FIU-IND Reporting Requirements for Virtual Digital Asset Service Providers

1. Introduction to FIU-IND Reporting

The Financial Intelligence Unit - India (FIU-IND) serves as India's central national agency responsible for receiving, processing, analyzing, and disseminating information relating to suspected financial transactions. Following the March 2023 amendment to the Prevention of Money Laundering Act, 2002, Virtual Digital Asset Service Providers (VDA SPs) have become reporting entities under the PMLA framework, subjecting them to comprehensive reporting obligations administered by FIU-IND.

The integration of VDA SPs into the existing AML/CFT framework represents a significant regulatory development that aligns India with international standards set by the Financial Action Task Force (FATF). Legal practitioners must understand these reporting obligations to effectively advise cryptocurrency platforms on compliance and to defend clients in regulatory proceedings.

Legal Foundation for FIU-IND Reporting

The reporting obligations flow from multiple statutory provisions that create a comprehensive compliance framework:

• Section 12 of PMLA: Imposes obligations on reporting entities to maintain records and furnish information
• Section 12A of PMLA: Empowers the Central Government to prescribe procedures for enhanced due diligence
• Section 12AA of PMLA: Specifically addresses reporting entities dealing in virtual digital assets (inserted by 2023 Amendment)
• PML (Maintenance of Records) Rules, 2005: Prescribes detailed record-keeping and reporting requirements
• FIU-IND Guidelines: Operational directives for report submission and compliance

Scope of Reporting Entity Status for VDA SPs

Following the March 2023 Gazette Notification, the following categories of virtual digital asset service providers are classified as reporting entities:

2. FIU-IND: Structure and Functions

Understanding the organizational structure and functions of FIU-IND is essential for legal practitioners advising VDA SPs on compliance matters. The agency operates with specific powers and responsibilities that directly impact how reporting entities must conduct their operations.

Organizational Structure

FIU-IND operates under the administrative control of the Department of Revenue, Ministry of Finance. The organizational hierarchy includes:

• Director, FIU-IND: Heads the agency with overall responsibility for operations
• Analysis Division: Responsible for analyzing suspicious transaction reports and developing intelligence
• Compliance Division: Monitors reporting entity compliance with PMLA obligations
• IT Division: Maintains the FINnet platform and technical infrastructure
• Legal Division: Handles regulatory enforcement and coordination with law enforcement

Core Functions of FIU-IND

FINnet Portal

The Financial Network (FINnet) is the secure web-based platform through which all reporting entities submit their statutory reports to FIU-IND. VDA SPs must register on this portal and use it for all official communications with FIU-IND.

International Cooperation

FIU-IND is a member of the Egmont Group of Financial Intelligence Units, enabling international cooperation in AML/CFT matters. This membership has significant implications for VDA SP investigations:

• Cross-border transaction tracking through international intelligence sharing
• Coordination with foreign FIUs on cryptocurrency-related investigations
• Access to global databases of suspicious transaction patterns
• Participation in joint operations targeting cryptocurrency-related money laundering

3. FIU-IND Registration Requirements

Before a VDA SP can commence operations in India, it must complete registration with FIU-IND as a reporting entity. This registration process establishes the formal relationship between the VDA SP and FIU-IND and enables compliance with statutory reporting obligations.

Registration Timeline

Required Documentation

The FIU-IND registration application must include the following documents:

Principal Officer Requirements

Under Rule 7 of the PML (Maintenance of Records) Rules, 2005, every reporting entity must appoint a Principal Officer who serves as the primary point of contact with FIU-IND.

The Principal Officer's responsibilities include:

• Filing STRs and CTRs with FIU-IND within prescribed timelines
• Responding to FIU-IND queries and information requests
• Coordinating with law enforcement agencies during investigations
• Maintaining the confidentiality of suspicious transaction information
• Ensuring staff training on AML/CFT compliance
• Reporting to the Board on compliance matters

Designated Director Requirements

In addition to the Principal Officer, VDA SPs must appoint a Designated Director who bears ultimate responsibility for PMLA compliance at the Board level.

The Designated Director must be a member of the Board of Directors and cannot delegate this responsibility to any other person. In case of a foreign company operating in India, the authorized representative in India may be designated as the Designated Director.

4. Suspicious Transaction Reporting (STR)

Suspicious Transaction Reporting is the cornerstone of AML/CFT compliance for VDA SPs. The obligation to report suspicious transactions arises from Section 12(1)(b) of PMLA, which requires reporting entities to furnish information regarding suspicious transactions to FIU-IND.

Legal Definition of Suspicious Transaction

STR Triggers for VDA Transactions

Based on FIU-IND guidance and international best practices, the following transaction patterns should trigger STR consideration for VDA SPs:

STR Filing Timeline

Under Rule 8 of the PML Rules, the Principal Officer must furnish information relating to suspicious transactions to FIU-IND within seven working days of determination of suspicion.

STR Format and Content

FIU-IND prescribes a specific format for STR submissions. The report must contain comprehensive information enabling FIU-IND to conduct meaningful analysis.

Confidentiality of STRs

Section 15 of PMLA imposes strict confidentiality requirements on suspicious transaction information:

Quality Standards for STRs

FIU-IND has issued guidance on STR quality expectations. Deficient STRs may be returned for supplementation or may result in compliance action against the reporting entity.

