Last updated: 2026
Author: EDITORIAL TEAM
Affiliate disclosure: This page may contain affiliate links. We may receive a commission when a reader visits or registers with a platform through one of these links, at no additional cost to the reader. Affiliate arrangements do not determine the compliance, security or suitability conclusions presented in this guide. Always verify a platform through its official website, current FIU-IND information and published support documentation before submitting personal information or depositing money.
Responsible trading: Crypto assets can be highly volatile, and an exchange account is not equivalent to a protected bank deposit. Opening an account does not guarantee profitable trading, uninterrupted withdrawals or protection against platform failure, fraud or loss. Trade only with money you can afford to lose, avoid borrowing to buy crypto and seek qualified financial, tax or legal advice where necessary.
Quick Answer: How Do You Open a Crypto Account in India?
To open a crypto account in India, you generally need to:
- Choose a platform that clearly serves Indian users and publishes current KYC, privacy, fee and grievance information.
- Confirm that you are using its official website or verified app-store listing.
- Register with an email address and mobile number you control.
- Create a unique password and secure the associated email account.
- Complete the platform’s KYC process, which commonly includes PAN verification, an accepted identity or address-verification method and a live selfie.
- Link a personal Indian bank account whose account-holder name matches your verified identity.
- Enable two-factor authentication before depositing money.
- Review deposit, withdrawal, trading and account-tier limits.
- Make sure you understand fees, tax record-keeping and custody risks before placing a trade.
The sign-up form is usually the easiest part. The checks that create delays are more often connected to inconsistent names, poor document images, an inaccessible Aadhaar-linked mobile number, an unsupported bank account, a duplicated PAN or suspicious login activity.
The safest approach is therefore not to complete the form as quickly as possible. It is to make sure your identity details, device, email, mobile number and bank ownership form a coherent record that the platform can verify.
What Does “Opening a Crypto Account” Actually Mean?
A crypto exchange account gives you access to a platform through which you may be able to deposit Indian rupees, buy or sell supported virtual digital assets and, where permitted, withdraw rupees or crypto.
It is important to distinguish an exchange account from a self-custody wallet.
With an exchange account, the platform normally controls the private keys connected to assets held in your exchange balance. You access the balance through your account credentials, but you are also exposed to the platform’s operational, security, liquidity and counterparty risks.
With a self-custody wallet, you control the private key or recovery phrase. That gives you more direct control, but it also makes you solely responsible for protecting the recovery phrase and signing transactions correctly. Losing the phrase or sending assets to an incorrect address can result in permanent loss.
A legitimate exchange sign-up should never ask you for a recovery phrase belonging to an existing private wallet. If a person claiming to be an exchange representative asks for a seed phrase, private key, remote-device access or screen-sharing permission, stop the interaction.
Why Indian Crypto Platforms Ask for KYC
Virtual digital asset service providers covered by India’s anti-money-laundering framework are expected to implement customer due diligence, record keeping, transaction monitoring and suspicious-transaction reporting controls. FIU-IND guidance covers activities such as exchanging VDAs for fiat currency, exchanging one VDA for another, transferring VDAs and providing custody-related services.
This is why a full Indian crypto account normally requires more than an email address. A platform may need to establish:
- Who owns the account.
- Whether the identity details are authentic.
- Whether the same documents are being used on another account.
- Whether the linked payment method belongs to the verified user.
- Whether an activity pattern requires additional review.
- Whether a transfer involves a restricted or suspicious counterparty.
- Whether records must be retained or reported under applicable rules.
KYC should not be treated as proof that an exchange is financially sound. It only means the platform has collected and checked information for onboarding and compliance purposes. FIU registration or completion of KYC does not guarantee solvency, cybersecurity, fair pricing, uninterrupted service or recovery of funds after a platform failure.
India’s Crypto Tax Rules Still Matter at the Account-Opening Stage
You do not normally pay tax merely because you created an account. However, opening an account can begin a transaction history that may later need to be reconciled with tax records.
Official Income Tax Department material available in 2026 states that income from the transfer of VDAs is generally taxed at 30%, plus applicable surcharge and cess, with the cost of acquisition being the principal permitted deduction. It also describes 1% TDS under Section 194S for applicable payments involving the transfer of a VDA and transaction-level reporting through Schedule VDA. Thresholds and responsibility for deducting TDS depend on the transaction and parties involved.
Before trading, determine whether the platform provides:
- Downloadable trade histories.
- Deposit and withdrawal statements.
- TDS certificates or reports where applicable.
- Realised gain-and-loss reports.
- INR values for each transaction.
- Records of fees paid.
- Documentation suitable for tax preparation.
Do not assume an exchange’s profit figure is automatically identical to your taxable income. Transfers between wallets, crypto-to-crypto trades, fees, airdrops, staking rewards and transactions spread across several platforms can make record keeping more complicated.
This page provides general information only. Consult a Chartered Accountant for advice based on your transactions and tax year.
