Who required to be registered with FIU-IND

Who Needs to Register with FIU-IND?

The Financial Intelligence Unit-India (FIU-IND) is the government agency responsible for monitoring and preventing money laundering and terrorist financing activities in India. Following the Ministry of Finance notification issued in March 2023, businesses dealing in Virtual Digital Assets (VDAs) such as cryptocurrencies are treated as “Reporting Entities” under the Prevention of Money Laundering Act, 2002 (PMLA).

After the March 2023 notification, Virtual Asset Service Providers (VASPs) such as crypto exchanges, wallet providers, custodians, P2P platforms, NFT marketplaces handling customer funds, and crypto-fiat intermediaries are treated as Reporting Entities under the PMLA. As a result, they must register with FIU-IND and comply with KYC, AML, record-keeping, and reporting requirements.

Crypto-related businesses must register with FIU-IND

This means certain crypto-related businesses must register with FIU-IND and comply with anti-money laundering (AML) regulations.

1. Crypto Exchanges:

   These are platforms where users buy, sell, or trade cryptocurrencies such as Bitcoin, Ethereum, or other digital assets. Examples: CoinDCX, CoinSwitch, and ZebPay.

• • Why FIU Registration? Because they facilitate financial transactions involving VDAs and are required to verify customers, maintain records, and report suspicious transactions.

2. Wallet Service Providers:

   These entities provide digital wallets that allow users to store, send, or receive cryptocurrencies. Examples: custodial crypto wallets, Hosted wallet providers

• • Why FIU Registration? They control or facilitate access to customers’ crypto assets and therefore fall within the AML compliance framework.

3. Peer-to-Peer (P2P) Crypto Trading Platforms:

   These platforms connect buyers and sellers directly instead of acting as a traditional exchange. Example: A platform that matches individuals wanting to exchange crypto for INR.

• • Why FIU Registration? Even though the platform may not directly own the assets, it facilitates transactions between parties and is therefore subject to AML obligations.

4. VDA Custodians:

   Custodians hold or safeguard digital assets on behalf of customers. Examples: Institutional crypto custody providers, Digital asset safekeeping services.

• • Why FIU Registration? Since they have custody or control over customer assets, they must implement monitoring and reporting mechanisms.

5. NFT Marketplaces (Where Customer Funds Are Handled) :

   NFT (Non-Fungible Token) marketplaces may come within the FIU framework if they facilitate payments, transfers, or custody of customer funds. Example: An NFT platform that receives payments from buyers and transfers the amount to sellers.

• • Why FIU Registration? Handling customer money or digital assets creates money laundering risks that require regulatory oversight.

6. Intermediaries Facilitating Crypto-to-Fiat Transactions :

   Any entity that helps convert cryptocurrency into traditional currency (INR, USD, etc.) or vice versa falls under the reporting requirements. Examples: Crypto payment gateways, Crypto remittance facilitators and Platforms enabling crypto-to-bank account settlements.

• • Why FIU Registration? Such entities bridge the virtual and traditional financial systems, making AML monitoring essential.

What Does Registration Require?

Once registered with FIU-IND, these entities must Conduct KYC (Know Your Customer) procedures, maintain transaction records, report suspicious transactions, File prescribed reports with FIU-IND, and appoint a compliance officer. and implement AML/CFT (Anti-Money Laundering and Counter Financing of Terrorism) policies. Practical Example: If a company operates a website where users can buy Bitcoin using INR, Store Bitcoin in a hosted wallet, and transfer crypto to other users. Then that company will generally be required to register with FIU-IND and comply with PMLA requirements.

However, a person merely investing in cryptocurrency for personal use is not required to register with FIU-IND. The registration requirement applies primarily to businesses providing crypto-related services to others.

Benefits of FIU-IND Registration for Crypto and VDA Businesses

FIU-IND registration is not merely a regulatory requirement; it also provides significant business, compliance, and credibility advantages to Virtual Asset Service Providers (VASPs) operating in India.

1. Legal Compliance

Benefit: Avoid legal penalties, regulatory action, and operational restrictions. Once registered with FIU-IND, the entity demonstrates compliance with the Prevention of Money Laundering Act (PMLA) requirements applicable to Virtual Digital Asset (VDA) service providers. This reduces the risk of regulatory action, monetary penalties, enforcement proceedings, or restrictions on carrying out business activities. Example: A crypto exchange registered with FIU-IND is better positioned to meet KYC, AML, record-keeping, and reporting obligations prescribed under Indian law.

