NISM Series II-A · Chapter 6: SEBI- Role and Regulations
L1 · FoundationSEBI — Role and Regulations
The regulators of the Indian financial system, the SEBI Act and SEBI's powers over exchanges, intermediaries, investigations and the primary market, the insider trading and fraudulent trade practices regulations, the Investor Education and Protection Fund with its seven-year rule, and the three regulations governing R&T agents — the 2025 RTA Regulations with unified registration, fees, net worth and code of conduct, the Intermediaries Regulations, 2008, and the Depositories and Participants Regulations, 2018.
26 min read · Worth 14% of the paper · Written from pages 61–83 of the official NISM workbook · Updated 18 September 2026
What this chapter covers
Chapter 6 carries 14 marks out of 100 — 14% of the paper, the second largest chapter.
Learning Objectives: After studying this chapter, you should know about:
| Learning objective |
|---|
| Securities and Exchange Board of India Act, 1992 and Role of SEBI |
| SEBI Regulations Aimed at Investor Protection — SEBI (Prohibition of Insider Trading) Regulations, 2015 and SEBI (Prohibition of Fraudulent and Unfair Trade Practices relating to Securities Market) Regulations, 2003 |
| Investor Education and Protection Fund |
| SEBI Regulations for Registrars and Transfer Agents |
Why regulation exists
The existence of an efficient and stable financial system is essential to make the securities market vibrant, wide reaching and effective. An efficient capital market ensures that resources are priced and allocated correctly in an economy.
And the aim: the purpose of securities regulation should be to have markets that are fair, transparent and efficient and ensure protection of the investors' interests.
Fair, transparent, efficient — and protective.
The regulators
India has more than one regulator. In India the prime regulators are the Reserve Bank of India (RBI), the Securities and Exchange Board of India (SEBI), the Ministry of Corporate Affairs (MCA) and the Department of Economic Affairs (DEA). Both RBI and SEBI have been set up through Acts of the Parliament which define their role and responsibilities.
SEBI is the apex regulator of the securities market and also responsible for its orderly growth and protection of the investor's interests.
The first sample question tests that — the apex regulator is SEBI.
The RBI, as the manager of public debt, is responsible for the primary issue of government securities, all contracts involving such securities and money market instruments.
Other regulators also exist for particular sectors. The Insurance Regulatory Development Authority of India (IRDAI) and the Pension Fund Regulatory and Development Authority (PFRDA) have been set up with the specific mandate to regulate the functioning and growth of particular industries or markets.
A consolidation in progress: Securities Markets Code Bill, 2025 has been amended with the objective to simplifying securities regulation and strengthening SEBI's powers. Securities Markets Code Bill, 2025 was introduced in Parliament to consolidate SEBI Act, SCRA, and Depositories Act into a single code.
6.1 The SEBI Act, 1992 and SEBI's role
The Securities and Exchange Board of India (SEBI) was established on April 12, 1992 in accordance with the provisions of the Securities and Exchange Board of India Act, 1992.
The preamble of SEBI provides for "The establishment of a Board to protect the interests of investors in securities and to promote the development of and to regulate the securities market."
Three functions in the preamble — protect, develop, regulate.
The objective of SEBI is therefore to facilitate the growth and development of the capital markets in terms of mechanisms, participants and securities and to ensure the protection of the investors in the securities market.
Note that investor protection comes first in the preamble. The fourth sample question asks whether it is a secondary objective. The answer is false.
Powers over stock exchanges
The SEBI Act entrusts the responsibility of inspection, investigation and enforcement of the activities, systems and mechanisms of the institutions and intermediaries of the securities market. SEBI has been assigned the powers of recognizing and regulating the functions of a stock market under the Securities Contracts (Regulation) Act (SCRA).
The requirements for granting recognition to a stock exchange include representation of SEBI on the board of the stock exchange and an undertaking to make and amend their rules only with the prior approval of SEBI. The stock exchanges have to furnish periodic reports to the regulator and submit bye-laws for SEBI's approval. Stock exchanges are required to send monitoring reports daily and for every settlement.
SEBI has set up surveillance mechanisms, both internal and at stock exchanges, to deal with unfair trade practices. Measures such as circuit filters, price bands and caps have led to enhanced safety in the market.
And the surveillance is wide: an integrated surveillance mechanism which tracks the activities of the stock exchanges, the brokers, depository, R&T agents, custodians and clearing agents aim at timely identification of fraudulent activities. SEBI and the central government have over-riding powers under the SCRA in all matters relating to the stock markets.
R&T agents are expressly within that surveillance net.
Powers over intermediaries
Regulating market intermediaries through registration and supervision is a primary function of the securities market regulator. Market intermediaries such as brokers, R&T Agents, depositories, custodians, bankers, merchant bankers, portfolio managers etc. have to get themselves registered under the respective regulations of SEBI.
The regulations specify the net worth, experience, infrastructure and other requirements necessary for an intermediary to be eligible for registration.
And once granted: compliance with the required eligibility provisions, the certificate of registration granted to intermediaries shall be permanent unless surrendered by the intermediary or suspended or cancelled by SEBI.
Permanent, subject to three exits — surrender, suspension, cancellation.
