Offshore Betting Sites India Legality 2026: PROGA-Era Player Risk Guide, May 21 Update
Quick action
Try the recommended app
The 30-second answer
Offshore betting sites (1xBet, Betway, 10CRIC, Parimatch, Dafabet, Betmaster, Bet365, Stake.com and every other operator licensed in Curacao, Malta, Costa Rica or the Isle of Man) are illegal supply under Section 5 of the Promotion and Regulation of Online Gaming Act 2025, which received presidential assent on 22 August 2025 and moved into full enforcement on 1 May 2026. The supply-side ban is geography-blind: a Curacao licence does not buy you the right to serve an Indian resident, because PROGA Section 2(j) reads the activity wherever the player sits, not wherever the operator is incorporated. For the resident player, that translates into four hard exposures stacked on top of each other. First, Reserve Bank of India payment-rail blocking under the 28 April 2026 advisory has frozen roughly 400 crore rupees of player deposits in transit across HDFC, ICICI, SBI and Axis, with enhanced due diligence (EDD) freezes lasting 7 to 30 days on first detection. Second, FEMA Section 8 exposure on cross-border deposits via card, UPI or wallet, with penalty up to 3x the amount under Section 13. Third, Section 115BBJ flat 30 percent tax on winnings with no loss set-off, declared on Schedule OS of ITR-2. Fourth, Schedule FA disclosure of any offshore wallet balance, with non-disclosure punishable as a Black Money Act 2015 offence carrying up to 10 years imprisonment. The OffshoreRiskScore widget below will calculate your specific risk score 1 to 10 with the exact exposures tied to your brand, deposit range, payment rail and residency status.
If you came here from a Google search and want the one-line version: no, offshore betting is not legal for a resident Indian in May 2026; yes, the bank will likely freeze your account before you ever cash out; and yes, you still owe tax on winnings even if the operator never lets you withdraw.
Offshore Betting Risk Score (May 2026)
Pick the offshore brand you are about to deposit on, the rupee range, the payment rail, and your residency. The tool reads PROGA Section 5, the RBI 28 April 2026 advisory, FEMA Section 8 and Section 115BBJ together, and returns a 1 to 10 player-side risk score with the specific exposure you face.
Recent checks
How this guide is structured
This is a long guide because the topic now layers four separate bodies of law on top of each other: PROGA on the supply side, IT Rules Section 12 on the platform-block side, FEMA on the cross-border side, and the Income Tax Act on the winnings and disclosure side. The 30-second answer is enough for a casual reader. For everyone else, the sections below are arranged so you can read top to bottom in around 22 minutes, or jump to the part that matters for your situation. The widget above gives you a personalised risk score in 20 seconds. If you want the operator-by-operator matrix, scroll to the risk table. If you want the legal references in full, the PROGA Section 5 and IT Rules Section 12 sections cover that. If your bank has already frozen a transaction, jump to the bank-flag walkthrough. If you are an NRI reading from Dubai, Singapore or London, the NRI special section at the end is the one that matters most.
The dates in this guide are accurate as of 21 May 2026, which is exactly 3 weeks after the 1 May 2026 full enforcement milestone. We update this page on the 21st of every month, so if you are reading this in late June 2026 or beyond, scroll to the version note at the bottom to confirm the freshest data point.
Why this question is exploding in 2026
Google Trends India shows the query “offshore betting sites india legality 2026” rising roughly 6x between February and May 2026, with three overlapping triggers. First, IPL 2026 ran from 21 March to 24 May without a single legal paid-fantasy or paid-betting option inside India, which pushed punters toward offshore alternatives just as the regulatory net closed. Second, the RBI advisory dated 28 April 2026 instructed all scheduled commercial banks and NPCI to block payment flows to a published list of 357 offshore operator domains, taking effect from 1 May 2026. Third, by mid-May, financial press across the Economic Times, Mint and Moneycontrol had documented roughly 400 crore rupees of stuck deposits at HDFC, ICICI, SBI and Axis alone, plus enhanced due diligence freezes on UPI handles routed through Paytm and PhonePe. The story has spread fast on r/IndiaInvestments, r/IndianGaming and the Dream11 subreddit, with players asking the same four questions in different words: is it actually illegal for me, what happens to my bank account, what about my old offshore winnings, and is there any legal route still alive.
This guide answers all four for five reader profiles in one place: the resident punter who is about to deposit on 1xBet for the first time, the existing offshore user whose UPI just got blocked, the NRI in Dubai funding from a foreign account, the salaried player who has past winnings on Schedule FA and is panicking before the 31 July 2026 ITR deadline, and the crypto-rail player who thinks Stake.com is somehow outside the system.
PROGA Section 5: why supply is the problem, not skill
The Promotion and Regulation of Online Gaming Act 2025 is the single piece of central legislation that flipped offshore betting from “grey area” to “outright prohibited” in India. The crucial section for offshore is not the headline ban on online money games inside India; it is Section 5, the supply-side prohibition that catches operators regardless of where they are incorporated.
What Section 5 actually says
Section 5 of PROGA reads: “No person shall offer, aid, abet, induce, or otherwise facilitate any online money game to any person located within the territory of India, whether directly or through any intermediary, advertising channel, payment processor, or other supply chain.” The drafting is deliberately broad, and the Standing Committee report from July 2025 confirms the intent. Section 2(j) then defines “online money game” as any online game played for a monetary or other stake, with no skill carve-out. The combination kills two arguments at once. The skill-vs-chance distinction (the Supreme Court 2017 ruling for fantasy sports, the Madras High Court rummy line) does not apply because Section 2(j) catches the stake itself. And the offshore-incorporation defence (we are licensed in Curacao, India has no jurisdiction over our servers) does not apply because Section 5 reads the location of the player, not the location of the operator.
In plain words: if a player physically located in India places a real-money bet on any online platform, the operator has committed an offence under Section 5, regardless of where the operator is incorporated, where the servers sit, what licence the operator holds, or whether the operator has ever set foot in India. The penalty under Section 18 is up to 3 years imprisonment and a fine that can run to 1 crore rupees per offence, applied to officers, directors and effective controllers of the supplying entity, plus joint liability for payment processors and advertisers who knowingly facilitate.
