A regulated firm must be able to attribute activity to an identified person, and assets or accounts that make that impossible are barred at the licensed perimeter. This is a rule about attribution, not about whether amounts are public.
What India actually says
India has no bespoke crypto statute and regulates the sector through anti-money-laundering law and tax instead. Providers became reporting entities under the PMLA in March 2023, and FIU-IND has enforced that perimeter hard against offshore exchanges, issuing show-cause notices to nine of them in December 2023 and following with penalties and URL blocking. We found no Indian instrument restricting privacy coins, so the pressure on confidentiality is indirect: a 1% withholding on transfers creates a transaction-level trail as a matter of tax design, and the 30% flat rate pushes activity onto fully identified venues. The retail e-rupee pilot is the counterweight, its stated design leaving small-value transactions untraced once issued to a wallet, with disclosure expected on larger sums.
The instruments that matter
- Ministry of Finance notification, 7 March 2023
- made virtual digital asset service providers reporting entities under the Prevention of Money Laundering Act 2002, requiring FIU-IND registration, KYC and suspicious transaction reporting
- 30% tax and 1% TDS
- sections 115BBH and 194S of the Income Tax Act 1961; the withholding creates a transaction-level trail by design
- Digital Personal Data Protection Rules 2025
- notified 13 November 2025, phasing in through the consent manager framework from 13 November 2026 to full compliance from 13 May 2027
What this means for confidential transactions
Bubble is built for exactly this shape of obligation: amounts and balances live on chain as ciphertexts, computation happens without decryption, and the only disclosure path is an on-chain access list through which an authorized party - an auditor, a supervisor, a counterparty - can request scoped decryption. That is confidentiality from the public, not from the regulator.
Related entries
- BangladeshAsia-Pacific · Barred through exchange control, not a crypto law
- ChinaAsia-Pacific · Crypto banned, and a state currency designed for anonymity
- JapanAsia-Pacific · Untraceability barred by self-regulation, now moving into ordinance
- MalaysiaAsia-Pacific · A categorical ban written by definition, not by coin name
- South KoreaAsia-Pacific · Identity-maximalist, and exporting the model
- ThailandAsia-Pacific · Closed by whitelist, not by prohibition
Compliant by default.
See how selective disclosure satisfies a supervisor without publishing your book to the world.