Operates a crypto exchange (buying, selling, or trading VDAs)
- Provides custodian wallet services
- Offers crypto-to-fiat or crypto-to-crypto conversion services
- Facilitates transfers of virtual digital assets
- Provides financial services related to an issuer's offer of a virtual digital asset
This applies whether you're an Indian-incorporated company or a foreign exchange serving Indian users — a distinction that's caught out several offshore platforms that assumed they were outside FIU-IND's reach.
Requirements to Get Registered
1. Business Incorporation
Your entity needs to be properly incorporated in India — typically as a Private Limited Company — with a valid PAN, GST registration, and a registered office address. Foreign entities operating in India will usually need to structure through a subsidiary or a designated compliant entity.
2. A Documented AML/KYC Policy
FIU-IND expects a written Anti-Money Laundering and Know Your Customer policy that covers:
- Customer identification and verification procedures
- Risk categorization of customers
- Ongoing transaction monitoring
- Record-keeping protocols (minimum 5 years)
- Designation of a Principal Officer responsible for compliance
3. Principal Officer Appointment
Every reporting entity must appoint a Principal Officer who acts as the point of contact with FIU-IND and is responsible for filing Suspicious Transaction Reports (STRs) and Cash Transaction Reports (CTRs) where applicable.
4. Reporting Infrastructure
You'll need systems capable of generating and filing periodic reports through the FINnet 2.0 gateway, FIU-IND's reporting portal. This isn't just a formality — the technical setup for structured data reporting takes real engineering time, and it's a step many founders underestimate.
5. Board Resolution and Compliance Documentation
A board resolution authorizing registration, along with company incorporation documents, director KYC, and financial statements, forms the core registration file submitted to FIU-IND.
The Step-by-Step Process
- Incorporate or restructure your entity so it's eligible to register as a Reporting Entity under PMLA.
- Draft your AML/KYC policy — this needs to be substantive, not a copy-paste template, since it's reviewed on merit.
- Appoint your Principal Officer and formalize this through a board resolution.
- Register on the FINnet 2.0 portal and submit your application along with supporting documents.
- Respond to FIU-IND queries — it's common to get a round (or two) of clarification requests before approval.
- Receive registration confirmation and begin your reporting obligations.
- Set up ongoing compliance — STR/CTR filing cadence, periodic audits, and policy updates as regulations evolve.
Running these steps with a compliance-first mindset from the start tends to save founders from painful rework later, especially once transaction volumes grow and monitoring gaps become harder to patch retroactively.
How Much Does It Cost?
There's no fixed government fee schedule published for FIU-IND registration itself, but the real costs founders should budget for include:
- Legal and compliance advisory fees — for drafting AML/KYC policies, registration filing, and liaising with FIU-IND
- Incorporation and secretarial costs — if you're setting up a new entity or restructuring an existing one
- Compliance technology — transaction monitoring software, reporting integrations with FINnet 2.0
- Principal Officer and compliance staffing — either an in-house hire or a retained compliance consultant
- Ongoing audit and filing costs — periodic reviews and report filings once you're operational
Costs vary widely based on business complexity — a simple wallet provider has a very different compliance footprint than a high-volume exchange handling both fiat on-ramps and cross-border transfers.
How Long Does Registration Take?
Timelines depend on how prepared your documentation is going in. Businesses that arrive with a well-drafted AML policy and complete incorporation paperwork tend to move through the process considerably faster than those still figuring out their compliance structure mid-application. Building in buffer time for clarification rounds with FIU-IND is a realistic expectation rather than an edge case.
Common Mistakes Founders Make
- Treating this as a one-time checkbox rather than an ongoing compliance obligation
- Underestimating the technical lift of FINnet 2.0 reporting integration
- Using generic AML templates that don't reflect their actual business model
- Assuming offshore incorporation exempts them from Indian reporting duties if they serve Indian users
- Delaying legal counsel until after facing a compliance notice, rather than building the framework proactively
Why Work With a Crypto Law Firm on This
Given how fluid India's crypto regulatory environment has been, working with lawyers who track FIU-IND, RBI, and SEBI developments closely — rather than treating registration as a static form-filling exercise — makes a meaningful difference in avoiding downstream compliance issues. A firm with hands-on FIU-IND registration experience can also help you anticipate the specific documentation and policy depth regulators are actually looking for, based on precedent rather than guesswork.
Frequently Asked Questions
Is a crypto license mandatory to operate in India? There's no separate "crypto license," but if your business falls under the definition of a Virtual Digital Asset service provider, FIU-IND registration as a Reporting Entity is mandatory, not optional.
Can a foreign crypto exchange serve Indian customers without registering? No. If a foreign platform offers services to users in India, it's expected to comply with FIU-IND registration and reporting requirements, regardless of where it's incorporated.
What happens if a crypto business operates without FIU-IND registration? Unregistered platforms risk regulatory action, including being blocked from operating in India, along with potential penalties under the PMLA framework.
Does FIU-IND registration replace RBI or SEBI compliance? No. FIU-IND registration addresses AML/KYC obligations under PMLA. Depending on your business model, you may have separate compliance touchpoints with RBI (for payment-related activities) or SEBI (if tokenized securities are involved).
How often do reporting obligations need to be fulfilled after registration? Reporting entities are expected to file Suspicious Transaction Reports and Cash Transaction Reports as triggered by transaction activity, alongside periodic compliance reviews — this is an ongoing obligation, not a one-time filing.
Can a startup handle FIU-IND registration without legal help? Technically yes, but given the documentation depth required and the back-and-forth that often happens with FIU-IND during review, most founders find that experienced legal counsel shortens the timeline and reduces the risk of rejection or delay.
Sign in to leave a comment.