Inspection, investigation and penalty
SEBI makes routine inspections of the intermediaries functioning in the securities markets to ensure compliance with prescribed standards. It also orders investigations into the operations of any of the constituents of the securities market. These cover activities such as:
| Activities SEBI investigates |
|---|
| Price manipulation · artificial volume creation · insider trading · violation of the takeover code or any other regulation · public issue related malpractice or other unfair practices |
How an investigation begins: investigation is based on SEBI's surveillance activities or those of the stock exchange. A preliminary probe is conducted after which, if necessary, a full-fledged investigation is undertaken.
SEBI has the powers to call for information, summon persons for interrogation, examine witnesses and conduct search and seizure. If the investigations so require, SEBI is also empowered to penalize violators. The penalty could take the form of suspension, monetary penalties and cancelation of registration.
The fifth sample question asks whether SEBI can enforce penalties. It can, so the answer is true.
The primary market
SEBI also has the mandate to ensure the streamlined functioning of the primary markets. It has laid out the eligibility, norms and rules to be followed for the public issue of securities in the SEBI (Issue of Capital and Disclosure Requirements) Regulations, 2018.
The regulations specify the eligibility conditions, common conditions for public issues of securities, minimum net worth requirements for an issuer, the minimum public holdings to be maintained and the lock-in on the holdings of the promoters. SEBI has also specified the roles and responsibilities of intermediaries in the primary markets such as the merchant bankers, underwriters, R&T Agents and brokers.
These regulations impose minimum disclosure requirements on the issuer to ensure that investors have all the relevant information before making the investment. The listing agreement that companies enter into with the stock exchange has clauses for continuous and timely flow of relevant information to the investors, corporate governance and investor protection.
And: SEBI has also issued a host of Investor Charters specifying about the roles of the intermediaries, rights and responsibilities of the investors and disclosure of grievance redressals by the intermediaries to facilitate investor awareness. Their aim is simple. Investors should know what to expect.
6.2.1 Prohibition of Insider Trading Regulations, 2015
Insider trading refers to the dealing in securities by persons connected with a company having unpublished price sensitive information that is not available to the public. In simple terms, someone who knows a secret about the company trades on it before others know. Such persons include the directors and employees of the company, associates such as bankers and tax consultants or employees of the stock exchanges etc.
Unpublished price sensitive information is any information relating to a company or its securities, directly or indirectly, that is not generally available to the public and which upon becoming generally available, is likely to materially affect the price of the securities. Two tests, then. Is it secret? And would it move the price once known?
What it includes: financial results, dividends, change in capital structure, changes in key managerial personnel, mergers, de-mergers, acquisitions, de-listings, disposals and expansion of business and such other transactions.
Why it matters: the regulations seek to prevent insider trading which erodes the confidence of the common investors in the securities markets.
What companies must do: SEBI's guidelines require companies to have comprehensive code of conduct to prevent such activity. This includes:
- Appointing a compliance officer to enforce it.
- Ensuring periodic disclosure of holding by all persons considered as insiders.
- Ensuring data confidentiality and adherence to the requirements of the listing agreement on flow of price sensitive information.
Trading plans
As per the regulations, insiders are required to formulate and present their trading plans with Compliance Officer for approval and public disclosure. Thereafter, the insiders can carry out trades as per the approved plan.
The 2024 amendments made four changes:
| Change | Workbook wording |
|---|---|
| Waiting period | The waiting period for insiders to commence trading has been reduced from 6 months to 120 calendar days after the public disclosure of the trading plan |
| Trading period | The requirement to maintain a minimum 12-month trading period has been eliminated, allowing insiders to conduct trades over shorter durations |
| Price limits | Set clear price limits for trades, specifying an upper price limit for buy trades and a lower price limit for sell trades |
| Deviations | Deviations from trading plans are now allowed only in exceptional cases, such as permanent incapacity, bankruptcy, or operation of law |
The structured digital database
The Board of Directors or Head(s) of the organisation of every person required to handle unpublished price sensitive information ensures that a structured digital database is maintained. It is a record of who knew what, and when. It contains:
| Contents | |
|---|---|
| (a) | The nature of unpublished price sensitive information |
| (b) | The names of such persons who have shared the information |
| (c) | The names of such persons with whom information is shared under this regulation along with the Permanent Account Number (PAN) or any other identifier authorized by law where PAN is not available |
Such database are not be outsourced and are maintained internally with adequate internal controls and checks, such as time stamping and audit trails to ensure non tampering of the database.
Not outsourced — kept in house, time stamped, with audit trails.
How long: the structured digital database is preserved for a period of not less than 8 years after completion of the relevant transactions. If SEBI starts an investigation, the clock stops. In the event of receipt of any information from SEBI regarding any investigation or enforcement proceedings, the relevant information in the structured digital database are to be preserved till the completion of such proceedings.
The penalties: monetary penalties, criminal prosecution, prohibiting persons from transacting in the securities markets and declaring transactions as void.
6.2.2 Prohibition of Fraudulent and Unfair Trade Practices Regulations, 2003
An important function of SEBI is to prohibit fraudulent and unfair trade practices relating to securities markets. The SEBI (Prohibition of Fraudulent and Unfair Trade Practices relating to the Securities Market) Regulations, 2003 enable SEBI to investigate into cases of market manipulation and fraudulent and unfair trade practices.
The definition: Regulation 2(1)(c) defines fraud as inclusive of any act, expression, omission or concealment committed to induce another person or his agent to deal in securities.
