The moment your startup receives money from a foreign investor, the Foreign Exchange Management Act, 1999 governs that transaction - whether you know it or not. Most founders discover FEMA only when a penalty notice arrives, an RBI form is flagged during diligence for a Series B round, or a potential acquirer's legal team uncovers unfiled returns from three years ago. By that point, a problem that would have taken a few days to prevent can take months and significant legal fees to resolve.
This is not a compliance detail that can be deferred. Under FEMA, penalties for non-compliance can reach three times the amount involved in the contravention. In FY 2023–24 alone, enforcement actions under FEMA exceeded ₹3,800 crore, affecting startups and MSMEs alongside larger businesses. And Section 42 of FEMA makes the liability personal - every officer in default at the time of a contravention can be held individually liable, not just the company.
This guide covers everything a founder needs to understand about FEMA before receiving foreign funds - the regulatory framework, what changes recently, the mandatory filings, the instruments available, the sectors where foreign investment is restricted, and how to handle past violations if they exist.
What FEMA actually governs
The Foreign Exchange Management Act, 1999 replaced the much stricter Foreign Exchange Regulation Act (FERA) and reframed India's approach to cross-border money: from restricting foreign exchange to managing it. This is an important distinction for founders. FEMA is a civil law. Violations result in compounding penalties, not criminal prosecution - which means most problems can be regularised if addressed proactively and early.
FEMA governs four broad categories that a startup is likely to encounter:
Foreign Direct Investment (FDI) - foreign money coming into your startup in exchange for equity or equity-equivalent instruments. This is the category most relevant at seed and early growth stages.
External Commercial Borrowings (ECB) - foreign debt raised by Indian companies from overseas lenders, including foreign equity holders with at least 25% stake. ECB is governed by its own set of rules on end-use, minimum average maturity, and reporting.
Overseas Direct Investment (ODI) - when an Indian startup sets up a subsidiary, branch, or joint venture outside India. Relevant for startups building US holding structures, Singapore entities, or expanding internationally.
Remittances and current account transactions - payments to overseas contractors, SaaS vendors, salary to foreign employees, and similar cross-border operating payments.
Each category has its own regulatory framework, RBI reporting forms, and timelines. The most common compliance failures for early-stage startups involve FDI - specifically the failure to file, or the late filing of, RBI forms after receiving the first foreign investment.
The two routes for receiving foreign investment: automatic and approval
Under FEMA and the Foreign Exchange Management (Non-Debt Instruments) Rules, 2019, foreign investment in Indian companies flows through one of two routes.
The Automatic Route
Under the Automatic Route, foreign investors can invest in Indian startups without any prior approval from the RBI or the Government of India. No permission needs to be sought before accepting the funds. The startup simply needs to comply with the reporting requirements after the investment is made. The Automatic Route is available for most sectors and is the entry point for the vast majority of VC-backed and angel-backed startup investments in India.
The Government / Approval Route
For sectors where FDI is sensitive - defence, media, satellite, pharmaceuticals above certain thresholds, and others - prior approval from the relevant ministry or the Foreign Investment Facilitation Portal (FIFP) is required before accepting foreign funds. Investing first and seeking approval later is a FEMA violation. For most technology, SaaS, fintech, consumer, and B2B startups, the Automatic Route applies, but founders should verify their sector classification before proceeding.
Prohibited sectors
FDI is completely prohibited in certain sectors regardless of route. These include lottery businesses, gambling and betting including casinos, chit funds (except under certain conditions), real estate business or construction of farmhouses, tobacco manufacturing, and activities notified as prohibited under the Consolidated FDI Policy. If your startup's business model touches any of these areas, foreign investment is not permissible without a fundamental restructuring of the model.
Instruments for foreign investment in startups
How foreign money enters your startup matters as much as how much. The instrument - equity, convertible note, SAFE, or debt - determines which FEMA rules apply, what the valuation requirements are, and what reporting obligations follow.
Equity shares
The most straightforward instrument. Foreign investors receive ordinary equity shares. The startup must issue shares at or above fair market value as determined by a SEBI-registered Category I Merchant Banker or Chartered Accountant using a recognised valuation method (DCF or comparable approach for unlisted companies). Issuing shares below fair value to a foreign investor is a FEMA violation, even if both parties agreed to the price. After issuing shares, the startup must file Form FC-GPR within 30 days.
