SEBI’s rules for retail algo trading, explained
Brokers as principals, exchange algo IDs, white-box vs black-box algos, and what it means for you.
The short answer
In February 2025, SEBI issued a circular on “Safer participation of retail investors in algorithmic trading”. In short: brokers are responsible (as principals) for algos used by their clients, algo providers work through brokers and are empanelled with exchanges, every algo order is tagged with an exchange-issued algo ID, and providers of “black-box” algos, whose logic isn’t disclosed, must be registered with SEBI as Research Analysts.
Key takeaways
- 01Your broker is accountable for the algos you use through it.
- 02Every algo order carries an exchange-issued identifier, so it can be traced.
- 03Black-box strategy providers must be SEBI-registered Research Analysts.
- 04API access is secured with client-specific keys and static IP whitelisting.
Why SEBI introduced the framework
As APIs made automation accessible, more retail investors began using algos, often from unregulated sources that promised unrealistic returns. SEBI’s framework brings retail algo trading inside the regulated system: someone accountable stands behind every algo, and every algo order can be identified.
The key rules, in plain English
| Rule | What it means for you |
|---|---|
| Brokers act as principals | Your broker is responsible for algos offered through its platform or APIs. |
| Algo providers are agents, empanelled with exchanges | Strategy platforms must work through brokers and meet exchange requirements. |
| Every algo order is tagged | Orders carry a unique algo ID from the exchange, creating an audit trail. |
| White-box vs black-box | If the logic is disclosed and replicable it’s white-box; if not, the provider must be a SEBI-registered Research Analyst. |
| Secure API access | Access uses client-specific API keys and static IP whitelisting, not open, shared connections. |
What if you build your own algo?
Investors who build their own strategies can continue to do so through their broker. Exchanges specify an orders-per-second threshold; algos that exceed it must be registered with the exchange through the broker.
A quick checklist before you use any algo platform
- Does it place orders through your own SEBI-registered broker, with your funds staying in your account?
- Is the strategy provider registered with SEBI where required, and are disclosures published?
- Are there loss limits, capital caps and a way to stop everything instantly?
- Does it avoid any promise of assured or guaranteed returns? (Such promises are prohibited.)
Implementation details and timelines are set by SEBI and the exchanges and can change. Always refer to the latest SEBI circulars and your broker’s guidance; this article is general information, not legal advice.
Frequently asked questions
What is an algo ID?
A unique identifier issued by the stock exchange for an approved algorithm. Orders generated by that algo carry the ID, so every algo trade can be traced to its source.
What is the difference between white-box and black-box algos?
A white-box algo’s logic is disclosed and replicable. A black-box algo’s logic is not disclosed to the user; SEBI requires providers of black-box algos to be registered as Research Analysts.
Can I still use my own algorithm as a retail investor?
Yes, through your broker. If your algo exceeds the orders-per-second threshold set by the exchanges, it must be registered with the exchange via your broker.