Crypto and Web3 Business in India: Legal Status and How to Register
India has one of the world's largest cryptocurrency user bases, with tens of millions of Indians actively trading, holding, or building on blockchain technology. Despite the absence of a dedicated crypto law, the regulatory landscape for crypto and Web3 businesses has become increasingly defined through tax provisions, anti-money laundering rules, and cybersecurity mandates. This guide covers every legal, registration, and compliance requirement you need to know to start and operate a crypto or Web3 business in India in 2026.
Current Legal Status of Crypto in India
Understanding the legal framework is the first step before launching any crypto or Web3 venture in India. The regulatory approach has evolved significantly over the past few years.
Timeline of Key Regulatory Developments
| Year | Development | Impact |
|---|---|---|
| 2018 | RBI circular banning banks from dealing with crypto entities | Crypto exchanges lost banking access; P2P trading emerged |
| 2020 | Supreme Court struck down the RBI ban (IAMAI vs RBI) | Banking access restored; legitimized crypto trading |
| 2022 | Finance Act introduced VDA taxation (30% flat tax, 1% TDS) | Formal recognition of crypto as a taxable asset class |
| 2023 | VDA service providers brought under PMLA; FIU-IND registration mandatory | KYC, AML, and transaction monitoring became mandatory |
| 2024 | FIU-IND blocked non-compliant offshore exchanges (Binance, KuCoin, etc.) | Signal that all exchanges serving Indians must comply |
| 2025-2026 | Digital India Act development with blockchain provisions | Expected to bring comprehensive regulatory framework |
Choosing the Right Business Structure
The business structure directly impacts your ability to open bank accounts, raise funding, comply with PMLA, and manage tax obligations. For any serious crypto or Web3 venture, a formal company registration is essential.
Structure Comparison for Web3 Businesses
| Structure | Pros | Cons | Best For |
|---|---|---|---|
| Private Limited | Limited liability, VC funding, ESOPs, PMLA-ready | Higher compliance cost | Exchanges, platforms, funded startups |
| LLP | Limited liability, lower compliance, flexible management | Cannot issue ESOPs, limited VC appetite | Blockchain development agencies, consulting |
| OPC | Single founder, limited liability | Restrictions on turnover and paid-up capital | Solo developers, small NFT projects |
| Proprietorship | Simple setup, minimal compliance | No limited liability, no funding capability | Freelance blockchain developers |
Step-by-Step Registration Process
Here is the complete process to legally set up a crypto or Web3 company in India:
- Register the company: File the SPICe+ form with MCA for Private Limited Company registration. Use a broad object clause covering technology services, software development, and digital asset services (5 to 15 working days)
- Apply for GST registration: File for GST registration to enable invoicing and input tax credit (3 to 7 working days)
- Open a company bank account: Present the Certificate of Incorporation, PAN, and board resolution. Choose a bank known to work with fintech/crypto companies
- Register with FIU-IND: If providing VDA services (exchange, wallet, custodial), register on the FIU-IND portal, appoint a Principal Officer and Designated Director
- Implement KYC infrastructure: Set up identity verification, document collection, and screening processes as required under PMLA
- Apply for Startup India recognition: File for DPIIT recognition to access the 3-year tax holiday on business income
- Register trademarks: Protect your brand through trademark registration in relevant classes
- Set up compliance infrastructure: Implement TDS tracking (Section 194S), accounting systems for digital assets, and CERT-In compliance measures
When registering the company, use a broad and neutral object clause such as "technology services, software development, digital infrastructure, and related services" rather than specifically mentioning "cryptocurrency" or "blockchain." A broader clause provides flexibility as regulations evolve and avoids unnecessary friction with banking partners during account opening.
Taxation of Crypto and Web3 Businesses
Understanding the tax framework is critical for any crypto business. India has one of the most defined crypto tax regimes in the world, with specific provisions introduced in the Finance Act 2022.
