On October 9, 2026, SEBI fined an individual Research Analyst (RA) ₹4 lakh after a routine inspection found eight separate compliance gaps. There was no fraud, no market manipulation and no investor loss proven. The penalty came purely from missing records, skipped processes and paperwork that was never done.

That is exactly why this case matters. Most RAs are not worried about fraud. They are worried about the small things slipping through the cracks while they focus on research and clients. This order shows that SEBI treats those small things seriously.

The RA had moved away from selling directly to clients in March 2025 and started working through aggregator platforms instead. He argued that the change in business model explained many of the gaps. SEBI did not accept that. Below, we break down what went wrong, what SEBI decided, and a practical checklist to make sure it does not happen to you.

The Violations

SEBI found eight problems. Here is each one in plain words, along with what the RA said and why SEBI disagreed.

1. Client records were missing, and some fees were paid in cash

What went wrong: SEBI asked for a list of clients with their PAN numbers and fees paid. For the vast majority of clients, PAN was missing. Without PAN, SEBI could not check whether any client had been charged more than the permitted annual fee limit. Where PAN was available, SEBI found several clients who appeared to have paid well above the cap. SEBI also found that a few clients had paid fees in cash.

What the RA said: The old records were stored on Google Drive linked to a website that was later shut down, so they could no longer be accessed. On cash, he said he never collected cash himself; a few clients walked into the bank and deposited it directly.

Why SEBI disagreed: Losing access to records is not an excuse. And the rule is simply that fees cannot be paid in cash, no matter who deposits it.

2. Trading in a stock he was recommending

What went wrong: The RA personally bought and sold a stock that he was also covering for clients, inside the blackout window when RAs are not allowed to trade that stock.

What the RA said: It was a single small trade, he actually made a loss on it, and there was no intention to gain an unfair advantage.

Why SEBI disagreed: The rule is about timing, not size or intent. Even one small trade in the restricted window is a breach.

3. Research reports lacked mandatory disclosures

What went wrong: The reports did not tell readers things like the RA's disciplinary history, details of associates, or whether he or his relatives held the stock.

What the RA said: It was an oversight, and there was in fact no conflict of interest to hide.

Why SEBI disagreed: Disclosures must be made even when the answer is "none". Their purpose is to let investors judge the research for themselves.

4. Records not properly maintained

What went wrong: The written reasons behind each recommendation (the rationale) existed but were not signed. Client details such as names, PAN and agreement start dates were incomplete.

What the RA said: The rules do not specifically say the rationale must be signed, and the client data was lost when the website closed.

Why SEBI disagreed: A rationale must be traceable to the person who prepared it and the date it was prepared. Records must be kept for five years regardless of business changes.

5. No complaint register

What went wrong: The RA did not keep a register of complaints received from clients.

What the RA said: Clients could reach him by email or phone, and complaints on SEBI SCORES or the ODR portal were already recorded there. No unresolved complaint was pointed out.

Why SEBI disagreed: Having a way to complain is not the same as recording complaints. The register itself is a requirement.

6. KYC and MITC not done

What went wrong: The RA had not registered with a KYC Registration Agency (KRA) or the Central KYC Registry. He also had not added the standard "Most Important Terms and Conditions" (MITC) to client agreements or sent them to existing clients.

What the RA said: Direct client business had stopped in March 2025, around the time these rules came in. He has since registered with a KRA and added MITC to new agreements.

Why SEBI disagreed: SEBI's records showed he was still collecting fees from clients after March 2025, so the rules applied. Fixing things after the inspection only reduces the penalty; it does not erase the violation.

7. Not registered with FIU-IND

What went wrong: The RA had not registered with the Financial Intelligence Unit (FIU-IND) or appointed a Principal Officer for anti-money-laundering reporting.

What the RA said: Registration was started during the inspection and completed afterwards. There were no suspicious transactions involved.

Why SEBI disagreed: The registration should have been in place throughout. Late compliance counts only as a mitigating factor.