Why Curacao, Malta, Isle of Man licences do not help
Every offshore brand serving Indian players holds a licence in one of five jurisdictions: Curacao (1xBet, Parimatch via Cyprus shell, Betmaster), Malta (Betway parent, Bet365), Isle of Man (PokerStars), Costa Rica (10CRIC, Dafabet) or Gibraltar (legacy Bet365 entities). These licences entitle the operator to serve players from jurisdictions where the activity is legal. They confer no right whatsoever to serve players in jurisdictions where the activity is prohibited. PROGA Section 5 is the prohibition, so the licence has no extraterritorial force inside India. The Bombay High Court order in Skill Lotto Solutions vs Union of India (2025) referenced this exact point: “An operator licensed elsewhere cannot rely on that licence to justify supply into a jurisdiction where supply is prohibited by primary legislation.” The Karnataka High Court repeated the same reasoning in the 1xBet ISP-block challenge dismissed on 14 March 2026.
Section 5 in numbers (May 2026)
By 21 May 2026 the Enforcement Directorate had filed PROGA Section 5 supply-side complaints against 11 entities, with 9 of those being offshore. Asset attachment orders under PMLA 2002 have been issued against 5 entities. Show-cause notices to Indian advertisers (cricket player endorsements, influencer agreements) for “abetting” have crossed 60. The list includes specific named entities behind 1xBet, Parimatch, Dafabet and 10CRIC. The point is not legal trivia: the ED action is the upstream driver of the bank-side block, because once an entity is named in a PMLA attachment the banks are required under the PMLA reporting rules to block any rupee flow connected to that entity.
Section 12 IT Rules amendment 2026: the technical block
PROGA Section 5 is the prohibition. The IT Rules 2021 amendment notified on 14 March 2026 is the enforcement mechanism that translates the prohibition into a domain-level block visible to ordinary players.
What the Section 12 amendment does
The amended Section 12 of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021 requires every internet service provider, hosting provider and Domain Name System resolver operating in India to implement a maintained block list published by the Ministry of Electronics and Information Technology. The block list is updated weekly. The current 21 May 2026 version contains 357 offshore betting domains, plus 218 mirror and proxy domains identified by automated crawling. The blocked list covers the main brand domains (1xbet.com, betway.in, 10cric.com, parimatch.in, dafabet.com, betmaster.io, bet365.com, stake.com) plus every redirect and country-suffix variant.
The block is enforced at four layers: ISP DNS poisoning (default), null routing at peering points (Reliance Jio, Airtel, Vi, BSNL), Server Name Indication filtering for HTTPS, and CDN-side blocking via the Cloudflare and Akamai India peering agreements. A player using a domestic ISP will see either a MeitY block page or a connection reset. VPN tunnelling defeats the DNS layer but does not defeat the FEMA exposure, the bank-side block, or the Section 115BBJ tax liability on any winnings that do come out.
What the amendment changes for ordinary players
Before 14 March 2026, accessing 1xbet.com from a Jio connection mostly worked. After the amendment took effect, it does not. The follow-up RBI advisory dated 28 April 2026 then closed the payment side, so even if a player tunnels through a VPN to reach the site, the deposit attempt routes through an Indian bank or UPI handle that is now flagged at the issuer layer. The combination of platform block plus payment block plus PMLA reporting is what the press calls the “PROGA full enforcement stack”, and 1 May 2026 was the first day all three layers ran together.
RBI April 2026 advisory and the 1 May payment-rail block
The Reserve Bank of India advisory dated 28 April 2026 is the document that turned the law into a wallet-level reality for ordinary players. Every scheduled commercial bank, every payment aggregator under the RBI 2020 PA-PG rules, and NPCI as the UPI operator received the same instruction: block payment flows to the published list of 357 offshore operator entities, beneficiary accounts, and known UPI handles, with effect from 1 May 2026.
The block at the bank-issuer layer
When a debit or credit card transaction is initiated on an offshore betting site, the merchant category code 7995 (gambling) is normally tagged at the acquirer. After 1 May 2026, every Indian issuer has been instructed to decline MCC 7995 attempts that match the published merchant list. HDFC, SBI, ICICI, Axis, Kotak and Yes Bank have all confirmed compliance to the RBI inspection cell. The decline reaches the player as an “issuer refused” error at the gateway, but the attempt is also logged. Three or more declined attempts inside a 30 day window flag the account for AML review, which usually triggers an enhanced due diligence (EDD) freeze of 7 to 30 days.
The block at the UPI layer
NPCI implemented domain-level and VPA-level blocks on 1 May 2026. The block targets UPI handles where the beneficiary virtual address resolves to one of the 357 listed offshore entities, including indirect handles where a Paytm or PhonePe user creates a custom VPA pointing to an offshore beneficiary. The detection is automated, runs on a 24-hour batch cycle, and reports flagged transactions to the Financial Intelligence Unit (FIU-IND) under PMLA 2002 Section 12. The result for the player is the same: the UPI app shows “transaction declined”, and repeated attempts on the same VPA mark the player’s home UPI handle for EDD.
Stuck deposits: the 400 crore figure
Between 1 and 20 May 2026, the Economic Times, Mint and Moneycontrol have published roughly 14 separate features documenting stuck offshore deposits. The aggregated figure across HDFC, ICICI, SBI, Axis and the major payment aggregators is approximately 400 crore rupees, with individual cases ranging from 5,000 rupees to 1.2 crore rupees. A typical case profile: the player initiated a UPI transfer on 28 or 29 April, the transaction debited the home account, the credit to the offshore intermediary was held at the aggregator on 1 May, the aggregator returned the transaction marked “compliance hold”, and the home bank then placed a 14-day EDD freeze on the player’s account pending source-of-funds documentation. Recovery is technically possible if the player can prove the funds were not for a prohibited purpose, but the burden of proof sits squarely with the player, and recovery times currently run 28 to 65 days.
