Photo: Rômulo Queiroz / Pexels
SEBI Algo Trading Rules Are Live: A Retail Trader's Guide
If you run a bot, a script, or even a busy Excel-to-broker connection to fire trades, the ground has shifted under your feet. SEBI's algo trading rules are now fully live — the framework became mandatory for every stock broker in India from April 1, 2026. This is the first time the regulator has drawn a clear line around retail participation in algorithmic trading, and it changes how lakhs of API users, scalpers and automation tinkerers operate. Here is what actually changed, who it touches, and what you need to do to stay on the right side of it.
What SEBI's algo trading rules actually do
For years, retail traders quietly plugged third-party tools and home-grown scripts into broker APIs with almost no oversight. That grey zone is gone. The new framework, first issued in February 2025 and rolled out through a milestone-based glide path, makes one principle non-negotiable: every automated order must be traceable, registered and accountable to a named broker.
The goal is investor protection. SEBI watched retail traders lose money to opaque 'guaranteed return' algos sold on social media, to platforms that vanished overnight, and to systems that nobody could audit when they misfired. By forcing registration and tagging, the regulator wants every algo order on Indian exchanges to be something it can trace back to a source.
It is worth being clear about what this is not: it is not a ban. You can still automate. You just cannot do it invisibly anymore.
The 10-orders-per-second line that defines you
The single most important number to know is 10 orders per second. This is the threshold that separates a casual API user from an 'algo trader' in the eyes of the regulator.
- Stay below 10 orders per second, and you are treated as a regular API user. Your manual or lightly automated trading carries on largely as before.
- Cross that rate, and your activity is classified as algorithmic trading, which pulls you into the full registration and compliance net.
For the overwhelming majority of retail investors — someone placing a handful of trades a day, or even an SIP-style automation — this line is never going to be crossed. The rules are aimed squarely at high-frequency scripts, multi-leg options bots and aggressive scalping systems that machine-gun orders into the exchange.
Every algo now needs an Algo-ID
From April 1, 2026, any order generated by an algorithm must carry an exchange-assigned Algo-ID. Think of it as a number plate for code. Before an algorithm can trade, it has to be registered and tagged, and the exchange approves it.
This is the backbone of the new regime. When an algo misbehaves — runaway orders, a faulty loop, a strategy that suddenly floods the book — the exchange can trace it instantly to a specific algo, a specific broker and a specific client. Any change to a registered algo also needs fresh approval, so you cannot quietly rewrite the logic and keep the old tag.
For the retail user, this mostly happens behind the scenes through your broker. But it means the era of running a secret, untracked strategy at scale is over.
Your broker is now the accountability node
Perhaps the biggest structural shift is who carries the can. Under the framework, the broker is responsible for every algo that runs through its platform. SEBI has deliberately made brokers the central checkpoint.
That responsibility includes:
- Getting exchange approval for every algo and every modification to it.
- Conducting due diligence on any third-party algo provider before onboarding them.
- Maintaining complete audit trails through the unique identifiers.
- Monitoring order flow and enforcing the rate thresholds.
The knock-on effect for algo vendors is significant. A SaaS algo company or an independent developer can no longer plug directly into the exchange. They must partner with a registered broker, who vets them and takes ownership of their behaviour. Expect smaller, fly-by-night algo sellers to disappear, and the surviving providers to be the ones who can pass broker due diligence.
The static IP rule you cannot ignore
There is one practical hurdle that trips up technically-minded retail traders: the static IP requirement. To send orders through a broker API as an algo user, you must register one or two static IP addresses, which the broker whitelists.
Orders coming from any other IP are simply rejected. If you trade from a home connection with a dynamic IP that changes, or from a laptop on the move, this is a real operational change. You will likely need a static IP from your internet provider or a cloud server with a fixed address. It is a small friction by design — it ties every automated order to a known, fixed origin.
How we got here: the phased rollout
The rules did not land overnight. SEBI built in a glide path so brokers and vendors could retool their systems. The original go-live was pushed from August 2025 to October 2025, and then sequenced through three milestones:
- By October 31, 2025, brokers had to apply to register at least one retail algo strategy via API.
- By November 30, 2025, registration of API-based algo products had to be completed.
- By January 3, 2026, brokers had to clear a full-functionality mock trading session and submit proof.
Brokers that missed these milestones faced being barred from onboarding new API-based algo clients from January 5, 2026 — a sharp stick to force compliance. The complete framework, with operational details from the exchanges, then became applicable to everyone from April 1, 2026.
What retail traders should do now
If you are an ordinary investor placing manual trades, you can breathe easy — almost nothing changes for you. If you automate, here is a practical checklist:
- Know your order rate. If you genuinely fire below 10 orders per second, you are a regular API user. If not, treat yourself as an algo trader and register.
- Talk to your broker. They are now the gatekeeper. Confirm how they expect you to register strategies and tag orders.
- Sort out a static IP before you connect, or your orders will bounce.
- Be sceptical of 'approved algo' marketing. Registration is about traceability and accountability — it is not SEBI certifying that a strategy makes money. No regulator guarantees returns.
- Keep your own records. Even with broker audit trails, you want your own log of strategy logic and changes.
The bottom line: India has finally given retail algo trading a rulebook. It adds paperwork and some genuine friction, but it also clears out the worst of the cowboy operators who preyed on retail traders. For anyone serious about automation, the cost of compliance is the price of trading in a market that can finally see what its machines are doing.
