Crypto in India 2026: Essential Legal, Tax & Enforcement Risks

Introduction

Crypto in India is legal. You can buy it, hold it, and sell it without breaking any law. But that does not mean it is simple or safe to deal in without understanding the rules.

India does not have a single crypto law yet. Instead, several existing laws apply to crypto, each from a different direction: one governs the tax you pay on profits, another covers how exchanges must verify your identity and report transactions, a third deals with how money can move in and out of the country, and a fourth gives enforcement agencies the power to freeze accounts and investigate. Most investors run into trouble not because they did anything deliberately wrong, but because they did not know these rules applied to them.

In 2026, that risk is higher than ever. Exchanges now report your transactions directly to the Income Tax Department. The anti-money-laundering framework has been extended to crypto platforms. The RBI has told Parliament it would prefer crypto not to be legalized. And enforcement agencies are more active than at any point before. At the same time, about 39 million Indians hold crypto, a Parliamentary Committee is working on a regulatory framework, and India is getting ready to share crypto data with other countries from 2027 under a global standard called CARF.

This article explains what Indian crypto law actually means for you, whether you are an individual investor, a trader, or a business. It covers the tax rules, the KYC and anti-money-laundering requirements, the foreign exchange risks, and what happens when enforcement gets involved. It also tells you exactly which records to keep to protect yourself if any of these issues ever land at your door.

Crypto in India: The Legal Position at a Glance

For the official VDA tax position, the Income Tax Department states that VDA gains are subject to a 30% tax under Section 115BBH and that Schedule VDA is used for transaction-wise disclosure.

What You Can and Cannot Do

Permitted: Buying, selling, and holding crypto as an investment and trading on FIU-IND-registered platforms (Indian or compliant international ones) are permitted.

Not permitted: Using crypto to pay for goods, services, or salaries, operating an unregistered exchange or wallet service, and structuring anonymous transactions to evade tax or reporting are prohibited or actionable.

The banking line: Banks may service crypto-related businesses under strict due diligence and monitoring conditions, but cannot hold or invest in crypto themselves. The RBI’s preferred alternative is its own Digital Rupee (e₹), which is being expanded across retail and wholesale use as the only regulated, sovereign digital currency.

How India Got Here: 2018 to 2026 in Six Steps

The trajectory is unmistakable: each step has added surveillance and formalisation, never relaxation. Planning on the assumption that enforcement will loosen is planning against the trend.

For RBI’s position and its treatment of virtual currencies and digital currency, you can refer to the RBI Concept Note on Central Bank Digital Currency. The RBI has also clarified that the Supreme Court’s 2020 decision set aside its earlier banking restriction, while regulated entities must continue to comply with applicable KYC, AML, PMLA, and FEMA requirements.

Risk Zone 1: Taxation, The Harshest Regime in Indian Law

The VDA tax framework introduced by the Finance Act, 2022 continues under the Income-tax Act, 2025 (in force from 1 April 2026), and its design is deliberately punishing:

Flat 30% on gains

Every gain from transferring a VDA is taxed at 30% plus cess, regardless of your income slab or how long you held the asset. Selling for INR, swapping one token for another, and paying for goods in crypto are all taxable “transfers”.

No loss set-off, ever

A loss on one token cannot be set off against a gain on another, against any other income, or carried forward. Each profitable trade is taxed in full even in a losing year, which is why high-frequency trading is economically brutal in India.

No expense deductions

Only the cost of acquisition is deductible. Mining costs, gas fees, platform charges, and interest on borrowings do not reduce the taxable gain.

TDS under Section 194S

1% tax is deducted at source on transfers above INR 50,000 a year (INR 10,000 for specified persons). Indian exchanges deduct it automatically; in P2P and foreign-platform deals the buyer must deduct and deposit it, which most P2P traders do not realise.

Reporting

All VDA transactions must be reported in Schedule VDA of the income tax return. Gifts of crypto above INR 50,000 from non-relatives are taxable in the recipient’s hands, and mining, staking, and airdrop rewards raise valuation questions that need documented positions.

