Picture an investor opening a crypto exchange app at dawn after a sleepless night. Red figures, all indicative of losses, run down the screen. The falling market is not what troubles him. A ‘money withdrawal’ request has remained ‘pending’ for hours. The balance is still visible, yet it is beyond his reach. It is as though the exchange has lowered its shutters while leaving the display lit.
Customer support, as usual, replies with an emotionless script. The fine print, read closely for the first time, appears to give the exchange wide discretion to restrict withdrawals and little obligation to explain why. The question is no longer whether Bitcoin will recover. It is a question of whether Indian law offers a remedy.
Now, that depends on the cause of the loss. A fall in the value of a token is ordinarily an investment loss borne by the investor. The legal position changes when the grievance concerns the conduct of the exchange. There could be multiple scenarios, such as a withdrawal being frozen without explanation, fees being concealed, assets transferred without authority, or even withheld despite a valid request. Each raises the possibility that the service paid for was not properly delivered.
No separate statute
India has no separate statute setting out consumer rights for crypto investors. Nor is there a crypto ombudsman or a statutory scheme that insures assets held by an exchange.
However, virtual digital assets (VDAs or crypto assets) are recognised for taxation and service providers have anti-money-laundering obligations. Those measures serve revenue collection and financial integrity. They do not create a complete system of consumer redress.
Investors are protected
That said, the absence of a dedicated law does not place the investor beyond legal protection. The dispute must instead be located within laws of general application.
Consumer protection and contract law may govern the service relationship. Cybercrime and arbitration law may provide further remedies.
The Consumer Protection Act can therefore apply to a service supplied by an exchange, provided the investor first qualifies as a consumer.
Legal identity is vital
That makes the investor’s legal identity decisive. Section 2(7) of the Consumer Protection Act 2019 expressly includes transactions conducted online. A retail participant who pays an exchange for its services may claim to be a consumer.
The same definition excludes services obtained for a commercial purpose. An exchange may argue that systematic, high-volume trading will count as ‘business’ rather than personal investment.
The scale and purpose of the activity will matter. Consumer protection is more readily available to an ordinary retail user than to a professional trading enterprise.
Once this threshold is crossed, the Act permits an investor to allege deficiency in service, an unfair trade practice or an unfair contract. These grounds can cover delayed withdrawals and withheld information. They can also bring one-sided platform terms under scrutiny.
A Consumer Disputes Redressal Commission may order repayment or compensation. It may direct that an unfair practice be discontinued. The complaint can be filed electronically and ordinarily where the consumer resides or works. Section 69 sets a two-year limitation period, although a delay may be condoned for sufficient cause.
Grievance machinery
Before litigation, the exchange’s own grievance machinery becomes important. Rule 4(5) of the Consumer Protection (E-Commerce) Rules 2020 requires the grievance officer of an e-commerce entity to acknowledge a consumer complaint within 48 hours. The complaint must be redressed within one month of receipt. Crypto exchanges are not expressly named in these Rules. Their application will depend on whether the platform and the service concerned satisfy the statutory definitions. The deadline is relevant, though it cannot be treated as an unconditional crypto-specific mandate.
The screen itself may also furnish evidence. The Central Consumer Protection Authority’s Guidelines for Prevention and Regulation of Dark Patterns, 2023 identify 13 prohibited practices. False urgency and drip pricing have evident relevance to trading platforms. So do interface interference and bait-and-switch. A charge disclosed only on the final confirmation screen may support an allegation of unfair trade practice. The same may be true of a design that makes withdrawal materially harder than deposit.
An act of advertising
Advertising carries more serious consequences. Under section 89 of the Consumer Protection Act, a service provider responsible for a false or misleading advertisement may face imprisonment of up to two years and a fine of up to ₹10 lakh for a first offence.
A subsequent offence can attract imprisonment of up to five years and a fine of up to ₹50 lakh. Claims of assured returns, absolute safety or government ‘approval’ cannot be rescued by an asterisk buried beyond the investor’s attention.