And a crucial qualification: there may or may not be wrongful gain or avoidance of any loss. However, that is inconsequential in determining if fraud has been committed.
Gain is not an ingredient of the offence. Inducement is.
To prevent fraud, the regulations specify prohibition of certain dealings in securities and prohibition of manipulative, fraudulent and unfair trade practices. The Regulations also specify investigation powers of SEBI and applicable penalties in case of wrong doings.
6.3 The Investor Education and Protection Fund
The IEPF is a fund created by the Ministry of Corporate Affairs for promoting investors' awareness and protecting their interests. A separate body runs it. For administration of Investor Education and Protection Fund, Government of India has on 7th September, 2016 established Investor Education and Protection Fund Authority.
This fund is utilized for refund of unclaimed and unpaid amounts, promotion of investors' awareness and protection of the interests of investors etc. in accordance with provisions of section 125(3) of the Companies Act, 2013.
Note the ministry — MCA, not SEBI.
Where the money comes from: the fund is created out of contributions from the central government, state government, companies and institutions. Unclaimed investor money also flows in:
| Also forms part of the fund |
|---|
| Unpaid / unclaimed dividends, matured debentures and deposits, application and call money due for refund and interest on them |
The condition is time. This money goes to the fund only provided such money has remained unpaid and unclaimed for a period of 7 years from the date they were due for payment.
Seven years — which the third sample question tests.
What it does: the fund conducts investor education programs, media campaigns and seminars. It also funds investor education projects of institutions and organizations... Multilingual Information, Education and Communication booklets and films have also been developed for creating awareness.
The 2016 Rules
Ministry of Corporate Affairs (MCA) vide Gazette Notification published the Investor Education and Protection Fund Authority (Accounting, Audit, Transfer and Refund) Rules, 2016.
What is credited to the Fund:
- All the resultant benefits arising out of shares held by the IEPF Authority.
- All grants, fees and charges received by the IEPF Authority under these rules.
- All sums received by the Authority from such other sources as may be decided upon by the Central Government.
- All income earned by the Authority in any year.
And interest travels with principal: in case of term deposits and debentures of companies, due unpaid or unclaimed interest shall be transferred to the Fund along with the transfer of the matured amount of such term deposits and debentures.
Accounts and audit: the Authority shall maintain proper accounts and other relevant records and prepare an annual statement of accounts in specified format. Someone outside must check them. The accounts of the IEPF Authority shall be audited annually by the Internal Audit Party of the Office of Chief Controller of Accounts and Comptroller and Auditor-General of India.
The company's obligations
The rule is long, so here it is in three parts.
| Part | Workbook wording |
|---|---|
| When | Every company shall within a period of 60 days after the holding of Annual General Meeting (AGM) or the date on which it should have been held as per the provisions of section 96 of the Companies Act, whichever is earlier and every year thereafter till completion of the 7 years period |
| What | Identify the unclaimed amounts... separately furnish and upload on its own website and also on website of IEPF Authority... a statement or information of unclaimed and unpaid amounts separately for each of the previous 7 financial years |
| How | Through Form No. IEPF-2 |
Sixty days after the AGM, or the date it should have been held, whichever is earlier.
The statement contains:
- The names and last known addresses of the persons entitled to receive the sum.
- The nature of amount.
- The amount to which each person is entitled.
- The due date for transfer into the Investor Education and Protection Fund.
- Such other information as may be considered necessary.
Transfer of shares: the shares shall be credited to DEMAT Account of the IEPF within a period of 30 days of such shares becoming due to be transferred to the Fund.
And the mechanism used: company shall follow the procedure for transmission of shares instead of transfer of shares. Transfer of shares by the companies to IEPF shall be deemed to be transmission of shares.
Transmission, not transfer. This distinction matters for the R&T agent's procedures.
For physical shares, there are three steps:
- The Company Secretary or the person authorised by the Board shall make an application, on behalf of the concerned shareholder, to the company, for issue of a new share certificate. It shall state "Issued in lieu of share certificate No..... for the purpose of transfer to IEPF".
- The particulars go in Form No. SH-1.
- Then the company shall inform the depository by way of corporate action to convert the share certificates into DEMAT form and transfer in favour of the IEPF Authority.
For dematerialised shares: the Company shall inform the depository by way of corporate action... and on receipt of such intimation, the depository shall effect the transfer of shares in favour of DEMAT account of the IEPF Authority.
Claiming back
Money sent to the IEPF is not lost. The owner can claim it back. This covers amounts such as:
| What can be claimed back |
|---|
| Shares, unclaimed dividend, matured deposits, matured debentures, application money due for refund, or interest thereon, sale proceeds of fractional shares, redemption proceeds of preference shares, etc. |
The person may claim the shares to the Authority by submitting an application in Form IEPF-5 online along with a requisite fee.
The Nodal Officer: every company which is required to credit amounts or shares to the Fund... shall nominate a Nodal Officer. He shall either be a Director or Chief Financial Officer or Company Secretary of the company. His job is verification of claims and coordination with Investor Education and Protection Fund Authority.
His details must be published, and any change in the Nodal Officer or his details shall be communicated to the IEPF Authority through Form No. IEPF-2 within 7 days of such change along with board resolution thereof.
Nodal/Deputy Nodal Officers of companies are required to issue Entitlement Letters to claimants with all details required to file Form IEPF-5.