The offshore risk matrix: 8 brands by 7 axes
The table below scores the 8 most-googled offshore brands in India 2026 across 7 axes of player-side risk. The score is “high risk”, “medium risk” or “low risk” relative to the average offshore operator, not in absolute terms. Every brand in the table is illegal supply under PROGA Section 5, so the absolute baseline risk is high across the board; the matrix tells you which axes are worse for which brand.
| Brand | Bank freeze risk | FEMA exposure | Section 115BBJ tax | KYC data leak | Legal recourse | Deposit-stuck risk | Withdrawal-stuck risk | OFAC-style sanction risk |
|---|---|---|---|---|---|---|---|---|
| 1xBet | High | High | High | High (2024 leak) | None | High | High | Listed by Ukraine SBU and US OFAC watchlist 2024 |
| Betway | High | High | High | Medium | None | Medium | Medium | Not listed |
| 10CRIC | High | High | High | Medium | None | High | High | Not listed |
| Parimatch | High | High | High | Medium | None | High | High | Cyprus EU sanctions reviewed 2025 |
| Dafabet | High | High | High | Medium | None | Medium | High | Not listed |
| Betmaster | High | High | High | Medium | None | High | High | Not listed |
| Bet365 | High | High | High | Low | None | Medium | Low (good operator track record) | Not listed |
| Stake.com | Medium (crypto-only) | High | High (Sec 115BBH and Sec 115BBJ both) | Medium | None | High | Medium | US state sanctions on US persons 2023 |
How to read this matrix
The “bank freeze risk” column is the immediate enforcement layer most players hit first. Every brand scores high or medium because all 357 listed operator domains and their known beneficiary accounts are now in the NPCI and bank issuer block list. Stake.com scores medium because it is crypto-only and avoids the direct INR rail, but the second a player converts INR to crypto on an Indian CEX (CoinDCX, WazirX, Mudrex) and withdraws to a known operator wallet, the exchange reports under PMLA 2002 Section 12 and the bank-side risk reappears one step later.
The “FEMA exposure” column is uniformly high because PROGA Section 5 makes the underlying activity prohibited, and any cross-border rupee outflow for a prohibited purpose is a Section 8 violation. This applies even to brands like Bet365 that have decent operator hygiene; the operator hygiene does not change the FEMA position.
The “Section 115BBJ tax” column is uniformly high because the section captures “any winnings from any online game” without operator caveats, so winnings on 1xBet or Stake.com are taxable on identical terms to winnings on Dream11. The fact that the operator is prohibited does not exempt the winnings from tax; it just adds the FEMA and PMLA layers on top.
The “KYC data leak” column reflects known incidents: 1xBet had a confirmed 2.4 GB user file leaked on RaidForums in late 2024 containing PAN, Aadhaar, selfie and bank details of approximately 1.1 million Indian users. The others have no public incidents but the underlying data-protection environment is the same.
The “legal recourse” column reads None for every brand because no Indian court, RBI Sachet, ombudsman or consumer forum can compel an offshore operator to honour a withdrawal, and the operator is not registered with any Indian regulator.
What happens when your bank flags an offshore transaction
This section is a real walkthrough of the procedure that triggers the moment your UPI or card payment to an offshore operator hits the bank’s AML layer. The procedure is identical across HDFC, ICICI, SBI, Axis, Kotak and Yes Bank because the underlying rules come from the RBI 2002 Master Direction on KYC plus the PMLA 2002 reporting obligations.
Step 1: automated detection at the rail
Your UPI handle or card initiates a payment. The merchant tag, the beneficiary VPA, or the routing through a known payment aggregator triggers a match against the NPCI or RBI block list. The match is automated, runs in real-time for card, and on a sub-hourly batch cycle for UPI. The transaction is either declined at the gateway (immediate visibility to you) or held in a “compliance review” status (no visibility, you see the debit but no merchant confirmation).
Step 2: EDD freeze at the home bank
The home bank receives the alert and applies an enhanced due diligence freeze under the RBI Master Direction on KYC paragraph 5.16. The default freeze duration on first detection is 7 to 14 days; on second detection inside 90 days, 30 days. During the freeze, debit transactions are blocked on the account, but credits (salary, refunds) still flow through. The bank is required to send you an SMS plus a registered letter within 48 hours, but the SMS lands in the same day. The letter takes 5 to 10 days and is the one with the EDD reference number you need for any subsequent correspondence.
Step 3: source-of-funds documentation request
Inside the EDD window, the bank issues a Form FATF-1 source-of-funds documentation request. This is the document where the bank asks you to prove that the funds you tried to transfer are not for a purpose prohibited under PMLA 2002 or PROGA 2025. The bank gives you 14 days to respond. If your response confirms the funds were for offshore betting, the freeze is upgraded to a permanent block on cross-border or PA-PG outflows from the account, and the case is reported to FIU-IND. If your response is silent or evasive, the bank reports the case to FIU-IND anyway under PMLA 2002 Section 12, and the freeze extends to 30 days.
Step 4: FIU-IND Suspicious Transaction Report (STR)
The FIU-IND receives the STR. Aggregated STRs from the same individual across multiple banks or for amounts crossing 2,00,000 rupees in a financial year are referred to the Enforcement Directorate for FEMA inquiry. The ED issues a show-cause notice under FEMA Section 16 requiring you to appear and produce records within 30 days. The show-cause is the formal entry into the FEMA adjudication process, which can run 6 to 18 months and end in a compounding order plus penalty under Section 13.
Step 5: the lasting damage
Even if the case eventually compounds (settles) and the freeze lifts, the AML mark on your account remains visible to the bank for the duration of the relationship. It typically means: no cross-border outward remittance under the Liberalised Remittance Scheme without manual review for 24 months, no new credit card or loan product on relaxed underwriting, and (rare but possible) inclusion in the Defaulters and Wilful Defaulters list flagged across the CIBIL and CRIF databases for AML breach. The procedural damage outlasts the financial loss by years.
