Crypto traders in India will soon face a radically different login process. The Financial Intelligence Unit (FIU) has overhauled KYC rules for all registered exchanges, moving beyond basic ID scans. The government now demands 100% certainty that the person behind the screen is real and physically located inside India—both conditions are non-negotiable.
Three Verification Layers: Liveness, Location, and a Tiny Bank Transfer
The new rules target deepfakes and stolen identities by adding three mandatory steps. First, live selfie verification: Users must perform a "blink test" or move their head while the camera is on, proving they are not a static photo or an AI-generated video. The process takes two seconds but blocks most synthetic media attacks.
Second, location tracking. Every account opening or session login now requires the exchange to record GPS coordinates (latitude/longitude), IP address, and a timestamp. The goal: prevent VPN abuse and ensure accounts are created only from within India. Exchanges must retain a permanent digital trail proving legal territorial compliance.
Third, the "penny drop" test. Exchanges send 1 Indian rupee (≈$0.012) to the user's bank account. If the bank account name does not exactly match the ID submitted, the account fails verification. Additionally, users must provide their PAN card plus a second government ID (e.g., passport or voter ID), all backed by an OTP sent to their phone.
Scope: All 49 Registered Exchanges Affected
The changes apply to both new and existing users. All 49 FIU-registered exchanges—including major platforms like WazirX and CoinDCX—must implement these high-tech security steps immediately. The FIU aims to "clean up" the market, making it nearly impossible to use crypto for money laundering or fraud. The government maintains a hard stance against Initial Coin Offerings (ICOs), labeling them high-risk.
While the extra steps add friction, they fundamentally protect user funds. By 2026, India's crypto ecosystem is expected to resemble a regulated banking system: transparent, compliant, and traceable. Traders should keep their phone and Aadhaar card ready for each login.