Industries  ·  Crypto Exchanges

Indian crypto onboarding the FIU-IND actually accepts.

FATF Travel Rule, KYT, India-Stack KYC, INR on/off-ramp verification, and PMLA-aligned audit trails — wired into one decisioning layer for VASPs serving Indian users.

Trusted by VASPs and crypto-FX hybrids running Indian onboarding

Built for VASPs Running Indian Crypto Onboarding

From global exchanges with India desks to homegrown VASPs registered with FIU-IND — Deepvue gives you the KYC, KYT, and Travel-Rule infrastructure that PMLA inspections actually expect.

DollarPe
iMocha
Lark Finserv
NAMCO Bank
Nest
SafeTree
SwitchMyLoan
Times Internet
Yenmo
DollarPe
iMocha
Lark Finserv
NAMCO Bank
Nest
SafeTree
SwitchMyLoan
Times Internet
Yenmo
DollarPe
iMocha
Lark Finserv
NAMCO Bank
Nest
SafeTree
SwitchMyLoan
Times Internet
Yenmo
VASP KYC for Indian crypto users FATF Travel Rule readiness PMLA + FIU-IND audit logging KYT + sanctions / OFAC / UN screening INR on/off-ramp bank verification mule & multi-account fraud signals 30% TDS / 1% TCS-ready user records VASP KYC for Indian crypto users FATF Travel Rule readiness PMLA + FIU-IND audit logging KYT + sanctions / OFAC / UN screening INR on/off-ramp bank verification mule & multi-account fraud signals 30% TDS / 1% TCS-ready user records VASP KYC for Indian crypto users FATF Travel Rule readiness PMLA + FIU-IND audit logging KYT + sanctions / OFAC / UN screening INR on/off-ramp bank verification mule & multi-account fraud signals 30% TDS / 1% TCS-ready user records

Three things VASPs need that horizontal KYC vendors don't deliver.

Crypto exchanges in India operate under FIU-IND registration, PMLA, and FATF VASP guidance — not the same rules as a UPI fintech. Deepvue is built for that distinction.

FATF R16 data, ready to share 01 · Travel Rule

Capture beneficiary + originator data per FATF Recommendation 16. Wire it to TRP partners (Notabene, Sumsub Travel Rule, others) without rebuilding the data layer.

Originator + beneficiary KYC fields captured at onboarding
Threshold-based flagging (USD 1,000 / INR equivalent)
Travel-rule data export, structured for any TRP
PMLA-format audit trail 02 · PMLA + FIU-IND

VASPs in India register with FIU-IND under PMLA. When inspectors ask for STR/CTR backing, the trail needs to be there — and in their format.

User-level audit, exportable on demand
CTR / STR field-mapping support
Encrypted retention, RBI-aligned residency
Match the bank, kill the mule 03 · INR on/off-ramp

Indian crypto fraud is bank-account-mismatch fraud — strangers funding mule accounts. Verify name-on-bank matches name-on-PAN before any INR moves.

Penny-drop ownership confirmation (IMPS)
UPI VPA + bank-account match
Mobile Number Revocation List (MNRL) screening

VASPs running through Sumsub, Onfido, or Persona can capture KYC, but lose the FIU-IND PMLA-format trail and the INR-bank ownership check that block mule onboardings. Deepvue handles both as part of the chained decision.

Where horizontal KYC vendors leave VASPs exposed.

If you're using Sumsub, Onfido, or Persona for Indian crypto onboarding, your gap usually lives in one of these four places.

Horizontal stack on VASP use case
No FIU-IND PMLA-format audit trail
No INR bank-ownership check before on-ramp
FATF Travel Rule fields fragmented across tools
PAN-mismatch fraud sneaks through generic OCR
Deepvue, VASP-aware
PMLA-format trail per user, FIU-IND export-ready
Penny-drop INR bank check before fiat on-ramp
Travel-Rule-ready originator/beneficiary fields
PAN validated against source, not parsed as text
FIU-IND inspection coming up?
15-min walkthrough — bring a sample user, leave with the PMLA-format audit trail your inspector expects.

The VASP onboarding stack — six checks, one chain.