Compulsorily Convertible Instruments (CCDs and CCPs)
Compulsorily Convertible Debentures and Compulsorily Convertible Preference Shares are treated as FDI from the date of issue, not from the date of conversion. This means the FC-GPR filing obligation and the valuation requirement apply at the time the instrument is issued, not when it converts into equity.
Convertible Notes - the DPIIT startup advantage
Convertible Notes are an instrument specifically available to DPIIT-recognised startups. A Convertible Note allows a foreign investor to provide debt that converts into equity at a later date, subject to the following conditions under FEMA:
• Minimum investment of ₹25 lakhs per foreign investor in a single tranche
• The note must be converted into equity or repaid within five years of issuance
• Conversion pricing at the time of conversion must comply with FEMA fair valuation norms
• The startup must be DPIIT-recognised at the time of issuance
Convertible Notes give startups more flexibility at the seed stage - they allow investment before a formal valuation round, which is practically important for pre-revenue or early-traction startups.
However, the conversion and repayment obligations must be tracked carefully, because a convertible note that passes its five-year conversion deadline without action becomes a FEMA problem.
SAFE notes - an unresolved grey area
Simple Agreements for Future Equity (SAFEs) are widely used in US startup ecosystems but remain a regulatory grey area under FEMA. For a SAFE to be treated as FDI, it must be genuinely and unconditionally convertible into equity. SAFEs that include repayment clauses, uncapped valuations with no conversion timeline, or other features that make conversion conditional may be classified as ECB (foreign debt) rather than FDI - which triggers a completely different set of compliance obligations.
As of mid-2026, DPIIT lobbying for a SAFE-specific carve-out under the NDI Rules is ongoing, but no final notification has been issued. Founders using SAFEs with foreign investors should get instrument structuring advice before signing the term sheet.
Foreign debt / ECB
If your startup raises foreign debt - a loan from an overseas lender, a foreign shareholder with 25%+ stake, or an international financial institution - ECB rules apply. ECB has its own eligibility criteria, minimum average maturity requirements, end-use restrictions, and mandatory reporting. The borrower must submit Form ECB when the loan is drawn and Form ECB-2 monthly to report actual fund usage.
The mandatory FEMA filings every startup must know
This is where most startups run into trouble. FEMA compliance after receiving foreign funds is not a one-time exercise - it is an ongoing obligation with specific forms, specific portals, and hard deadlines.
Form FC-GPR - within 30 days of share allotment
Form FC-GPR (Foreign Currency - Gross Provisional Return) is the primary RBI filing for FDI. It must be filed within 30 days of the date of issue of capital instruments to the foreign investor - not within 30 days of receiving the money, but within 30 days of issuing shares. The filing is done through the RBI's FIRMS portal (Foreign Investment Reporting and Management System) and requires:
• Details of the foreign investor - name, country, investor category
• Details of capital instruments issued - type, number, price per share
• A valuation certificate confirming shares were issued at or above fair value
• FIRC (Foreign Inward Remittance Certificate) or bank certificate confirming receipt of funds
• KYC documents for the foreign investor
Missing the 30-day deadline is one of the most common FEMA violations found during startup diligence for later-stage rounds and M&A transactions. Late filing triggers a compounding requirement with the RBI, with a compounding fee of 0.025% of the amount per day of delay. File on time, and this problem never exists.
Form FC-TRS - within 60 days of transfer
Form FC-TRS (Foreign Currency - Transfer of Shares) must be filed when equity changes hands between a resident and a non-resident - for example, when an existing Indian shareholder sells shares to a foreign investor, or when a foreign investor transfers shares to another party. It must be filed within 60 days of receipt of consideration or transfer of shares, whichever is earlier.
Annual FLA Return - by 15 July every year
The Annual Return on Foreign Liabilities and Assets (FLA Return) must be filed by every Indian company that has received FDI or made overseas investments, by July 15 each year - regardless of whether there were any transactions during that year. The FLA return is filed through the RBI's FLAIR portal. Missing the FLA return can attract a penalty of ₹10,000 per return, and more importantly, flags the company in RBI monitoring systems, which can affect future regulatory approvals and diligence timelines.
