AI Trading Bots in India: How to Spot the Scams

If a trading bot promises a fixed monthly return, asks for your broker login or OTP, or wants money sent to someone’s personal UPI ID, it’s a scam. You don’t need to evaluate the “AI” at all. A legitimate bot runs through your broker’s official API and leaves your money in your own trading account. It promises nothing.

SEBI has warned about these schemes repeatedly, and I link the actual press releases below. Keep SEBI’s base rate in mind too: nearly 91% of individual traders in equity derivatives made a net loss in FY2025, according to SEBI’s July 2025 study summary. A bot doesn’t change that maths. It just executes faster.

Last updated: November 2026.

Nine red flags, and the warnings behind them

1. A fixed or “assured” monthly return

Run the numbers. 10% a month compounds to about 214% a year (1.10 to the power 12 is roughly 3.14). 5% a month is about 80% a year; even 3% is about 43%. Anyone who could reliably do the smallest of those would be running one of the best-performing pools of money anywhere, not selling access for ₹4,999 a month.

There’s a quieter version of this trap that isn’t fraud at all. A strategy that sells far out-of-the-money options can post a smooth 3 or 4% month after month, right up until one large move takes back a year of gains. A track record with no losing months is a warning, not a credential.

Return claims are also a regulatory line. Since August 2024, SEBI’s regulations bar brokers and other regulated entities from associating with anyone who gives unregistered advice or “makes any claim, of returns or performance” about securities without SEBI’s permission (SEBI circular, 22 October 2024). So a bot seller advertising returns is telling you something about who you’re dealing with.

2. Someone else will trade your account for a share of the profit

In February 2026 SEBI warned about “account handling” services: people who pose as fund managers or PMS experts, set a minimum capital you must keep in your own account, take your login credentials, place trades themselves, and charge a percentage of any profit. SEBI’s description is blunt: the loss “is not shared by the fraudster”. These handlers aren’t registered and don’t fall under SEBI’s purview, so you have no regulator to complain to. Notice the asymmetry: they share your upside and you carry every rupee of downside, which gives even an honest handler every incentive to take big risks with your money.

3. They ask for your password, PIN, OTP or TOTP key

Your password, PIN and OTPs should never go to a person, whether they call themselves a mentor, a group admin or “support”. A well-built tool doesn’t need them either: you log in on your broker’s own page and the tool receives a session token, which under the retail algo rules that fully applied from 1 April 2026 expires daily and needs a fresh two-factor login. Be especially careful with your TOTP setup key (the QR code you scanned into your authenticator app). Whoever holds it can generate your login codes indefinitely.

4. “SEBI-approved bot”

SEBI does not approve trading software. It registers firms and people, such as brokers and research analysts. Under the April 2026 algo framework, your broker is responsible for algos running on its API, strategies above 10 orders per second must be registered with the exchange and get an algo ID, and third-party platforms must be empanelled with exchanges and integrated by brokers. None of that is a stamp on an app’s return claims.

If someone says their bot is “SEBI-approved”, ask which broker it runs through, then check that broker’s own website. If they quote a registration number, look it up on SEBI’s list of registered intermediaries. Our explainer on whether algo trading is legal in India covers the rules in more detail.

5. An invitation-only WhatsApp or Telegram group

SEBI’s October 2026 caution describes the pattern. Operators pose as market experts, “mostly using overseas WhatsApp numbers”. Other members, working with the operators, post fake profit screenshots and praise the expert. SEBI calls this astroturfing. When enforcement shuts a group down, members get a message from a new number inviting them into a replacement group, often blaming the platform’s “risk control measures”.

SEBI’s advice includes never opening an account on, or sending money to, any platform suggested in such a group. An April 2025 SEBI caution lists the names these groups like to use, such as “VIP group” and “Institutional Trading group”. It also notes that SEBI-registered entities now use the 1600 number series for service and transactional calls, so a “broker” calling from an ordinary 10-digit mobile deserves suspicion.

6. An app that gives you an “institutional account”

This is where the WhatsApp group usually leads: an app, often installed from a link rather than an app store, offering an institutional or FPI account with special privileges, discounted IPOs or block trades. SEBI’s February 2024 advisory is unambiguous: “There is no provision for an ‘Institutional Account’ in trading”, and direct market access needs a trading and demat account with a SEBI-registered broker and depository participant.

The profits these apps show are numbers on a screen. Real trades appear in your broker’s contract notes and your demat holdings. SEBI keeps a list of genuine trading apps of registered brokers you can check against.

7. Live “trade along with me” streams

In August 2026 SEBI warned about people streaming “live trading strategies” on social media, calling index entries and exits in real time while unregistered advice changes hands in the chat. SEBI notes that live market data isn’t permitted to be shared outside market operations and regulatory needs, and that people engaged solely in education shouldn’t use price data from the preceding thirty days. Its advice: don’t base decisions on these sessions.

A stream that ends with “join my paid bot for the same results” is red flags 1 and 7 at once.

8. MT4 or MT5 forex bots aimed at Indians

The pitch: an “expert advisor” bot on MetaTrader, trading currency pairs with an overseas broker, funded in rupees through UPI. The RBI keeps an Alert List of entities neither authorised to deal in forex under FEMA nor to run forex trading platforms. The version updated on 19 November 2025 has 95 entries, and the RBI says the list isn’t exhaustive, so a missing name doesn’t mean a platform is authorised.

