India\u2019s Financial Intelligence Unit (FIU-IND) now requires all virtual digital asset service providers to pass cybersecurity audits conducted by auditors empanelled with CERT-In. The mandate, issued via a letter dated September 15, ties successful audits to both obtaining and keeping FIU registration, citing a rise in crypto-related cyber heists nationwide. <\/p>\n\n\n\n
Under this rule, crypto exchanges, custodians, and intermediaries must meet a security bar similar to regulated financial institutions under the Prevention of Money Laundering Act (PMLA). The FIU urged designated directors and chief compliance officers to move quickly across the roughly 55 registered entities.<\/p>\n\n\n\n
Key details at a glance:<\/strong><\/p>\n\n\n\n This step continues a tightening arc for India\u2019s digital-asset oversight. Earlier this year, the FIU told exchanges to refresh customer KYC records\u2014especially accounts older than 18 months\u2014by June 30. Enforcement also picked up. In 2024, the FIU fined Binance 188.2 million rupees for anti\u2013money laundering lapses after show-cause notices to several offshore platforms. KuCoin registered and paid a smaller penalty, while global players such as Coinbase moved to secure FIU registration to re-enter the market on compliant terms.<\/p>\n\n\n\n These actions signal that regulators expect bank-grade controls, from stronger identity checks to better record-keeping and monitoring. For users, that often translates to fewer surprise freezes and faster responses when suspicious activity appears.<\/p>\n\n\n\n Most industry voices welcomed standardized audits, arguing they will improve user trust and align India with global best practices. However, practical hurdles remain. Many bank-focused auditors will need deeper crypto expertise\u2014think key-management procedures, cold-storage controls, and on-chain forensics. When combined with CERT-In\u2019s log-retention rules, though, the audits should sharpen incident response and strengthen evidentiary trails for investigations.<\/p>\n\n\n\n Costs will rise. Smaller platforms may weigh consolidation against the expense of recurring assessments. Yet binding cybersecurity to AML supervision points to a more bank-like model for crypto in India. If regulators clarify the scope, frequency, and how audit findings affect licensing decisions, institutions may feel more comfortable deploying capital\u2014and more local users could follow.<\/p>\n","protected":false},"excerpt":{"rendered":" India\u2019s Financial Intelligence Unit (FIU-IND) now requires all virtual digital asset service providers to pass cybersecurity audits conducted by auditors empanelled with CERT-In. The mandate, issued via a letter dated September 15, ties successful audits to both obtaining and keeping FIU registration, citing a rise in crypto-related cyber heists nationwide. Under this rule, crypto exchanges, […]<\/p>\n","protected":false},"author":10,"featured_media":14759,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[30,2,43],"tags":[],"class_list":{"0":"post-15519","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-exchange","8":"category-featured","9":"category-general-news"},"acf":[],"yoast_head":"\n\n
A tougher compliance landscape<\/h3>\n\n\n\n
Industry reaction and what comes next<\/h3>\n\n\n\n