Is retail algo trading legal in India?

Yes. SEBI's framework explicitly permits retail algo trading through broker APIs, subject to broker oversight, algo registration thresholds and secure API access.

Does SEBI itself mandate a static IP?

SEBI mandates that brokers ensure secure, attributable API access. Brokers implement this via 2FA and IP whitelisting — so in practice, a static IP is required by your broker to satisfy SEBI's framework.

SEBI Algo Trading Rules 2026: Static IP Requirements Explained

SEBI algo trading rules for retail API users — static IP whitelisting, registered algo traders threshold, and how rules link to SEBI algo trading regulations in 2026.

The regulatory backdrop

For years, retail algo trading in India lived in a grey zone: brokers offered APIs, traders automated strategies, and nobody formally supervised the algos. SEBI's framework for retail participation in algorithmic trading (circulated in February 2025, with exchange implementation standards following) changed that. The goal is simple — every automated order must be identifiable, auditable and attributable.

Key provisions that affect API traders

Broker responsibility: brokers are principals for all API orders and must register/approve algos that exceed specified order-per-second thresholds.
Order tagging: algo orders carry identifiers so exchanges can distinguish automated flow from manual clicks.
API hygiene: brokers must implement two-factor authentication and secure, attributable API access — which in practice means static IP whitelisting and OAuth-style tokens.
Vendor registration: third-party algo providers must be empanelled with exchanges; unregulated "guaranteed return" algo sellers are squeezed out.

Where static IPs fit in

The framework requires brokers to be able to attribute every automated order to a known origin. The cleanest technical implementation — and the one brokers have adopted — is IP whitelisting: you register the static IP your algo trades from, and the broker rejects API traffic from anywhere else. Several brokers have already made a whitelisted static IP mandatory for API access; the rest are moving the same direction.

What compliant retail setup looks like

A SEBI-registered broker account with API access enabled and 2FA (TOTP) configured.
A dedicated static Indian IP registered in the broker's portal — never a shared VPN or rotating proxy.
Your strategy running on a machine (home PC, office server or VPS) that routes broker traffic through that IP.
Order logs retained so you can answer any query about your own flow.

What to avoid

Shared datacenter IPs used by many traders — if another user misbehaves, your access suffers.
Foreign VPS IPs — geo-flags and unnecessary latency to Indian exchanges.
Unregistered algo-selling platforms that execute on your behalf without exchange empanelment.

Algo-IP provisions KYC-verified, dedicated Indian static IPs specifically for this compliance environment — one trader, one IP, full audit trail.

For sebi registered algo traders, sebi compliant algo trading checklists and April 2026 deadlines, read our SEBI compliance guide (/blog/sebi-registered-algo-traders-static-ip-compliance) and deadline post (/blog/sebi-april-2026-static-ip-deadline-algo-traders).