For FY 2024–25, the RBI extended the FLA deadline to July 31, 2025 as a one-time procedural relief - but this extension does not change the baseline obligation or excuse past non-compliance.
Form ECB-2 - monthly, if ECB is outstanding
Startups with outstanding ECB (foreign loans or debt instruments) must file Form ECB-2 monthly through the FIRMS portal, reporting actual fund usage. This is a recurring obligation for as long as the ECB remains outstanding.
Important 2025 portal update - PRAVAAH
From May 1, 2025, the PRAVAAH portal became the mandatory digital channel for certain regulated-entity submissions, compounding applications, and regulatory queries to the RBI. FIRMS and FLAIR remain operational for FDI and FLA filings respectively, but founders and their advisors should be aware that the regulatory portal landscape is consolidating.
Valuation requirements - a common trap for early-stage rounds
Every time a startup issues shares to a foreign investor, the issue price must be at or above the fair market value determined by an independent valuation. For unlisted private companies, this valuation must be done by a SEBI-registered Category I Merchant Banker or a Chartered Accountant using a recognised method - Discounted Cash Flow (DCF) or a comparable company approach.
Issuing shares to a foreign investor at a price lower than the independently determined fair value - even with investor consent - is a FEMA violation. There is no mechanism to agree a discount for strategic investors or early backers when a foreign investor is involved. The valuation certificate must be obtained before shares are issued, not after.
This catches founders who informally agree a price with an investor and close the transaction before engaging a valuer. The practical fix is straightforward: commission the valuation simultaneously with term sheet negotiations, so it is ready before the investment closes.
What recent changes mean for startups in 2025–2026
The FEMA framework has seen several significant updates in the past 18 months that founders and their advisors need to be current on.
August 2024 - cross-border share swaps explicitly permitted
The Foreign Exchange Management (Non-Debt Instruments) Fourth Amendment Rules, 2024, notified on August 16, 2024, explicitly liberalised cross-border share swaps. This means Indian startups can now use their own shares as consideration to acquire foreign companies or to facilitate mergers - a pathway that was previously a grey area requiring case-by-case RBI approval. For startups with cross-border M&A ambitions, this is a meaningful structural change.
September 2024 - new Compounding Proceedings Rules
The Foreign Exchange (Compounding Proceedings) Rules, 2024, notified on September 12, 2024 (operational from October 1, 2024), replaced the 2000 Rules. The application fee is now ₹10,000, there is a 180-day order timeline, and the process is aligned with the PRAVAAH portal. Under April 2025 amendments to the compounding framework, the compounding amount for minor, inadvertent, or first-time violations is capped at ₹2 lakh - making early voluntary disclosure more financially predictable and cost-effective for startups with historical gaps.
January 2025 - downstream investment clarification
The January 2025 RBI Master Direction update provided critical clarifications on downstream investment - investment by an Indian company that has received FDI into another Indian entity. It clarified share swaps, deferred consideration, and reclassification reporting for Foreign Owned or Controlled Companies (FOCCs), and put downstream investment at par with FDI for many treatment purposes, simplifying Form DI filings for startups that invest in other Indian companies after receiving foreign capital.
2026 - ECB framework simplified
The Foreign Exchange (Borrowing and Lending) (First Amendment) Regulations, 2026 simplified the ECB framework with implications for instruments that may be classified as ECB and for ECB-2 return obligations. Startups using foreign debt instruments should review the updated framework with a FEMA advisor.
Penalties - and how to regularise past violations
FEMA's penalty structure is significant enough that founders should take it seriously from day one.
Under Section 13 of FEMA, the penalty for a contravention can be up to three times the amount involved, or ₹2 lakh, whichever is higher, plus a continuing penalty of ₹5,000 per day for as long as the violation persists. Under Section 42, this liability is personal - every officer of the company who was in default at the time of the contravention is individually liable.
The February 2025 Enforcement Directorate adjudication order against BBC WS India illustrates what this looks like in practice: three directors were personally held liable, with a total demand of ₹1.14 crore for FEMA violations related to their company's foreign transactions.
