Consensus architecture

No bank keeps the books in crypto. Thousands of computers each hold a copy, and they follow fixed rules to agree on which new entries are valid. Bitcoin uses proof of work, where computers compete to solve puzzles. Ethereum uses proof of stake, where participants lock up coins as a guarantee of honesty.

Both systems make cheating expensive. That is the whole idea: you trust the rules and the incentives instead of a single company.

Cryptographic provenance

Every transaction is signed with a private key, and anyone can check the signature with the matching public address. The signature proves the owner approved the move, without revealing the key itself.

Because every transfer is recorded, you can trace a coin's history. That helps investigators, but it also means your activity is visible to anyone who knows your address.

Ledger immutability

Each block contains a fingerprint of the one before it. Change an old entry and its fingerprint changes, which breaks every block after it. To get away with it, an attacker would have to redo the work of the whole network.

Immutable does not mean safe. A mistaken or fraudulent transfer cannot be reversed, which is why scammers like crypto.

Keeping your keys

A wallet stores keys, not coins. The seed phrase is a list of words that can rebuild the wallet, so whoever has it controls the funds. Never type it into a website or share it, and never store it as a photo or in a chat.

If you lose it, nobody can recover it. If someone else gets it, nobody can undo what they do next.

Rules to check

Profit from selling or swapping virtual digital assets (VDAs) is taxed at a flat 30%, plus surcharge and 4% cess. Only the cost of buying the asset can be deducted. Losses cannot be set off against other gains or income, and swapping one coin for another counts as a sale.

A 1% TDS applies to many transfers above set thresholds, and gifts of crypto can be taxable for the receiver. From 1 April 2026 the new Income Tax Act 2025 is in force. Reports say the tax department confirmed the 30% rate and 1% TDS are unchanged, but you must now report VDA activity in more detail in Schedule VDA, and crypto held abroad belongs in Schedule FA. Late or wrong reporting can bring penalties.

Keep a record of every trade in rupees: date, coin, amount and price paid. Rules change, so confirm the current position on incometax.gov.in or with a chartered accountant. This is education, not tax advice.

Know the pattern

Most frauds follow one script: a friendly stranger or a group invites you, shows fake profits on a screen, asks you to add more, then charges 'fees' or 'tax' to withdraw your money. Guaranteed returns and pressure to act fast are the giveaways.

Use the red-flag checker on the Safety page before you trust any platform, and report fraud at cybercrime.gov.in or on 1930.

Legal status

Crypto is not banned, but it is not legal tender either, and the RBI has repeatedly warned about its risks. As of the sources I checked in 2026, India has no single comprehensive crypto law. In practice it is handled through tax rules and anti-money-laundering rules, so platforms must register with the Financial Intelligence Unit (FIU-IND) and verify customers.

Because the law keeps evolving, check for new announcements from the RBI, SEBI and the Finance Ministry before relying on any article, including this one.

Types of crypto

Bitcoin is the oldest network, used mainly as digital money and a store of value, with a fixed maximum supply of 21 million coins. Ethereum also runs programs called smart contracts, which power many other tokens and apps.

Stablecoins try to hold a steady price, usually one US dollar. They are only as safe as whatever backs them, and several have failed. Thousands of other tokens exist, and most can be created by anyone in minutes.

Using a platform

An exchange is a company where you buy, sell and store crypto. Indian exchanges must register with FIU-IND and verify your identity (KYC). Check the registration, the company name, and whether the app is the official one before you upload any documents.

Coins left on an exchange are held by the exchange, so you depend on it staying solvent and honest. Never move coins to a wallet address a stranger gives you.

Token risks

A rug pull is when a token's creators attract buyers, then take the money and vanish. Warning signs include anonymous teams, no working product, promises of huge gains, heavy promotion by influencers, and a few wallets holding most of the supply.

A token going up fast tells you nothing about its safety. If you cannot explain what it is for in one plain sentence, treat it as a gamble.

Good habits

Write down every purchase, sale, swap and transfer: date, coin, quantity, price in rupees and any fee. Download exchange statements regularly, because platforms can shut down or change their reports.

Good records protect you if the tax department asks questions, and they make filing far less stressful.

Look the company up in the FIU-IND list of registered virtual digital asset service providers on fiuindia.gov.in. Registration is a legal minimum. It does not mean a platform is safe or that your money is protected.

Platforms change. Search the exchange's name with "withdrawals," "restrictions" or "complaint," and look for recent news before you deposit anything.

Turn on two-factor authentication using an app, not SMS. Use a password you use nowhere else. Open the exchange only from its official app or site, and never from a link sent by a stranger.

Do not move money you cannot afford to lose. Do not leave large amounts on an exchange. Save every trade for tax reporting.