SEBI Securities Market TechSprint

The rapid advancement of generative AI has introduced a new class of threats to the securities market ecosystem. Attackers are now capable of creating hyper-personalised phishing emails crafted using large language models, synthetic voice calls impersonating company executives or regulators, deepfake videos of CEOs, Chief Investment Officers, and market experts, and AI-generated social media content designed to manipulate retail investor behaviour. These attacks target brokers, investors, and market infrastructure institutions, with retail investors and first-generation investors on social media platforms being particularly vulnerable.

Simultaneously, a parallel and equally serious gap exists on the other side — the authenticity of legitimate financial communications. There are currently limited mechanisms to verify that a communication purportedly from SEBI, a stock exchange, a listed company, or a registered intermediary is genuine. This absence of an authentication framework compounds the harm caused by synthetic media attacks, as investors have no reliable way to distinguish official communications from sophisticated impersonations.

Together, these two dimensions — detection of malicious synthetic content and verification of authentic financial communications — constitute a systemic threat to market integrity and investor protection that existing infrastructure does not adequately address.

The securities market ecosystem operates under a continuously evolving regulatory framework. SEBI issues circulars, master circulars, notifications, and guidelines on an ongoing basis, each carrying specific obligations for one or more categories of market intermediaries — stockbrokers, depositories, asset management companies, registrar and transfer agents, investment advisers, and market infrastructure institutions.

This creates two distinct but deeply related compliance challenges.

The first is dynamic regulatory translation — the challenge of interpreting a new or amended regulatory requirement, mapping it to the affected intermediary's operational processes, and updating compliance workflows in a timely and consistent manner. Currently, this depends heavily on manual legal interpretation, internal compliance teams, and circular-by-circular tracking. The result is uneven implementation, delayed adaptation, and divergent interpretations across similarly situated intermediaries.

The second is ongoing compliance management — the challenge faced by compliance teams at intermediaries in tracking their existing regulatory obligations, mapping each obligation to evidence of fulfilment, maintaining audit trails, and identifying and remediating compliance gaps before they become regulatory findings. This is operationally intensive, often manual, and prone to gaps particularly in smaller intermediaries with limited compliance resources.

Both challenges share a common root: the regulatory framework exists as unstructured, human-readable text, while operational compliance systems require structured, machine-actionable rules. Bridging this gap — transforming regulatory intent into programmable, auditable compliance logic — is the core unsolved problem.

India's retail investors face two compounding barriers that limit effective participation in the securities markets.

First, despite holding investments across multiple demat and trading accounts with different brokers, investors lack a single consolidated view of their total holdings, exposure, and risk. This fragmentation across depositories, brokers, and asset classes creates inefficiencies in portfolio monitoring and impairs informed decision-making. While building blocks such as the Account Aggregator framework and the SEBI-NSDL-CDSL Unified Investor Platform exist, no integrated, analytics-rich solution currently provides a seamless, cross-asset portfolio intelligence experience for retail investors.

Second, retail participation remains heavily skewed towards equities, with limited awareness of and access to alternate investment instruments such as REITs, InvITs, corporate bonds, and other fixed-income products. This concentration is compounded by the lag between financial product innovation and investor comprehension — new instruments are regularly introduced, but investor understanding often lags, creating risks of mis-selling, unsuitable investment decisions, and shallow capital market participation. No integrated digital platform currently enables a retail investor to discover, understand, assess suitability for, and invest across multiple asset classes through a single interface.

Together, these gaps result in a fragmented, opaque, and inequitable investing experience — where sophisticated portfolio intelligence and multi-asset access remain the preserve of institutional investors and high-net-worth individuals, while retail investors navigate a disjointed ecosystem.

Small and Medium Enterprises (SMEs) are a critical engine of economic growth, yet their participation in public capital markets remains limited. A significant barrier to SME listings on the SME Exchange platform is the complexity and cost of preparing an IPO offer document. The process demands extensive involvement of merchant bankers, legal counsel, and compliance professionals — often spanning several months and incurring costs that are disproportionate to the size of the capital being raised. SME promoters, typically operating with lean teams and limited exposure to capital market requirements, find it difficult to navigate the disclosure framework independently, making them heavily reliant on intermediaries from the very outset.

SEBI recognises that simplifying the offer document preparation process is essential to deepening SME participation in the capital markets. Despite efforts to streamline listing requirements for SMEs, the drafting of a compliant offer document remains a time-intensive and resource-heavy exercise. There is a need for an innovative solution that allows SME issuers to capture their business, financial, and legal particulars — and generate a well-organised, disclosure-ready draft offer document. The solution must be accessible to promoters without specialist knowledge, maintain appropriate checks for accuracy and completeness, and preserve the role of authorised intermediaries in review and certification before any regulatory submission.