SEBI Mandate Algo Trading

Why You Need a Static IP for Algo Trading in India: The Complete Guide (2025–2026)

SEBI has made static IP whitelisting mandatory for all broker API trading. If you trade using TradingView webhooks, Pine strategies, or any algo trading tool with Zerodha, Dhan, Fyers, Angel One, or any Indian broker — this guide explains everything you need to know.

TS
TradeSteady Algo
Published: April 2025 Updated: 12 min read

In This Article

  1. What Is a Static IP Address?
  2. Why Has SEBI Made It Mandatory?
  3. How This Affects You as a Retail Algo Trader
  4. Broker-wise IP Whitelisting Requirements
  5. Why Brokers Are Strictly Enforcing This
  6. Static IP vs VPN vs Cloud Server vs Home Broadband
  7. What Happens If You Don't Have a Static IP
  8. How to Get a Static IP for Algo Trading
  9. How to Whitelist Your IP with Popular Brokers
  10. Common Mistakes to Avoid
  11. Frequently Asked Questions

1. What Is a Static IP Address?

Every device connected to the internet has an IP (Internet Protocol) address — a unique numerical label like 103.214.56.78. This is how servers, websites, and APIs identify where a request is coming from.

There are two types of IP addresses:

Think of it this way: A dynamic IP is like a temporary hotel room number — it changes every visit. A static IP is like your permanent home address — it never changes, and anyone who needs to find you can always reach you there.

For algo trading, your broker needs to know exactly which IP address your orders are coming from. If your IP keeps changing, the broker can't verify it against their whitelist — and your orders get rejected.

2. Why Has SEBI Made Static IP Mandatory?

In September 2023, the Securities and Exchange Board of India (SEBI) released a comprehensive framework for algorithmic trading by retail investors. One of the core requirements is IP whitelisting for all API-based order placement.

The mandate became effective from April 2025 onwards, and here's why SEBI introduced it:

Traceability and Accountability

SEBI wants every single algo order to be traceable back to a specific person, a specific application, and a specific IP address. If there's any market irregularity — spoofing, manipulation, or unusual trading patterns — regulators need to identify exactly who placed those orders and from where.

Preventing Unauthorized Access

Before IP whitelisting, anyone with stolen API credentials could place orders from any location in the world. IP whitelisting adds a second layer of security: even if someone gets your API key, they can't place orders unless they're coming from your registered IP address.

Market Integrity

Algo trading now accounts for a significant portion of daily trading volumes on Indian exchanges (NSE, BSE, MCX). SEBI's framework ensures that this growing segment operates within a controlled, auditable environment. IP whitelisting is one of several controls (along with order rate limits and algo registration) designed to keep automated trading transparent and accountable.

Audit Trail Requirements

Brokers are now required to maintain detailed logs of all API orders — including the originating IP address, timestamp, order parameters, and the associated trading account. These logs must be available for regulatory audit at any time. Without a static, identifiable IP, this audit trail is meaningless.

Key Takeaway

SEBI's IP whitelisting mandate isn't about restricting retail traders — it's about ensuring every automated order is traceable and accountable. It protects both the market and the trader.

3. How This Affects You as a Retail Algo Trader

If any of the following applies to you, you need a static IP:

Important: This applies to all order placement via broker APIs — not just high-frequency trading. Even if you place just one trade per day through a webhook, you need a whitelisted static IP. The SEBI mandate makes no distinction between frequency or volume.

The mandate does not apply to:

4. Broker-wise IP Whitelisting Requirements

Every major Indian stock broker now requires or is in the process of requiring static IP whitelisting. This is a SEBI mandate — brokers have no choice but to enforce it. Here's the current status:

Broker Status Max IPs Where to Whitelist
Zerodha (Kite Connect) Strictly Enforced 1 per app Kite Connect Developer Portal → App Settings
Dhan Strictly Enforced Up to 5 Dhan Developer Portal → API App → Whitelisted IPs
Fyers Strictly Enforced Up to 5 Fyers API Dashboard → App → IP Whitelist
Angel One (SmartAPI) Strictly Enforced Up to 5 SmartAPI Portal → My Apps → IP Settings
Upstox Strictly Enforced Up to 3 Upstox Developer Console → App → IP Whitelist
Groww Strictly Enforced Up to 3 Groww Developer Portal → API App → IP Settings
5paisa Strictly Enforced Up to 3 5paisa Developer Portal → App Settings
IIFL Securities Strictly Enforced Up to 5 IIFL API Portal → App Configuration
Kotak Securities (Neo) Strictly Enforced Up to 3 Kotak Neo Developer Portal → App → IP Settings
ICICI Direct (Breeze) Strictly Enforced Up to 3 ICICI Direct API Portal → App Settings
HDFC Securities Strictly Enforced Up to 3 HDFC Securities API Portal → IP Configuration
Motilal Oswal Strictly Enforced Up to 3 Motilal API Portal → App → IP Whitelist
Alice Blue Enforced Varies Alice Blue API Portal / Contact support
Flattrade Enforced Varies API settings page
Finvasia (Shoonya) Enforced Varies Shoonya API settings / Contact support

Status as of April 2026. Broker policies may change — always verify on the broker's developer portal.