Verification is the company's job, not the Authority's. The company shall be responsible for verifying the genuineness and entitlement of the claimant. It does this through Aadhar Card, PAN Card, Passport, any other Government ID proof, matching of signature and photo etc. The company shall verify such documents as may be required and retain the originals submitted by the claimant... The company shall submit e-verification report to the IEPF Authority.
And a priority window: IEPF Authority has introduced a Special Window Facility for claimants who are senior citizens of age 75 years and above. The claims by such claimant shall be prioritised after receipt of e-verification report from the companies.
Fraudulent claims: any fraudulent claim by the claimant shall be deemed to be fraud and the claimant shall be liable accordingly.
6.4 The three regulations governing R&T agents
Registrar and Transfer (R&T) Agents are identified as 'intermediaries' by the SEBI Act and are regulated by SEBI. The primary regulations are:
1. SEBI (Registrars to an Issue and Share Transfer Agents) Regulations, 1993 2. SEBI (Intermediaries) Regulations, 2008 3. SEBI (Depositories and Participants) Regulations, 2018
6.4.1 The RTA Regulations, 2025
The SEBI (Registrars to an Issue and Transfer Agents) Regulations came into effect in 2025. These regulations govern the registration, capital adequacy, governance, and operational obligations that a Registrar to an Issue and Share Transfer Agent (RTA) must abide by.
The big change: under the 2025 framework, the historical classification of RTAs into separate categories has been replaced with a Unified Registration system. One certificate now covers two roles:
| Role | What it does |
|---|---|
| Registrar to an Issue | Managing activities such as application processing and allotment in public offerings |
| Share Transfer Agent | Responsible for maintaining the register of security holders and facilitating ongoing corporate actions for listed entities |
One certificate, two roles.
The definition: "Registrar to an issue and share transfer agent" means a body corporate or a division or unit of such body corporate, appointed to carry out the following activities-
| Activity | |
|---|---|
| (i) | For acting as an intermediary in connection with initial public offers, follow-on public offers, open offers, buy backs of securities, delisting offers, takeovers and such other issue or corporate action related activity...; |
| (ii) | For maintaining the records of holders of securities issued by such body corporate and to deal with all matters connected with transactions in such securities." |
Registration, fees and net worth
| Item | Requirement |
|---|---|
| Registration compulsory | No person shall act as a Registrar to an Issue and Share Transfer Agent unless it has obtained a certificate of registration from SEBI |
| Application | In Form A of Schedule I with a non-refundable application fee of twenty thousand rupees |
| Registration fee | Six lakh rupees, within fifteen days from the date of receipt of information from SEBI |
| Renewal fee | Two lakhs and seventy thousand rupees, every three years from the sixth year, payable one month before the expiry of the block |
| Net worth | Not less than fifty lakh rupees, maintained at all times during the period of validity of the certificate |
| Validity | Valid unless it is suspended or cancelled by SEBI itself |
| Existing RTAs | Deemed registered, subject to payment of fee two lakhs and seventy thousand rupees |
The conditions attached to registration:
| Condition |
|---|
| Abide by the Act and regulations |
| Obtain prior approval of SEBI in case of change in control |
| Enter into a legally binding agreement with the body corporate... stating therein the allocation of duties and responsibilities |
| Pay the fees |
| Maintain net worth requirements of fifty lakh rupees and above at all times |
| Take adequate steps for redressal of grievances of the investors within twenty-one calendar days of the date of the receipt of the complaint |
| Immediately intimate SEBI in writing, if any information or particulars previously submitted to SEBI are found to be false or misleading |
| Provide services to listed or proposed to be listed companies on a stock exchange recognised by SEBI |
Unlisted company services must be walled off. Three rules apply:
- The services provided to unlisted companies shall be separate and segregated from all other services, through a separate business unit.
- Such services provided to unlisted companies shall not come under regulatory jurisdiction of SEBI.
- Every registrar to an issue and share transfer agent shall make an appropriate disclaimer to that extent to the unlisted company.
Existing RTAs get eighteen months: those serving unlisted companies before the 2025 Regulations shall segregate such activities into a separate business unit within a period of eighteen months from the date of notification.
On rejection: SEBI may reject the application after giving the applicant a reasonable opportunity of being heard. The decision is communicated within thirty days. The applicant may then apply within a period of thirty days from the date of receipt of such intimation, to SEBI for reconsideration.
On fees: SEBI may on sufficient cause being shown permit the registrar... to pay such fees at any time before the expiry of six months from the date on which such fees becomes due. If the fee is still not paid, SEBI may suspend the certificate, whereupon the registrar... shall cease to carry on any of his activity.
Obligations and responsibilities
Abide by the code of conduct.
Not act as R&T Agent for an associate company.
Maintain proper books of accounts and records for a minimum period of 8 years.
Appoint a Compliance Officer who shall ensure compliance with the regulations. He shall report immediately and independently to SEBI any non-compliance observed by him. Compliance officer shall monitor the internal controls and place periodic reports before the Audit Committee or an equivalent body.
All claims/disputes arising between RTA and its clients shall be submitted to a dispute resolution mechanism that includes mediation, conciliation and arbitration.
RTAs shall redress the investor grievances within 21 calendar days from the date of receipt of the grievance.
Eight years of records; twenty-one calendar days for grievances; no associate company work.