High disposal rate
These rights would mean little without an accessible forum. By June 2026, the e-Jagriti portal had recorded 2,29,174 consumer cases and 2,07,997 disposals. Its official disposal rate stood at 90.75 per cent.
Between April and October 2025, the National Consumer Helpline facilitated refunds of Rs 27.61 crore across 49,333 grievances in 30 sectors.
These are not crypto-specific figures. India does not yet publish a reliable series of complaints against crypto exchanges. They do show that pre-litigation intervention and digital adjudication are no longer merely theoretical routes.
Beyond consumer law
Some disputes move beyond consumer law. Sections 316, 318, and 319 of the Bharatiya Nyaya Sanhita, 2023, cover criminal breach of trust, cheating, and cheating by personation. Sections 66(C) and 66(D) of the Information Technology Act, 2000 address identity theft and computer-enabled personation.
These provisions offer criminal remedies. They do not replace a claim for compensation under consumer law.
Speed becomes critical when assets have been transferred without authority. By January 31, 2026, the 1930 helpline operated by the Indian Cyber Crime Coordination Centre (known as I4C) had helped save more than ₹8,690 crore across over 24.65 lakh financial-fraud complaints. The victim should inform the exchange and call 1930 immediately.
In crypto transactions, the wallet address and ‘transaction hash’ must be preserved. Emails, screenshots, and bank records should also be secured before accounts or chat histories disappear.
Exchanges’ responsibilities
Evidence must exist on the platform’s side as well. Directions issued by the Indian Computer Emergency Response Team (CERT-In) under section 70(B) of the IT Act require specified cyber incidents to be reported within six hours.
Virtual-asset exchanges and custodian-wallet providers must retain prescribed customer and transaction records for five years. Non-compliance will not by itself be sufficient to ensure compensation for an investor. However, it will supply important evidence in consumer, civil or criminal proceedings.
The consumer forum is not the only civil avenue. Section 73 of the Indian Contract Act permits compensation for loss that naturally arises from a breach. It excludes remote loss. This becomes important when an investor claims hypothetical trading profits rather than the value of assets actually withheld. A claim based on imagined future trades will usually be harder to establish than one concerning identifiable assets or money.
An arbitration clause does not by itself bar a statutory consumer complaint. The Supreme Court has recognised that consumer remedies exist in addition to arbitration. Section 9 of the Arbitration and Conciliation Act 1996 can also provide urgent interim protection.
Madras HC’s vital order
In Rhutikumari v Zanmai Labs, the Madras High Court protected 3,532.30 XRP pending arbitration. It recognised cryptocurrency as property capable of being held in trust.
The order was not delivered in a consumer proceeding. Its importance lies elsewhere: private law can preserve identifiable crypto assets before the dispute reaches a final decision.
The core issue is the service provided by the exchange. Price movement belongs to investment risk. The exchange remains responsible for access to the account and the execution of withdrawals. It must also answer for its disclosures and its custody of customer assets. A failure within that sphere can bring consumer law into operation.
The nature of the failure determines the legal route. An unexplained service failure should first be placed before the exchange’s grievance officer. The National Consumer Helpline and e-Jagriti follow if the matter remains unresolved. Theft or fraud requires an immediate report to 1930 and the police. Identifiable assets in danger of being dissipated may require urgent civil or arbitral protection.
India’s legal framework for crypto consumers remains fragmented. It is to be noted that the arena is not empty, though. The law can be used to extract an explanation from an exchange with regard to its conduct and subsequently honour the service for which it was paid. Where asset custody is involved, the platform may also be required to account for the assets entrusted to it. That is the point at which a crypto loss becomes a consumer dispute.
The author is CEO, Giottus.com
The opinions expressed in this article are those of the author and do not purport to reflect the opinions or views of THE WEEK.