The Three-Part Matching System: Identity, Device and Bank Account
The most reliable way to understand crypto account verification is to divide it into three layers.
1. Identity matching
The platform checks the details you submit against the documents or electronic records used for KYC.
The most important fields may include:
- Full legal name.
- PAN number.
- Date of birth.
- Residential or correspondence address.
- Photograph or live facial image.
- Document validity.
- Whether the PAN or identity record is already associated with an account.
Small differences do not always lead to automatic rejection, but they can require manual review. A missing middle name, an initial on one document and a complete name on another, a changed surname or an old address may prevent an automated system from producing a confident match.
2. Device and session checking
A platform may assess the device, browser, network and login pattern used during registration.
Possible signals include:
- A newly detected device.
- Numerous accounts created through the same device.
- Rapid changes in country or network location.
- Use of emulators or automated tools.
- Repeated failed login attempts.
- An outdated operating system.
- A device that appears compromised.
- Unusual activity shortly after registration.
Not every exchange handles these signals in the same way. A VPN, for example, does not automatically prove fraud, but it may produce a location inconsistency that requires another verification step.
3. Bank-account ownership
When INR services are offered, the platform generally needs to confirm that the linked bank account belongs to the verified exchange user.
A bank account may be rejected because:
- The account-holder name does not sufficiently match the KYC name.
- The account is held only in another person’s name.
- It is a business account being added to a personal profile.
- The account number or IFSC was entered incorrectly.
- The account type or bank is not supported.
- The account cannot receive the platform’s verification deposit.
- The same bank account has already been linked in a way the platform does not allow.
Some platforms use a small verification deposit or “penny drop” to confirm that the account exists and obtain the beneficiary name returned by the banking system. CoinDCX, for example, documents a ₹1 bank-verification deposit in its account-linking instructions. This is one platform’s process, not a universal requirement for every exchange.
What Does Not Necessarily Have to Match?
Some drafts and online tutorials overstate matching requirements.
Your exchange mobile number does not universally have to be the same number registered with every bank account. The exact rule depends on the platform and banking verification process.
However, when an Aadhaar OTP-based process is used, the OTP must be delivered to the mobile number currently registered with Aadhaar. UIDAI states that an Aadhaar mobile-number change generally requires an in-person update through an Aadhaar service point rather than a normal online edit.
Similarly:
- Your current address may differ from an older document, but the platform may ask for updated proof.
- A joint account may be accepted by one platform and rejected by another.
- A platform may accept Aadhaar, DigiLocker or another approved identity flow.
- Document-upload requirements may differ between mobile and desktop onboarding.
- Some platforms may support only individual bank accounts for ordinary personal profiles.
Do not guess. Read the current KYC and bank-verification requirements on the official platform before registering.
What You Need Before Opening a Crypto Account
Prepare the following items before starting.
| Item | Why it may be needed | What to check |
|---|---|---|
| PAN | Identity and tax-related verification | The PAN is active, readable and belongs to you |
| Aadhaar or another accepted identity/address method | Identity, address or electronic KYC | Use only a format accepted by the platform |
| Aadhaar-linked mobile access | Receiving an OTP during Aadhaar-based verification | Confirm that you can receive the OTP |
| Personal Indian bank account | INR deposits and withdrawals | Account-holder name should match your KYC identity |
| Bank account number and IFSC | Bank linking | Copy carefully from an official bank record |
| Personal email address | Login, alerts and recovery | Secure it before registering |
| Mobile number you control | OTPs, alerts and recovery | Avoid numbers controlled by another person |
| Smartphone or computer | Registration and future account access | Update the operating system and browser |
| Camera | Live selfie or document capture | Clean lens, good lighting and clear framing |
| Time for verification | Completing KYC without rushing | Avoid public Wi-Fi and interruptions |
Many Indian onboarding flows use PAN, Aadhaar or DigiLocker and a live identity check. Official CoinDCX documentation, for example, describes PAN information, Aadhaar verification through DigiLocker and liveness checking, while WazirX publishes separate instructions for PAN, Aadhaar and KYC submission. Requirements can change, so these examples should not be treated as a permanent checklist for every platform.
Before Registering: Check the Platform Itself
Do not submit your PAN, Aadhaar information or selfie until you have verified that you are dealing with the correct platform.
Confirm the official domain
Type the domain yourself or reach it through a trusted bookmark. Check every character.
Phishing domains may use:
- A missing letter.
- An extra letter.
- A substituted number.
- A different domain extension.
- A hyphen inserted into a familiar brand.
- A subdomain designed to make a fake address look legitimate.
For example, the brand name appearing somewhere in a long address does not prove that the website is controlled by that brand. The registered domain immediately before the extension is what matters.
Verify the app publisher
Install a crypto app only from:
- The platform’s verified Google Play listing.
- Its verified Apple App Store listing.
- A direct app-store link published on the platform’s confirmed website.