Every check a registered Indian VASP (or a global exchange serving Indian users) needs in one configurable workflow — sequential, parallel, or stop-on-fail.

DigiLocker KYC Pull
Aadhaar + PAN fetched from government wallet with consent. PMLA-aligned identity record creation.
Explore
PAN + Source Validation
PAN checked against authoritative records, name match scored. 30% TDS / 1% TCS reporting fields prepared.
Explore
Face Match + Liveness
In-house ML, anti-spoof against photo, video, mask, deepfake. Tuned for Indian face data variance.
Explore
INR Bank + UPI Match
Penny-drop confirms ownership before fiat on-ramp clears. UPI VPA matched to bank-account name.
Explore
PEP / Sanctions / Adverse Media
UN, OFAC, EU sanctions; FATF R12 PEP lists; adverse-media checks at onboarding and ongoing.
Travel-Rule + MNRL Block
FATF R16 originator/beneficiary fields captured + Indian Mobile Number Revocation List blocking mule recycling.
Explore

How VASPs run Indian crypto onboarding on Deepvue.

From a user landing on signup to their first INR on-ramp clearing — every step PMLA + Travel-Rule ready by default.

01
Indian user lands, KYC consent
DigiLocker consent screen renders. Aadhaar + PAN pulled with masking applied per UIDAI guidance.
02
PMLA fields + face captured
Identity record built in PMLA / FIU-IND format. Liveness selfie matched to Aadhaar photo, anti-spoof pass.
03
Bank, screening, KYT in parallel
INR penny-drop + UPI VPA match + PEP / sanctions / MNRL all fire concurrently. KYT counterparty score pulled if you operate one.
04
Decision + Travel Rule data ready
APPROVE / REVIEW / REJECT, PMLA-format audit logged, FATF R16 originator data structured for outbound transfers.

End-to-end median: under 60 seconds. PMLA inspection-ready audit trail produced for every onboarding, no extra step.

VASP-grade KYC, ready in your sandbox today.
DigiLocker, face, INR bank, PMLA-format audit — call the chain end-to-end before wiring anything to production.

A VASP onboarding decision, end-to-end.

What a single Indian crypto-user onboarding flow looks like — chained checks, PMLA-format audit, Travel-Rule data structured.

The check chain
CHAIN
// VASP onboarding chain
1. POST /v1/identity/digilocker
2. POST /v1/identity/pan-validate
3. POST /v1/face-match
4. POST /v1/face-liveness
5. POST /v1/banking/penny-drop
6. POST /v1/banking/upi-vpa-match
7. POST /v1/identity/mnrl
8. POST /v1/screening/pep-sanctions-am
9. POST /v1/decision/vasp-onboarding
What you wire in
Auth header
single API key, all endpoints
User inputs
phone, email, dob, intended use
Webhooks
decision + Travel-Rule events post back
Decision rules
VASP-specific risk thresholds
Decision response
200 OK · JSON
{
  "user_id": "u_v3a7c9e2",
  "decision": "APPROVED",
  "latency_ms": 52107,
  "checks": {
    "identity_digilocker": "PASS",
    "face_match": "PASS",
    "inr_bank_match": "PASS",
    "upi_vpa_match": "PASS",
    "mnrl": "PASS",
    "pep_sanctions_am": "NO_MATCH"
  },
  "travel_rule": {
    "originator_ready": true,
    "threshold_inr": 82500
  },
  "audit_trail_id": "at_2026_04_28_18_15_03",
  "compliance_format": "PMLA_FIU_IND_v2",
  "data_residency": "IN"
}

Compliance map for Indian crypto onboarding.

The regulations FIU-IND, RBI, and FATF actually ask about for VASPs — and how Deepvue's capabilities map to each.