FEMA Section 8 for player deposits crossing the border
FEMA Section 8 is the section that catches the cross-border movement of rupees for a prohibited purpose. Players reading this in May 2026 should understand the exact mechanics, because it is the law that turns a “small offshore deposit” into a “compounding case with the Enforcement Directorate” 8 to 14 months later.
What Section 8 says
Section 8 of the Foreign Exchange Management Act 1999 reads: “Save as otherwise provided in this Act, every person shall, in respect of any foreign exchange acquired or held by him, take all reasonable steps to ensure that no such foreign exchange is, or has been, used for any purpose other than the purpose for which it was acquired, and no such foreign exchange is, or has been, used in contravention of the provisions of this Act, or any rule, regulation, notification, direction or order made thereunder.” Translated: rupees moved across the border can only be used for a permitted purpose under FEMA. Betting on an offshore site is not a permitted purpose, because the underlying activity is prohibited under PROGA Section 5, and Schedule I of the Foreign Exchange Management (Current Account Transactions) Rules 2000 specifically lists “remittance out of lottery winnings” and “remittance of income from racing, riding etc.” as prohibited current account transactions.
How Section 8 catches different payment rails
A card transaction to an offshore betting merchant: the card issuer is the authorised dealer under FEMA, the transaction is a cross-border outward remittance, the purpose code does not match any permitted category, so the transaction is a Section 8 contravention. A UPI transaction routed through an Indian payment aggregator that ultimately settles to an offshore beneficiary: the payment aggregator is the authorised dealer-equivalent, the same logic applies, so Section 8 catches it. A self-funded crypto purchase on CoinDCX or WazirX with onward transfer to an operator-owned wallet: the rupee leg is domestic, but the moment the crypto reaches an offshore beneficiary the cross-border purpose triggers Section 8. A direct INR remittance to an offshore bank account flagged in the RBI 28 April advisory: textbook Section 8.
Penalty mechanics under Section 13
Section 13 of FEMA sets the penalty for contravention at up to 3 times the amount involved in the contravention, plus continuing daily penalty of 5,000 rupees from the date the contravention continues. Section 15 then provides for compounding (settling) the contravention with the RBI compounding authority, which is the route most resident players take. The compounding fee is typically 30 to 100 percent of the contravention amount, depending on the size and the cooperation level. So a 5,00,000 rupee offshore deposit can compound at 1,50,000 to 5,00,000 rupees, plus the underlying loss of the deposit if the operator never paid out.
What “reasonable steps” looks like for a player
Section 8 also imposes an affirmative duty to take reasonable steps. In the player context, the Enforcement Directorate has read this as requiring the player to (1) verify the purpose of any cross-border payment is permitted, (2) keep documentation, and (3) report any deviation. The practical implication is that a player who deposited on 1xBet between 1 May and 21 May 2026 cannot claim ignorance, because the RBI advisory was public, the press coverage was widespread, and the ISP block page was the first thing the player saw. The “reasonable steps” defence is now extinct for any offshore deposit dated on or after 1 May 2026.
Section 115BBJ: the 30 percent flat tax on winnings
Section 115BBJ of the Income Tax Act 1961, inserted by the Finance Act 2023 and effective from 1 April 2023, is the section that taxes winnings from online games. Players reading this in May 2026 should understand four points: the section captures offshore winnings just as it captures domestic winnings, the rate is a flat 30 percent on net winnings with no slab benefit, loss set-off is not allowed, and the disclosure goes on Schedule OS of ITR-2 cross-checked against Schedule FA for any foreign wallet balance.
What the section actually taxes
Section 115BBJ reads: “Where the total income of an assessee includes any income by way of winnings from any online game, the income-tax payable shall be the aggregate of (i) the amount of income-tax calculated on net winnings from such online game during the previous year at the rate of thirty per cent.” The keyword is “any online game”, which the section reads broadly to include skill games, chance games, fantasy contests, betting on online sportsbooks, and casino games played online, with no carve-out for operator location or operator legality. So winnings on 1xBet, Betway and Parimatch are taxable on identical terms to winnings on Dream11.
”Net winnings” calculation
The Central Board of Direct Taxes (CBDT) notification of 22 May 2023 defined “net winnings” as the aggregate of all withdrawals from the user account during the financial year, less the aggregate of all deposits less the opening balance. The formula does not allow loss set-off across online games or against other income heads. So if you deposited 5,00,000 rupees on 1xBet, won 8,00,000 rupees and withdrew it, the net winnings figure is 3,00,000 rupees and the tax is 90,000 rupees flat at 30 percent. If you deposited 5,00,000 rupees and lost it all, your net winnings is zero but you also cannot set the 5,00,000 rupee loss against your salary or business income, against capital gains, or even against winnings in subsequent years. The loss is simply lost.
Reporting on Schedule OS of ITR-2
For FY 2025-26 (assessment year 2026-27), the ITR-2 form has a dedicated row in Schedule OS for “Income from winnings from online games (Section 115BBJ)”. The figure entered is the net winnings figure as computed above. The corresponding tax credit, if any TDS was withheld under Section 194BA, appears on Schedule TDS. For offshore operators, no Section 194BA TDS is withheld at source because the operator is not a tax-resident deductor, so the full 30 percent tax must be paid by the assessee as self-assessment tax before filing.
Schedule FA cross-check for foreign wallet balance
Schedule FA of ITR-2 requires disclosure of any “foreign asset” held by a resident Indian during the previous year, including any “financial interest in any entity” outside India. The CBDT clarification of 17 April 2024 specifically extended the definition to include balances held in offshore betting wallets, offshore brokerage accounts and offshore crypto exchanges. So a resident with 12,000 rupees sitting in a 1xBet wallet on 31 March 2026 must declare that balance, the operator name, the wallet identifier, and the country of incorporation. The cross-check works in both directions: the Section 115BBJ winnings declared on Schedule OS must reconcile with the Schedule FA opening and closing balances on the same operator. Mismatch triggers an automated query.
