The popular conception of crypto as anonymous money is essentially wrong for any Indian using a regulated platform. Between exchange KYC, FIU reporting, and bank-side AML, your P2P trail is largely traceable.
What's tracked at the exchange
Exchanges KYC every Indian user — PAN, Aadhaar, video verification, address proof. Every trade is logged against your identity. FIU-registered exchanges report STRs (Suspicious Transaction Reports) to the government when patterns trip thresholds.
On P2P specifically, the merchant side of every trade you do is also KYC'd — meaning the IT Department can correlate your buy from Merchant X with hundreds of other buyers from the same merchant.
What's tracked on the banking side
Every UPI transaction is logged by NPCI (National Payments Corporation of India) and traceable. Banks themselves run AML pattern detection — frequent UPI transfers to the same merchant, unusual round numbers, sudden inflows can trigger account reviews.
Cash deposits at branches are reported to FIU above ₹10 lakh in a year (₹50 lakh for cash withdrawals); used as a workaround to crypto P2P, this triggers separate AML alerts.
What's actually anonymous
Decentralised wallets you control privately, not connected to a KYC'd exchange, are pseudonymous on-chain. But once you bridge from there to INR via P2P, the moment you connect to a bank account, the chain-of-custody snaps onto your identity.
Key takeaways
- Exchange KYC + FIU reporting + bank AML = end-to-end traceable trades.
- Every UPI transfer is permanently logged at NPCI.
- Cash workarounds trigger separate FIU alerts via banking-side reporting.
- True pseudonymity exists only off-platform; bridging to INR breaks it.