AML
PMLA, 2002 (Mar 2023 amendment)
Brought VASPs explicitly under PMLA. KYC, record-keeping, STR/CTR reporting to FIU-IND.
RBI
FIU-IND VASP Registration
VASPs operating in India must register with FIU-IND. Onboarding records, STR submission expected on demand.
AML
FATF R16 — Travel Rule
Capture & share originator + beneficiary data for VA transfers above threshold. Indian VASPs must operationalize this.
FATF
FATF R10, R12 — CDD & PEPs
Customer Due Diligence (R10) and Politically Exposed Persons screening (R12) at onboarding and ongoing.
DATA
DPDP Act, 2023
Consent, purpose limitation, data-fiduciary duties for all Indian crypto user data including KYC and transaction records.
DATA
Income Tax (TDS / TCS)
30% TDS on VDA gains, 1% TCS at source for certain transfers. User-level records must support tax reporting.
SCREENING
UN, OFAC, EU, MHA sanctions
Sanctions list screening at onboarding and ongoing. India MHA list checked alongside global lists.
SCREENING
IT Act, 2000 (Sec 43A)
Reasonable security practices for sensitive personal data. Encryption, access controls, breach response.
This map is informational, not legal advice. Your VASP licensing in your home jurisdiction (Singapore MAS, EU MiCA, Dubai VARA) layers on top — Deepvue's audit trail is built to satisfy India + your home regulator.

Where Indian VASP onboarding usually breaks.

Indian crypto traders find exchanges via referral links, Twitter/X threads, and YouTube reviews. The funnel from "signed up" to "first INR on-ramp cleared" usually breaks at one of these five points.

Show me the PMLA-format trail FIU-IND expects.
15-min walkthrough — bring a sample user profile, leave with the inspection-ready audit format.

Wire it in over a sprint.

Indian VASP teams drop Deepvue into their onboarding flow in under two weeks. One sandbox key, one chained endpoint, webhooks into your KYT engine and FIU-IND export pipeline.

Day-by-day rollout
1
Days 1-2 — sandbox keys + Travel-Rule field mapping
2
Days 3-5 — wire into your signup, route Indian users
3
Days 6-8 — webhooks to KYT + FIU-IND export
4
Days 9-10 — production keys, gradual rollout, audit verification

What VASPs get out of the box for India.

Capabilities every Indian-facing crypto exchange needs — without stitching together five vendors and missing the FIU-IND format.

Integration features
Single REST endpoint
One chained call wraps the full onboarding flow.
Sandbox first
Test users end-to-end before any production traffic.
Webhook decisioning
Decisions, retries, and step-level events post back to your stack.
PMLA / FIU-IND export
User-level audit, on-demand export for STR / CTR backing.
Out of the box
DigiLocker KYC pull
Aadhaar + PAN fetched directly from the government wallet with user consent.
Face match + liveness
In-house ML, anti-spoof against photo, video, mask, and deepfake attacks.
INR bank + UPI match
Penny-drop and UPI VPA ownership confirmation before fiat on-ramp release.
Travel-Rule + sanctions
FATF R16 originator/beneficiary fields captured. Global PEP, OFAC, UN, EU, MHA sanctions list screening.
PMLA / FIU-IND audit trail
Per-user, per-decision, immutable. STR/CTR-mappable export in one API call.
Per-call trace ID
Every decision tagged with a retrievable trace ID. Plug into your audit pipeline without custom logging.
Ship India VASP onboarding in a sprint.
Sandbox keys today. Production traffic in two weeks. PMLA-format trail from day one.

VASPs building Indian crypto onboarding on Deepvue.

Five customer profiles — each with a specific outcome from the India-aware onboarding chain.

FIU-IND-registered VASP
PMLA inspection-ready, day one
First-time FIU-IND inspection sailed through. Per-user audit trail, STR-mappable, exported in 4 minutes.
Crypto-FX hybrid · SG
Travel Rule wiring in 5 days
Originator/beneficiary fields piped into Notabene + Sumsub Travel Rule from one Deepvue webhook. No data-layer rebuild.
Indian-domiciled exchange
Mule rate cut by 70%+
PAN-mismatch + INR bank-name match + MNRL caught mule onboardings before any fiat on-ramp moved. First quarter alone.
Global exchange · India desk
India region in 14 days
Routed Indian users into Deepvue while keeping the global Sumsub flow elsewhere. Sandbox-to-prod 14 days.
Web3 wallet · INR ramp
First INR clearing in 90 sec
DigiLocker + UPI VPA + bank-account match collapsed the onboard-to-first-trade window from 24 hours to 90 seconds.

Built for VASPs, mapped to India PMLA.