Avoid APK files distributed through Telegram, WhatsApp, file-sharing services, forum comments or unofficial download pages. A fake app can copy the real logo and sign-up screens while sending passwords and OTPs to an attacker.
Check the compliance information
Look for:
- A current India compliance or AML page.
- FIU-IND registration information, where claimed.
- The legal entity operating the service.
- Terms of use.
- Privacy notice.
- Risk disclosure.
- Fee schedule.
- KYC policy.
- Grievance or complaint procedure.
- Official support channels.
Do not rely only on a banner saying “compliant” or “secure.” Verify claims against current official information and check when the page was last updated.
Review INR support
Confirm whether the platform currently supports:
- INR deposits.
- INR withdrawals.
- UPI.
- IMPS, NEFT or other bank-transfer methods.
- Minimum and maximum transaction amounts.
- Deposit fees.
- Withdrawal fees.
- Processing schedules.
- Bank-account ownership rules.
Payment availability can change because of banking relationships or platform policies. A method mentioned in an old review may no longer appear in the live account.
Check custody and withdrawal rules
Read:
- Crypto withdrawal fees.
- Minimum withdrawal quantities.
- Supported networks.
- Cooling-off periods.
- New-device withdrawal restrictions.
- Address-whitelisting options.
- Additional reviews for large transactions.
- Whether crypto withdrawals are currently enabled.
A platform can allow INR purchases while applying separate conditions to crypto withdrawals.
How to Open a Crypto Account in India: Step-by-Step
Step 1: Secure the Device You Will Use
Start with a personal device rather than a shared office computer, cyber-café computer or borrowed phone.
Before registration:
- Install current operating-system updates.
- Update the browser.
- Remove suspicious browser extensions.
- Run a malware scan where appropriate.
- Use a screen lock.
- Avoid public Wi-Fi.
- Make sure the device is not being remotely controlled.
- Turn off screen-sharing software.
- Check that downloads are coming from official sources.
CERT-In recommends updated software, strong and different passwords, careful URL checking, avoiding sensitive transactions on public Wi-Fi and enabling multi-factor authentication.
A rooted or jailbroken device may weaken security protections and may not be supported by some financial applications. Use a standard, updated device wherever possible.
Step 2: Secure Your Email Account
Your email account may be used for:
- Sign-in confirmation.
- New-device alerts.
- Password resets.
- Withdrawal confirmations.
- KYC updates.
- Support communications.
- Security notices.
If an attacker controls the email account, a strong exchange password may not be enough.
Before opening the exchange account:
- Change any reused email password.
- Use a unique password.
- Enable multi-factor authentication on the email account.
- Review recovery email addresses and phone numbers.
- Sign out unknown sessions.
- Remove suspicious forwarding rules.
- Save recovery codes in a secure offline location.
Avoid using a temporary inbox, shared family inbox or work address that you may lose access to after changing jobs.
Step 3: Open the Official Website or App
Navigate to the platform independently.
Do not start registration through:
- A link sent by an unknown person.
- An unsolicited “account manager.”
- A social-media direct message.
- A search-result advertisement you have not verified.
- A shortened URL.
- A QR code from a chat group.
- A remote-support session.
CERT-In advises users to verify senders, inspect domains for spelling errors and avoid suspicious links and shortened URLs. India’s National Cyber Crime Reporting Portal also warns about impersonation and provides facilities for reporting suspect identifiers.
Bookmark the confirmed page after verifying it.
Step 4: Register With Your Email and Mobile Number
Enter an email address and mobile number that you personally control.
You may receive:
- An email verification link.
- An email OTP.
- An SMS OTP.
- A device-verification prompt.
- A request to accept the terms and privacy policy.
Never give the OTP to a person who calls or messages you. A real support employee should not need your password, OTP or authenticator code to “finish” registration.
Read the communication carefully. A legitimate verification message should relate to an action you just initiated. An unexpected OTP may mean someone else is attempting to use your details.
Step 5: Create a Unique Password
Follow the platform’s stated password requirements, but do not stop at the minimum.
A strong exchange password should:
- Be unique to that account.
- Not contain your name, phone number or date of birth.
- Be difficult to guess.
- Be stored in a reputable password manager where practical.
- Not be sent through email or chat.
- Not be saved in a document titled “passwords.”
- Not be reused on your email or banking accounts.
Passphrases can be easier to manage than short, complex-looking passwords, provided they are long and unique.
Do not repeatedly change a strong password without a reason, but change it immediately if you suspect phishing, malware, credential exposure or unauthorised access.
Step 6: Enable Two-Factor Authentication
Enable two-factor authentication as soon as it becomes available.
An authenticator app is usually preferable to relying solely on SMS because authenticator codes are generated on your device rather than delivered through the mobile network. SMS may still be used as a backup or required by the platform.
During authenticator setup:
- Confirm that you are inside the official app or website.
- Scan the displayed QR code with your authenticator app.
- Record the recovery key or backup codes securely.
