January 11, 2026
Show AI Summary
Cryptocurrency exchanges must use live selfies, geo-tagging, strict KYC and five-year record retention under new AML rules.
VDA service providers must use liveliness detection via live selfies, capture exact geolocation, timestamp and IP at onboarding, conduct a Re 1 penny-drop bank verification, collect PAN plus a secondary ID with OTP verification, register as reporting entities with the Financial Intelligence Unit under the PMLA, submit suspicious transaction reports, apply enhanced due diligence for high-risk clients (including PEPs and links to tax-haven or FATF-listed jurisdictions), discourage ICOs/ITOs and refuse facilitation of anonymity-enhancing tools, and retain client and transaction records for at least five years.