Your home VASP licensing (Singapore MAS, EU MiCA, Dubai VARA) and the Indian framework (PMLA, FIU-IND, RBI, DPDP) ask for different things. Deepvue's audit trail satisfies both.

India-side commitments
DPDP-aligned consent capture per check
PMLA / FIU-IND-format audit, on-demand export
KYC sourced via authorized partner integrations
Paperwork & controls
Travel-Rule data structured for any TRP partner
SOC 2 Type II controls (in audit)
ISO 27001 aligned
GDPR-compatible DPA available

Deepvue is not a regulator and does not represent itself as RBI, SEBI, UIDAI, FIU-IND, or any government authority. Customers retain full responsibility for their VASP licensing, PMLA reporting, and home-country compliance. Deepvue provides the verification infrastructure and structured audit trail; the regulatory decisioning is yours.

Applicable regulations

All API interactions are protected using encryption, role-based access controls, and audit logging.

Volume pricing for VASPs.

Onboarding bundles tier with monthly user volume. Travel-Rule data + PMLA audit included by default. INR or USD invoicing.

Pricing scales with
monthly Indian user volumechecks per onboarding (5, 7, 9+)PMLA audit + Travel-Rule fieldsongoing screening tierINR or USD invoicing

Most VASPs running 5k-50k Indian onboardings per month land in the per-decision range similar to Sumsub or Persona pricing — but with FIU-IND-format audit and Travel-Rule data already included, no per-add-on surcharges.

Common questions from VASP compliance and product leads.

Real questions, asked in evaluation calls. If yours isn't here, book a 15-min walkthrough — we'll answer it live.

We're already on Sumsub / Persona / Onfido globally. Why add Deepvue for India?
You don't have to swap globally. Most VASPs route Indian users into Deepvue while keeping the global stack for the rest. The wins: India-Stack-native flows (DigiLocker, UPI VPA match, INR penny-drop) catch mule onboardings that horizontal vendors miss, and the PMLA / FIU-IND-format audit trail is structured for Indian inspections from day one.
Does Deepvue handle Travel Rule data, or do we still need Notabene / Sumsub Travel Rule?
Deepvue captures originator + beneficiary fields per FATF R16 at onboarding and structures them for any TRP partner. Most VASPs still use a dedicated TRP for the actual inter-VASP messaging (Notabene, Sumsub Travel Rule, Veriscope, etc.). Deepvue + your TRP works in tandem — we feed clean, structured data to them so they don't have to re-collect it.
Where is Indian user data stored?
Indian servers by default. Storage arrangements are negotiated per MSA, with defaults aligned to DPDP and applicable sector regulations.
Will the audit trail satisfy FIU-IND inspectors?
The trail is structured for PMLA / FIU-IND inspection — consent, source-of-data, timestamp, decision rationale, full check history. STR/CTR field mapping is supported. We don't issue STR submissions on your behalf; you do that. We provide the inspection-grade backing.
How does this fit with our existing KYT / chain analytics provider (Chainalysis, TRM, Elliptic)?
Deepvue handles KYC + onboarding decisioning. KYT is your chain analytics provider's lane — Deepvue's webhooks feed verified user identity into your KYT engine so on-chain risk scores can be tied to verified human counterparties.
What about 30% TDS and 1% TCS reporting?
Deepvue doesn't file your tax statements, but the user-level records we produce (PAN, name, residential address, transactions linked to user) are structured for the 30% TDS on VDA gains and 1% TCS reporting your tax-compliance team needs to file.

Is Deepvue the right India KYC partner for a crypto exchange or VASP?

Deepvue provides India-Stack-native KYC, INR bank verification, FATF Travel-Rule data capture, and PMLA / FIU-IND-format audit trails built specifically for VASPs serving Indian users. It delivers DigiLocker pulls, in-house face match + liveness, penny-drop bank ownership verification, sanctions / PEP / adverse-media screening, and PMLA-format audit logs in a single decisioning chain — typically routed for Indian users alongside a global Sumsub / Persona / Onfido stack.

Onboard your next Indian crypto user
PMLA-ready, end-to-end.

India-Stack-native. Travel-Rule structured. Built for VASPs.

esc