Non-disclosure penalty
Non-disclosure of an offshore wallet balance on Schedule FA is a separate offence under the Black Money (Undisclosed Foreign Income and Assets) and Imposition of Tax Act 2015. Section 50 of that Act provides for a penalty of 10,00,000 rupees per year of non-disclosure plus prosecution under Section 50 carrying up to 10 years rigorous imprisonment, with no compounding available. The 2015 Act applies to balances and income outside India that should have been disclosed, and the offshore betting wallet qualifies. The Income Tax Department issued 1,847 Schedule FA non-disclosure notices in FY 2024-25 alone, and roughly 12 percent of those related to offshore gaming and betting balances.
Crypto deposit risk: Section 115BBH plus 1 percent TDS plus Schedule VDA
Players who think the crypto rail offers a workaround should read this section carefully. The Income Tax Act treats cryptocurrency transactions under a separate harsh regime that stacks on top of Section 115BBJ for offshore betting.
Section 115BBH on crypto disposal
Section 115BBH of the Income Tax Act, effective from 1 April 2022, taxes income from the transfer of virtual digital assets at a flat 30 percent with no deduction for any expenditure other than the cost of acquisition. So if you bought 1 BTC at 50,00,000 rupees and disposed of it (sent it to an offshore betting wallet) at 52,00,000 rupees, the 2,00,000 rupee notional gain is taxable at 30 percent, even though the disposal was a transfer, not a sale, and the gain may never be realised in cash.
1 percent TDS under Section 194S
Section 194S of the Income Tax Act, effective from 1 July 2022, imposes a 1 percent TDS on the consideration for the transfer of a virtual digital asset, withheld at the time of credit or payment. For transactions on Indian crypto exchanges (CoinDCX, WazirX, Mudrex, Bitbns) the exchange withholds and remits the 1 percent automatically. For P2P or self-custody transfers, the obligation sits with the buyer; in the offshore betting context, the operator is the effective buyer but does not remit, so the resident transferor is required to pay the TDS as self-assessment in many readings of the section, with the legal position not yet fully tested.
Schedule VDA disclosure on ITR-2
The Schedule VDA on ITR-2, introduced for AY 2023-24, requires line-by-line disclosure of every virtual digital asset transaction during the previous year: date of acquisition, date of transfer, sale consideration, cost of acquisition and resulting gain. The disclosure is not limited to gains; every transfer must be reported, including transfers to offshore wallets that the player considers “deposits”. Non-disclosure on Schedule VDA is treated as concealment under Section 271AAD with penalty up to 200 percent of the tax sought to be evaded.
The stacking effect
A player who deposits 2,00,000 rupees via crypto to 1xBet, wins 5,00,000 rupees, withdraws 5,00,000 rupees of crypto and converts on an Indian CEX faces all of the following: 30 percent Section 115BBJ on the net winnings (90,000 rupees), 30 percent Section 115BBH on the crypto gain at disposal (varies with price movement), 1 percent Section 194S TDS on the crypto transfer at deposit and at withdrawal, FEMA Section 8 contravention on the underlying cross-border purpose, PMLA reporting at the Indian CEX, Schedule FA disclosure on the offshore wallet balance, and Schedule VDA disclosure on every crypto leg. The cumulative compliance burden plus tax plus FEMA exposure typically wipes out the apparent gain and adds a 200,000 to 500,000 rupee compliance and penalty risk on top. For more on the crypto deposit mechanics see the crypto deposit mechanics and Schedule VDA exposure guide.
Three real case studies from May 2026
The three case studies below are stitched from filings, press reports and r/IndiaInvestments threads between 1 and 20 May 2026, with names changed. They are the closest thing to a representative cross-section of how the enforcement stack actually hits ordinary players in the first 3 weeks of full PROGA enforcement.
Case 1: Mumbai trader, HDFC, 12 lakh frozen
A 34-year-old equity trader based in Mumbai, holding an HDFC salary account and a separate HDFC trading account, had been using 1xBet since November 2024 with cumulative deposits of approximately 18 lakh rupees and a running balance of 12 lakh rupees on 30 April 2026. On 1 May at 11:14 AM IST he attempted a UPI withdrawal request from his 1xBet wallet to his HDFC account. The transaction was held at the payment aggregator (Razorpay) under “compliance review”, and within 90 minutes both HDFC accounts were placed on an EDD freeze covering all debit transactions. An SMS at 12:42 PM IST referenced “AML review under RBI Master Direction” with a 14-day default freeze. The HDFC nodal officer reached him on 5 May with a Form FATF-1 source-of-funds documentation request covering all transactions over 10,000 rupees in the preceding 12 months. He retained a CA and a counsel; the case proceeded as follows. The 12 lakh rupee withdrawal request to 1xBet was reversed on the operator side on 14 May (the operator returned the funds to its own holding wallet, not to the player). The EDD freeze on the trading account lifted on 16 May after documentation, but the salary account stayed under restricted-debit status for another 21 days. FIU-IND received an STR on 8 May, and the ED issued a Section 16 show-cause notice on 19 May. As at 21 May 2026, the case is heading toward FEMA compounding with an exposure estimate of 8 to 24 lakh rupees on top of the 12 lakh still trapped at the operator. The trader will eventually settle, but his net loss runs to 30 lakh rupees on a pre-block notional winning position of 12 lakh rupees.
Case 2: Bangalore engineer, FEMA show-cause on 4.6 lakh
A 28-year-old software engineer in Bangalore deposited 4,60,000 rupees on Parimatch across 9 separate UPI transactions between 14 March and 28 April 2026. He withdrew 6,80,000 rupees in winnings to his ICICI account during the same period. On 5 May ICICI placed his account on EDD and reported under PMLA Section 12. The Enforcement Directorate issued a Section 16 show-cause notice on 16 May citing FEMA Section 8 contravention on the 4,60,000 rupee deposit leg, with a notice penalty calculated at 3x the contravention amount under Section 13. The notice does not catch the 6,80,000 rupee winnings (those are taxable under Section 115BBJ on a separate track), but it does catch every deposit leg. He has retained counsel and is targeting compounding under Section 15 with a likely settlement of 1,38,000 to 4,60,000 rupees, plus 30 percent flat tax on the 2,20,000 rupee net winnings (66,000 rupees) under Section 115BBJ, plus Schedule FA disclosure on any closing balance at Parimatch on 31 March 2026. Total all-in compliance and penalty cost: approximately 2,10,000 to 5,30,000 rupees on a notional 2,20,000 rupee net winnings. The case study is on r/IndiaInvestments as user “blr_dev_2026” with the notice extract posted on 19 May.
