SEBI algo trading rules for retail investors, explained

Until 2025, retail algo trading in India lived in a grey area: allowed in practice through broker APIs, undefined in the rules. SEBI's circular of 4 February 2025 and the exchange frameworks that followed (from 1 April 2025) changed that. Here is what the framework says, who it applies to, and what it means if you run — or want to run — an algorithm on your own account.

If you are a retail investor

• Trade through your broker's API. Automation is allowed only via the API of a SEBI-registered broker. The broker is the principal for every order and is responsible for what goes through its API.
• Whitelist a static IP. Your broker needs the fixed IP address of the machine placing orders. One user, one IP (with limited exceptions for a second). This is aimed at stopping people from handing their login to a third party who trades many accounts from one place.
• Stay under the order-rate threshold, or register. Exchanges set an orders-per-second threshold. Below it, no strategy registration is needed. Above it, the algorithm is registered with the exchange through the broker, gets an algo ID, and every order carries that tag.
• Family only. You may use your own algo for immediate family accounts. Sharing or selling a strategy beyond that makes you a provider (below).

If you use a third-party algo provider

This is the part that matters for anyone using a platform like Firefly. The provider must be empanelled with the exchange through your broker — a process similar to Authorised Person registration. The broker vets the provider and carries liability for the provider's compliance. Revenue-sharing between broker and provider is allowed but must not create a conflict of interest.

Two categories:

• White-box. The logic is disclosed and replicable. The algorithm is registered once with the exchange and can be offered to many users.
• Black-box. The logic is proprietary. The provider must hold a Research Analyst registration, file periodic performance reports, and inform the exchange whenever the strategy changes. Orders are tagged with the algo's unique ID.

Fintrens' position: Firefly's strategies are rule-based and each rule's stop, exit and history are published; how Firefly is classified and empanelled with each partner broker is stated on the product pages as that process completes. Ask us directly for the current status before you onboard.

What brokers must do

Provide the API with the controls above, whitelist IPs, tag orders, monitor order rates, vet and empanel providers, and answer to the exchange for algos routed through them. Expect your broker to ask more questions at API onboarding than it used to; that is the framework working.

What the framework rules out

• Marketplaces where individuals sell strategies to other individuals for a fee (outside family).
• "Money management" by sharing your login and password with someone who trades for you. API keys with trading-only permission, on your own account, are the legitimate alternative.
• Unregistered advisory dressed as a signal service.

What it means in practice

For a retail investor running a platform's algorithm on their own account: API key on your own account, static IP set up once (a platform typically runs on a fixed server, so this is their IP, whitelisted against your account with your consent), orders well below the threshold, and a provider that can show you its empanelment. Nothing about the framework changes the economics; it changes who is accountable, which is the point.

Sources

SEBI circular SEBI/HO/MIRSD/MIRSD-PoD/P/CIR/2025/0000013 (4 Feb 2025); NSE and BSE implementation circulars (2025); broker explainers from Zerodha and Angel One. Dates and thresholds change; check the exchange circular in force.

Questions people ask

Fintrens Technologies Pvt Ltd is not a SEBI-registered investment adviser or research analyst. This guide is general information, not advice; trading involves risk of loss.