- Do not upload recovery information to a public cloud folder.
- Do not send a screenshot to another person.
- Test the setup by signing out and back in.
Anyone who obtains the authenticator setup key may be able to generate valid codes. Treat it like a password.
When changing phones, transfer the authenticator account securely before erasing the old device.
Step 7: Begin PAN and Identity Verification
The platform may ask for your PAN number, PAN image, date of birth and another accepted identity or address-verification method.
Enter information exactly as it appears in the source record.
Before submitting, check:
- Spelling.
- Initials.
- Middle names.
- Date of birth.
- PAN number.
- Document orientation.
- Image focus.
- Glare.
- Cropped edges.
- File type and size.
Do not edit the document image, apply filters or obscure information unless the platform expressly tells you to use a masked or redacted version.
UIDAI offers masked Aadhaar, which hides the first eight digits, but a specific exchange may require DigiLocker, Aadhaar authentication or another format. Use the platform’s official instructions instead of assuming a masked document will always be accepted.
Step 8: Complete Aadhaar or DigiLocker Verification Where Required
A platform using an Aadhaar-based or DigiLocker flow may redirect you to an authorised service.
Before entering an Aadhaar OTP:
- Check the domain carefully.
- Confirm that the redirect came from the official app.
- Read the consent screen.
- Review what information will be shared.
- Do not continue if the page appears broken, misspelled or unrelated.
- Never communicate the OTP by phone or chat.
If you no longer control the mobile number registered with Aadhaar, you may be unable to complete an OTP-based flow until the number is updated. UIDAI says mobile-number updates generally require visiting an Aadhaar enrolment or service centre.
Do not attempt to use another person’s Aadhaar OTP or account.
Step 9: Complete the Live Selfie or Liveness Check
A liveness check helps establish that the person registering is physically present and resembles the identity photograph.
For a smoother check:
- Use an evenly lit room.
- Face the light rather than standing with a bright window behind you.
- Clean the camera lens.
- Keep your full face inside the frame.
- Remove a mask, dark glasses or anything blocking facial features.
- Follow the movement instructions slowly.
- Hold the phone steady.
- Allow camera permission only while it is needed.
- Close screen filters or beauty effects.
You do not need a guaranteed camera resolution such as 1080p unless the platform itself states that requirement. Clear lighting and focus are more important than an invented specification.
If the check repeatedly fails, do not send a selfie to an unofficial support number. Use the support link inside the authenticated platform.
Step 10: Wait for KYC Review
Approval time varies.
Some applications are processed automatically. Others require manual checking because of:
- A name variation.
- A low-quality image.
- A facial-match uncertainty.
- A duplicated PAN.
- A recently changed address.
- An unsupported document.
- A system outage.
- High application volume.
- A requirement for enhanced due diligence.
WazirX states that some applications may be approved automatically while others take longer when further verification is required. No single approval time can therefore be promised for every user or platform.
Do not submit multiple duplicate requests unless support directs you to do so. Repeated submissions can make it harder to identify which record is current.
Step 11: Link Your Personal Bank Account
Use a bank account that belongs to you and matches the identity used for KYC.
You may need to enter:
- Account-holder name.
- Bank name.
- Account number.
- Re-entered account number.
- IFSC code.
- Account type.
- Registered mobile OTP.
- A bank statement or cancelled cheque in exceptional cases.
Copy details directly from your bank’s official application, statement or cheque book.
Avoid linking:
- A friend’s account.
- A parent’s account.
- A spouse’s sole account.
- A merchant account.
- A corporate account to a personal exchange profile.
- A bank account obtained from a payment “agent.”
- An account you cannot independently access.
A joint account may require manual review or may be unsupported. Check the platform’s exact rule first.
Step 12: Complete Bank Verification
The exchange may verify the account through:
- A small deposit.
- An account-validation service.
- Net-banking verification.
- A cancelled cheque.
- A bank statement.
- An OTP.
- Manual support review.
The name returned by the bank may be abbreviated or formatted differently. A minor variation may still require manual confirmation.
If verification fails:
- Recheck the account number and IFSC.
- Confirm that the account is active.
- Confirm that the beneficiary name belongs to you.
- Check whether the bank or account type is supported.
- Use only the official in-app support path.
- Ask which document is accepted as proof.
- Do not repeatedly add different people’s accounts.
A rejected bank link does not automatically mean the exchange account has been permanently suspended. It usually means the bank method cannot be used until the discrepancy is resolved.
Step 13: Review the First Login
Before depositing money, review the completed profile.
Confirm:
- Your legal name is correct.
- PAN status is verified.
- KYC status is complete.
- The correct bank account is linked.
- Email and mobile information are accurate.
- Two-factor authentication is active.
- There are no unknown sessions.
- Withdrawal security is enabled.
- Fee schedules are visible.
- Account limits are understood.
- Official support and grievance pages are bookmarked.
Also review notifications. A security alert from a device or location you do not recognise should be investigated immediately.