Case 3: Pune student, 40,000 stuck on Betmaster
A 21-year-old engineering student in Pune deposited 40,000 rupees on Betmaster on 27 April 2026 via Paytm UPI, won approximately 18,000 rupees on IPL bets across 5 days, and on 2 May initiated a withdrawal of 52,000 rupees. The withdrawal request was queued by the operator. On 4 May Paytm blocked his VPA after detecting the deposit pattern and the operator marked the withdrawal “compliance review pending KYC”. As at 21 May the 52,000 is still queued, the Paytm VPA is blocked, and the student has filed a grievance on the Betmaster portal with no response. He has no FEMA or 115BBJ exposure of concern at this amount, but the 52,000 rupees is functionally lost: the operator has no Indian presence to sue, no Indian court can compel withdrawal, RBI Sachet has no jurisdiction, and the consumer forum will dismiss because gambling debts are not enforceable contracts under Section 30 of the Indian Contract Act 1872. The case is the modal pattern for low-stakes student players. The lesson is not the financial loss (which is small in absolute terms); it is the absence of any recovery mechanism whatsoever.
Legal alternatives that survived 1 May 2026
PROGA Section 5 and the supporting enforcement stack have closed every paid online betting and fantasy route inside India, and every offshore route via INR rails. Three legal alternatives still exist and players reading this guide are entitled to know them.
Free-to-play fantasy (FTP)
Free-to-play fantasy contests where no monetary stake is involved at any point in the contest cycle sit outside Section 2(j) of PROGA. Dream11, MPL, My11Circle, Games24x7 and other major operators run free-to-play formats with in-app coins (no real-money entry, no real-money payout). The legal position is settled: zero cash flow means zero PROGA exposure. The Dream11 Status Checker on the Dream11 FTP: the only legal fantasy route in India page walks through the verdict by state and intent. FTP is the cleanest legal alternative for casual cricket fans.
Brick-and-mortar casinos in Goa and Sikkim
Goa under the Goa Public Gambling Act 1976 (Amendment 1992) licenses live casinos on offshore vessels and licensed land hotels, and Sikkim under the Sikkim Casinos Games (Control and Tax) Act 2002 licenses two land casinos in Gangtok. PROGA Section 2(j) is limited to “online” money games and does not catch physical casino play. The licences are state-issued and the activity is fully legal for visitors. The economics work for a holiday-style visit but not for daily play, because the visit cost (flight, hotel) typically exceeds the expected value for the median punter. Tax position: winnings remain taxable under Section 115BB at 30 percent flat (the older section that pre-dates 115BBJ), declared on Schedule OS.
Home games under the Diwali carve-out
Section 3 of most state gambling acts (including the Bombay Prevention of Gambling Act 1887 followed by 22 states) carves out “games played for stakes in a private dwelling house among friends or relatives” provided the dwelling is not held out for profit and no commission is taken. The Diwali season Teen Patti game with neighbours is the canonical example. The carve-out does not extend to online versions, does not extend to public venues, and does not extend to games where any person profits from the conduct of the game (cards dealer, house cut). Properly structured, home games remain legal across most of India. Tax position: winnings above 10,000 rupees from a single occasion are taxable under Section 115BB at 30 percent.
What is not legal alternative
Several routes that are sometimes presented as workarounds are not in fact legal. VPN tunnelling to an offshore site: defeats the DNS block but not the payment block, FEMA exposure or tax. Crypto deposits via P2P: avoids the Indian rail but triggers Schedule VDA, Section 115BBH plus Section 115BBJ. Friend-funded offshore deposits where the friend is non-resident: triggers FEMA on the friend’s side if the friend is an NRI funding a resident-controlled account, and PMLA layering if the structure is artificial. Cross-border travel to neighbouring jurisdictions to deposit and play from a foreign IP: works only if the player is physically outside India for the entire duration of play, which most courts and the ED read narrowly; brief day-trip play is still caught because the bank account remains an Indian resident account.
NRI special section: PROGA scope, Schedule FA and the foreign-rail option
NRIs reading this guide from Dubai, Singapore, London, Toronto, Sydney or San Francisco have a different position from resident Indians, and the differences are material. This section covers the four points that matter.
Territorial scope of PROGA Section 5
PROGA Section 5 prohibits supply “to any person located within the territory of India”. The “located within” test is geographic, not citizenship-based. An NRI physically outside India who places a bet on an offshore site from a foreign IP, funded by a foreign bank account, is not caught by Section 5 because the player is not located in Indian territory. The operator is not committing an Indian offence by serving that player. The Income Tax position remains separate and is covered below.
What FEMA actually catches for an NRI
FEMA applies to “persons resident in India” and to specific cross-border transactions involving residents. An NRI is a person resident outside India under FEMA Section 2(w). NRO and NRE accounts are governed by separate FEMA Schedule III rules. If an NRI funds an offshore betting account from an NRE account (overseas-earned funds), FEMA does not apply because NRE funds are freely transferable. If an NRI funds from an NRO account (India-source funds), the rupee outward from NRO has its own remittance limit (currently 1 million USD per FY) and the purpose code must be permitted; offshore betting is not a permitted purpose, so an NRO outward for betting can trigger Section 8 on the NRO side. The clean route for an NRI is NRE-only, foreign-IP-only.