2. Increased Credibility

Benefit: Builds confidence among investors, customers, and business partners. Registration signals that the business follows recognized anti-money laundering and compliance standards. Institutional investors, venture capital funds, and corporate clients generally prefer dealing with regulated and compliant entities. Example: Users are more likely to trust a crypto platform that has implemented customer verification processes and follows FIU reporting requirements.

3. Operational Continuity

Benefit: Reduces the risk of business disruption. Regulatory non-compliance can lead to investigations, notices, restrictions, or interruptions in operations. FIU registration helps establish a compliance framework that supports uninterrupted business activities and smoother regulatory interactions. Example: A registered VASP is less likely to face sudden compliance-related obstacles when expanding services or onboarding customers.

4. Global Recognition

Benefit: Aligns the business with international AML standards. Financial institutions and international partners often assess whether a platform follows globally accepted Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) practices. FIU compliance helps demonstrate alignment with principles promoted by the Financial Action Task Force (FATF). Example: Foreign investors or overseas business partners may be more comfortable engaging with an Indian crypto business that operates within a recognized regulatory framework.

5. Improved Banking Relationships

Benefit: Easier access to banking and payment infrastructure. Banks generally conduct enhanced due diligence before providing services to crypto-related businesses. FIU registration demonstrates a commitment to compliance, making banks more comfortable in opening accounts, facilitating payment services, and maintaining banking relationships. Example: A registered crypto exchange may find it easier to establish and maintain current accounts, payment gateway facilities, and banking arrangements compared to an unregistered entity.

Key Takeaway: Benefits of FIU-IND Registration for Crypto and VDA Businesses

FIU-IND registration offers five major advantages:

• Legal protection through regulatory compliance
• Enhanced trust and business credibility
• Reduced risk of operational disruptions
• Better acceptance by international stakeholders
• Stronger banking and financial institution relationships

For any VASP, crypto exchange, wallet provider, NFT platform handling customer funds, or crypto-fiat intermediary, FIU registration is increasingly becoming both a regulatory necessity and a business advantage.

Step-by-Step Guide to FIU-IND Registration for VASPs (Virtual Asset Service Providers)

Following the Ministry of Finance notification bringing Virtual Digital Asset (VDA) activities under the Prevention of Money Laundering Act (PMLA), Virtual Asset Service Providers (VASPs) such as crypto exchanges, wallet providers, custodians, and certain NFT platforms are required to register with FIU-IND and comply with Anti-Money Laundering (AML) regulations.

Step 1: Appointment of Principal Officer and Designated Director:

Before applying for registration, the organization must establish its AML compliance structure.

1. Principal Officer (PO) : The Principal Officer is the key compliance officer responsible for monitoring AML/KYC compliance, reporting suspicious transactions to FIU-IND, coordinating with regulatory authorities, maintaining transaction records and compliance documentation, and ensuring implementation of AML/CFT policies.
2. Designated Director: The Designated Director is a senior management representative responsible for ensuring overall compliance with PMLA requirements. Typically, the following may be appointed: Managing Director, Whole-time Director, CEO, Partner (for LLPs), and Proprietor (for proprietorship concerns)

Internal Documentation Required: The Board should pass a resolution approving the appointment of the principal officer, the appointment of the designated director, the adoption of the AML/CFT policy, and the authorization for FIU registration.

Step 2: Collect Required Documents:

Prepare all supporting documents before initiating registration. Entity Documents

• For Companies: Certificate of Incorporation, PAN Card, TAN Allotment Letter, Memorandum & Articles of Association, ST Registration (if applicable).
• For LLPs: Certificate of Incorporation, LLP Agreement, PAN and TAN.

KYC Documents of Directors:

Provide a PAN card, Aadhaar card, passport (if available), address proof, and Contact Details.

• Principal Officer Documents: PAN, Aadhaar, Designation Letter, Contact Number, and Email ID.
• Designated Director Documents: PAN, Aadhaar, and Board resolution authorizing appointment.
• Business Documents: Registered Office Address Proof, Utility Bill, Lease Agreement (if rented), Website details, Business Model Description, and Details of Products and Services Offered.