Account Tiers, Limits and Security Holds
Crypto platforms may apply different permissions according to the level of verification and risk review completed.
A typical structure can include:
| Account status | Possible access |
|---|---|
| Email or phone registered | Viewing the platform; limited or no transaction access |
| PAN or basic verification completed | Some features available; INR or withdrawals may remain restricted |
| Full KYC completed | Standard trading and payment features, subject to limits |
| Enhanced review completed | Higher limits or access to specific services |
| Account under review | Deposits, trades or withdrawals may be temporarily restricted |
Do not publish or rely on a universal figure such as “₹10,000 per month for basic KYC.” Limits vary by platform and can change.
A platform may also impose a security hold after:
- Password reset.
- Mobile-number change.
- Email change.
- Two-factor authentication reset.
- New-device login.
- Addition of a new withdrawal address.
- Unusual transaction activity.
- Recovery of a locked account.
These controls may be inconvenient, but they are often designed to reduce account-takeover risk.
Check the current limit page before depositing an amount you may need to withdraw quickly.
Device Permissions: What Is Reasonable?
A crypto application may legitimately request access to:
- Camera, for KYC or QR scanning.
- Photos or selected files, for document upload.
- Notifications, for security and transaction alerts.
- Biometrics, for local login protection.
Be more cautious if the application requests broad access to:
- Contacts.
- Call logs.
- Full SMS history.
- Accessibility services.
- Device administrator privileges.
- Screen control.
- Installation of unknown applications.
- Unrestricted background activity without explanation.
An SMS permission is not automatically malicious because some apps use OTP detection. However, permissions should be proportionate, clearly explained and connected to a feature you are using.
Deny unnecessary access. Check the app publisher and privacy notice before granting sensitive permissions.
Why Platforms Collect KYC Information
KYC information can support:
- Identity verification.
- Prevention of impersonation.
- Tax reporting.
- Transaction monitoring.
- Sanctions screening.
- Investigations of suspicious transactions.
- Account recovery.
- Regulatory record keeping.
- Prevention of duplicate accounts.
The platform’s privacy notice should explain matters such as:
- Which information is collected.
- Why it is collected.
- With whom it may be shared.
- How long it may be retained.
- How to raise a grievance.
- How to request correction.
- Which legal entity controls the information.
India’s Digital Personal Data Protection Act establishes a framework for lawful processing of digital personal data and recognises both individuals’ privacy interests and lawful processing needs. Rights and deletion requests may be subject to legal retention and compliance obligations.
Do not upload identity documents merely because a website displays a familiar logo. Once exposed, identity information can be difficult to recover.
How to Recognise Phishing During Crypto Registration
Crypto onboarding is an attractive target for criminals because users expect to enter personal information, OTPs and banking details.
Fake KYC expiry messages
A message may claim:
- “Your KYC expires today.”
- “Your account will be frozen in two hours.”
- “Complete re-verification immediately.”
- “Upload PAN again to avoid tax action.”
Do not use the link in the message. Open the official app independently and check whether the same notice appears inside your account.
Fake support agents
A scammer may offer to:
- Speed up verification.
- Correct a rejected PAN.
- Link a bank account manually.
- Remove a withdrawal hold.
- Recover an account.
- Upgrade limits.
They may then ask for an OTP, password, screen share, remote-access application or payment.
Official support should not need your password or authenticator code.
Sponsored fake websites
A fake site may appear above an organic search result. Do not assume “Sponsored” means verified by the crypto platform.
Compare the domain with official communications and trusted bookmarks.
Fake app updates
A message may instruct you to install an APK because:
- The Play Store version is “outdated.”
- The exchange has been “blocked.”
- A new tax-compliant version is required.
- The app is available only through Telegram.
Do not install it.
QR-code scams
A QR code may lead to:
- A fake login page.
- A malicious app.
- A wallet transfer.
- A session-linking request.
Never scan an unsolicited QR code during account recovery or KYC.
Recovery-phrase scams
An exchange account normally uses email, password, OTP and two-factor authentication. It should not require your private-wallet recovery phrase.
Anyone asking for a 12-word or 24-word phrase is attempting to gain control of that wallet.
What to Do After a Suspected Phishing Attempt
If you clicked a suspicious link but did not enter anything:
- Close the page.
- Clear the suspicious download, if any.
- Run a device-security scan.
- navigate to the official platform independently.
- Review account sessions.
- Report the URL.
If you entered a password:
- Change the exchange password immediately.
- Change it anywhere else it was reused.
- Secure the email account.
- Sign out other sessions.
- Contact official support.
- Review withdrawal activity.
If you shared an OTP or authenticator code:
- Contact the platform immediately.
- Lock or restrict withdrawals if the option exists.
- Change credentials.
- Review devices and sessions.
- Preserve screenshots and message details.
If money was taken, report the incident promptly through the National Cyber Crime Reporting Portal or the financial-fraud helpline. The portal currently identifies 1930 as the national helpline for online financial fraud.