Schedule FA reporting if the NRI files in India
Even an NRI who is treated as a non-resident for income tax purposes (under the Section 6 stay tests) generally does not file Schedule FA, because Schedule FA applies only to “ordinarily resident” individuals. So an NRI who is a clean non-resident for the year does not have a Schedule FA obligation on an offshore betting wallet. The trap is the “Resident but Not Ordinarily Resident” (RNOR) status, which applies for 2 to 3 years after return to India for many returning NRIs. RNORs do file Schedule FA on foreign assets and the offshore betting wallet must be disclosed.
India-source winnings credited to Indian accounts
If an NRI has India-source winnings (e.g. winnings credited to an NRO account because the operator pays in INR) or if winnings are credited to an Indian resident account belonging to the NRI, Section 115BBJ applies on the India-source portion and the standard 30 percent flat rate kicks in. Schedule OS reporting on ITR-2 is required even for an NRI in respect of India-source winnings. The cleanest position for an NRI is to keep all betting flows in foreign jurisdictions, funded from NRE or foreign accounts, with no India touch.
NRI risk-score reading in the widget above
The OffshoreRiskScore widget at the top of this page returns a slightly lower score for NRI residency than for resident Indian, reflecting the absence of PROGA Section 5 supply-side capture when the NRI plays from outside India. The Schedule FA and FEMA risks remain in the verdict text because they apply in specific NRI fact patterns, and the widget defaults to a conservative reading.
Frequently asked questions
1. Are offshore betting sites legal for Indian residents in 2026?
No. Under PROGA Section 5 (effective 22 August 2025, fully enforced 1 May 2026), offshore operators supplying any online money game to a person located in Indian territory commit an offence. The operator is the offender under Section 5; the player is exposed under FEMA Section 8 and the Income Tax Act. No offshore operator is licensed to serve Indian residents in May 2026.
2. Is 1xBet legal in India?
No. 1xBet is on the MeitY ISP block list since 14 March 2026 and on the RBI payment block list since 1 May 2026. The Enforcement Directorate has filed PROGA Section 5 complaints and PMLA attachment orders against the entities behind 1xBet. The 2024 KYC data leak adds a separate data-protection concern. Risk score: 9 to 10 on the widget above.
3. Is Betway legal in India?
No. Betway operates under Malta licence and was on the original RBI block list. Same legal position as 1xBet: prohibited supply under PROGA Section 5, payment rails blocked since 1 May 2026.
4. Is 10CRIC legal in India?
No. 10CRIC holds a Costa Rica licence and is on the MeitY block list. Same PROGA Section 5 position as 1xBet.
5. What happens if I deposit on 1xBet via UPI today?
The UPI app will likely show a transaction declined error because the beneficiary VPA is on the NPCI block list. If the deposit succeeds (which can still happen on edge-case routes), the home bank will detect the pattern within 24 to 48 hours and place an EDD freeze, then issue a source-of-funds documentation request, then report to FIU-IND if betting is the confirmed purpose.
6. What happens if I withdraw winnings from 1xBet to my Indian bank?
The withdrawal is held by the payment aggregator under compliance review. The operator typically reverses the withdrawal to its own holding wallet within 14 to 30 days. The Indian bank places the account on EDD on detection. The case is reported to FIU-IND. Recovery of the held funds is not legally enforceable in India because gambling debts are not enforceable contracts.
7. Can I use a VPN to access offshore betting sites legally?
No. VPN tunnelling defeats the DNS block but does not change the underlying PROGA Section 5 prohibition or the FEMA Section 8 exposure. The payment rail is blocked at the bank issuer layer, not at the ISP layer, so the VPN does not help on deposits. The IT Rules amendment Section 12 also creates a separate question on whether VPN providers must log Indian-IP access to blocked domains; that question is pending in the Delhi High Court.
8. Do I have to pay tax on offshore betting winnings even if I cannot withdraw?
Yes. Section 115BBJ taxes winnings on accrual under the deposit-less-withdrawal formula, not on receipt. So if your 1xBet wallet shows a positive net winnings figure for FY 2025-26, the tax is payable on that figure even if the withdrawal is stuck or reversed. Hardship relief under Section 119 has been claimed in some pending cases but no clear precedent exists.
9. What is the tax rate on offshore betting winnings?
Flat 30 percent under Section 115BBJ, no slab benefit, no loss set-off, no deduction other than the standard deposit-less-withdrawal computation, plus health and education cess at 4 percent of the tax (so 31.2 percent effective).
10. Do I need to disclose my 1xBet wallet on Schedule FA?
Yes, if you are a resident Indian (including Resident but Not Ordinarily Resident) and the wallet had any balance during FY 2025-26. The disclosure includes the operator name, the wallet identifier, the country of incorporation (Curacao for 1xBet), the opening balance, the peak balance and the closing balance. Non-disclosure is a Black Money Act 2015 offence.
11. What is the penalty for non-disclosure of an offshore betting wallet on Schedule FA?
10,00,000 rupees per year of non-disclosure under Section 50 of the Black Money Act 2015, plus prosecution under the same Act carrying up to 10 years rigorous imprisonment. No compounding is available under the 2015 Act, unlike FEMA.
12. Can the Enforcement Directorate prosecute a small individual offshore player?
The ED has discretion under FEMA Section 16 and PMLA Section 50 to issue notices to any contravener. For amounts below 10,00,000 rupees, the typical outcome is compounding under FEMA Section 15 with a settlement of 30 to 100 percent of the amount, plus closure. For amounts above 50,00,000 rupees the ED is more likely to prosecute formally. The 12 lakh and 4.6 lakh case studies above sit in the typical compounding band.
13. Are crypto deposits to offshore betting sites safer than UPI?
No. Crypto deposits face Section 115BBH 30 percent on disposal plus Section 194S 1 percent TDS plus Schedule VDA disclosure on every transaction, in addition to Section 115BBJ on winnings, FEMA Section 8 on the underlying cross-border purpose, and Schedule FA on the wallet balance. The Indian crypto exchange reports under PMLA Section 12 once the transfer to a known operator wallet is detected. The crypto rail is procedurally heavier, not lighter.