5. Why Brokers Are Strictly Enforcing This

Brokers aren't doing this by choice — they're doing it because they have to. Here's why the enforcement is strict and getting stricter:

Regulatory Penalties

SEBI can impose heavy penalties on brokers who allow unregistered API access. Brokers like Zerodha, Dhan, and Angel One have publicly stated that they will reject all API orders from non-whitelisted IPs to remain compliant. For a broker, the cost of a SEBI penalty far outweighs the inconvenience to a few users.

Liability Protection

If an unauthorized trade causes market disruption and the broker allowed it from an unregistered IP, the broker is liable. IP whitelisting gives brokers a clear audit trail and a defense: "We only allowed orders from IPs that the user explicitly registered."

Exchange-level Requirements

NSE and BSE have their own surveillance systems that flag unusual patterns. When they investigate, they ask brokers to provide IP-level logs. Brokers without proper IP tracking face exchange-level scrutiny.

Security for Users

IP whitelisting protects traders too. If your API key is compromised, the attacker still can't place orders unless they route traffic through your registered IP. It's an additional security layer that benefits everyone.

The trend is clear: Every Indian broker will eventually enforce strict IP whitelisting for all API access. Brokers that haven't fully enforced it yet are in the process of rolling it out. Getting a static IP now means you're prepared regardless of when your specific broker tightens enforcement.

6. Static IP vs VPN vs Cloud Server vs Home Broadband

Traders often look for alternatives. Here's an honest comparison of all the options:

Option IP Stability Broker Acceptance SEBI Compliant Monthly Cost
Dedicated Residential Static IP Never changes All brokers Yes ₹499
VPN (NordVPN, ExpressVPN, etc.) Changes on reconnect Often blocked No ₹300–800
Cloud Server (AWS, GCP, DO) Static if configured Some block DC IPs Risky ₹500–2000+
Home Broadband (Jio, Airtel) Changes on restart Breaks whitelisting No ₹0 (existing)
ISP Static IP Add-on Fixed Yes Yes ₹500–1500+

Why VPNs Don't Work

Commercial VPNs like NordVPN or ExpressVPN give you shared IPs that are used by thousands of users. The IP changes every time you reconnect. Most importantly, brokers have lists of known VPN/datacenter IP ranges and actively block them. Even if a VPN IP works today, it could be blocked tomorrow. SEBI also requires the IP to be uniquely attributable to you — a shared VPN IP doesn't meet this requirement.

Why Cloud Servers Are Risky

Running your algo on an AWS EC2 instance with an Elastic IP seems like a solution, but there are problems:

Why Home Broadband Doesn't Work

Your Jio Fiber, Airtel, or ACT broadband connection uses a dynamic IP. Every time your router restarts (power cut, ISP maintenance, or automatic refresh), you get a new IP. You'd have to update your broker whitelist every time this happens — which could be daily. Some ISPs offer static IP add-ons, but they're often expensive (₹500–1500/month) and require business-grade plans.

The Clear Winner

A dedicated residential static IP is the most reliable, cost-effective, and SEBI-compliant option. It's accepted by all brokers, never changes, and costs less than most alternatives.

7. What Happens If You Don't Have a Static IP

Without a whitelisted static IP, here's exactly what happens when your algo tries to place an order:

  1. Your signal fires — TradingView alert triggers, your Pine script generates a signal, or your custom script calls the broker API
  2. The order request reaches your broker's API server — The broker checks the originating IP address
  3. IP check fails — Your IP is not in the whitelist
  4. Order is rejected — You get a 403 Forbidden or "IP not whitelisted" error
  5. You miss the trade — The market moves, and your signal is wasted
Real impact: This isn't a one-time problem. Every single order from a non-whitelisted IP will fail. If your algo generates 10 signals per day, you'll miss all 10. And you won't know about it until you check your logs — which could be hours later if you're not monitoring in real-time.

Some traders discover this the hard way: they set up their algo, everything looks correct, the first signal fires during market hours, and... nothing happens. The order never reaches the exchange. The alert log shows "IP not whitelisted" and the trading opportunity is gone.

8. How to Get a Static IP for Algo Trading

TradeSteady Algo offers a dedicated Indian residential static IP specifically designed for broker API whitelisting. Here's how it works:

Same IP on renewal: When you renew your subscription, you keep the exact same IP address. You never need to update your broker whitelists after the initial setup. Set it once, forget about it.