Common Crypto Account Problems and How to Fix Them
“My KYC is still pending”
Possible causes:
- Manual review.
- High application volume.
- Unclear documents.
- A name mismatch.
- Duplicate identity details.
- Incomplete liveness check.
- Platform outage.
What to do:
- Review the submitted details.
- Check email and in-app notifications.
- Allow the published review period to pass.
- Contact official support with the case number.
- Do not send documents to a personal email or messaging account.
“My KYC was rejected because the details do not match”
Compare:
- PAN name.
- Date of birth.
- Aadhaar or alternate identity name.
- Address details.
- Entered information.
- Bank-account holder name.
CoinDCX identifies mismatches between entered details and uploaded documents as one reason verification may fail.
Do not change the spelling merely to force an automated match. Ask whether manual review or an updated source document is required.
“The platform says an account already exists”
Your PAN or other identity details may already be associated with an earlier account.
Use account recovery rather than creating another profile. CoinDCX states that the same KYC documents and bank account cannot be used to create another account under its rules. Other exchanges may have similar single-account restrictions.
Do not register multiple accounts to bypass limits, promotions or verification controls.
“I am not receiving the Aadhaar OTP”
Check:
- Whether the registered Aadhaar number is correct.
- Whether you still control the Aadhaar-linked mobile number.
- Mobile signal.
- Temporary service disruption.
- Whether you initiated the request on the legitimate page.
If the Aadhaar-linked number is obsolete, follow UIDAI’s official update process. Do not pay an unofficial agent who promises an online shortcut.
“The live selfie keeps failing”
Try:
- Better front lighting.
- A clean camera lens.
- A neutral background.
- Removing a mask or dark glasses.
- Updating the application.
- Restarting the device.
- Checking camera permission.
- Holding the device steady.
If the platform provides a browser-based alternative, use only the official link.
“My bank account was rejected”
Check:
- Account number.
- IFSC.
- Account type.
- Account-holder name.
- Whether the bank is supported.
- Whether the account is active.
- Whether it belongs to you.
- Whether the platform has already linked it elsewhere.
Do not add a third-party account as a quick workaround.
“Deposits work, but my withdrawal is under review”
A deposit being accepted does not guarantee that every withdrawal will be released without another check.
A review may be triggered by:
- A newly linked bank account.
- A changed device.
- A password or 2FA reset.
- A large or unusual transaction.
- A name inconsistency.
- A source-of-funds request.
- A flagged crypto deposit.
- A compliance or sanctions-screening alert.
Respond only through the authenticated application or confirmed support portal.
“I lost my authenticator app”
Use the backup key or recovery codes if available.
If no backup exists, the platform may require:
- Identity verification.
- A live selfie.
- Device information.
- Recent transaction details.
- A security waiting period.
Do not create another account to regain access to the same assets.
“I lost access to my email”
Recover the email account first where possible.
Because email is frequently used for account recovery, loss of email access can lead to a lengthy manual process. Be prepared to prove identity through the platform’s official recovery channel.
Never pay a social-media “recovery specialist.”
“Support asked me to install remote-access software”
Stop the interaction.
A legitimate support process should not require an unknown person to control your phone, view banking applications or observe OTPs.
Report the contact through the platform’s official complaint channel.
What to Review Before Your First Deposit
Do not deposit immediately after receiving the approval email.
Check the following first.
Trading fees
Determine whether the platform uses:
- Maker and taker fees.
- Flat transaction fees.
- Spreads.
- Volume-based tiers.
- Different fees for instant-buy and order-book transactions.
A zero-fee advertisement may still involve a spread between the market price and the execution price.
INR deposit fees
Check whether the chosen bank-transfer method carries:
- A fixed charge.
- A percentage fee.
- A minimum deposit.
- A temporary processing delay.
INR withdrawal fees and limits
Review:
- Minimum withdrawal.
- Daily maximum.
- Monthly maximum.
- Processing time.
- Bank-account rules.
- Weekend or holiday effects.
- Manual-review thresholds.
Crypto withdrawal rules
Check:
- Supported blockchain networks.
- Network fees.
- Minimum quantities.
- Address-whitelisting requirements.
- Cooling-off periods.
- Travel-rule or sender/beneficiary information requirements.
- Whether the selected token can currently be withdrawn.
Sending through the wrong network can result in permanent loss.
Tax records
Confirm that statements can be exported. Take regular backups rather than assuming an account will remain accessible indefinitely.
Should You Make a Small Test Transaction?
A small test can help you understand:
- How deposits are credited.
- Which fees apply.
- How long the bank transfer takes.
- Whether the account details are correct.
- How the platform records the transaction.
- Whether withdrawals are available.
A test does not eliminate risk. A successful ₹100 or ₹1,000 transaction does not prove that a large transaction will receive identical treatment, particularly if a higher amount triggers additional review.
Do not increase transaction size simply because the first transfer worked.
