How SEBI Detects and Prosecutes Insider Trading

A SEBI order appears on the regulator's website naming an individual, often someone with no obvious public connection to the company involved, and describing in granular detail how that person bought shares days before a price sensitive announcement, sold soon after the news broke, and pocketed a specific, calculated profit.

Trades on Indian exchanges happen anonymously through brokers, with millions executing every single day. How does a regulator reconstruct, months or years later, exactly who bought what, exactly when, and exactly why.

The answer is a combination of automated market surveillance, the legal power to demand call records, bank statements, and messaging data, and a structured investigation and adjudication process that can run from an initial red flag to a final, appealable order. None of this happens by accident or through a single tip off; it follows a fairly consistent institutional pathway that has become considerably more sophisticated over the past decade.

This article walks through how SEBI actually detects suspicious trading activity, how an investigation is built once a red flag is raised, the adjudication and settlement process that follows, the penalties involved, and where criminal prosecution fits alongside SEBI's own administrative powers.

Insider trading in India is governed primarily by SEBI's Prohibition of Insider Trading Regulations, which prohibit anyone in possession of unpublished price sensitive information, commonly called UPSI, from trading in the relevant company's securities, or from passing that information to others who then trade on it.

The prohibition extends well beyond company employees to anyone classified as a connected person, including consultants, auditors, bankers, and even family members who may have had access to such information through their relationship with an insider.

Detecting a violation of this rule requires proving two things: that a person possessed specific unpublished price sensitive information at the time of the trade, and that the trade itself was connected to that information rather than coincidental market timing. Both elements are established through a layered process that begins long before any individual is formally named.

SEBI and the stock exchanges jointly operate automated market surveillance systems that continuously scan trading activity across every listed stock for statistically unusual patterns. These systems are not looking for insider trading specifically at the screening stage; they are looking for anomalies, an unusual spike in trading volume or price movement in a stock shortly before a material corporate announcement, a sudden concentration of buying or selling activity among a small cluster of accounts, or trading patterns that diverge sharply from a stock's normal historical behaviour.

When an alert is generated, exchanges and SEBI cross reference the timing of that unusual activity against the company's own disclosure record, specifically looking for trades clustered in the days or weeks immediately preceding a price sensitive announcement such as quarterly results, a merger, a large order win, or a regulatory development.

A pattern of well timed trading immediately ahead of good or bad news, repeated across multiple instances or involving unusually large positions relative to an account's normal activity, is what typically triggers a deeper, manual investigation rather than the alert being closed out as routine market noise.

Detection Trigger	What It Looks Like	Why It Raises Suspicion
Unusual price or volume movement	A sharp spike in trading activity with no public news to explain it	Suggests informed buying or selling ahead of information becoming public
Pre announcement trading clusters	Concentrated trades shortly before results, M&A news, or other material disclosures	Timing closely aligned with non public corporate events is a strong red flag
Account level anomalies	A trading account suddenly taking a position far larger than its historical pattern	Indicates conviction inconsistent with the account's normal risk appetite or behaviour
Network clustering	Multiple seemingly unrelated accounts trading in a similar pattern around the same event	Suggests a tip may have been shared across a connected group of individuals

Surveillance systems rarely prove insider trading on their own. What they do is narrow an impossibly large universe of daily trades down to a small set of patterns specific enough to justify the far more intensive work of an actual investigation.

Once a pattern is flagged for investigation, SEBI's real work begins, and it relies heavily on powers granted under the SEBI Act to call for information well beyond trading data alone. Investigators can summon call detail records from telecom providers, bank account statements, and demat and trading account histories, and can compel both the suspected trader and anyone connected to them to produce documents and appear for examination.

The central task of this phase is establishing a credible connection between the person who traded and a plausible source of unpublished information inside the company. This often means mapping a web of relationships: who within the company knew about the price sensitive development before it became public, whether that person had any direct or indirect relationship with the trader, whether phone records show contact between the two around the relevant dates, and whether the trading pattern itself is statistically inconsistent with coincidence.