VDA Tax Framework at a Glance
| Transaction Type | Tax Rate | Key Rules |
|---|---|---|
| Sale/Transfer of VDA | 30% flat + surcharge + cess | No deduction except cost of acquisition |
| TDS on VDA Transfers | 1% (Section 194S) | Buyer deducts; applies above Rs. 10,000/year |
| Crypto-to-Crypto Swap | 30% on each leg | Each swap is a separate taxable transfer |
| Airdrops (Gifts) | Slab rates (above Rs. 50,000) | Taxable as income from other sources |
| Staking Rewards | 30% or slab rates | Classification debated; declare as income when received |
| Mining Income | 30% | Classified as VDA creation; cost of acquisition is nil |
| Platform/Trading Fees (Business Income) | 25% corporate rate | Regular business income; normal deductions apply |
Important Tax Rules to Remember
- No loss set-off: Losses from VDA transfers cannot be offset against any other income, including other VDA gains
- No carry-forward: VDA losses cannot be carried forward to future years
- Cost of acquisition: Only the purchase cost is deductible; gas fees, transaction fees, and other expenses are not deductible for VDA tax purposes
- Business income is separate: Platform fees, consulting income, and development income earned by Web3 companies are taxed as regular business income at 25%, with normal deductions available
- Startup India benefit: The 3-year tax holiday applies only to business income, not to VDA capital gains
PMLA and Anti-Money Laundering Compliance
Since March 2023, all Virtual Digital Asset Service Providers (VDA-SPs) must comply with the Prevention of Money Laundering Act, 2002. This is one of the most critical compliance requirements for crypto businesses in India.
Who Must Comply
- Crypto exchanges and trading platforms
- Wallet and custody providers
- Token offering and sale platforms
- NFT marketplaces (if they facilitate VDA transfers)
- DeFi platforms with an identifiable operating entity in India
- Over-the-counter (OTC) desks for VDA trading
PMLA Compliance Requirements
- FIU-IND registration: Register on the FIU-IND portal as a reporting entity
- KYC procedures: Verify identity of all users using government-issued ID (Aadhaar, PAN, Passport)
- Transaction monitoring: Implement systems to flag suspicious transactions based on value, frequency, and pattern
- Suspicious Transaction Reports (STRs): File STRs with FIU-IND for any transaction that appears suspicious
- Cash Transaction Reports (CTRs): Report cash transactions exceeding Rs. 10 lakh
- Record keeping: Maintain all transaction and KYC records for a minimum of 5 years after the business relationship ends
- Appoint officers: Designate a Principal Officer and Designated Director for PMLA compliance
FIU-IND actively enforces compliance. In January 2024, FIU-IND issued compliance notices to 9 offshore crypto exchanges (including Binance, KuCoin, and Huobi) for operating in India without registration, and blocked their URLs. This demonstrates that all platforms serving Indian users must register, regardless of where they are incorporated.
Intellectual Property Protection
Web3 companies build their value on technology, brands, and digital content. Protecting this intellectual property is essential for competitive advantage and investor confidence.
IP Protection Strategy for Web3 Companies
- Trademark registration: Register the platform name, brand logo, and token name in relevant classes (Class 9 for software, Class 36 for financial services, Class 42 for technology services)
- Copyright registration: Register the source code for smart contracts, platform UI/UX, whitepaper content, and original digital art or NFT collections
- Patent applications: File patents for novel blockchain consensus mechanisms, privacy algorithms, or unique technical solutions
- Trade secrets: Protect proprietary algorithms, business strategies, and user data through NDAs and employee IP assignment agreements
- Domain and social media protection: Secure relevant domain names (including .crypto, .eth ENS names) and social media handles early
Data Protection and Cybersecurity
Crypto businesses handle sensitive financial and personal data, making data protection and cybersecurity compliance critical for legal compliance and user trust.