What Makes TradeSteady's Static IP Different?

9. How to Whitelist Your IP with Popular Brokers

Once you have your static IP, here's how to whitelist it with the most popular Indian brokers:

Zerodha (Kite Connect)

  1. Go to Kite Connect Developer Portal (developers.kite.trade)
  2. Open your app under My Apps
  3. Go to App Settings
  4. In the Postback/IP section, enter your static IP address
  5. Save changes

Note: Zerodha allows only 1 IP per app. API calls from any other IP will return 403 Forbidden.

Dhan

  1. Go to Dhan Developer Portal
  2. Open your API App settings
  3. Find the Whitelisted IPs section
  4. Add your static IP (you can add up to 5)
  5. Save

Fyers

  1. Go to Fyers API Dashboard
  2. Select your app
  3. Navigate to IP Whitelist
  4. Add your static IP
  5. Save changes

Angel One (SmartAPI)

  1. Go to SmartAPI Portal (smartapi.angelone.in)
  2. Open My Apps
  3. Go to IP Settings
  4. Add your static IP (up to 5 allowed)
  5. Submit

Upstox

  1. Go to Upstox Developer Console
  2. Select your app
  3. Navigate to IP Whitelist section
  4. Add your static IP (up to 3 allowed)
  5. Save
For other brokers: The process is similar — find the API/developer portal, locate the IP whitelisting or IP settings section, and add your static IP. If you can't find it, contact your broker's API support team.

10. Common Mistakes to Avoid

Based on our experience helping thousands of algo traders, here are the most common mistakes:

Mistake 1: Using Your Home IP and Assuming It Won't Change

Your home broadband IP will change. It might work for a few days or even weeks, but eventually your ISP will assign you a new IP, your orders will start failing, and you'll scramble to figure out why.

Mistake 2: Using a VPN and Thinking It's the Same as a Static IP

VPN IPs are shared, change on reconnection, and are often flagged by brokers. A VPN does not give you a stable, whitelisted IP. It's not a substitute.

Mistake 3: Whitelisting the Wrong IP

Make sure you whitelist the IP that your orders originate from — not your personal device's IP. If you use a webhook service like TradeSteady, the IP that matters is the one from which TradeSteady makes the API call to your broker, not your laptop's IP.

Mistake 4: Not Monitoring Expiry

If your static IP subscription expires, your orders will start failing silently. Set a reminder to renew before expiry. TradeSteady sends email reminders, but it's good practice to keep track yourself.

Mistake 5: Thinking This Only Applies to "Big" Traders

The SEBI mandate applies to all API-based trading, regardless of volume. Whether you place 1 trade per week or 100 trades per day, if it goes through a broker API, you need a whitelisted IP.

11. Frequently Asked Questions

Can I use one static IP for multiple brokers?

Yes. You can whitelist the same IP address with Zerodha, Dhan, Fyers, Angel One, and any other broker. One IP is enough for all your broker accounts. You don't need a separate IP for each broker.

Will my IP change when I renew my subscription?

No. On renewal, you keep the exact same IP address. You never need to update your broker whitelists after the initial setup.

Is a static IP required for crypto trading (Binance, Delta)?

No. SEBI's IP whitelisting requirement applies only to Indian stock brokers (NSE/BSE/MCX). Crypto platforms do not require IP whitelisting for API access.

Can I use this IP with webhook providers other than TradeSteady?

Yes. You get full HTTP and SOCKS5 proxy credentials. You can use the IP with any trading tool, webhook platform, custom script, or bot that supports proxy configuration. The IP is not locked to TradeSteady.

How long does activation take?

Most IPs are activated within a few minutes after payment. In rare cases, it can take up to a few hours. Check your dashboard for real-time status.

What if I don't renew and my IP expires?

If your static IP expires, your broker API orders will fail because they'll originate from a non-whitelisted IP. TradeSteady sends email reminders before expiry so you can renew in time.

Is this a datacenter IP or a residential IP?

It's an ISP-grade residential IP from India. This is important because some brokers are beginning to flag or block known datacenter IP ranges. A residential IP is accepted by all brokers without issues.

Do I need any technical knowledge to set this up?

No. The process is straightforward: purchase the IP, copy it from your dashboard, and paste it in your broker's developer portal. If you use TradeSteady for webhooks, routing is automatic — you don't need to configure anything. If you need help, our team is available on WhatsApp.

Get Your Static IP Today

Dedicated Indian residential IP — ₹499/month • Same IP on renewal
Works with Zerodha, Dhan, Fyers, Angel One, Upstox, Groww & all Indian brokers

Buy Now — ₹499/month

Need help? Chat with us on WhatsApp

Share this article:

Related

Disclaimer · Terms · Privacy · FAQ