SEBI Algorithmic Trading Framework 2026: What Retail Traders in India Must Know

The Securities and Exchange Board of India's new algorithmic trading framework became fully mandatory for all stock brokers on April 1, 2026. Originally issued through a circular in February 2025, the framework introduces a registration, identification, and compliance regime for all automated trading strategies executed through broker platforms. The rules apply equally to institutional and retail participants, though the compliance burden varies depending on the scale and nature of the algorithm. For the estimated millions of retail traders who use API-based trading tools, Python scripts, or third-party algo platforms, the framework represents the most significant regulatory change to trading infrastructure since SEBI's order execution reforms.

The Algo-ID Requirement

The centrepiece of the framework is the Unique Algo Identifier, or Algo-ID. From April 1, 2026, every order placed by an algorithm must carry an exchange-assigned identifier that allows exchanges to trace every automated order back to its source. The Algo-ID links the order to the specific strategy, the broker through which it is routed, and the client on whose behalf it is executed. This traceability requirement means that anonymous algorithmic trading, where orders are placed through APIs without any identification of the underlying strategy, is no longer permissible. Brokers are required to ensure that every algo order passing through their systems carries a valid Algo-ID, and exchanges can reject orders that do not comply.

White Box vs Black Box: The Classification That Matters

SEBI has drawn a critical distinction between white box and black box algorithms. White box algorithms are those where the logic is transparent, meaning the broker and the exchange can inspect the trading rules and understand how decisions are made. Individual traders using transparent logic for personal use, such as a simple moving average crossover strategy coded in Python, are classified as regular API users and do not require separate SEBI or exchange registration, provided they stay below the order threshold. Black box algorithms, where the logic is proprietary and not disclosed to the broker or exchange, face a much higher compliance bar. Providers of black box strategies must obtain both an Exchange Empanelment ID and a SEBI Research Analyst registration number. This requirement effectively brings algorithmic strategy vendors under SEBI's regulatory oversight, a significant expansion of the regulator's reach into the fintech ecosystem.

The 10 Orders Per Second Threshold

SEBI has set a threshold of 10 orders per second, measured per exchange within any given calendar second. If a trader's algorithmic activity stays below this threshold, no formal algo registration is required with the exchange, though the Algo-ID requirement still applies. If the activity crosses the threshold, the strategy must be formally registered. This threshold is designed to distinguish between retail-scale automated trading, which typically involves lower order frequency, and high-frequency trading strategies that can generate hundreds or thousands of orders per second. The 10 orders per second limit is generous enough to accommodate most retail algo strategies while capturing the high-frequency and market-making algorithms that have a material impact on market microstructure.

Broker Responsibility and Static IP Requirements

Under the framework, brokers bear primary responsibility for every algorithm that runs through their platform. Algo providers cannot connect directly to exchanges and must partner with a registered broker. Brokers are mandated to block API requests originating from non-whitelisted or dynamic IP addresses. This means retail traders using broker APIs must secure a static IPv4 address from their internet service provider or use a cloud-based virtual private server with a fixed IP, and register that IP with their broker. Dynamic IP addresses, which most residential internet connections use by default, will not be permitted for algo trading. This requirement adds a technical compliance step for retail participants but serves an important market integrity purpose: it ensures that every algorithmic order can be traced to a specific, identifiable source.

Practical Takeaways for Retail Traders

For retail traders who use API-based tools or third-party algo platforms, the immediate compliance steps are clear. First, verify with your broker whether your trading activity requires formal algo registration or falls within the regular API user category. Second, obtain a static IP address and register it with your broker. Third, ensure that any third-party algo tool or platform you use has obtained the necessary empanelment and registration. Fourth, understand whether your strategy is classified as white box or black box, as this determines the applicable compliance tier. SEBI has framed this as a market integrity measure, not a restriction on retail participation. The framework creates a regulated playing field for automated trading, replacing the earlier unregulated environment where algo strategies operated through broker APIs with minimal oversight. For compliant retail traders, the framework is a net positive, as it brings transparency and accountability to a space that previously operated in a regulatory grey area.