Key Requirements
- DPDPA 2023 compliance: Obtain consent for data collection, implement purpose limitation, provide user rights (access, correction, erasure), and notify the Data Protection Board in case of breaches
- CERT-In compliance: Report cybersecurity incidents within 6 hours, maintain system logs for 180 days, synchronize system clocks with NTP servers
- IT Act Section 43A: Implement reasonable security practices for handling sensitive personal data
- Wallet and key security: Implement cold storage for majority of customer funds, multi-signature authorization, and regular security audits
- Smart contract audits: Get all production smart contracts audited by reputable security firms before deployment
Global Structuring for Web3 Companies
Many Web3 companies operate globally and use multi-entity structures to optimize for different jurisdictions. Here is a common structure used by Indian Web3 companies:
| Entity | Jurisdiction | Purpose |
|---|---|---|
| Development Company | India (Pvt Ltd) | Engineering, product development, domestic operations |
| Token/Treasury Entity | Singapore or Dubai | Token issuance, treasury management, DeFi operations |
| US Market Entity | US LLC/C-Corp | US customer acquisition, VC fundraising |
| Foundation | Switzerland or Cayman | Protocol governance, community grants, decentralization |
When operating multiple entities across jurisdictions, all inter-company transactions must be at arm's length prices with proper transfer pricing documentation. The Indian entity must report foreign assets and income in its tax return. Consult with international tax advisors to ensure compliance with FEMA, transfer pricing regulations, and relevant Double Taxation Avoidance Agreements (DTAAs).
Annual Compliance Calendar
| Compliance | Deadline | Form/Filing |
|---|---|---|
| Board Meetings | Minimum 4 per year (max 120-day gap) | Board minutes and resolutions |
| AGM | Within 6 months of FY end (by September 30) | AGM minutes and resolutions |
| Financial Statements | Within 30 days of AGM | Form AOC-4 |
| Annual Return | Within 60 days of AGM | Form MGT-7A |
| Income Tax Return | October 31 (audit applicable) | ITR-6 |
| GST Returns | Monthly (GSTR-1, GSTR-3B) | Professional filing |
| TDS Returns | Quarterly (Section 194S included) | Form 26Q |
| Director KYC | September 30 | DIR-3 KYC |
| Statutory Audit | Before AGM | Auditor appointment via ADT-1 |
| PMLA/FIU-IND Reporting | Ongoing (STRs as required) | FIU-IND portal |
Conclusion
Starting a crypto or Web3 business in India requires navigating a complex but increasingly defined regulatory landscape. While there is no dedicated crypto law yet, the combination of VDA tax provisions, PMLA compliance requirements, CERT-In cybersecurity mandates, and general company laws creates a comprehensive framework that all crypto businesses must follow.
The companies that will thrive in India's Web3 ecosystem are those that embrace compliance from day one. Proper company registration, FIU-IND registration, robust KYC systems, clean tax records, and strong cybersecurity practices are not just regulatory checkboxes. They are the foundation of a trustworthy, fundable, and sustainable business in the most dynamic sector of the global economy.
At IncorpX, we help crypto and Web3 startups across India with company registration, GST compliance, trademark protection, legal agreements, and ongoing regulatory management. Our team stays current with the rapidly evolving crypto regulatory landscape to ensure your business is always a step ahead.
Frequently Asked Questions
Is cryptocurrency legal in India?
Cryptocurrency is not banned in India, but it is also not recognized as legal tender. The Supreme Court of India struck down the RBI's banking ban on crypto in March 2020 (Internet and Mobile Association of India vs RBI). Since then, buying, selling, holding, and trading cryptocurrencies is legal. However, the government regulates crypto as Virtual Digital Assets (VDAs) under the Income Tax Act and applies specific tax rules. There is currently no dedicated crypto regulatory framework, but compliance with tax laws, anti-money laundering rules, and company laws is mandatory.
What are Virtual Digital Assets (VDAs) under Indian law?
Virtual Digital Assets (VDAs) are defined under Section 2(47A) of the Income Tax Act, introduced by the Finance Act 2022. VDAs include any information, code, number, or token generated through cryptographic means, providing a digital representation of value that can be traded or transferred. This definition covers cryptocurrencies (Bitcoin, Ethereum, etc.), NFTs (Non-Fungible Tokens), and other digital tokens. Tokens excluded from the VDA definition include gift cards, vouchers, and loyalty points issued by entities.