Compounding - the safety valve
If your startup has FEMA violations - late FC-GPR filings, missing FLA returns, incorrect instrument classification - the right approach is almost always to proactively compound them. Compounding is a voluntary process where the company discloses the violation to the RBI, pays a compounding fee, and receives a closure order. Once compounded, the violation is treated as resolved and no further enforcement proceedings are initiated.
The key word is voluntary. Waiting for the Enforcement Directorate to discover a violation is significantly more expensive and disruptive than approaching the RBI compounding authority proactively. Under the 2024 Compounding Rules, the compounding fee for minor, first-time, or inadvertent violations is now capped at ₹2 lakh. For late FC-GPR filing, the compounding fee is 0.025% of the amount per day of delay - which is manageable for most seed-stage rounds if addressed early.
Startups that discover historical FEMA gaps during pre-Series B diligence preparation or M&A readiness reviews should engage a FEMA specialist immediately and initiate compounding before the issue surfaces in investor or buyer diligence.
The DPIIT recognition advantage
Startups recognised by the Department for Promotion of Industry and Internal Trade under the Startup India programme have access to specific FEMA advantages that unrecognised companies do not.
The most important is the Convertible Note instrument - which as discussed above allows foreign investors to provide debt convertible into equity within five years without triggering the full FDI reporting requirements at the time of initial investment. Additionally, DPIIT-recognised startups may benefit from certain exemptions from pricing guidelines and typically receive faster processing on RBI applications. If your startup is not yet DPIIT-recognised and is planning to raise foreign funds, applying for DPIIT recognition before closing the investment round is worth the effort.
Practical checklist before receiving foreign funds
These are the steps every founder should take before the wire from a foreign investor hits the bank account.
Verify your sector. Confirm that your business model falls under the Automatic Route and is not in a prohibited or restricted sector. Check your NIC code classification against the current Consolidated FDI Policy.
Obtain a valuation certificate. Commission an independent fair value determination from a SEBI-registered Category I Merchant Banker or qualified CA before finalising the share price. The certificate must precede the issue of shares.
Collect KYC from your investor. The FIRMS portal FC-GPR filing requires complete KYC documentation for the foreign investor. Collect this at the term sheet stage, not after the investment closes.
Classify the instrument correctly. Ensure that the investment instrument - equity, CCD, CCP, Convertible Note, or other - is correctly classified under FEMA before structuring the term sheet. Incorrect instrument classification is one of the most common and expensive FEMA errors in startup diligence.
Set your FC-GPR calendar. The moment shares are allotted, the 30-day FC-GPR filing deadline starts. Put a hard deadline in your calendar and assign ownership of the filing to a specific person before the transaction closes.
Set your annual FLA reminder. July 15 every year, for every year your company has outstanding foreign liabilities or assets. Create a recurring reminder today.
Engage a FEMA advisor before, not after. FEMA structuring advice is most valuable at the term sheet stage, before the investment instrument is finalised. Retrofitting compliance after the transaction is closed is more expensive, more complex, and sometimes not fully possible.
Conclusion
FEMA compliance is not a post-fundraising formality - it is a pre-condition for clean fundraising, clean M&A, and clean international operations. Every Indian startup that receives foreign investment is immediately inside a specific regulatory framework with hard filing deadlines, mandatory valuation requirements, and personal liability for directors who miss them.
The good news is that the framework is navigable, and recent changes - the 2024 Compounding Rules, the August 2024 cross-border share swap liberalisation, the January 2025 downstream investment clarification, and the 2026 ECB simplification - have made it more structured and more founder-friendly than it was even two years ago. FEMA violations, where they exist, can usually be regularised through compounding if approached proactively.
The founders who stay out of trouble are not those who understand every technical detail of FEMA. They are those who engage the right advisors early - before the term sheet is signed, before shares are issued, and before the first foreign wire lands. That investment in early compliance costs far less than the alternative.
If your startup is planning to raise foreign investment or has existing FEMA filings that need review, speak with our FEMA compliance team before your next funding round closes.
Frequently asked questions
1. What is FEMA compliance for startups?
FEMA compliance means following the rules under the Foreign Exchange Management Act, 1999 for all cross-border transactions. For a startup receiving foreign investment, this includes filing Form FC-GPR within 30 days of share allotment, following pricing and valuation norms, complying with sectoral caps, and filing an annual FLA return with the RBI.
