India's Fragmented Crypto Custody Rules: Why Self-Custody Users Need to Understand the VDA Framework
India's approach to crypto custody is fragmented across multiple government agencies and regulatory frameworks, rather than governed by a single comprehensive law. This means that whether you're holding your own Bitcoin or using a custody service, the legal and tax implications depend on which specific activity you're performing and which Indian agency has jurisdiction over it.
How Does India Actually Regulate Crypto Custody and Self-Custody?
Unlike countries with unified crypto legislation, India treats different parts of the digital asset ecosystem through separate legal channels. The Ministry of Finance handles taxation and financial policy, the Income Tax Department administers crypto taxation, the Financial Intelligence Unit-India (FIU-IND) manages anti-money-laundering compliance, and the Reserve Bank of India (RBI) oversees monetary and payment-system risks. This multi-agency structure means that your custody obligations depend on what you're doing with your crypto, not just the fact that you own it.
Crypto is not recognized as legal tender in India, but this doesn't mean it's prohibited. Bitcoin, Ether, and other digital assets are legal to buy, hold, and transfer, though they carry specific tax and compliance consequences. The key distinction is that crypto ownership exists in a regulated-but-not-fully-licensed environment, where different activities trigger different regulatory obligations.
What Activities Trigger Different Custody and Compliance Rules?
The type of custody activity you engage in determines which rules apply. India's framework specifically identifies several VDA (Virtual Digital Asset) service provider activities that fall under regulatory oversight:
- Exchange Services: Converting between VDA and fiat currency, or exchanging one VDA for another VDA, requires compliance with anti-money-laundering frameworks
- Transfer and Custody: Transferring VDA for customers or safekeeping and administering VDA or instruments enabling control over VDA must meet FIU-IND registration requirements
- Financial Services: Participation in and provision of financial services related to an issuer's offer and sale of a VDA falls under specified regulatory obligations
- Self-Custody Holding: Simply buying and holding Bitcoin or other crypto for personal use has different tax implications than operating a custody service
The critical point is that each activity has distinct legal, tax, and compliance implications. Running a crypto exchange, providing custody services, or operating a wallet service each trigger different regulatory requirements compared to personal self-custody.
What Is the FIU-IND Registration Requirement for Custody Providers?
In March 2023, India notified specified VDA activities under the Prevention of Money Laundering Act (PMLA) framework, bringing crypto custody providers into formal regulatory oversight. This was a major development for anyone operating custody services or wallet platforms in India. FIU-IND registration is now a mandatory prerequisite for covered VDA service providers, meaning that crypto businesses offering custody, exchange, or transfer services cannot legally operate without registering with India's financial intelligence unit.
It's important to understand what FIU-IND registration actually means. Registration does not mean the government has declared a crypto exchange to be a bank, nor does it mean every product offered by the company is approved by the government. Instead, it means the relevant VDA service provider is being brought into India's anti-money-laundering and counter-terrorist-financing (AML/CFT) reporting framework. This is a compliance obligation, not a license to operate freely.
How Are Crypto Gains Taxed Under India's VDA Framework?
The Income Tax Department administers taxation of VDA income through specific provisions in India's tax code. VDA gains are currently subject to a 30% tax rate, plus applicable surcharge and 4% cess. This is a flat rate that applies regardless of how long you hold the asset, making India's crypto tax treatment notably different from countries that distinguish between short-term and long-term capital gains.
Taxpayers must report VDA transactions on Schedule VDA in their income tax returns, specifically in forms ITR-2 and ITR-3. This transaction-wise reporting requirement means that self-custody users who buy and sell crypto must maintain detailed records of each transaction for tax purposes. The reporting obligation applies to anyone with VDA income, whether they're using self-custody or relying on a custody provider.
Why Does India's Multi-Agency Approach Matter for Custody Users?
Understanding which agency regulates which activity is essential for anyone holding crypto in India. The RBI has historically maintained a cautious position toward private cryptocurrencies and has repeatedly highlighted their risks to monetary stability, financial stability, consumer protection, and illicit finance. However, the RBI's regulatory role is limited to activities that affect payments, monetary policy, financial stability, banking, and foreign exchange. The Securities and Exchange Board of India (SEBI) only becomes relevant if a crypto-related product or activity falls within securities-market regulation, which is not automatic for all crypto assets.
This means that the regulatory agency overseeing your custody activity depends on the specific nature of what you're doing. A self-custody holder of Bitcoin faces different regulatory considerations than someone operating a custody service, who faces different considerations than someone trading security tokens. The framework requires careful classification rather than assuming that every crypto asset is automatically regulated by a single agency.
For custody providers and self-custody users alike, the practical implication is clear: India's crypto regulation is not a single rulebook but a collection of overlapping frameworks administered by different government institutions. Understanding which agency has jurisdiction over your specific activity is the first step to ensuring compliance with India's tax, AML, and financial regulations.