Legal Due Diligence For Investment Portals: SEBI & RBI Regulatory Verification Guide

Executive Summary & Regulatory Framework In India

Navigating The Financial Investment Ecosystem In India Requires A Rigorous Understanding Of The Statutory Framework Enforced By The Securities And Exchange Board Of India (SEBI) And The Reserve Bank Of India (RBI). In An Era Dominated By Digital Trading Apps, Algorithmic Investment Portals, And Online Wealth Management Platforms, Institutional And Retail Investors Must Exercise Mandatory Legal Due Diligence Before Transferring Funds Or Entering Financial Arrangements.

Under Indian Law, Operating An Investment Portal Or Soliciting Public Funds Without Valid Registration From Statutory Regulators Constitutes A Criminal Breach Of Trust, Fraudulent Trading, And A Violation Of The Banning Of Unregulated Deposit Schemes (BUDS) Act 2019. This Guide Provides A Comprehensive Legal Roadmap For Conducting Thorough Regulatory Audits Of Online Financial Portals And Investment Offerings.

1. SEBI Regulatory Mandates & Registration Intermediaries

SEBI Governs Capital Markets, Equity Investments, Derivatives, Mutual Funds, Alternative Investment Funds (AIFs), And Investment Advisory Services Under The SEBI Act, 1992. Any Entity Claiming To Provide Financial Advisory, Research Recommendations, Stock Broking, Or Portfolio Management Must Hold A Valid Certificate Of Registration Issued By SEBI Under The Following Specific Regulations:

• SEBI (Investment Advisers) Regulations, 2013: Mandates That Any Individual Or Corporate Entity Offering Personalized Investment Advice Or Fee-based Portfolio Planning Must Be Registered As A SEBI Registered Investment Adviser (RIA). RIAs Are Held To Strict Fiduciary Standards, Mandatory Fee Caps, And Zero-conflict Execution Rules.
• SEBI (Research Analysts) Regulations, 2014: Governs Entities Issuing Stock Recommendations, Buy/sell Targets, Or Market Research Reports. Unregistered Individuals Offering Stock Tips Via Telegram, WhatsApp, Or Social Media Operate In Direct Violation Of Section 12(1) Of The SEBI Act.
• SEBI (Alternative Investment Funds) Regulations, 2012: Regulates Pooled Investment Vehicles, Private Equity, Venture Capital, And Hedge Funds Categorized Under Category I, II, And III AIFs. Category III AIFs Must Adhere To Strict Leverage Limits And Client Suitability Checks.
• SEBI (Stock Brokers) Regulations, 1992: Requires Member Brokers Of Stock Exchanges (NSE, BSE, MCX) To Display Their SEBI Registration Number (starting With INZ) Prominently On All Digital Interfaces, Contract Notes, And Marketing Channels.

2. Reserve Bank Of India (RBI) Regulatory Oversight

The Reserve Bank Of India, Operating Under The Reserve Bank Of India Act, 1934, And The Banking Regulation Act, 1949, Regulates Banking Institutions, Non-Banking Financial Companies (NBFCs), Peer-to-Peer (P2P) Lending Platforms, Payment Aggregators, And Prepaid Payment Instruments (PPIs):

• NBFC-P2P Lending Guidelines: P2P Lending Portals Must Operate Strictly As Intermediaries Under An NBFC-P2P License Issued By RBI. Funds Must Be Routed Through Dual-escrow Accounts Managed By An Independent Trustee Bank, With Strict Lender Caps Capped At ₹50 Lakhs Across All P2P Platforms.
• Payment Aggregator & Payment Gateway (PA/PG) Norms: Payment Processors Handling Merchant Funds Must Possess RBI Authorization. PAs Are Strictly Prohibited From Holding Customer Funds In Non-escrow Nodal Accounts Or Storing Sensitive Card Credential Data (Tokenization Mandate).
• Digital Lending Guidelines (DLG 2022): All Digital Loan Disbursements And Repayments Must Occur Directly Between The Borrower's Bank Account And The Licensed RE (Regulated Entity) Bank/NBFC, With Zero Involvement Of Third-party Loan App Accounts.

3. Mandatory 5-Point Legal Verification Protocol

Before Committing Capital To Any Online Investment Platform Or Financial Intermediary, Investors And Legal Counsel Should Execute The Following 5-point Audit:

Step A: Official Regulator Register Lookup

Cross-reference The Platform's Claimed License Number Directly On The Official SEBI Portal (sebi.gov.in -> Intermediaries -> Recognized Intermediaries) Or RBI Portal (rbi.org.in -> List Of NBFCs). Never Accept Screenshot Certificates Or PDF Attachments Provided By Platform Representatives.

Step B: Ministry Of Corporate Affairs (MCA21) Verification

Inspect The Corporate Identification Number (CIN) On The MCA Portal To Verify The Entity's Active Corporate Status, Paid-up Capital, Registered Office Address, And Director Names. Check For Any Pending Regulatory Enforcement Actions, Strike-off Notices, Or Charge Filings Against Company Assets.

Step C: Bank Account Beneficiary Matching

Verify That All Bank Transfer Instructions, UPI IDs, Or RTGS Details Belong To The Exact Corporate Entity Name Matching The SEBI/RBI License. Transferring Funds To Individual Personal Bank Accounts, Third-party LLP Accounts, Or Unverified Crypto Wallet Addresses Is An Immediate Indicator Of Financial Fraud.

Step D: Legal Audit Of Risk Disclosure Documents (RDD)

Legitimate SEBI-regulated Entities Are Legally Mandated To Provide A Risk Disclosure Document (RDD) And Client Agreement Highlighting Market Risks, Fee Structures, And Grievance Redressal Mechanisms Prior To Account Activation.

Step E: Domain & Security Audit (WHOIS & SSL)

Conduct A WHOIS Lookup On The Portal's Web Domain To Inspect Registration Age, Registrant Organization, And Domain Privacy Shields. Newly Registered Domains (under 12 Months) Claiming Multi-year Operational Track Records Should Be Flagged As High Risk.

4. Zero Tolerance For "Guaranteed Returns" & Unregulated Deposits

Under Indian Financial Law, Promising Guaranteed Fixed Returns On Equity Investments, Stock Market Trading, Or Crypto Assets Is Strictly Illegal. The Banning Of Unregulated Deposit Schemes (BUDS) Act, 2019, Penalizes Any Non-bank Entity Soliciting Public Deposits With Guaranteed Periodic Returns Without Explicit RBI Or State Government Authorization. Violations Carry Mandatory Imprisonment Of Up To 10 Years And Property Attachment Orders.

5. Red Flags, Legal Remedies & Complaint Escrow

If An Investment Portal Exhibits Red Flags—such As Demanding "withdrawal Tax Fees" To Release Profits, Operating Via Encrypted Messaging Apps Without Physical Office Addresses, Or Promising 2% Daily ROI—investors Must Halt All Transfers Immediately. Victims Of Financial Fraud Should Lodge Complaints On The SEBI SCORES 2.0 Portal (scores.sebi.gov.in), The RBI Sachet Portal (sachet.rbi.org.in), And File A Cybercrime Petition Via cybercrime.gov.in Under Sections 66D And 420 Of The Indian Penal Code / Bharatiya Nyaya Sanhita (BNS).