Security Settings to Enable After Approval
Where available, enable:
Anti-phishing code
A personal anti-phishing code appears in genuine platform emails. A message missing the expected code should be treated cautiously.
Withdrawal-address whitelist
This limits crypto withdrawals to pre-approved wallet addresses. Adding a new address may trigger a waiting period.
Login alerts
Enable alerts for:
- New devices.
- Password changes.
- Security-setting changes.
- Withdrawals.
- Bank-account changes.
Session management
Review active devices periodically and remove anything you do not recognise.
Biometric login
Biometrics can reduce casual unauthorised access to the app, but they do not replace a strong password or server-side two-factor authentication.
Account lock or withdrawal lock
Some platforms allow users to freeze withdrawals or lock the account after suspicious activity. Learn where this control is before an emergency occurs.
Privacy Checklist Before Uploading PAN or Aadhaar
Before submitting identity information, ask:
- Is this definitely the official website or app?
- Is the legal entity named?
- Does the platform explain why the information is collected?
- Does it publish a privacy notice?
- Is there a grievance or support mechanism?
- Is the upload encrypted through the official interface?
- Is it requesting more information than the documented KYC process?
- Does it ask for documents through WhatsApp or a personal email?
- Does it ask for a wallet seed phrase?
- Does it ask for remote-device access?
Save a copy of:
- The privacy notice.
- Terms accepted at registration.
- The confirmation email.
- Your KYC status.
- The grievance contact.
- Any support case concerning identity documents.
Do not publish KYC screenshots on social media. Even a partially visible PAN, Aadhaar QR code, bank detail or email address may be misused.
Mistakes to Avoid When Opening a Crypto Account
Using another person’s documents
This can lead to rejection, restriction and serious compliance concerns.
Opening several accounts to claim promotions
Duplicate KYC and device information may be detected. One platform explicitly states that each user is permitted only one account linked to verified KYC details.
Depositing from a friend’s bank account
This may look like third-party funding or money-mule activity and can result in manual review.
Registering through a public computer
The device may contain malware, keyloggers or saved sessions belonging to another user.
Leaving the email unsecured
Email compromise can undermine exchange-password security.
Depending only on SMS
Enable stronger multi-factor authentication where available.
Saving passwords and backup keys in screenshots
Cloud photo accounts can be compromised. Store recovery material securely and separately.
Downloading unofficial APKs
A fake application can capture credentials and OTPs.
Trusting a paid “verification agent”
KYC should be completed through the platform’s official process.
Assuming FIU registration means the investment is safe
AML registration is not deposit insurance, investment approval or a guarantee that withdrawals will always be available.
Trading before understanding tax records
Poor record keeping can create problems long after the initial trade.
Account Opening and Offshore Platforms
A platform operating internationally may still accept Indian users, but acceptance alone does not establish that the service offers the same practical protections as a platform with clear India-facing compliance and support arrangements.
Before using an offshore platform, consider:
- Whether it currently serves Indian residents.
- Whether it publishes relevant FIU-IND information.
- Whether it supports Indian KYC documents.
- Whether INR deposits and withdrawals are official and transparent.
- Whether it provides TDS-related records where applicable.
- Whether an Indian grievance contact exists.
- Which law and dispute-resolution process governs the account.
- Whether local authorities can realistically assist in a dispute.
- Whether the platform can restrict India access without notice.
- Whether withdrawals depend on unsupported third-party agents.
Do not bypass a regional restriction, provide a false address or use fabricated KYC details. Access obtained through false information can later be withdrawn, leaving funds difficult to recover.
Crypto Account Opening Checklist
Use this before submitting the form.
Platform
- Official domain confirmed.
- Verified app-store publisher confirmed.
- Current KYC requirements reviewed.
- FIU-IND claims independently checked.
- Fee schedule reviewed.
- INR deposit and withdrawal methods reviewed.
- Privacy notice reviewed.
- Grievance and support links saved.
- Custody and withdrawal risks understood.
Identity
- PAN information is correct.
- Accepted identity or address document is available.
- Names and date of birth have been compared.
- Aadhaar-linked mobile access is available where needed.
- Documents are clear and unedited.
- No duplicate account is known to exist.
Security
- Personal device is updated.
- Email has a unique password.
- Email multi-factor authentication is enabled.
- Exchange password is unique.
- Exchange 2FA is enabled.
- Backup codes are stored securely.
- No unofficial APK was installed.
- No remote-access software is active.
Banking
- Bank account belongs to the applicant.
- Account-holder name has been checked.
- Account number is correct.
- IFSC is correct.
- Bank is currently supported.
- Deposit and withdrawal limits are understood.
Before trading
- Trading fees reviewed.
- Withdrawal fees reviewed.
- Crypto-network options understood.
- Tax records can be downloaded.
- Responsible trading limit decided.
- No borrowed money will be used.
Frequently Asked Questions
Can I open a crypto account in India without PAN?