The net has also tightened around platforms. From April 2026, a dedicated penalty regime applies to crypto reporting entities, including daily penalties for failing to report transactions and fixed penalties for inaccurate reporting, and crypto-assets have been brought into the financial account reporting framework aligned with the OECD’s Crypto-Asset Reporting Framework (CARF). From 1 April 2027, India is set to begin automatic cross-border sharing of crypto transaction data with other countries under CARF, which means offshore holdings will become visible to Indian authorities through foreign exchanges themselves. In plain terms: the tax department increasingly receives your transaction data whether you report it or not, and mismatches between exchange data and your return are the easiest notices for the department to issue.

Risk Zone 2: KYC and AML, Crypto Inside the PMLA

Since March 2023, virtual digital asset service providers, exchanges, brokers, wallet providers, and custodians are “reporting entities” under the Prevention of Money Laundering Act, 2002. That single notification changed the character of Indian crypto:

For businesses: Every platform serving Indian users must register with the Financial Intelligence Unit (FIU-IND), run full KYC, monitor transactions, maintain records and file suspicious transaction reports. FIU-IND has acted against offshore exchanges operating without registration, including show-cause notices and URL blocking.

For investors: Your KYC-linked trail is permanent and shared. Structuring transactions to avoid visibility, using someone else’s account, or dealing through unregistered platforms can convert a tax problem into a money-laundering allegation, and under PMLA, dealing in “proceeds of crime” is itself an offence with stringent bail conditions.

The hidden category: Businesses that accept crypto payments or run VDA-linked products (gaming tokens, NFT marketplaces, reward points convertible to VDAs) may qualify as reporting entities without realising it, and should obtain a legal classification opinion before launch.

FIU-IND’s official framework confirms that specified VDA activities, including exchange between VDAs and fiat, exchange between VDAs, and transfer and custody-related services, fall within the PMLA reporting framework.

Risk Zone 3: The FEMA Grey Zone, Where the Real Danger Lies

Tax law tells you what crypto costs; FEMA decides whether your transaction was permitted at all, and this is the least settled area. FEMA (1999 does not mention VDAs, which creates unresolved questions with severe downside:

Buying on foreign platforms: Remitting money abroad under the Liberalised Remittance Scheme (LRS) to buy crypto on foreign exchanges is a route the RBI has consistently frowned upon; banks routinely refuse or report such remittances, and using disguised purpose codes to route funds is itself a FEMA contravention.

Offshore holdings: Holding crypto on foreign exchanges or in self-custody wallets acquired with Indian funds raises questions under FEMA’s provisions on holding foreign assets, alongside the mandatory disclosure of foreign assets in Schedule FA of the tax return. Non-disclosure invites consequences under the Black Money Act as well.

Cross-border transfers: Transferring crypto across borders, paying a foreign vendor in USDT, receiving export payments in crypto, and moving tokens to a relative abroad have no recognised channel under FEMA. Such settlements bypass authorised dealer banks entirely, which is precisely what FEMA exists to prevent, and they surface prominently in Enforcement Directorate investigations.

Exposure: Penalties under FEMA reach up to three times the amount involved, and while FEMA contraventions are civil and compoundable, crypto cases rarely stay confined to FEMA once large values are involved

Risk Zone 4: Enforcement, How Cases Actually Begin

Understanding how crypto cases start helps you avoid becoming one. The common triggers:

A mismatch between exchange-reported data, TDS statements, and your income tax return is now the most common trigger, generating automated notices.

Bank alerts on high-value or patterned transfers to and from exchange accounts, escalating into PMLA scrutiny.

Receiving tainted coins: if funds traced to a fraud or scam pass through your wallet, even as an unwitting intermediary or P2P counterparty, your accounts can be frozen while the ED or police trace the chain. P2P trading with strangers is the single most common way honest investors get their bank accounts frozen.