Compliance Documents:

Most important document: AML/CFT Policy: The policy should contain:

• Customer Due Diligence (CDD) : Customer identification, verification procedures, and risk categorization.
• Enhanced Due Diligence (EDD) : For high-value clients, Politically Exposed Persons (PEPs), and foreign customers.
• Transaction Monitoring: Procedures for tracking unusual transactions, monitoring wallet activity, and monitoring large fund movements.
• Reporting Procedures: Process for filing STRs, CTRs, and other FIU reports
• Record Retention: Policy to maintain customer records, KYC documents, and transaction logs.

Step 3: Create Account on FIU-IND FINnet Gateway:

FIU-IND operates through the FINnet platform. Requirements Before Registration: Digital Signature Certificate (DSC) : Obtain Class 3 DSC. And in the name of authorized signatory.

Why?

Because all submissions are electronically verified through DSC.

• Contact Information: Keep ready the principal officer’s email ID, mobile number, organizational email, and registered office details.
• Technical Requirements: Prepare domain-based email ID, organization website, and compliance contact details.

Step 4: Submission of FIU Registration Application:

After creating the account. Complete Registration Form: Provide details relating to:

• Organization Information: Legal name, PAN, incorporation number, registered address, and nature of business.
• VASP Activities: Specify whether you perform cryptocurrency exchange, wallet services, custody services, NFT marketplace operations, token trading, and crypto-fiat conversion.
• Principal Officer Details: Provide Name. Designation, Mobile, and Email.
• Designated Director Details: Provide name, DIN (where applicable), and contact details.
• Upload Documents: Upload Board Resolution, Certificate of Incorporation, PAN, Address Proof, AML Policy, KYC Documents, and Business Details. Ensure all documents are clear, signed, and in prescribed format.

Step 5: Verification by FIU-IND:

Once submitted: Document Review: FIU examines business legitimacy, the nature of VDA activities, the AML framework, and the compliance structure. Clarifications: FIU may seek additional documentation, AML policy enhancements, business model explanation, and source of funds information. Prompt responses generally help expedite approval.

Approval: If satisfied, FIU grants Reporting Entity Registration and Access credentials to the FINnet Reporting Portal. The entity then becomes an officially registered Reporting Entity under PMLA.

Step 6: Post-Registration Reporting Obligations:

Registration is only the beginning. Continuous compliance is mandatory.

1. Customer Due Diligence (KYC) : Before onboarding customers, verify identity, address, beneficial ownership, and source of funds (where required).
2. Suspicious Transaction Monitoring: Monitor activities such as large unexplained transfers, structuring transactions, rapid movement between wallets, use of multiple accounts, and high-risk jurisdictions.
3. Record Maintenance: Maintain KYC records, wallet information, transaction histories, and communication records. Typically records must be retained for the period prescribed under PMLA.
4. Filing Reports with FIU-IND:

• • STR (Suspicious Transaction Report) : Filed when activity appears unusual, money laundering indicators are observed, Terror financing concerns arise Example: A customer suddenly deposits substantial crypto assets without an identifiable source.
  • CTR (Cash Transaction Report) : Filed for reportable cash transactions as prescribed under PMLA rules.
  • NTR (Nil Transaction Report) : Certain reporting requirements may apply even where no reportable transactions occur.
  • Ongoing AML Reviews: Organizations should conduct periodic AML audits, Update AML policies, train employees, and review risk assessments annually.

Practical Example:

Suppose ABC Crypto Exchange Pvt. Ltd. provides Bitcoin trading, Ethereum wallets, and INR withdrawals. To operate compliantly:

1. Appoint Principal Officer.
2. Appoint Designated Director.
3. Prepare AML Policy.
4. Register on FINnet.
5. Submit FIU application.
6. Obtain registration.
7. Perform KYC of customers.
8. Monitor transactions.
9. File STR/CTR reports whenever required.

Final Checklist Before Filing

• Certificate of Incorporation
• PAN & TAN
• Board Resolution
• Principal Officer Appointment
• Designated Director Appointment
• AML/CFT Policy
• Address Proof
• Website Details
• DSC of Authorized Signatory
• Business Activity Description
• KYC Documents of Key Officials

Once these steps are completed and approved, the VASP becomes a registered reporting entity and can legally operate while meeting its AML reporting obligations in India.