Some platforms may permit limited registration using only an email address and phone number, but a fully functional India-facing account commonly requires PAN for KYC, tax reporting and payment access. Check the current platform requirements rather than assuming registration equals full approval.
Is Aadhaar mandatory for every crypto exchange?
Not necessarily in exactly the same form. Many platforms use Aadhaar, DigiLocker or Aadhaar-based verification, while another accepted identity or address process may be available in some cases. Use the platform’s current official instructions.
Does my mobile number have to match my bank account?
Not universally. However, you must control the number used for exchange OTPs, and an Aadhaar OTP must go to the number registered with Aadhaar. A platform may also apply its own payment-verification rules.
Can I use my parent’s or spouse’s bank account?
A bank account held only in another person’s name will commonly fail ownership checks or lead to manual review. Use your own account unless the platform explicitly supports another arrangement and has approved it.
Can I use a joint bank account?
It depends on the exchange and how the account-holder names are returned during verification. Check before linking it. A sole account with a matching legal name normally creates fewer complications.
Why was my bank account accepted for a deposit but not a withdrawal?
Inbound and outbound transactions may be checked differently. A withdrawal may trigger stricter ownership, security or compliance controls.
Is it safe to open an account on an FIU-registered exchange?
FIU registration is relevant to AML compliance, but it does not eliminate hacking, insolvency, operational, market, custody or customer-service risk. Conduct a broader security and financial-risk assessment.
How long does crypto KYC take?
It may be completed automatically or take longer if manual review is required. There is no reliable universal approval time.
Should I register while using a VPN?
A VPN is not automatically evidence of wrongdoing, but a masked or inconsistent location may trigger additional checks. A normal personal connection is generally the lowest-friction option unless security or circumstances require otherwise.
Can I use the same PAN on two accounts?
Many exchanges allow only one personal account per verified identity. Attempting duplicate registration may cause rejection. Recover the original account instead.
Should I send KYC documents to a support agent on WhatsApp?
No. Submit documents only through an official, authenticated platform process unless the platform’s confirmed support documentation provides a secure alternative.
Is an exchange account the same as a crypto wallet?
No. An exchange account is usually custodial, meaning the platform controls the private keys for assets held on the platform. A self-custody wallet gives the user direct key control and direct responsibility.
Will opening a crypto account affect my credit score?
Opening an ordinary exchange account does not normally function like taking a bank loan. However, using borrowed money, credit products or unpaid obligations to fund trading can create separate financial and credit risks.
Do I pay tax when I open the account?
Opening the account itself does not normally create VDA-transfer income. Taxes and TDS become relevant when applicable transactions occur.
Can the platform ask for additional verification later?
Yes. Re-KYC, enhanced due diligence, transaction review, security recovery or regulatory changes can result in additional document requests. Confirm every request inside the official app or website.
What happens if I change my phone?
Install the official app on the new phone, transfer your authenticator securely and follow the platform’s device-verification process. Do not erase the old authenticator until the new setup has been tested.
What should I do if my name differs across PAN, Aadhaar and bank records?
Do not create altered documents. Ask the platform whether it supports manual review and determine whether an official correction is needed with the relevant issuing authority or bank.
Final Review: Open the Account Slowly, Not Blindly
The registration form for a crypto exchange may take only a few minutes, but the consequences of entering information incorrectly can last much longer.
Before opening a crypto account in India, make sure that:
- You have chosen the real platform rather than a clone.
- The platform clearly explains its India-facing compliance position.
- Your identity information is accurate.
- You control the registered email and mobile number.
- Your Aadhaar-linked number is available if required.
- Your bank account belongs to you.
- Your device is secure.
- Two-factor authentication is enabled.
- You understand withdrawal restrictions.
- You can obtain transaction records.
- You understand the tax and custody implications.
- You have not been promised profits or guaranteed returns.
A successful KYC approval means only that the onboarding process was completed. It does not make crypto prices predictable, remove counterparty risk or guarantee access to money in every situation.
Treat account opening as a security and compliance task first. Trading should come only after you understand how the platform handles money, identity data, withdrawals, disputes and records.
Responsible Trading Notice
Crypto trading can result in substantial or complete loss. Prices can move sharply, liquidity can disappear and leveraged products can create losses greater than an initial margin amount. Do not treat crypto trading as a salary, guaranteed investment or solution to financial hardship.
Set a fixed risk limit before depositing. Do not chase losses, borrow money, use essential household funds or allow a promoter to control your account. Stop and seek independent advice if trading is affecting your finances, sleep, relationships or decision-making.
Editorial and Legal Disclaimer
This guide is educational and does not constitute investment, financial, accounting, tax or legal advice. Platform requirements, payment methods, KYC procedures, FIU status, tax provisions and account limits can change. Verify every material detail through current official sources before registering or transferring money.
The article does not recommend bypassing KYC, opening duplicate accounts, providing false documents, disguising location, using third-party bank accounts or circumventing platform restrictions.