The Code of Conduct — Schedule III
Thirty-one clauses. Among the most examinable:
| Clause |
|---|
| Maintain high standards of integrity |
| Fulfill its obligations in a prompt, ethical and professional manner |
| Exercise due diligence, ensure proper care and exercise independent professional judgment |
| Exercise adequate care, caution and due diligence before dematerialisation of securities by confirming and verifying that the securities to be dematerialized have been granted listing permission by the stock exchange/s |
| Ensure that inquiries from investors are adequately dealt with, grievances of investors are redressed without any delay, and transfers, demat and remat confirmations, corporate benefits and allotments happen within the time specified under any law |
Not reject the dematerialisation / rematerialisation requests on flimsy grounds. Such request could be rejected only on valid and proper grounds and supported by relevant documents.
| Clause |
|---|
| Avoid conflict of interest and make adequate disclosure of its interest |
| Not indulge in any unfair competition |
| Not divulge to other clients, press or any other person any confidential information about its clients... except with the approval / authorisation of the clients or when it is required to disclose the information under any law |
| Not discriminate amongst its clients, save and except on ethical and commercial considerations |
| Comply with the award of the Ombudsman passed under SEBI (Ombudsman) Regulations, 2003 |
| Co-operate with SEBI as and when required |
| Ensure that continuity in data and record keeping is maintained, with up-to-date back up for electronic records |
On investment advice: an RTA or its employees shall not render, directly or indirectly any investment advice about any security in the publicly accessible media, whether real-time or non-real-time, unless a disclosure of its long or short position in the said security has been made. Put simply, it must first say whether it holds or has sold the security.
On termination: records go back quickly. The RTA must hand-over all the records/ data and all related documents... within one month from the date of termination of agreement with the respective clients or within one month from the date of expiry/cancellation of certificate of registration... whichever is earlier.
And the final prohibition: an RTA shall not, in respect of any dealings in securities, be party to or instrumental for -
| Prohibited | |
|---|---|
| (a) | Creation of false market; |
| (b) | Price rigging or manipulation; |
| (c) | Passing of unpublished price sensitive information. |
Inspection, cancellation and the sandbox
SEBI may appoint inspecting authority to inspect the operations of an agent either on receiving a complaint from an investor or otherwise... Further, SEBI may appoint a qualified auditor to investigate into the books of accounts of RTAs.
SEBI may suspend or even cancel the registration granted to an R&T Agent in case of non-compliance... But it must be fair first. Such a penalty will be imposed only after holding an enquiry into the facts of the case and issuing a show cause notice to the R&T Agent.
The regulatory sandbox is a safe space to try new ideas. It is a live testing environment where new products, processes, services, business models, etc. may be deployed on a limited set of eligible customers for a specified period of time. It allows exemption for a period not exceeding 12 months, subject to satisfying specified eligibility conditions.
The 2018 strengthening circular
SEBI has issued a circular with the objective of raising industry standards for RTA, Issuer Companies and Banker to an Issue. It deals with three areas:
- Payment of dividend, interest and redemption.
- Transfer, transmission, correction of errors.
- Compulsory internal audit of RTAs.
All the records and documents, related to the above areas, are required to be maintained for period not less than 8 years after completion of the relevant transactions.
On dividends:
| Item | Requirement |
|---|---|
| Master file contents | Company name, folio number, client id, name of first securities holder, Dividend/interest/redemption payment date & amount, Payee details, Bank details etc. |
| Sharing | Through a secured process |
| Unpaid instruments | Beyond the validity period... needs to be cancelled, with money credited back immediately to the issuer company |
| Bank reconciliation | Provide reconciliation of the Paid and Unpaid details quarterly till transfer of funds to Investor Education and Protection Fund, kept for a period of eight years |
On transfers and errors:
A folio once allotted to a person should never be re-allotted to any other person under any circumstances.
RTAs shall follow the "Maker-Checker" concept in all of its activities to ensure accuracy of data.
All updation in the folio records shall be enabled only through front end modules. No back-end entry/ updation /correction should be permitted.
For any correction of errors, the RTAs must take prior approval from the company similar to cases of transfers and transmissions.
If the security holder is holding physical securities... the Bonus securities against these folios shall mandatorily be issued in physical mode only.
Enhanced due diligence is required where dividend, interest and redemption remains unpaid for at least three years or PAN and bank account details are not available in the folio, with a list shared at the end of every quarter.
On internal audit:
| Item | Requirement |
|---|---|
| Frequency and auditor | Annual basis by independent qualified Chartered Accountants or Company Secretaries or Cost and Management Accountants and Certified Information Systems Auditor (CISA) who do not have any conflict of interest |
| Experience | A minimum experience of three years in the financial sector |
| Term | For a maximum term of five years, with a cooling-off period of two years |
| Report | To the issuer company within three months from the end of the financial year |
| Review | The Governing Council considers it |
| Action Taken Report | Within next one month |
Qualified RTAs
Qualified RTAs are market intermediaries who service more than 2 crore folios. They are also referred to as the Critical Infrastructure Institutions (CII).