What is the tax rate on crypto income in India?
Income from the transfer of VDAs is taxed at a flat rate of 30% under Section 115BBH of the Income Tax Act, plus applicable surcharge and cess. Key tax rules include: no deduction is allowed for any expense other than the cost of acquisition, losses from VDA transfers cannot be set off against any other income, losses from one VDA cannot be set off against gains from another VDA, and TDS at 1% is deducted under Section 194S on payments for VDA transfers exceeding Rs. 10,000 per year (or Rs. 50,000 for specified persons).
What is the best business structure for a crypto or Web3 company?
A Private Limited Company is the recommended structure for a crypto or Web3 business. It provides limited liability protection (critical in a volatile, evolving regulatory landscape), enables equity fundraising from VCs and angel investors, allows ESOP issuance for attracting tech talent, and offers credibility with banking partners and institutional clients. For smaller Web3 development agencies, an LLP may be suitable. Register under Startup India for tax benefits.
Can a crypto business open a bank account in India?
Yes, crypto businesses can open bank accounts in India after the Supreme Court lifted the RBI banking ban in 2020. However, some banks remain cautious and may impose additional due diligence or decline to open accounts for crypto-related companies. To improve your chances: register as a Private Limited Company with a clear and broad object clause (e.g., technology services, software development), maintain transparent financial records, and choose banks that are known to work with fintech and crypto companies.
Do crypto businesses need GST registration?
Yes, crypto businesses providing services (trading platforms, wallet services, consulting) must register for GST if their turnover exceeds the threshold limit or if they provide interstate services. The GST treatment of crypto transactions is still evolving. Currently, the service component (trading fees, platform fees, consulting) is taxable at 18%. The supply of VDAs themselves may attract GST depending on classification. The GST Council is expected to issue specific guidelines for crypto transactions. Maintain proper records and file GST returns regularly.
What is the regulatory framework for crypto exchanges in India?
India does not currently have a specific licensing framework for crypto exchanges. Exchanges operate as technology platforms under general company law. However, they must comply with: Prevention of Money Laundering Act (PMLA) requirements (KYC, transaction monitoring, suspicious transaction reporting to FIU-IND), Income Tax Act provisions for TDS under Section 194S, IT Act and CERT-In guidelines for cybersecurity, and Consumer Protection Act for fair trading practices. The government is working on a comprehensive crypto regulatory framework.
What is the PMLA compliance requirement for crypto businesses?
In March 2023, the government brought VDA service providers under the ambit of PMLA. This means crypto exchanges, wallet providers, and related services must: register with FIU-IND (Financial Intelligence Unit), implement KYC procedures (identity verification for all users), conduct transaction monitoring and maintain records, file Suspicious Transaction Reports (STRs) with FIU-IND, maintain transaction records for 5 years, and appoint a Principal Officer and Designated Director for PMLA compliance.
What are the different types of Web3 businesses?
Web3 businesses span several categories: Crypto exchanges and trading platforms (facilitating buying and selling of VDAs), DeFi (Decentralized Finance) platforms (lending, borrowing, yield farming), NFT marketplaces (creation, sale, and trading of NFTs), Blockchain development companies (building smart contracts, dApps, protocols), Crypto wallet providers (custody and self-custody solutions), Web3 gaming studios (play-to-earn, metaverse), DAO tooling companies, and Blockchain consulting firms. Each has different regulatory considerations.
How is NFT income taxed in India?
NFTs are classified as Virtual Digital Assets (VDAs) under Indian tax law, so the same 30% flat tax rate applies to income from NFT sales. For NFT creators, the income from the first sale may be classified as business income (taxed at slab rates) or VDA income (taxed at 30%), depending on the nature of the activity. For NFT traders and collectors, any profit from resale is taxed at 30%. Royalties from secondary sales built into smart contracts are also taxable. TDS at 1% applies under Section 194S.
What intellectual property protections do Web3 companies need?
