Financial Intelligence Unit- India (FIU-IND) issues notices for non-compliance to 15 Virtual Digital Assets Service providers (VDA SPs) under Section 13 of the Prevention of Money Laundering Act (PML) Act, 2002
In this note
1. At a Glance
- FIU-IND (Financial Intelligence Unit-India, under Dept. of Revenue, Ministry of Finance) issued non-compliance notices to 15 Virtual Digital Asset Service Providers (VDA SPs) under Section 13 of the PMLA, 2002 [1].
- This is the latest in a series of enforcement actions (2023–2026) targeting offshore crypto exchanges operating in India without registering as Reporting Entities under India's AML/CFT framework [1][2][3].
- Relevant for UPSC as it links PMLA institutional architecture, FinTech/crypto regulation, and India's AML-CFT compliance — a recurring GS-III/GS-II theme.
- Demonstrates the "activity-based, not presence-based" regulatory principle now applied to virtual digital assets (VDAs).
2. Why in the News
- On 9 September 2026, FIU-IND issued notices under Section 13, PMLA 2002 to 15 VDA SPs — Weex, Blofin, Rezorex, Bitunix, DigiFinex, Toobit, XT.com, Latoken, WOO X, Pionex, ChangeNow, SimpleSwap, Fixedfloat, WhiteBIT and Guardian — for non-compliance [1].
- FIU-IND simultaneously issued takedown notices for their apps/URLs, acting as nodal officer under the Information Technology Act, 2000 [1].
- This follows FIU-IND's earlier action against 25 offshore VDA SPs (2025) [2] and 9 offshore VDA SPs including Binance and Kraken (December 2023) [3], and a monetary penalty of ₹9.27 crore on Bybit Fintech Ltd [4].
3. Background & Evolution
- 2002: PMLA enacted; FIU-IND set up as the national nodal agency for receiving, analysing, and disseminating information on suspicious financial transactions.
- March 2023: Ministry of Finance notification brought VDA-related activities within the definition of "reporting entity" under PMLA, mandating registration with FIU-IND.
- December 2023: FIU-IND issued compliance show-cause notices to 9 offshore VDA SPs (including Binance, Kraken) for operating in India without registration; MeitY was asked to block their URLs [3].
- 2025: Bybit Fintech Ltd penalized ₹9.27 crore for PMLA obligation violations [4]; notices issued to 25 offshore VDA SPs [2].
- September 2026: Fresh notices to 15 VDA SPs — continuing the compliance-crackdown pattern [1].
4. Core Static Facts
| Item | Detail |
|---|---|
| Nodal agency | Financial Intelligence Unit-India (FIU-IND) |
| Administrative home | Department of Revenue, Ministry of Finance |
| Enabling law | Prevention of Money Laundering Act (PMLA), 2002 |
| Key provision invoked | Section 13, PMLA — power to inspect records/impose obligations on reporting entities |
| Takedown power basis | Information Technology Act, 2000 (FIU-IND as nodal officer for blocking) |
| Entities registered with FIU-IND (as of latest release) | 50 VDA SPs [1] |
| Entities noticed in this round | 15 VDA SPs [1] |
| Earlier rounds | 9 offshore SPs (2023) [3]; 25 offshore SPs (2025) [2] |
| Regulatory principle | Registration obligation is activity-based, irrespective of physical presence in India [1][2] |
| Reportable VDA activities | Exchange of VDA↔fiat; transfer of VDAs; safekeeping/administration of VDAs or instruments enabling control over VDAs [1][2] |
5. Multi-Dimensional Analysis
Economic
- Crypto/VDA sector remains outside formal banking regulation in India; enforcement pushes offshore platforms toward compliance or exit, affecting market access for Indian crypto users [1].
- India taxes VDA gains (30% flat tax + 1% TDS under Income Tax Act) but AML compliance is separately routed via PMLA/FIU-IND.
Legal/Constitutional
- Action rests on the 2023 amendment bringing VDA SPs under PMLA's "reporting entity" definition, extending obligations to KYC, record-keeping, and suspicious transaction reporting (STR) [1].
- Section 13, PMLA empowers the Director, FIU-IND to call for records and impose monetary penalties for non-compliance — a quasi-judicial enforcement power.
Governance/Ethical
- Reflects a "comply or be blocked" enforcement model — using IT Act takedown powers as a coercive tool against offshore, non-registered platforms outside direct jurisdictional reach [1][3].
- Raises questions on enforceability against entities with no physical presence in India — reliant on ISP-level blocking rather than direct penalties.
Administrative
- Coordination between FIU-IND, MeitY (blocking orders), and Ministry of Finance needed for effective takedown — a federal/inter-ministerial exercise.
- Only 50 VDA SPs formally registered against a much larger universe of platforms serving Indian users — highlighting an implementation gap [1].