• Completeness: All mandatory fields must be filled with accurate information
• Timeliness: STRs must be filed within the prescribed 7-day timeline
• Clarity: The narrative must clearly explain the basis for suspicion
• Supporting Documentation: Relevant transaction records must be attached
• Proportionality: STR volume should be proportionate to transaction volume

5. Cash Transaction Reporting (CTR)

While VDA transactions are predominantly digital, Cash Transaction Reports remain relevant for VDA SPs that facilitate fiat currency deposits and withdrawals. CTR requirements apply to cash transactions exceeding specified thresholds.

CTR Threshold for Reporting

The Rs. 10 lakh threshold applies to:

• Single cash transactions exceeding Rs. 10 lakhs
• Integrally connected cash transactions aggregating to Rs. 10 lakhs in a month
• Cash deposits or withdrawals linked to VDA trading accounts

CTR Filing Requirements

Relevance for VDA SPs

For VDA SPs, CTR obligations primarily arise in the following scenarios:

• Fiat on-ramp transactions: Cash deposits by customers to fund VDA purchases
• Fiat off-ramp transactions: Cash withdrawals from VDA sale proceeds
• Peer-to-peer platforms: Cash-based P2P transactions facilitated by the platform
• OTC desks: Large cash transactions through over-the-counter services

Cross-Border Wire Transfer Reports

In addition to CTRs, reporting entities must file reports for cross-border wire transfers exceeding Rs. 5 lakhs. While this traditionally applies to banking transactions, VDA SPs facilitating international fiat transfers in connection with cryptocurrency transactions must comply with this requirement.

The cross-border transfer report must include:

• Originator information (name, address, account number)
• Beneficiary information (name, address, account number)
• Transfer amount and currency
• Purpose of remittance
• Relationship between originator and beneficiary

6. Comprehensive Compliance Framework

Beyond specific reporting obligations, VDA SPs must establish a comprehensive compliance framework that addresses all aspects of PMLA requirements. This framework should be documented in board-approved policies and implemented through robust operational procedures.

Record-Keeping Requirements

Section 12(1)(a) of PMLA mandates reporting entities to maintain records that enable reconstruction of individual transactions. For VDA SPs, this includes:

Customer Due Diligence (CDD)

VDA SPs must implement robust CDD procedures at customer onboarding and throughout the business relationship:

Enhanced Due Diligence (EDD)

EDD is required for higher-risk customers and transactions. VDA SPs must implement enhanced procedures for:

• Politically Exposed Persons (PEPs): Senior government officials, their family members, and close associates
• High-risk jurisdictions: Customers from countries with weak AML/CFT frameworks
• Complex transactions: Unusual transaction structures without apparent economic purpose
• Large transactions: Transactions significantly above customer's normal pattern
• Anonymous instruments: Transactions involving privacy-enhancing technologies

Staff Training Requirements

Rule 8(2) of the PML Rules requires reporting entities to train employees on AML/CFT compliance. VDA SPs must implement comprehensive training programs covering:

• PMLA provisions and regulatory requirements
• Identification of suspicious transactions
• Customer due diligence procedures
• STR/CTR filing procedures
• Record-keeping requirements
• Cryptocurrency-specific risk indicators
• Sanctions screening procedures

Training records must be maintained and made available to FIU-IND during compliance inspections.

Internal Audit Function

VDA SPs should establish an independent internal audit function to assess the effectiveness of AML/CFT controls. The audit should cover:

• Adequacy of AML/CFT policies and procedures
• Effectiveness of transaction monitoring systems
• Quality and timeliness of STR/CTR filings
• CDD/EDD implementation
• Staff training effectiveness
• Record-keeping compliance

7. Enforcement Actions and Penalties

Non-compliance with FIU-IND reporting requirements can result in significant penalties under PMLA. Legal practitioners must understand the enforcement framework to advise clients on risk mitigation and to defend against regulatory actions.

FIU-IND Compliance Inspections

FIU-IND conducts periodic compliance inspections of reporting entities to verify adherence to PMLA obligations. These inspections may be:

• Routine inspections: Scheduled compliance reviews conducted periodically
• Thematic inspections: Focused reviews on specific compliance areas
• Cause-based inspections: Triggered by specific concerns or complaints
• Follow-up inspections: Verifying remediation of previously identified deficiencies

Penalties Under Section 13

Section 13 of PMLA prescribes penalties for failure to comply with reporting obligations:

Case Study: FIU-IND Action Against VDA SPs

Appeal Process

Reporting entities aggrieved by FIU-IND penalty orders may appeal to the Appellate Tribunal under Section 26 of PMLA. The appeal process follows the standard PMLA adjudication framework:

• Timeline: Appeal must be filed within 45 days of penalty order
• Forum: Appellate Tribunal for PMLA (ATPMLA)
• Deposit: Generally required to deposit penalty amount pending appeal
• Further Appeal: Appeal to High Court on questions of law within 60 days

Defense Strategies

Coordination with ED Investigations

FIU-IND shares intelligence with the Enforcement Directorate (ED) for PMLA enforcement. VDA SPs under FIU-IND compliance review may face parallel ED investigation if:

• STR analysis reveals predicate offense connections
• Transaction patterns suggest money laundering
• Customer accounts linked to ED investigation subjects
• Platform facilitates transactions involving proceeds of crime

The WazirX investigation exemplifies this coordination, where FIU-IND reporting analysis contributed to ED's broader PMLA investigation of the platform.