Master Study Notes on PMLA & IFSCA Case Laws: Chapter 7 — Part 1

This comprehensive study guide provides an authoritative, detailed, and highly structured analysis of the practical application of the Prevention of Money Laundering Act, 2002 (PMLA) and International Financial Services Centres Authority (IFSCA) regulations through administrative and adjudicating precedents.

These notes are strictly grounded in the official curriculum of the NISM-IFSCA-01: Certification Course on Anti Money Laundering and Counter Terrorist Financing in the IFSC.

This is Part One of a two-part study series, focusing on the first three landmark enforcement cases from Chapter 7:

1. FIU-IND V/S Bybit Fintech Limited (Bybit) — Compliance and registration requirements for Virtual Digital Asset Service Providers (VDA SPs).
2. IFSCA V/S Prowess Insurance Brokers Pvt. Ltd. (PIBPL) — Validity of branch approvals, co-terminus authorizations, and regulatory directions.
3. IFSCA V/S NEO Asset Management Private Limited — Mandatory physical presence, FME compliance, and key management personnel requirements.

1. Practical Application & Enforcement of PMLA in the IFSC

The legal framework of the PMLA and IFSCA guidelines relies heavily on administrative action and regulatory enforcement to maintain financial system integrity. While theoretical provisions establish the rules, adjudicating orders from the Financial Intelligence Unit-India (FIU-IND) and the IFSCA demonstrate how these laws are practically enforced.

These case studies highlight critical compliance pitfalls, such as operating without registration, ignoring supervisory directions, and failing to maintain a physical presence with required personnel. Studying these precedents is essential for compliance professionals, Principal Officers, and Designated Directors to ensure their organizations remain fully compliant and avoid severe administrative actions, license cancellations, or heavy monetary fines.

2. Case 7.1: FIU-IND V/S Bybit Fintech Limited (Bybit)

Enforcing Compliance and Registration Obligations on Virtual Digital Asset Service Providers (VDA SPs)

2.1 Parties and Legal Framework

• Adjudicating Authority: Director, Financial Intelligence Unit-India (FIU-IND), exercising statutory powers under Section 13(2)(d) of the Prevention of Money Laundering Act, 2002 (PMLA).
• Noticee / Respondent: Bybit Fintech Limited (Bybit), an international platform operating as a Virtual Digital Asset Service Provider (VDA SP).

2.2 Facts of the Case

• Reporting Entity Classification: Under Section 2(1)(wa) of the PMLA, VDA SPs are explicitly classified as 'reporting entities' and are subject to the same AML/CFT obligations as banking companies and financial intermediaries.
• Unregistered Indian Operations: Bybit continuously expanded its marketing, services, and operations within the Indian market without obtaining the mandatory registration with FIU-IND.
• Pre-existing Regulatory Framework:
  • On March 10, 2023, FIU-IND had issued comprehensive Anti-Money Laundering (AML) and Combating the Financing of Terrorism (CFT) Guidelines specifically for Reporting Entities offering services related to Virtual Digital Assets.
  • On October 17, 2023, a detailed circular was issued by FIU-IND mandating the registration of all VDA SPs as reporting entities.
• Enforcement Measures (Web Blockage): Due to Bybit’s persistent non-compliance and failure to register, FIU-IND requested the Ministry of Electronics and Information Technology (MEITY) to block Bybit's websites and mobile applications in India under the Information Technology Act, 2000 to stop their unauthorized operations.

2.3 Findings of the Director, FIU-IND

Following a thorough review of Bybit's oral and written submissions, the Director of FIU-IND determined that the platform was guilty of multiple systemic violations under the PMLA and the Prevention of Money Laundering (Maintenance of Records) Rules, 2005 (PMLR). The specific regulatory breaches identified include:

1. Section 12(1) of the PMLA: Failure to maintain transaction records, verify client identities, and submit required reports to the Director.
2. Rule 2(1)(h) of PMLR, 2005: Failure to recognize and execute obligations as a defined reporting entity.
3. Rule 7(2) of PMLR, 2005: Failure of the designated Principal Officer to furnish required transaction information to the Director.
4. Rule 8(2) of PMLR, 2005: Failure to promptly report suspicious transactions within the mandated seven working days.
5. Rule 8(4) of PMLR, 2005: Incurring separate violations for each day of delay in reporting transactions or rectifying mis-reported data.
6. Rule 3(1)(D) of PMLR, 2005: Failure to maintain records of all suspicious transactions, regardless of whether they were conducted in cash.
7. Rule 7(3) of PMLR, 2005: Failure to establish an effective internal mechanism to detect and report suspicious activities.