Web3 companies should protect their IP through multiple layers: Trademark registration for the brand name, logo, and platform name, Copyright registration for the source code, smart contracts, UI/UX design, and original content, Patent registration for novel blockchain algorithms or technical innovations, and trade secret protection through NDAs for proprietary algorithms and business methods. For NFT platforms, ensure that your Terms of Service clearly define IP rights regarding user-created content.
What is a DAO and how is it treated legally in India?
A DAO (Decentralized Autonomous Organization) is a blockchain-based organization governed by smart contracts and token holder votes rather than a traditional management structure. India does not recognize DAOs as a legal entity. For operational and legal purposes, DAOs operating in India typically register a wrapper entity such as a Private Limited Company, LLP, or Foundation (Section 8 Company) to enter contracts, open bank accounts, and comply with tax laws. The registered entity acts as the legal interface for the DAO's activities.
What are the compliance requirements for an Initial Coin Offering (ICO) or token launch?
India does not have specific ICO regulations, but token launches must comply with existing laws: Securities law: If the token has characteristics of a security (equity, debt, or profit-sharing), it may fall under SEBI regulations and require compliance with securities issuance norms. FEMA: If tokens are sold to non-residents, foreign exchange rules apply. PMLA: KYC and AML compliance is mandatory. Tax: Proceeds from token sales are taxable. Consumer protection: Marketing materials must not be misleading. Consulting a legal expert before any token launch is strongly recommended.
Can crypto businesses claim the Startup India tax holiday?
Yes, if the crypto or Web3 business is registered as a Private Limited Company or LLP, incorporated after April 1, 2016, and has obtained DPIIT recognition under the Startup India scheme, it can claim the 3-year tax holiday under Section 80-IAC. However, the 30% flat tax on VDA transfers under Section 115BBH is a separate provision and cannot be avoided through the Startup India tax holiday. The tax holiday applies only to the company's regular business income (platform fees, consulting fees, etc.).
What cybersecurity compliance is required for crypto businesses?
Crypto and Web3 businesses must comply with CERT-In (Indian Computer Emergency Response Team) guidelines which mandate: reporting cybersecurity incidents to CERT-In within 6 hours, maintaining logs of all ICT systems for 180 days (within Indian jurisdiction), synchronizing system clocks with NTP servers, designating a Point of Contact (PoC) for CERT-In communication, and implementing reasonable security practices as per the IT Act, 2000. For companies handling customer funds (exchanges, custodians), cold storage, multi-signature wallets, and insurance coverage are recommended.
How are crypto airdrops and staking rewards taxed?
Airdrops received without consideration are taxable as income from other sources at the recipient's applicable slab rate if the value exceeds Rs. 50,000 in a financial year (under Section 56(2)(x)). When the airdropped tokens are later sold, the 30% VDA tax applies on the gains. Staking rewards are treated as income when received (taxed at slab rates or 30% depending on classification), and any subsequent sale triggers the 30% VDA tax. The cost of acquisition for staking rewards is the market value at the time of receipt.
What is the role of FIU-IND for crypto businesses?
The Financial Intelligence Unit - India (FIU-IND) is the central agency that receives, processes, and disseminates information related to suspicious financial transactions. Since March 2023, all VDA service providers must register with FIU-IND and comply with PMLA requirements. Non-compliance can result in penalties up to Rs. 2 lakh for each month of default. FIU-IND has also taken action against offshore crypto exchanges operating in India without registration, blocking access to platforms like Binance and KuCoin until they comply.
Can Indian crypto companies accept foreign investment?
Yes, Indian crypto companies can accept foreign direct investment (FDI) and foreign venture capital investment (FVCI) through the automatic route in most cases, as there is no specific FDI restriction on crypto businesses currently. The investment must be made in the registered Indian entity (Pvt Ltd company) through proper banking channels in compliance with FEMA regulations. Foreign investors will receive shares in the Indian company. If the company later transfers VDAs, the 30% tax and 1% TDS provisions apply to those transactions.
What is the difference between centralized and decentralized crypto exchanges?