8. Advertisements published without approval

What went wrong: The RA published advertisements without getting prior approval from BSE, and did not keep copies of them.

What the RA said: He accepted the lapse and has since put controls in place; newer ads go out through aggregator platforms with approval and records.

Why SEBI disagreed: It did not really disagree on the facts. The RA admitted the breach, and the corrective steps were noted only as mitigation.

The Action

SEBI imposed a total penalty of ₹4 lakh, split into two equal parts of ₹2 lakh each. The RA has 45 days to pay. If he does not, SEBI can start recovery proceedings, including attaching his property.

How SEBI decided the amount. The officer noted that there was no evidence of the RA making unfair gains, no investor loss, and no pattern of repeat offences. The fixes he made after the inspection (KRA registration, FIU registration, MITC, ad approvals) were counted in his favour. That is why the penalty stayed at the lower end.

The key lessons from SEBI's reasoning:

•         A penalty applies as soon as a rule is broken. Good intentions, small amounts or no harm to investors do not prevent a penalty; they only reduce its size.

•         "We lost the data" is not a defence. Records must be kept safely for five years, whatever happens to your website, email or business model.

•         Changing your business model does not switch off the rules. If you are still registered and still taking fees, every requirement still applies.

•         Fixing it after inspection helps, but only a little. Late compliance is treated as a reason for leniency, not as proof that you complied.

Checklist for Research Analysts

Use this list as a quick self-audit. Every item below maps to a gap SEBI penalised in this case.

Fees and payments

1. Collect PAN for every client before accepting any fee

2. Track fees per client and per family, so no one crosses the annual fee cap

3. Accept fees only through banking channels (UPI, bank transfer, cheque) or CeFCoM; never cash, including cash deposited by the client

4. Refund unused fees on early termination and charge no breakage fee

Client records and KYC

1. Maintain a client register with name, PAN, service, products covered, fees and agreement dates

2. Register with a KRA and upload, check and store client KYC there

3. Keep records of every client interaction: emails, call recordings, messages

4. Store all records for at least five years, in a location you control, with an independent backup

5. Before closing a website, email ID or cloud account, export and archive everything first

Research and personal trading

1. Keep a watchlist of every stock you recommend or follow

2. Block personal and associate trades in those stocks from 30 days before to 5 days after each report

3. Sign and date every research report and every rationale (digitally, if electronic)

4. Include all mandatory disclosures in every report, even when the answer is "nil": financial interest, holdings, conflicts, disciplinary history, associates, compensation, AI use

Client agreements

1. Include MITC in every client agreement

2. Send MITC to all existing clients in a mode you can preserve, and keep proof

3. Take documented client consent on terms and conditions

Grievances

1. Maintain a complaint register, even as an individual RA, logging date, complaint, action taken and closure

2. Record complaints from all sources: email, phone, SCORES and ODR

Registrations

1. Register with FIU-IND and appoint a Principal Officer

2. Keep your KRA and CKYC, if applicable, registrations active

Advertisements

1. Get prior approval from BSE (the RA supervisory body) before publishing any advertisement

2. Keep copies of every advertisement for five years, including those run through aggregator platforms

When your business changes

1. If you shift to aggregator platforms or pause direct clients, check which rules still apply while your registration is active

2. Comply with new circulars by their deadlines, even if you plan to wind down that line of business

3. Run an internal compliance review at least once a year, before SEBI does

The Bottom Line

This RA was not penalised for cheating anyone. He was penalised because, when SEBI came asking, he could not show the paperwork. For a Research Analyst, compliance is not just about doing the right thing; it is about being able to prove it, years later, on demand.

If you are unsure whether your records, agreements or registrations would hold up in an inspection, Compliancify Consulting can help with a compliance health check before SEBI comes calling. Reach us at compliancifyconsulting.com or +91 98735 70047.

Source: SEBI Adjudication Order No. Order/MS/RG/2026-27/32763 dated October 9, 2026. This article is a simplified explanation for general awareness and is not legal advice.