They must comply with enhanced monitoring. This works through adoption and implementation of internal policy framework and periodic reporting on these areas:
| Reporting areas |
|---|
| Key risk areas · data security measures · business continuity · governance structures · measures for enhanced investor services, service standards and grievance redressal · insurance against risks |
6.4.2 SEBI (Intermediaries) Regulations, 2008
The SEBI (Intermediaries) Regulations, 2008 consolidates the common requirements which will apply to all intermediaries. These are:
| Common requirements |
|---|
| Grant of registration, general obligations, common code of conduct, common procedure for action in case of default and miscellaneous provisions |
Applications may be made through the respective stock exchange, clearing corporation or depository participants if the intermediary is to be associated with these institutions. These institutions will examine the eligibility and other criterion before forwarding the application to SEBI.
The application will be considered based on factors such as:
| Factor | Detail |
|---|---|
| Eligibility criteria | — |
| Associates | Activities in the securities market of persons associated with the applicant |
| 'Fit and Proper' | Integrity, honesty, ethical behaviour, reputation, fairness and character of the person |
| No disqualification | Not incurring any disqualifications, specified by SEBI, such as criminal complaint filed, declared insolvent, categorised as a wilful defaulter etc. |
The registration granted to intermediaries shall be permanent unless surrendered by the intermediary or suspended or cancelled.
Intermediaries must:
- Appoint a compliance officer who will give a report to the regulator on adherence to all obligations, responsibilities and eligibility criteria.
- Redress investor grievance within 45 days from receipt of such complaint and to maintain records of the same.
- Make complete disclosure of interest before making any recommendation to invest in any security to a client.
- Abide by the specified code of conduct.
How the two sets fit together. While common requirements will be governed by the SEBI (Intermediaries) Regulations, the intermediary-specific requirements will continue to be as per the relevant regulations applicable to individual intermediaries.
6.4.3 SEBI (Depositories and Participants) Regulations, 2018
R&T Agents are a category of intermediaries who are allowed to be participants of a Depository under the SEBI (Depositories and Participants) Regulations, 2018.
The certificate shall be granted if the Depository concerned and SEBI are satisfied as to the eligibility and competence of the R&T Agent.
The participant undertakes to pay the fees, maintain records, address investor complaints within the specified time and comply with all requirements. It must also abide by a code of conduct requiring them to:
Do all activities in such a way that investors' interests are protected. Redress investor complaints within 21 calendar days of the date of receipt of any complaint. Co-operate with the regulator in case of any enquiry or inspection. Have mechanisms in place, such as the maker-checker concept, to ensure there are checks and balances in all the transactions. Maintain records and data carefully. Have good corporate governance policies in place.
And the participant shall agree to:
Enter into agreements with the beneficiary owners according to the bye-laws of the Depository. Separate accounts shall be opened for each beneficial owner and the accounts shall be managed separately. They must have continuous electronic connectivity with the Depository. The participants must have good accounting systems and procedures in place. They must maintain records of all transactions between the investors and the participants- dematerialisation, rematerialisation, records of instructions and approvals. Integrity of data should be ensured and it should be protected from damage, loss or misuse. Records should be maintained depository-wise if the participant is associated with more than one Depository.
The sample questions confirm five points:
- The apex regulator is SEBI.
- Insider trading is controlled by regulations prescribed by SEBI.
- The IEPF is funded by unpaid dividends unclaimed for at least seven years.
- It is false that investor protection is a secondary objective of SEBI.
- It is true that SEBI has the power to enforce penalties.
Think of it like this
Investor protection is SEBI's first purpose, not an afterthought
Read the preamble and the order of words settles the question.
The preamble of SEBI provides for "The establishment of a Board to protect the interests of investors in securities and to promote the development of and to regulate the securities market."
Protect comes first, then develop, then regulate — which is why the fourth sample question, asking whether investor protection is a secondary objective, is answered false.
The objective is restated in the same breath: the objective of SEBI is therefore to facilitate the growth and development of the capital markets in terms of mechanisms, participants and securities and to ensure the protection of the investors in the securities market.
And in its description: SEBI is the apex regulator of the securities market and also responsible for its orderly growth and protection of the investor's interests.
Nearly everything in this chapter follows from that priority. The two regulations at 6.2 are described as SEBI Regulations specifically aimed at Investor Protection. The ICDR Regulations impose minimum disclosure requirements on the issuer to ensure that investors have all the relevant information before making the investment. The listing agreement carries clauses for continuous and timely flow of relevant information to the investors, corporate governance and investor protection. And SEBI has issued a host of Investor Charters specifying about the roles of the intermediaries, rights and responsibilities of the investors and disclosure of grievance redressals.
Even the RTA code of conduct is built on it — grievances redressed within twenty-one calendar days, demat requests not rejected on flimsy grounds, and depository participants required to do all activities in such a way that investors' interests are protected.
SEBI was established on April 12, 1992 in accordance with the provisions of the Securities and Exchange Board of India Act, 1992.
And the wider purpose of regulation is stated at the outset: the purpose of securities regulation should be to have markets that are fair, transparent and efficient and ensure protection of the investors' interests.
Seven years to the Fund, thirty days for the shares, and Form IEPF-5 to get them back
Money nobody claims does not stay with the company forever. The IEPF rules set out exactly when it moves and how it comes back.
The trigger is seven years. Unpaid or unclaimed dividends, matured debentures and deposits, application and call money due for refund and interest on them shall form part of the fund, provided such money has remained unpaid and unclaimed for a period of 7 years from the date they were due for payment.
The third sample question tests that figure.