2.4 Adjudicating Order

In an order dated January 31, 2025, the Director, FIU-IND, exercising powers under Section 13 of the PMLA:

• Confirmed that Bybit was in clear violation of its statutory reporting and registration duties.
• Imposed a massive monetary penalty of ₹9,27,00,000 (Nine Crore Twenty-Seven Lakh Rupees).

3. Case 7.2: IFSCA V/S Prowess Insurance Brokers Pvt. Ltd. (PIBPL)

The Impact of Co-terminus Authorizations and Defying Regulatory Orders

3.1 Parties and Legal Framework

• Regulator: International Financial Services Centres Authority (IFSCA).
• Noticee: M/s Prowess Insurance Brokers Pvt. Ltd. (PIBPL), IFSC Branch.
• Parent Status: Registered as a 'Direct Broker (Life & General)' with the Insurance Regulatory and Development Authority of India (IRDAI).

3.2 Facts of the Case

• Parent Registration Validity: IRDAI had renewed PIBPL's parent Certificate of Registration (CoR) for a period valid from September 22, 2018, till September 21, 2021.
• IFSC Branch Setup: On August 17, 2020, IRDAI, under the IRDAI (IFSC Insurance Intermediary Offices) Guidelines, 2019 (IRDAI IIIO Guidelines), approved PIBPL to open a branch office in GIFT IFSC to operate as an IFSC Insurance Intermediary Office (IIIO).
• The Co-terminus Clause: Under Clause 11 of the IRDAI IIIO Guidelines, the branch's authorization validity was strictly co-terminus with the parent's CoR, meaning the branch's approval was bound to expire on the exact same date as the parent's license (September 21, 2021).
• Transition to IFSCA Regulations: During this period, the IFSCA notified the IFSCA (Insurance Intermediary) Regulations, 2021, which superseded the IRDAI IIIO Guidelines. Under these new rules, the branch was required to:
  1. Obtain renewal of the parent CoR beyond September 21, 2021 from IRDAI.
  2. File an application with the IFSCA to secure a fresh CoR for its GIFT IFSC Branch office.
• The Violation:
  • On January 6, 2022, the branch informed the IFSCA that its renewal application with IRDAI was still pending.
  • On January 12, 2022, the IFSCA officially directed the branch not to transact any fresh insurance business until renewal was approved, allowing it only to service existing policyholders.
  • PIBPL's branch did not acknowledge the email and continued to actively conduct fresh insurance business in complete defiance of the regulator's instructions.
  • On May 30, 2023, the IFSCA directed the branch to submit its operational records.

3.3 Findings of the IFSCA

The IFSCA found that the Noticee had willfully ignored binding regulatory directions and operated an IFSC branch without a valid license or active CoR, in direct violation of the IFSCA (Insurance Intermediary) Regulations, 2021.

3.4 Adjudicating Order

In exercise of its powers under Sections 12 and 13 of the IFSCA Act, 2019, and Regulation 30 of the IIIO Regulations, 2021 (read with Section 33(6)(b) of the Insurance Act, 1938), the IFSCA ordered:

• Cancellation of License: The approval and authorization of PIBPL to operate its branch office in GIFT IFSC as an IIIO was cancelled with immediate effect.
• Surviving Liability: Despite the cancellation, the Noticee remains fully liable for all actions or omissions committed during its period of operation.
• Financial and Record-Keeping Obligations: PIBPL remains legally responsible for paying all outstanding regulatory fees, dues, and interest, and must continue to preserve and maintain all business records as required by law.

4. Case 7.3: IFSCA V/S NEO Asset Management Private Limited

The Absolute Necessity of Local Physical Presence and Key Manpower Compliance

4.1 Parties and Legal Framework

• Regulator: International Financial Services Centres Authority (IFSCA).
• Noticee: M/s NEO Asset Management Private Limited (and its registered IFSC Branch).
• FME Category: Registered as a Fund Management Entity (FME - Non-Retail) under the IFSCA (Fund Management) Regulations, 2022.
• Registration Details: Approved on November 22, 2023, with Registration No. IFSCA/FME/II/2023-24/084.