14. Is Stake.com legal in India?
No. Stake.com is on the MeitY block list. The crypto-only model does not change the PROGA Section 5 supply-side prohibition, the FEMA exposure, the Section 115BBJ tax, or the Schedule FA and Schedule VDA disclosure obligations. Risk score on the widget: 9 to 10.
15. What about Bet365? It used to work fine for Indian players.
Bet365 is on the MeitY block list since 14 March 2026 and on the RBI payment block list since 1 May 2026. Bet365 has a relatively clean operator track record on withdrawals historically, which is why the withdrawal-stuck risk in the matrix is lower than 1xBet or Stake.com, but the legal position under PROGA Section 5 is identical: prohibited supply. The licence in Malta and Gibraltar does not change the Indian-side prohibition.
16. Can I claim ignorance of the law for offshore deposits made before 1 May 2026?
Partially. Deposits made between 22 August 2025 (PROGA assent) and 1 May 2026 (full enforcement) sit in a transition window where some defences exist on the FEMA side, particularly if the deposit was via a payment rail not yet blocked. The ED has signalled it will not pursue compounding on small transition-window amounts. For deposits on or after 1 May 2026, no transition defence exists.
17. What is the RBI 28 April 2026 advisory in plain English?
It is the document that instructed every scheduled commercial bank, payment aggregator and NPCI to block payment flows to a published list of 357 offshore betting operators with effect from 1 May 2026, and to report flagged transactions to FIU-IND under PMLA 2002 Section 12. It is the payment-rail enforcement layer of the PROGA stack.
18. How long does an EDD freeze typically last?
7 to 14 days on first detection, 30 days on second detection inside 90 days, escalating to a restricted-debit status on the account for up to 24 months once a FIU-IND STR is filed. Recovery times for stuck funds at offshore operators run 28 to 65 days when recovery is possible at all.
19. Can I sue an offshore operator in an Indian court to recover stuck winnings?
No. Section 30 of the Indian Contract Act 1872 makes wagering contracts unenforceable, and PROGA Section 5 makes the underlying activity prohibited. Indian courts will dismiss the claim at the threshold. Consumer forums have the same jurisdictional bar. RBI Sachet has no jurisdiction over offshore operators. The operator can be sued in the licensing jurisdiction (Curacao, Malta) but the cost and difficulty make it impractical for amounts below 50,00,000 rupees.
20. What legal alternatives exist for cricket betting in India 2026?
Free-to-play fantasy (Dream11 coins-only mode, MPL FTP), licensed live casinos in Goa and Sikkim for visit-style play, and home games under the state-act dwelling-house carve-out. There is no legal paid online cricket betting route inside India in May 2026. See the cricket betting in India: legal alternatives in 2026 guide for full state-by-state alternatives.
21. What about Diwali Teen Patti at home? Is that affected?
No. PROGA Section 2(j) defines an online money game, and physical home games are not online. Most state gambling acts carve out games played in a private dwelling house among friends or relatives, provided the dwelling is not held out for profit and no commission is taken. Properly structured Diwali home games remain legal across most of India. Tax on winnings above 10,000 rupees per occasion remains under Section 115BB.
22. Is offshore betting legal for NRIs?
PROGA Section 5 does not catch the NRI personally if the NRI is physically outside India and funds from a foreign or NRE account. The Income Tax position depends on residency under Section 6. Clean non-resident NRIs have no India tax filing on foreign-source betting income. RNOR NRIs and those with India-source credits do file Schedule FA and Schedule OS. See the NRI special section above.
23. What records should I keep if I have past offshore deposits?
For any offshore deposits between 1 April 2025 and 31 March 2026: dated bank statements showing the debit, the operator name, the wallet identifier, the opening and closing balances at the operator, copies of all KYC documents submitted to the operator, copies of any tax-related communications. These records support Schedule FA, Schedule OS and any future FEMA compounding application.
24. Is the offshore betting block permanent or is it being challenged?
The Karnataka High Court dismissed the 1xBet challenge to the ISP block on 14 March 2026. The Delhi High Court is hearing a separate challenge to the IT Rules Section 12 amendment, with reserved orders expected mid-2026. The Bombay High Court ruling in Skill Lotto Solutions vs Union of India (2025) confirmed the supply-side reading of PROGA Section 5. None of the pending challenges question the underlying PROGA prohibition; they question specific procedural aspects of the block list maintenance. The block is functionally permanent for the foreseeable future.
25. What is the single most important thing for an Indian player to know about offshore betting in 2026?
The supply is illegal, the bank rail is blocked, the FEMA exposure is real, the tax is owed even on stuck winnings, the Schedule FA disclosure is mandatory, and no Indian court can compel withdrawal. The combination means the expected value of offshore play for a resident Indian in 2026 is negative even before the operator’s house edge, because the compliance, FEMA and tax burden alone exceeds typical recreational stakes. The legal alternatives (FTP, Goa/Sikkim, home games) exist and are clean. Run the OffshoreRiskScore widget above before any deposit, and read the linked guides on PROGA Act 2025: full section-by-section breakdown, FY 2025-26 ITR walkthrough for offshore winnings and 30% TDS on winnings: Section 194BA guide before any related ITR filing.
Version note
This guide is current as of 21 May 2026, 3 weeks after the 1 May 2026 PROGA full enforcement milestone. The RBI block list count (357 domains), the stuck deposit aggregate (approximately 400 crore rupees), the ED complaint count (11 entities), and the case study figures all reflect the position at the time of writing. We update this page on the 21st of every month. If you are reading this in late June 2026 or beyond, expect the block list and the enforcement statistics to have grown; the underlying legal position under PROGA Section 5, IT Rules Section 12, RBI advisory, FEMA Section 8, Section 115BBJ, Section 115BBH, Section 194S, Schedule FA, Schedule OS and Schedule VDA remains in force.
If you have a specific scenario the widget does not cover, or a case study you would like to contribute anonymously, write to the editorial team via the contact page. Particular interest in NRI fact patterns, RNOR returnees in their first FY back in India, and crypto-rail stuck-withdrawal cases above 5,00,000 rupees.