Centralized exchanges (CEX) like WazirX, CoinDCX, and Binance are operated by a company that holds custody of user funds, matches orders through a central server, and manages KYC. Decentralized exchanges (DEX) like Uniswap and PancakeSwap operate through smart contracts on the blockchain with no central entity holding custody. In India, CEXs must comply with PMLA, KYC, FIU-IND registration, and all company law requirements. DEXs face a regulatory gray area since there is no identifiable entity to regulate, but the government is working on frameworks.
What accounting practices should crypto businesses follow?
Crypto businesses should follow accrual-based accounting under the Companies Act, 2013 and maintain: separate wallets and ledgers for company vs customer funds, detailed records of all VDA transactions (buy, sell, transfer, swap) with timestamps and values, fair market value assessments for VDA holdings at year-end (Ind AS 38 or Ind AS 2 depending on classification), TDS records for Section 194S compliance, proper documentation of gas fees, mining costs, and platform expenses, and reconciliation between on-chain data and accounting records. Use professional accounting services.
What employee compliance is required for crypto companies?
Crypto companies with employees must comply with: PF registration (mandatory for 20+ employees), ESI registration (for employees earning up to Rs. 21,000/month), TDS on salaries under Section 192, Shops and Establishment registration, professional tax (state-specific), and POSH compliance (10+ employees). If paying employees in crypto tokens, the fair market value of the tokens on the date of payment is treated as salary income and subject to TDS.
Can crypto companies pay salaries in cryptocurrency?
While there is no specific prohibition against paying salaries in cryptocurrency, there are practical complications: minimum wage laws require payment in recognized currency, PF and ESI contributions must be calculated on the cash value, TDS must be deducted based on the fair market value of crypto on the payment date, and the company must issue Form 16 reflecting the salary value. Most companies offer a base salary in INR and an optional crypto bonus or token allocation, which is more practical and compliant.
What is the legal status of smart contracts in India?
Smart contracts are not specifically addressed by Indian law, but they can be recognized as valid contracts under the Indian Contract Act, 1872 if they satisfy the essential elements: free consent, competent parties, lawful consideration, and lawful object. The challenge is that smart contracts are self-executing and immutable, which conflicts with contractual principles like the right to modify or void a contract. For legal enforceability, Web3 companies often pair smart contracts with traditional legal agreements that reference the smart contract code.
What are the risks of operating an unregistered crypto business?
Operating an unregistered crypto business exposes you to: PMLA penalties (up to Rs. 2 lakh per month for not registering with FIU-IND), income tax penalties for not deducting TDS on VDA transactions, GST penalties for operating without registration, banking restrictions (banks may freeze accounts of unregistered businesses dealing in crypto), personal liability without the protection of a company structure, and criminal liability under PMLA for non-compliance with KYC and reporting obligations. Register your business properly from the start.
How should crypto businesses handle international transactions?
Crypto businesses handling international transactions must: comply with FEMA regulations for cross-border payments, obtain an IEC (Import Export Code) if receiving foreign remittances, apply appropriate TDS based on whether the counterparty is resident or non-resident, maintain transfer pricing documentation if transacting with related entities abroad, ensure withholding tax compliance on payments to non-residents under relevant DTAA provisions, and file Form 15CA/15CB for foreign remittances exceeding specified thresholds.
What insurance should crypto companies consider?
Crypto companies should consider: Cyber liability insurance (covers data breaches, hacking, and unauthorized access to wallets), Crime/Specie insurance (covers loss of digital assets due to theft, including internal and external fraud), Errors and Omissions (E&O) insurance (covers claims from software bugs or smart contract failures), Directors and Officers (D&O) insurance (especially after VC funding), and Key Person insurance for critical technical personnel. Crypto-specific insurance is still niche but increasingly available from specialized providers.
What are the upcoming crypto regulations expected in India?
The Indian government has been working on a comprehensive Digital India Act that is expected to address blockchain and crypto regulation. Expected developments include: a potential licensing framework for crypto exchanges and service providers, clearer GST classification for VDA transactions, possible reduction in the 30% flat tax rate to encourage compliance and discourage offshore trading, stablecoin regulation aligned with the RBI's digital rupee (CBDC) framework, and enhanced international cooperation on crypto regulation through G20 frameworks.