2. Do Indian startups need RBI approval to receive foreign investment?
Most Indian startups can receive FDI under the Automatic Route without prior RBI or Government approval. However, startups in sensitive sectors must obtain approval under the Government Route before receiving foreign funds. Prohibited sectors cannot receive FDI under any route.
3. What is Form FC-GPR and when must it be filed?
Form FC-GPR (Foreign Currency - Gross Provisional Return) is the primary RBI filing for FDI. It must be filed within 30 days of the date of issue of capital instruments to a foreign investor, through the FIRMS portal. Missing this deadline is a FEMA violation that requires compounding with the RBI.
4. What is the penalty for FEMA non-compliance?
Under Section 13 of FEMA, the penalty can be up to three times the amount involved in the contravention, or ₹2 lakh, whichever is higher. A continuing penalty of ₹5,000 per day applies for ongoing violations. Under Section 42, directors can be held personally liable. Most violations can be regularised through the compounding mechanism.
5. Can a startup use a Convertible Note with a foreign investor?
Yes, but only if the startup is DPIIT-recognised. A Convertible Note with a foreign investor requires a minimum investment of ₹25 lakhs per investor in a single tranche and must be converted into equity or repaid within five years.
6. Are SAFE notes FEMA-compliant in India?
SAFEs remain a regulatory grey area under FEMA as of 2026. Depending on their terms, they may be classified as FDI or as ECB (foreign debt), which triggers different compliance obligations. Founders using SAFEs with foreign investors should obtain instrument classification advice before signing.
7. What is the FLA Return and when is it due?
The Annual Return on Foreign Liabilities and Assets (FLA Return) must be filed by July 15 every year by every Indian company that has received FDI or made overseas investments - even if there were no transactions in the relevant year. It is filed through the RBI's FLAIR portal.
8. What is compounding under FEMA?
Compounding is a voluntary process where a company discloses a FEMA violation to the RBI, pays a compounding fee, and receives a closure order. Once compounded, the violation is treated as resolved. Under the 2024 Compounding Rules, the fee for minor or first-time violations is capped at ₹2 lakh. Proactive compounding is significantly better than waiting for Enforcement Directorate action.
9. What valuation is required when issuing shares to a foreign investor?
Shares must be issued at or above fair market value determined by an independent valuation from a SEBI-registered Category I Merchant Banker or Chartered Accountant. Issuing shares below fair value - even with investor agreement - is a FEMA violation.
10. Does FDI compliance apply to NRI investors?
Yes. FDI rules apply to investments by Non-Resident Indians. However, NRIs can invest through NRE accounts on a repatriable basis or through NRO accounts on a non-repatriable basis, and the treatment differs under FEMA depending on which route is used.
11. What changed in FEMA for startups in 2024 and 2025?
Key changes include the August 2024 liberalisation of cross-border share swaps as an explicit M&A pathway, the September 2024 new Compounding Proceedings Rules with a 180-day timeline and ₹10,000 application fee, and the January 2025 RBI Master Direction update clarifying downstream investment treatment for FOCCs. The 2026 ECB framework amendments also simplified borrowing and lending rules.
12. What sectors are prohibited for FDI in India?
FDI is completely prohibited in lottery businesses, gambling and betting including casinos, real estate business and construction of farmhouses, tobacco manufacturing, and certain other notified activities. Founders in adjacent sectors - gaming, real money games, and certain financial services - should verify their sector classification against the current Consolidated FDI Policy before accepting foreign funds.
13. What happens if FEMA violations are discovered during due diligence?
Undisclosed FEMA violations discovered during Series B, growth-stage, or M&A diligence typically must be compounded with the RBI before the transaction can close. This can delay transactions by weeks or months and add legal and compliance costs. The right approach is to identify and compound any historical violations before entering a fundraising or M&A process.
14. Does DPIIT recognition help with FEMA compliance?
Yes. DPIIT-recognised startups have access to the Convertible Note instrument for foreign investors, certain exemptions from pricing guidelines, and typically receive faster processing on RBI applications. Applying for DPIIT recognition before closing a foreign investment round is recommended for eligible startups.