Geopolitical/Strategic
- Offshore/foreign-headquartered exchanges (many not physically present in India) test India's extraterritorial AML enforcement, relevant to global FATF (Financial Action Task Force) commitments on VDA regulation.
6. Recent Developments (last 12–18 months)
- 2025: FIU-IND issued notices to 25 offshore VDA SPs under Section 13, PMLA [2].
- 2025: FIU-IND imposed ₹9.27 crore penalty on Bybit Fintech Ltd for PMLA violations [4].
- 9 September 2026: FIU-IND issued fresh Section 13 notices plus takedown directions to 15 more VDA SPs [1].
7. Prelims Hooks
- FIU-IND was issued notices to 15 VDA SPs under Section 13 of PMLA, 2002 (announced 9 September 2026) [1].
- FIU-IND functions under the Department of Revenue, Ministry of Finance (not RBI or SEBI) [1].
- 50 VDA SPs are currently registered with FIU-IND as Reporting Entities [1].
- VDA SP registration obligation under PMLA is activity-based, not contingent on physical presence in India [1][2].
- Reportable VDA activities: exchange with fiat, transfer, safekeeping/administration of VDAs [1].
- FIU-IND also acts as nodal officer under the IT Act, 2000 for ordering takedown of non-compliant VDA platforms/URLs [1].
- December 2023: FIU-IND's first major action was against 9 offshore VDA SPs including Binance and Kraken [3].
- Bybit Fintech Ltd was penalized ₹9.27 crore by FIU-IND [4].
- 2025's enforcement round covered 25 offshore VDA SPs [2].
- PMLA was enacted in 2002.
- FIU-IND is India's central national agency for receiving/analysing/disseminating information on suspicious financial transactions.
8. Mains Relevance
- GS-II: Statutory bodies, government policies for regulation of emerging technology sectors (VDA/crypto).
- GS-III: Money laundering, black money, financial regulation of new-age assets (VDAs), cyber-finance security.
- Plausible question stems: 1. Discuss the challenges in regulating Virtual Digital Assets under India's anti-money laundering framework. How effective is the PMLA-based enforcement model against offshore crypto platforms? 2. Examine the role of the Financial Intelligence Unit-India in India's AML/CFT architecture. Assess the adequacy of existing statutory powers to enforce compliance on non-resident service providers. 3. 'Regulation of Virtual Digital Assets is a test case for India's ability to enforce cross-border digital accountability.' Comment.
9. Related Topics to Study Next
- Prevention of Money Laundering Act (PMLA), 2002 — the parent statute and its enforcement machinery (ED, FIU-IND).
- FATF (Financial Action Task Force) — international AML/CFT standard-setting body; India's mutual evaluation.
- Taxation of Virtual Digital Assets (Income Tax Act, Finance Act 2022 provisions — 30% tax, 1% TDS) — related but distinct regulatory track.
- Enforcement Directorate (ED) — investigative agency for PMLA offences, distinct from FIU-IND's regulatory/reporting role.
- RBI's stance on Cryptocurrency/CBDC (Digital Rupee) — monetary policy angle vs AML angle.
- Information Technology Act, 2000 — website blocking provisions (Section 69A) — legal basis for takedown notices.
- Reporting Entities under PMLA (banks, NBFCs, intermediaries) — comparative compliance obligations.
10. Common Errors / Trap Areas
- Confusing FIU-IND (intelligence/regulatory body, Ministry of Finance) with the Enforcement Directorate (investigative/prosecutorial agency) — they perform different roles under PMLA.
- Assuming VDA SP registration requires physical presence in India — it is explicitly activity-based.
- Mixing up the numbers across rounds of enforcement: 9 (Dec 2023), 25 (2025), 15 (Sept 2026) — each is a separate, cumulative action, not replacing prior notices.
- Assuming FIU-IND itself blocks websites — it only issues takedown notices as nodal officer; actual blocking involves IT Act machinery (MeitY/ISPs).
- Confusing PMLA's AML compliance regime for VDAs with the income tax regime for VDAs (30% tax/1% TDS) — these are separate legal tracks under different Acts.
Sources
- 1Financial Intelligence Unit-India (FIU-IND) issues notices for non-compliance to 15 Virtual Digital Assets Service providers (VDA SPs) under Section 13 of the PML Act, 2002pib.gov.in · tier 1
- 2Financial Intelligence Unit (FIU IND) issues notices for non-compliance to 25 offshore Virtual Digital Assets Service providers (VDA SPs) under Section 13 of the PML Act, 2002pib.gov.in · tier 1
- 3Financial Intelligence Unit India (FIU IND) issues compliance Show Cause Notices to nine offshore Virtual Digital Assets Service Providers (VDA SPs)pib.gov.in · tier 1
- 4FIU-IND imposes monetary penalty of Rs. 9 crore 27 lakhs on Virtual Digital Asset Service Provider Bybit Fintech Limited (Bybit)pib.gov.in · tier 1