IN AN effort to eliminate illegal activity in the digital asset market, India’s Financial Intelligence Unit (FIU) has unveiled stringent new Anti-Money Laundering (AML) and Know Your Customer (KYC) protocols for cryptocurrency exchanges, including mandatory liveness detection and geographical tracking during the onboarding process. The updated guidelines, issued on January 8 and accessed by PTI, classify crypto exchanges as Virtual Digital Asset (VDA) service providers who will now have to do more than just allow simple document uploads. Under the new rules, users must take a “live selfie” using software that verifies their presence, typically through eye-blinking or head movement.

 

The measure helps prevent the use of static photos or deepfakes. Exchanges must record the exact latitude and longitude, date, timestamp, and IP address from which a user starts creating an account. The “penny-drop” method, which involves processing a nominal Re 1 transaction to confirm that the bank account is active and belongs to the registrant, is required. In addition to a Permanent Account Number (PAN), users must provide a secondary ID such as a Passport, Aadhaar or a Voter ID, along with an OTP verification for the email ID and phone number. The FIU, which operates under the Union Finance Ministry, is taking a tough stance against tools meant to conceal the paper trail of crypto wealth. The new guidelines aim to “strongly discourage” Initial Coin Offerings (ICOs) and Initial Token Offerings (ITOs) due to their lack of economic justification and high risk.

 

The FIU is the single-point regulator for cryptocurrency exchanges (reporting entities or VDA service providers) operating in India under the provisions of the Prevention of Money Laundering Act (PMLA). All such exchanges have to register with the FIU as reporting entities and submit regular reports on suspicious transactions and maintain records of their clients (customers) to identify and combat money laundering, terrorist financing and proliferation financing risks associated with crypto assets, which India has not identified as a legal tender but are taxed under the Income-Tax law.

 

“The RE (crypto exchange) shall also ensure that the client whose credentials are being furnished at the time of onboarding is the same individual who is actually accessing the application and personally initiating the account creation process, they stipulate. “The authenticity of such access and personal presence shall be established by capturing a live photograph of the client and employing liveliness detection technology to verify the client’s physical presence...,” the guidelines state.