The company must keep counting each year. Within 60 days after the holding of Annual General Meeting (AGM) or the date on which it should have been held... whichever is earlier, and yearly till completion of the 7 years period, it must identify unclaimed amounts and upload a statement separately for each of the previous 7 financial years through Form No. IEPF-2 — on its own website and also on website of IEPF Authority.
Then the shares follow: the shares shall be credited to DEMAT Account of the IEPF within a period of 30 days of such shares becoming due to be transferred to the Fund.
And note the legal characterisation: transfer of shares by the companies to IEPF shall be deemed to be transmission of shares and the procedure to be followed for transmission of shares shall be followed by the companies.
Transmission, not transfer — which changes the paperwork the R&T agent must apply.
Physical shares take a detour. A new certificate is issued stating "Issued in lieu of share certificate No..... for the purpose of transfer to IEPF", recorded in Form No. SH-1, and then converted to demat by way of corporate action.
Getting it back is possible at any time. Any person, whose shares, unclaimed dividend, matured deposits, matured debentures, application money due for refund, or interest thereon... has been transferred to the Fund, may claim the shares to the Authority by submitting an application in Form IEPF-5 online along with a requisite fee.
The company verifies, not the Authority: it shall be responsible for verifying the genuineness and entitlement of the claimant... through Aadhar Card, PAN Card, Passport, any other Government ID proof, matching of signature and photo, and must submit e-verification report to the IEPF Authority.
**A Nodal Officer, who shall either be a Director or Chief Financial Officer or Company Secretary, coordinates it — with changes notified within 7 days.
And senior citizens jump the queue: a Special Window Facility for claimants who are senior citizens of age 75 years and above.
One certificate for two jobs — the 2025 unified registration
An R&T agent does two quite different things. Since 2025 a single registration covers both.
Under the 2025 framework, the historical classification of RTAs into separate categories has been replaced with a Unified Registration system. This single certificate of registration authorizes an applicant to act as both a Registrar to an Issue, managing activities such as application processing and allotment in public offerings, and a Share Transfer Agent, responsible for maintaining the register of security holders and facilitating ongoing corporate actions for listed entities.
The definition splits the same way. Limb (i) covers acting as intermediary in connection with initial public offers, follow-on public offers, open offers, buy backs of securities, delisting offers, takeovers; limb (ii) covers maintaining the records of holders of securities... and to deal with all matters connected with transactions in such securities.
Issue work and register work — one licence.
The money involved: a non-refundable application fee of twenty thousand rupees; a registration fee of six lakh rupees, within fifteen days from the date of receipt of information from SEBI; then fee of two lakhs and seventy thousand rupees, every three years from the sixth year, paid one month before the expiry of the block.
And a standing requirement: the net worth requirement shall not be less than fifty lakh rupees, to be maintained at all times during the period of validity of the certificate.
The certificate does not expire on its own — it shall be valid unless it is suspended or cancelled by SEBI itself — but where a registrar to an issue and share transfer agent fails to pay the fees... SEBI may suspend the certificate, whereupon the registrar... shall cease to carry on any of his activity.
One boundary is drawn firmly. An RTA shall provide services to listed or proposed to be listed companies; where it also serves unlisted companies, those services shall be separate and segregated from all other services, through a separate business unit, shall not come under regulatory jurisdiction of SEBI, and require an appropriate disclaimer... to the unlisted company.
Existing firms get a period of eighteen months from the date of notification to build that wall.
And a change of ownership is not free: the RTA shall obtain prior approval of SEBI in case of change in control.
Maker-checker, front-end only, and a folio that is never reused
The 2018 circular reads like an operations manual, and three of its rules explain most of an R&T agent's daily discipline.
A folio once allotted to a person should never be re-allotted to any other person under any circumstances.
Never, under any circumstances — because a reused folio number would attach one investor's history to another's holdings.
RTAs shall follow the "Maker-Checker" concept in all of its activities to ensure accuracy of data and to put in place a mechanism to check unauthorised transaction and record is maintained.
Two people, two roles — one enters, another verifies. The same requirement binds depository participants, who must have mechanisms in place, such as the maker-checker concept, to ensure there are checks and balances in all the transactions.
RTAs and Issuer Companies shall ensure that all updation in the folio records shall be enabled only through front end modules. No back-end entry/ updation /correction should be permitted.
No back-end access at all — every change must pass through the application, where it can be logged and checked.
And corrections are not the agent's to make alone: for any correction of errors, the RTAs must take prior approval from the company similar to cases of transfers and transmissions.
Two situations demand extra care: enhanced due diligence where (i) dividend, interest and redemption remains unpaid for at least three years; (ii) PAN and bank account details are not available in the folio — with a list of such folios shared with the issuer at the end of every quarter of a financial year.
Those are precisely the folios heading towards the IEPF.
One rule of form: where the holder has physical securities, the Bonus securities against these folios shall mandatorily be issued in physical mode only.
And everything is kept: all the records and documents, related to the above areas, are required to be maintained for period not less than 8 years after completion of the relevant transactions — the same eight years the RTA Regulations require for proper books of accounts and records.
An annual internal audit checks the whole of it, by professionals with a minimum experience of three years in the financial sector, appointed for a maximum term of five years, with a cooling-off period of two years.
Key terms in this chapter
- Apex regulator
- SEBI's position in the securities market, responsible for its orderly growth and protection of investors' interests — alongside RBI as manager of public debt, the Ministry of Corporate Affairs, the Department of Economic Affairs, and IRDAI and PFRDA for their own industries.