4.2 Facts of the Case

• Absenteeism Revealed via Surprise Inspections: The IFSCA conducted surprise supervisory visits to the registered IFSC Branch office of the FME on July 31, 2024, and again on August 21, 2024. During both unannounced visits, the office was found to be completely vacant, with a total absence of the Principal Officer and Key Management Personnel (KMPs).
• The Advisory Warning: On September 12, 2024, the IFSCA issued a formal Advisory Letter pointing out these compliance failures. The FME was directed to:
  1. Adhere strictly to the Fund Management Regulations.
  2. Ensure its registered office remains open during business hours with the active physical presence of its manpower (including the Principal Officer and KMPs, who must be based locally out of the IFSC).
  3. Resolve these deficiencies within a strict four-week deadline (by October 12, 2024), failing which it would face severe legal actions.
• Evasion of Service: The advisory letter was emailed to both the Principal Officer and the Compliance Officer, and the branch was instructed to collect the hard copy from the IFSCA Head Office. The FME failed to collect the physical letter and did not acknowledge or reply to the regulator's email.
• Continued Non-Compliance: Following the expiry of the four-week period, the IFSCA conducted its 3rd and 4th surprise visits on October 17, 2024, and October 24, 2024. The branch office was once again found completely locked and empty of all required personnel, leading the Competent Authority to initiate formal enforcement action.

4.3 Findings of the IFSCA

The FME branch acted in continuous, direct violation of the IFSCA (Fund Management) Regulations, 2022 and willfully ignored the clear warning and compliance timelines issued by the regulator.

4.4 Adjudicating Order

In exercise of its powers under Regulation 143 of the IFSCA (Fund Management) Regulations, 2022 (read with Sections 12 and 13 of the IFSCA Act, 2019 and Section 11B of the SEBI Act), the IFSCA ordered:

• Official Warning: Issued a stern, formal warning to both the parent company and the IFSC Branch to ensure absolute compliance in the future.
• Mandated Compliance Areas: Directed strict, immediate adherence to Regulation 7(4) and Regulation 10(1) of the IFSCA (Fund Management) Regulations, 2022, regarding physical staffing and localized operations.
• Stringent Consequences: Clarified that any future repetition of these violations would be treated as a major regulatory breach and would result in immediate, severe enforcement actions under the IFSCA Act.

5. Comparative Case Law Summary Matrix

6. Exam-Relevant Key Terms & Regulatory Definitions

• Reporting Entity under Section 2(1)(wa): A banking company, financial institution, intermediary, or person carrying on a designated business or profession. VDA SPs are legally classified as reporting entities and must maintain complete transaction records and report suspicious transactions to FIU-IND.
• Co-terminus Authorization: A regulatory condition where the license/approval granted to a branch office or subsidiary is legally tied to, and expires on, the exact same date as the Certificate of Registration (CoR) of its parent company.
• Local Physical Presence Mandate: A key compliance requirement under IFSCA regulations stating that critical officers (such as the Principal Officer and Key Management Personnel) must be physically based in and operate out of the IFSC to ensure real-time oversight and operational accountability.
• Surprise Inspections (MI Visits): Unannounced physical visits conducted by IFSCA officers to evaluate whether licensed entities are physically operational, maintaining appropriate local staffing, and keeping accurate records.
• Surviving Intermediary Liability: A legal principle ensuring that the cancellation or revocation of an intermediary's license does not absolve them from their past liabilities, unpaid fees, outstanding interest, or their legal obligation to safely preserve all transaction records.
• Website Blockage via MEITY: A severe enforcement tool where FIU-IND requests the Ministry of Electronics and Information Technology (MEITY) to block access to the digital platforms of non-compliant foreign financial intermediaries operating in India without a license.

7. Key Takeaways for Students & Professionals

• Registration is Non-Negotiable: Simply operating offshore does not exempt digital asset platforms or VDA SPs from Indian AML/CFT laws if they serve clients in the Indian market. Registrations on the FINGate portal and with FIU-IND are mandatory.
• Ignorance of Regulatory Communication is Costly: Failing to collect physical notices or neglecting to acknowledge or reply to emails from the regulator (as seen in the PIBPL and NEO Asset Management cases) is viewed as willful non-compliance and accelerates severe enforcement actions.
• "Shell" Offices are Strictly Prohibited: The IFSCA is committed to maintaining Gift City as a substance-driven financial hub. Registering an FME or intermediary branch and leaving the office locked without a physical Principal Officer or localized KMPs will trigger immediate supervisory actions and can lead to license cancellations.