The part most people miss: the legal risk is yours. The RBI has said that residents who remit or deposit money for forex trading on unauthorised platforms make themselves “liable for penal action under the provisions of FEMA” (RBI press release, 10 February 2023). Check the list on rbi.org.in itself, not a screenshot someone forwards you. For clarity: INDfolio doesn’t support forex or currency trading at all. We only handle NSE equity, futures, options and indices.

9. Money goes to a personal account or a random UPI ID

Your trading capital should only ever go to your own broker account. For fees, there’s now a clean check. Since 1 October 2025, SEBI-registered intermediaries that collect money from investors must use validated UPI IDs on the “@valid” handle, with a category suffix such as .brk for stockbrokers, and your UPI app shows a thumbs-up inside a green triangle when you pay one (SEBI press release, June 2025). The SEBI Check tool lets you verify a UPI ID or bank account before paying. If someone claims SEBI registration and asks you to pay a personal UPI ID, stop there.

One nuance: a software company selling a subscription isn’t a SEBI intermediary and won’t have an @valid handle. Expect a GST invoice from a registered company and a normal payment gateway instead, never an individual’s account.

The pitch versus the facts

What they say	What’s actually true	Where to check
“SEBI-approved AI bot”	SEBI registers firms and people, not software	SEBI intermediaries list, your broker’s website
“Fixed 8% every month”	No one can promise returns; return claims are a regulatory red line	Do the compounding sum yourself
“Share your login, we’ll trade for you”	SEBI’s “account handling” scam pattern	Never share credentials
“Institutional account with special privileges”	No such account exists in Indian trading	SEBI’s list of registered brokers’ apps
“Forex bot, deposit via UPI”	Unauthorised forex platforms; penal action under FEMA	RBI Alert List on rbi.org.in
“Pay the fee to this UPI ID”	Registered intermediaries use @valid UPI IDs	SEBI Check

What a legitimate trading bot looks like

A real tool passes every line of this checklist.

• It connects through your broker’s official API, and you log in on the broker’s own page.
• Your money never leaves your trading account with a SEBI-registered broker. The vendor never holds your funds.
• Access is revocable. You can disconnect it from your broker’s console at any time, and sessions expire daily anyway.
• You can read every rule: entry, exit, stop-loss, position size. Nothing is a black box you’re asked to trust.
• It shows backtests that include brokerage, STT and other charges, losing stretches included, and promises nothing about future returns.
• Pricing is a flat subscription invoiced by a company, with no profit share paid to an individual.
• You set the risk limits: maximum daily loss, position limits, an auto square-off time and a kill switch.

We build INDfolio, which is one of these tools, so weigh my view accordingly. I’d hold us to exactly the same list. INDfolio connects through the official APIs of seven brokers, never holds your funds, and charges a flat subscription with no profit share. You can also paper trade a strategy on live NSE prices before any real money is involved, which I’d do with any tool. For a side-by-side of legitimate options, including ours, see our round-up of trading bots in India.

If you’ve already paid or shared your login

Move fast. The order matters less than the speed.

1. Stop paying. If the app says you must pay a “tax”, “fee” or extra “margin” before you can withdraw your profits, that’s the same scam asking for more.
2. Report it on 1930 or cybercrime.gov.in. The Ministry of Home Affairs runs the toll-free 1930 helpline for online financial fraud and the national portal at cybercrime.gov.in. The system exists to stop money being moved on, so call early.
3. Lock down your broker account. Change your password and PIN, reset your authenticator, revoke API apps and third-party connections in the broker’s console, and call the broker if someone may have traded in your account. Tell your bank about any UPI payments.
4. Save evidence before it disappears: UPI transaction IDs, bank statements, chat exports, the app’s name and download link, phone numbers, screenshots of the “profits”.
5. Report to SEBI through the right channel. Unregistered operators can be reported on SEBI’s Market Intelligence portal. SCORES and the SMART ODR dispute process are for complaints against SEBI-registered entities, such as your broker; SEBI’s April 2025 caution says those recourses aren’t available for disputes with unregistered platforms.

One more thing. If someone contacts you after the fact offering to recover your money for an upfront fee, treat that as a second scam until proven otherwise.

Frequently asked questions

Are AI trading bots legal in India? Yes, when they run through a SEBI-registered broker’s official API under the retail algo framework that fully applied from 1 April 2026. A “bot” that holds your money, has a person trading your account, or promises returns is outside that framework, whatever it calls itself.

How do I check if a trading app is genuine? Compare it against SEBI’s list of registered brokers’ trading apps on investor.sebi.gov.in, and download it only from the broker’s own website or an official app store listing. If the app came from a WhatsApp link, assume it’s fake.

Can I get my money back after a trading bot scam? Sometimes, if you report it quickly on 1930 or cybercrime.gov.in and the money can still be traced and frozen. The longer you wait, the harder it gets, and there’s no guarantee either way.

Is forex trading through MT4 or MT5 legal in India? Not on platforms the RBI hasn’t authorised. The RBI’s Alert List names unauthorised forex platforms, and residents who send money to them can face penal action under FEMA.