- Form IEPF-2 and Form IEPF-5
- IEPF-2 is the company's statement of unclaimed and unpaid amounts for each of the previous seven financial years, filed within 60 days of the AGM or the date it should have been held, and also used to notify a change of Nodal Officer within 7 days. IEPF-5 is the claimant's online application to recover shares or amounts from the Fund.
- Fraud under the FUTP Regulations
- Defined by Regulation 2(1)(c) as inclusive of any act, expression, omission or concealment committed to induce another person or his agent to deal in securities. Whether or not there was wrongful gain or avoidance of loss is inconsequential in determining if fraud has been committed.
- Front-end only updation
- The rule that all updation in folio records must be enabled only through front end modules, with no back-end entry, updation or correction permitted, and any correction of errors requiring prior approval from the company as with transfers and transmissions.
- Integrated surveillance mechanism
- The mechanism tracking the activities of stock exchanges, brokers, depositories, R&T agents, custodians and clearing agents, aimed at timely identification of fraudulent activities — supported by measures such as circuit filters, price bands and caps.
- Internal audit of RTAs
- An annual audit by independent Chartered Accountants, Company Secretaries, Cost and Management Accountants or a Certified Information Systems Auditor with at least three years' financial sector experience, appointed for a maximum of five years with a two-year cooling-off, reporting to the issuer within three months of financial year end, with an Action Taken Report within a further month.
- Investor Education and Protection Fund
- A fund created by the Ministry of Corporate Affairs under section 125(3) of the Companies Act, 2013, administered by an Authority established on 7 September 2016, used for refund of unclaimed and unpaid amounts and for promoting investor awareness and protection.
- Maker-Checker
- The control requiring one person to record a transaction and another to verify it, mandated for RTAs in all activities to ensure accuracy of data and to check unauthorised transactions — and equally required of depository participants as a check and balance in all transactions.
- Nodal Officer
- A Director, Chief Financial Officer or Company Secretary nominated by every company required to credit amounts or shares to the IEPF, for verification of claims and coordination with the Authority. The details must be displayed on the company website and any change notified within seven days with the board resolution.
- Permanent registration
- The rule that a certificate of registration granted to an intermediary is permanent unless surrendered by the intermediary or suspended or cancelled by SEBI — so no periodic renewal of the certificate itself is required.
- Qualified RTA
- A market intermediary servicing more than 2 crore folios, also referred to as a Critical Infrastructure Institution, subject to enhanced monitoring through an internal policy framework and periodic reporting on key risk areas, data security, business continuity, governance, investor services and insurance against risks.
- Regulatory Sandbox
- A live testing environment in which new products, processes, services or business models may be deployed on a limited set of eligible customers for a specified period, for which SEBI may exempt persons from the RTA Regulations for a period not exceeding twelve months on specified conditions.
- RTA fees and net worth
- A non-refundable application fee of twenty thousand rupees; a registration fee of six lakh rupees within fifteen days of SEBI's intimation; two lakhs and seventy thousand rupees every three years from the sixth year, paid one month before the block expires; and net worth of not less than fifty lakh rupees maintained at all times.
- SEBI Act, 1992
- The statute under which SEBI was established on 12 April 1992, its preamble providing for the establishment of a Board to protect the interests of investors in securities and to promote the development of and to regulate the securities market.
- Segregation of unlisted company services
- An RTA serving unlisted companies must keep those services separate through a distinct business unit; such services fall outside SEBI's regulatory jurisdiction and require an appropriate disclaimer to the unlisted company. Existing RTAs have eighteen months from notification to segregate.
- Structured digital database
- The internal database of unpublished price sensitive information recording its nature, who shared it and with whom, with PAN or other identifier. It may not be outsourced, must have time stamping and audit trails, and is preserved for not less than eight years after the relevant transactions.
- The seven-year rule
- Unpaid or unclaimed dividends, matured debentures and deposits, and application and call money due for refund with interest form part of the IEPF where they have remained unpaid and unclaimed for seven years from the date they were due for payment.
- Trading plan
- The plan an insider must formulate and present to the Compliance Officer for approval and public disclosure before trading. Since the 2024 amendments the waiting period is 120 calendar days, the minimum 12-month trading period is removed, price limits must be set, and deviation is allowed only for permanent incapacity, bankruptcy or operation of law.
- Unified Registration
- The 2025 framework replacing the historical classification of RTAs into separate categories with a single certificate authorising an applicant to act both as Registrar to an Issue — application processing and allotment in public offerings — and as Share Transfer Agent maintaining the register of security holders.
- Unpublished price sensitive information
- Information relating to a company or its securities, not generally available to the public, which upon becoming generally available is likely to materially affect the price of the securities — including financial results, dividends, changes in capital structure or key managerial personnel, mergers, de-mergers, acquisitions, de-listings, disposals and business expansion.
Check you have understood it
The L1 test for this chapter has 6 questions. Score 60% to unlock L2 Application (worked numericals and scenarios) and then L3 Exam-Ready (NISM-style traps, timed, with this paper's real marking). Tests, the higher levels and full mock exams need a free account so we can track your progress.
Create a free accountOriginal explanatory writing based on the official NISM workbook for Series II-A, which is published and copyrighted by NISM. Check figures against the current edition at nism.ac.in.