Cases increasingly involve messaging app records and digital communication trails alongside traditional call records, reflecting how tips are now more commonly shared.

If SEBI's investigation finds sufficient evidence, the matter proceeds through a formal administrative process rather than going directly to a criminal court. SEBI can issue interim orders under its general powers, including freezing assets or barring an individual from accessing the securities market, even while the investigation is still ongoing, where the regulator believes immediate action is necessary to prevent further harm to investors or evidence tampering.

A formal show cause notice is then issued, setting out the specific allegations and evidence, and giving the individual an opportunity to respond and be heard before any final order is passed.

Stage	What Happens	Purpose
Surveillance and preliminary review	Automated systems flag unusual activity for manual review	Narrows down which trades warrant a full investigation
Formal investigation	Call records, bank statements, and account histories are examined	Establishes whether a credible link exists between information access and trading
Interim order, if warranted	Asset freeze or market access ban pending full investigation	Prevents further harm or evidence loss while the case proceeds
Show cause notice and hearing	Formal charges issued, with an opportunity for the individual to respond	Ensures due process before any final penalty is imposed

By the time a SEBI order naming an individual is published, it typically represents the end of a process that has already run through automated detection, a documentary investigation, and a formal hearing, not the starting point of the inquiry.

Where SEBI finds a violation proven, penalties can include monetary fines under the SEBI Act, which for insider trading can run into several times the unlawful gain made or loss avoided, disgorgement requiring the individual to return profits earned through the violation, and a ban from accessing the securities market for a defined period or, in serious cases, indefinitely.

SEBI also operates a settlement mechanism, sometimes called a consent order process, that allows an individual under investigation or facing proceedings to settle the matter by paying a settlement amount and agreeing to specific terms, without a formal admission or denial of guilt.

Not every case is eligible for settlement, and SEBI has discretion to exclude particularly serious or repeat violations from this route, reserving it for cases where a negotiated resolution genuinely serves investors better than a prolonged contested proceeding.

SEBI's administrative and civil enforcement powers, fines, disgorgement, and market bans, operate independently of, and can run alongside, criminal prosecution. The SEBI Act provides for criminal penalties including imprisonment for serious violations, and SEBI can refer a matter for criminal prosecution in addition to pursuing its own administrative remedies.

In practice, the large majority of insider trading cases in India are resolved through SEBI's own administrative and civil process, since it offers a faster, more specialised route than a full criminal trial, though criminal referral remains available for the most serious cases.

An individual or entity penalised by a SEBI order is not without recourse. Orders can be appealed to the Securities Appellate Tribunal, a specialised tribunal set up specifically to hear appeals against SEBI's decisions, and from there, on questions of law, further appeal lies to the Supreme Court of India.

This appellate structure means a SEBI order, while authoritative, is not automatically final, and a meaningful number of orders are contested and sometimes modified or overturned on appeal.

• Modern detection relies on pattern recognition across enormous volumes of trading data, which means even trades routed through different brokers or accounts can still surface as connected through timing and statistical analysis rather than any single obvious red flag.

• A documented, legitimate reason for a trade, made independently of any non public information, is the strongest defence against an insider trading allegation, which is precisely why companies require insiders to pre clear trades and observe defined trading windows around results and other announcements.

• The settlement mechanism means not every reported SEBI insider trading case results in a fully litigated, formally admitted violation; some conclude through a negotiated settlement that resolves the matter without a final determination of guilt.

• Investigations can take a considerable amount of time to conclude given the volume of records involved, so a published SEBI order addressing trades from one or more years earlier is the norm rather than an indication of unusual delay.

Disclaimer: This article is for educational purposes only and does not constitute legal or investment advice. The description of SEBI's surveillance, investigation, adjudication, and prosecution processes reflects the framework as understood in June 2026 and is subject to amendment. This article does not refer to any specific individual, company, or ongoing matter. Readers seeking guidance on a specific situation should consult a qualified securities lawyer.