Investment scams and “crypto recovery” frauds, where victims’ own transfers become part of a laundering trail.

When the Enforcement Directorate opens a PMLA investigation, it can summon persons, record statements, freeze bank accounts and attach assets, including crypto holdings, and PMLA’s twin bail conditions make custody a real risk in serious cases. The practical defence is almost always documentary: the investor who can produce a complete, contemporaneous paper trail is treated very differently from the one reconstructing history after a freeze order.

The Documentation Vault: What Every Investor Should Maintain

Whether facing a tax notice, a bank query or an ED summons, these documents decide outcomes. Maintain them contemporaneously, not after trouble starts:

How ELT Law Partners LLP Can Help

ELT Law Partners LLP advises investors, founders, exchanges and businesses across the full crypto risk map: VDA tax positions and Schedule VDA/FA compliance, responses to income tax and TDS notices, PMLA advisory including FIU-IND registration and KYC/AML frameworks for platforms, FEMA risk assessment for cross-border holdings and transactions, defence in ED investigations including summons, statements, account freezes and attachment proceedings, and transaction structuring for businesses building VDA-linked products.

Conclusion

Crypto in India is legal but unforgiving: the tax regime punishes carelessness, PMLA punishes opacity, FEMA punishes improvised cross-border routes, and enforcement agencies increasingly see the full picture through exchange data. The investors and businesses that thrive are those that treat every transaction as one they may someday have to explain, with documents to match. If you hold meaningful crypto positions, trade P2P, use foreign platforms, or are building a VDA business, contact ELT Law Partners LLP for a confidential risk review before a notice, freeze, or summons makes the review urgent.

Disclaimer: This article is for general information only and does not constitute legal or tax advice. Crypto regulation in India is evolving, and positions may change. Please consult ELT Law Partners LLP for advice on your specific facts.

FAQs

Q1. Is cryptocurrency legal in India in 2026?

Yes. Buying, holding, and selling crypto is legal, but it is not legal tender and cannot be used as currency. It is regulated as a Virtual Digital Asset through tax law, PMLA, and enforcement action rather than a single crypto statute.

Q2. How much tax do I pay on crypto gains?

A flat 30% plus cess on gains from every transfer, with no loss set-off, no carry-forward, and no deduction except the purchase cost. A 1% TDS also applies to transfers above the annual threshold, and everything must be reported in Schedule VDA.

Q3. Is swapping one token for another taxable?

Yes. A crypto-to-crypto swap is a “transfer” of the token you gave up, taxed at 30% on the gain, with TDS implications, even though no rupees changed hands.

Q4. Can I buy crypto on foreign exchanges using LRS remittances?

This is a high-risk grey zone. Banks routinely refuse or flag such remittances; misdescribing the purpose is itself a FEMA contravention, and offshore holdings must be disclosed in Schedule FA. Take advice before, not after, using foreign platforms.

Q5. Why do bank accounts of P2P traders get frozen?

Because tainted funds from frauds often move through P2P deals. If scam proceeds reach your account, banks and police can freeze it while the trail is investigated. Complete counterparty KYC records are your only realistic protection.

Q6. What happens if I simply do not report my crypto?

Exchanges now report transaction data to the authorities under a penalty-backed regime, and India is aligning with global crypto data-sharing under CARF. Non-reporting produces automated mismatches, tax demands with penalties, and in foreign-holding cases, Black Money Act exposure.

Q7. My business wants to accept crypto payments. Can it?

Accepting crypto as consideration is legally fraught: it raises VDA tax and TDS obligations for both sides, potential PMLA reporting-entity classification, and FEMA issues for any cross-border element. Structure and document the model with legal advice before launch.

Q8. What should I do if I receive an ED or FIU summons about crypto?

Do not ignore it and do not attend unprepared. Assemble your source-of-funds proof, trade history, and tax filings, and engage counsel before your first statement, since statements recorded under PMLA carry evidentiary weight.