# Video KYC Safeguards: Liveness, GPS & Anti-Spoofing Rules > SEBI has tightened Video In-Person Verification rules. Live GPS, face liveness, anti-VPN checks and random prompts are now mandatory. Source: https://www.fastkyc.com/blog/video-kyc-vipv-tech-safeguards/ --- [Blog](/blog/)[Liveness Detection](/blog/topics/liveness-detection/) # Video KYC Rules Just Got Stricter: Liveness, Geo-Tagging & Anti-Spoofing SEBI has tightened Video In-Person Verification rules. Live GPS, face liveness, anti-VPN checks and random prompts are now mandatory. Krithick TSoftware Engineer - 10 November 2026 - 3 min read On this page 1. [Why the Rules Have Tightened](#why-the-rules-have-tightened) 2. [Key Technical Safeguards Now Expected](#key-technical-safeguards-now-expected) 3. [1\. Live Geo-Tagging (GPS Coordinates)](#1-live-geo-tagging-gps-coordinates) 4. [2\. Uninterrupted Live Video + Timestamps](#2-uninterrupted-live-video-timestamps) 5. [3\. Face Liveness Detection](#3-face-liveness-detection) 6. [4\. Random Prompts / Challenge-Response](#4-random-prompts-challenge-response) 7. [5\. Anti-VPN / Anti-Proxy Controls](#5-anti-vpn-anti-proxy-controls) 8. [6\. End-to-End Encryption](#6-end-to-end-encryption) 9. [7\. Authorised Official + Concurrent Audit](#7-authorised-official-concurrent-audit) 10. [What This Means for Platforms and Intermediaries](#what-this-means-for-platforms-and-intermediaries) 11. [Practical Implementation Tips](#practical-implementation-tips) 12. [Build Compliant Video KYC](#build-compliant-video-kyc) On this page 5 sections 1. [Why the Rules Have Tightened](#why-the-rules-have-tightened) 2. [Key Technical Safeguards Now Expected](#key-technical-safeguards-now-expected) 3. [1\. Live Geo-Tagging (GPS Coordinates)](#1-live-geo-tagging-gps-coordinates) 4. [2\. Uninterrupted Live Video + Timestamps](#2-uninterrupted-live-video-timestamps) 5. [3\. Face Liveness Detection](#3-face-liveness-detection) 6. [4\. Random Prompts / Challenge-Response](#4-random-prompts-challenge-response) 7. [5\. Anti-VPN / Anti-Proxy Controls](#5-anti-vpn-anti-proxy-controls) 8. [6\. End-to-End Encryption](#6-end-to-end-encryption) 9. [7\. Authorised Official + Concurrent Audit](#7-authorised-official-concurrent-audit) 10. [What This Means for Platforms and Intermediaries](#what-this-means-for-platforms-and-intermediaries) 11. [Practical Implementation Tips](#practical-implementation-tips) 12. [Build Compliant Video KYC](#build-compliant-video-kyc) Video-based KYC has become the default for remote onboarding. But after SEBI’s recent circular, the technical requirements for Video In-Person Verification (VIPV) have become significantly stricter. The goal is clear: make sure the person on the other side of the camera is real, present in the declared location, and not using pre-recorded videos or location-spoofing tools. ## [Why the Rules Have Tightened](#why-the-rules-have-tightened) Earlier video KYC processes often relied mainly on a live video call and basic face match. Fraudsters found ways around this using: - Pre-recorded videos - Deepfake or face-swap tools - VPNs and proxy servers to hide actual location - Screen sharing or virtual cameras SEBI has now prescribed a clear set of technical safeguards that intermediaries must follow, especially when onboarding clients who are not physically present in India. ## [Key Technical Safeguards Now Expected](#key-technical-safeguards-now-expected) ### 1\. Live Geo-Tagging (GPS Coordinates) The video session must capture the customer’s live GPS location in real time. This location should match the country or city declared in the KYC form. Static or manually entered locations are not acceptable. ### 2\. Uninterrupted Live Video + Timestamps The entire verification must be recorded as a continuous live stream. The recording should carry accurate date and time stamps that cannot be altered later. Any break or pause in the video can raise compliance questions. ### 3\. Face Liveness Detection Simple face match is no longer enough. The system must confirm that a live person is present using liveness checks such as: - Blink detection - Head movement - Random facial gestures - Active challenge-response prompts This helps block photos, videos, and many deepfake attempts. ### 4\. Random Prompts / Challenge-Response The customer should be asked to perform random actions during the session (for example, turn head left, raise hand, or read a random number). This proves the session is live and not a pre-recorded clip. ### 5\. Anti-VPN / Anti-Proxy Controls The system should detect and block connections coming through: - VPNs - Proxy servers - Spoofed IP addresses The IP address of the customer should reasonably match the location declared in the KYC form (India or the FATF-compliant country). ### 6\. End-to-End Encryption The video stream and related data must travel through encrypted channels so that the session cannot be intercepted or tampered with. ### 7\. Authorised Official + Concurrent Audit An authorised official of the intermediary should be present during the verification. The process is also expected to be subject to concurrent audit so that compliance can be checked later if needed. ## [What