In a regulatory void, judging the ‘match and correct' high quality of a brand new applicant has been left to present digital digital asset (VDA) service suppliers (SPs). Among the candidates are discovering that the rule, launched early this 12 months, not solely runs into battle of pursuits, however poses different complexities as cryptos are susceptible to cash laundering and cyber heists.
Rules in most monetary markets too insist on such a certificates to guage the integrity, moral standing, and monitor file of recent managers and entities. As an example, in safeguarding the pursuits of depositors and buyers, individuals making use of for a banking license and intermediaries like inventory brokers need to qualify as ‘match and correct'. However, right here the evaluation is completed by the respective regulator (RBI or Sebi)-and not by friends or different enterprise and competing organisations within the trade.
In case of VDAs, the rule stems from a January 2025 communique to VDA SPs from the Monetary Intelligence Unit (FIU). An company underneath the ministry of finance, FIU is devoted to curb cash laundering and terror finance. VDASPs like crypto platforms exchanges, brokers, and custody service companies offering crypto wallets are “reporting entities” sharing info, as banks do, with the FIU.
Being ‘match and correct' is among the circumstances a VDA SP should fulfill to register itself with FIU. Failure to register is in itself a non-compliance with the Prevention of Cash Laundering Act.
NO DEFINED PARAMETERS
In keeping with the January 2025 notification, one of many steps in direction of registration requires “match and correct certificates from the FIU IND registered VDA SP(s), in all instances the place the applicant VDA SP is into relationship/settlement (B2B/dealer/different relationship and so on) with the previous (both ongoing/potential/meant).”
This widely-worded directive may be interpreted to imply {that a} new applicant (be it a crypto alternate or an middleman) might require a number of certificates from totally different SPs. A custody supplier might accomplice with a number of exchanges and intermediaries, whereas an alternate might draw liquidity from one other platform.

In keeping with Purushottam Anand, advocate and founding father of Crypto Authorized, a Bengaluru-based blockchain and crypto-focused regulation agency, “The ‘match and correct' requirement successfully introduces a disqualification criterion for entities in search of registration as VDASP. But, it supplies no outlined parameters or requirements for registered VDASPs to use throughout their evaluation. There's a full lack of steerage on the style, scope, or extent of scrutiny to be carried out by present VDASPs. Within the absence of readability, new candidates could also be compelled to reveal delicate and confidential enterprise info to potential rivals. Courts have persistently held that imprecise, arbitrary, and subjective conditions-particularly these launched by delegated legislation-are legally untenable and liable to be struck down.”
The requirement might show self-defeating the place an applicant is compelled to hunt certification from a competitor, mentioned Harshal Bhuta, accomplice on the CA agency P. R. Bhuta & Co. “Furthermore, acquiring such certification from a number of service suppliers will not be simple, given the latest cyberattacks and the legal responsibility related to issuing such certificates. A simpler various could be for the federal government to supply recognition to Self-Regulatory Organisations (SROs) and authorise them to challenge certificates,” mentioned Bhuta.
Prior to now one 12 months, two Indian crypto exchanges misplaced substantial quantities in cyberattacks. And regulation enforcement authorities worry that cryptos are misused to maneuver cash throughout the border, bypassing banking channels. Cash withdrawn from an alternate pockets may be transferred to non-public wallets and different pockets homeowners in varied jurisdictions. Just lately, FIU suggested platforms to maintain a watch on transactions linked to individuals in border areas. Information requests from the company has additionally gone up, mentioned an alternate official.
“The ministry has streamlined the registration course of, which incorporates having an in-person assembly with the FIU-IND, submission of prescribed paperwork, and so on. These necessities needs to be fastidiously regarded into by candidates, particularly the clause which requires the VDA-SP to furnish a ‘match and correct' certificates from FIU-IND registered VDA-SPs in all instances the place the applicant VDA-SP is right into a relationship with the previous,” mentioned Raghav Bajaj, counsel, Khaitan & Co.
Emails to FIU and the crypto trade foyer BharatWeb3 went unanswered until the time of going to press.