Archive · 10 Jan 2026
FIU-IND Tightens AML, Cybersecurity Norms for VDA Firms
The Financial Intelligence Unit in India has made new rules for companies that deal with digital assets like cryptocurrencies.
These rules require companies to have regular checks for cybersecurity, know their customers better, and monitor transactions more closely.
Companies must also register with the FIU and have a special person in charge of following these rules.
Industry experts say these rules will make the digital asset sector more trustworthy and secure.
FIU-IND issued updated guidelines for VDA firms, tightening governance, AML, and cybersecurity requirements.
Mandatory cybersecurity audits by CERT-In accredited auditors and strengthened KYC processes are required.
Transaction monitoring in line with the Travel Rule to improve traceability of digital asset transfers.
Registration with FIU-IND is mandatory for VDA-related operations in India.
VDA firms must appoint a Designated Director for compliance with AML and CFT obligations.
- Who
- Financial Intelligence Unit (FIU-IND)
- What
- Issued updated guidelines tightening governance, AML, and cybersecurity requirements for VDA firms
- When
- Not specified
- Where
- India
- Why
- To increase regulatory oversight, align with AML and CFT framework, and safeguard against misuse
- Organization
- Financial Intelligence Unit (FIU-IND)
- Sector
- Virtual Digital Asset (VDA) firms
- Key Requirements
- Mandatory cybersecurity audits, strengthened KYC, transaction monitoring, FIU registration, designated director for compliance
- Regulatory Alignment
- AML and CFT framework
- Industry Response
- Clarity on compliance expectations, strengthened oversight and accountability