This Means for Platforms and Intermediaries](#what-this-means-for-platforms-and-intermediaries) If you are running video KYC today, you will need to review your current setup against these points: - Does your video stack support real-time GPS capture? - Is liveness detection strong enough against current deepfake tools? - Can you detect and block VPN/proxy traffic? - Are random challenges built into the flow? - Is the entire session recorded with tamper-proof timestamps? - Do you have proper consent logging and audit trails? Many older video KYC solutions will need upgrades to stay compliant. ## [Practical Implementation Tips](#practical-implementation-tips) - Prefer solutions that combine **liveness + face match + GPS** in a single flow - Log every challenge given to the customer and their response - Store the GPS coordinates, IP address, device details and timestamp with the KYC record - Keep the full video recording securely for the required retention period - Make sure the customer gives clear, auditable consent before the session starts ## [Build Compliant Video KYC](#build-compliant-video-kyc) Strong video KYC now needs more than just a video call. It requires liveness detection, location verification and proper audit trails. - Face match + advanced liveness checks - Ready for regulated onboarding flows - Built for both domestic and overseas customers - Video KYC - VIPV - Liveness Detection - Geo-Tagging - SEBI KYC Written by Krithick T, Software Engineer Krithick develops verification solutions at FastKYC, helping businesses simplify identity, financial, GST, and document verification across digital onboarding, KYC, KYB, and compliance workflows. ## APIs related to this article - [Face Liveness APIDetect whether a face is a real, live person rather than a photo, video or mask, blocking presentation attacks during onboarding.](/apis/face-liveness/) - [Face Match APICompare two facial images and get a similarity score, confirming the person presenting a document is the person pictured on it.](/apis/face-match/) - [Geo Fencing APICheck whether an IP address falls inside a defined geographic boundary, adding location-based controls to your risk rules.](/apis/geo-fencing/) - [PAN Comprehensive APIRetrieve extensive PAN card data for an individual, covering identity details, status and linked information in one call.](/apis/pan-comprehensive/) ## Frequently Asked Questions (FAQs) What is VIPV? VIPV stands for Video In-Person Verification. It is the remote video-based process used when physical face-to-face verification is not possible. Is GPS mandatory in video KYC now? Yes. Live geo-tagging with real-time GPS coordinates is expected so that the customer’s location can be verified against the declared address. Why is liveness detection important? Liveness checks help confirm that a real person is present during the session and reduce the risk of photo, video or deepfake attacks. Can customers use VPN during video KYC? No. Systems are expected to detect and block VPN, proxy and spoofed IP connections. Are random prompts compulsory? Yes. Random actions or challenges during the session help prove that the video is live and not pre-recorded. Does an official need to be present on the call? An authorised official of the intermediary should be part of the verification process, and the session should be auditable. Is this only for NRI onboarding? The stricter safeguards are especially highlighted for overseas clients, but the same principles are becoming the expected standard for all remote video KYC. What happens if the video session is interrupted? An interrupted or incomplete session may not be accepted. The process usually needs to be restarted to maintain an unbroken live record. How long should video recordings be stored? Intermediaries should retain the recordings and related logs as per their regulatory retention requirements and internal policy. Can existing video KYC solutions be upgraded? Yes. Most modern platforms can add liveness, GPS capture, anti-VPN checks and challenge-response features, but the upgrade should be tested thoroughly before go-live. ## Previous articles [All articles](/blog/) 1. 9 November 2026[Food Safety & Compliance](/blog/topics/food-safety-and-compliance/) ### [FSSAI Verification: A Guide to Verifying Food Business Partners](/blog/fssai-verification/) FSSAI verification helps businesses understand licence types, check food business details and verify suppliers and partners using the FastKYC API. - [Harsine K U](https://www.linkedin.com/in/harsine) - 4 min read 2. 6 November 2026[Business Verification](/blog/topics/business-veriification/) ### [How to Verify Company Directors and Their Corporate Associations in India](/blog/din-verification/) Explore how DIN verification helps identify company directors, retrieve their details and review company and LLP associations for corporate due diligence. - Vaitheeshwari J - 3 min read ## Ready to integrate? Talk to our team and we will map the checks your flow actually needs. [Book a Demo](/book-demo/) [Browse All APIs](/apis/) - One API key for every check - Verified against official Indian records - Built for onboarding at scale