Can crypto companies get ISO certification?
Yes, crypto and Web3 companies can and should pursue relevant certifications: ISO 27001 (Information Security Management) is highly recommended for companies handling digital assets and customer data, SOC 2 Type II for demonstrating security, availability, and processing integrity, and ISO 22301 (Business Continuity Management) for exchanges and custodial services. These certifications build trust with users, attract institutional clients, and demonstrate regulatory readiness.
What is the RBI's stance on Central Bank Digital Currency (CBDC) vs crypto?
The RBI has launched its own Central Bank Digital Currency (CBDC) called the Digital Rupee (e-Rupee) in both wholesale and retail formats. The RBI views the Digital Rupee as a regulated alternative to private cryptocurrencies. Key differences: the Digital Rupee is legal tender backed by the RBI, while cryptocurrencies are not. The Digital Rupee is centrally managed and stable, while crypto is decentralized and volatile. The government may eventually use the CBDC framework to restrict certain types of private crypto activities, though this remains speculative.
How do crypto mining operations register in India?
Crypto mining operations should register as a Private Limited Company or LLP with an object clause covering technology services and digital asset operations. Additional requirements include: GST registration (mining rewards may be treated as supply of services), electricity board approval for high-power consumption facilities, state pollution control board NOC if using generators, land use approval for commercial mining facilities, and compliance with PMLA if mining as a service for third parties. Mining income is taxable at 30% under VDA provisions.
What due diligence should investors perform before investing in a crypto startup?
Before investing in a crypto startup, conduct thorough due diligence covering: the company's legal structure and registration status, PMLA compliance (FIU-IND registration, KYC processes), TDS compliance under Section 194S, quality of the technology and smart contract audits, tokenomics (if the company has a native token), regulatory risk assessment, financial statements and accounting practices for digital assets, cybersecurity measures and insurance coverage, key person dependencies, and the cap table and existing investor terms.
What annual compliance must a crypto company complete?
A crypto Pvt Ltd company must complete: ROC annual filing (AOC-4 and MGT-7A) through professional filing services, income tax return (ITR-6 for companies), GST returns (monthly or quarterly), DIR-3 KYC for all directors, statutory audit by a Chartered Accountant, minimum 4 board meetings and 1 AGM per year, TDS returns (quarterly), FIU-IND reporting (STRs as required), and maintenance of PMLA records. Get comprehensive compliance management support.
What is the future legal outlook for Web3 businesses in India?
The legal outlook for Web3 businesses in India is cautiously optimistic. Positive signals include: India's G20 presidency led to a global framework for crypto regulation, the government is developing the Digital India Act that will address blockchain regulation, the CBDC launch shows the government's interest in digital assets, and India has one of the largest crypto user bases globally. Challenges remain: the 30% flat tax discourages trading, no-loss-offset rule is punitive, and regulatory uncertainty persists. Companies that maintain clean compliance will be best positioned when regulations crystallize.
How can a Web3 company structure itself for global operations?
Web3 companies targeting global markets often use a multi-entity structure: an Indian Pvt Ltd company as the development and engineering hub (leveraging India's cost advantage), a Singapore or Dubai entity for treasury management and token operations (more crypto-friendly jurisdictions), a US LLC or C-Corp for US market access and VC fundraising, and a foundation or association in Switzerland or Cayman for protocol governance. Transfer pricing documentation and FEMA compliance are essential for inter-entity transactions.
What is the penalty for not deducting TDS on crypto transactions?
Under Section 194S, the buyer must deduct TDS at 1% on VDA transfers exceeding Rs. 10,000 per year. Penalties for non-compliance include: interest at 1% per month for failure to deduct TDS (from the date it was deductible to the date of actual deduction), interest at 1.5% per month for failure to deposit deducted TDS, penalty equal to the TDS amount under Section 271C, and the expense may be disallowed under Section 40(a)(ia). Filing TDS returns late attracts a fee of Rs. 200 per day under Section 234E.
