Is a demat account safe?
Demat accounts in India are structurally safe by design — SEBI built the architecture specifically so that broker failure cannot reach your shares. Shares are held by depositories, not by brokers. Funds are segregated. The real risk in 2026 is not your broker shutting down — it is your own credentials being compromised. Here is what the protection model actually looks like.
How the protection model works
Three things make Indian demat accounts robust against broker-level failure:
- Shares are held by the depository (CDSL or NSDL), not by the broker. The broker is a depository participant — a routing layer. If the broker shuts down, the shares stay with the depository; you transfer them to another broker.
- Funds in the trading ledger sit in a SEBI-regulated client bank account, segregated from the broker's own funds. Brokers cannot legally use client funds to run their business.
- SEBI mandates reconciliation by depositories monthly — your holdings and balances are independently audited. Any discrepancy is flagged.
What happens if a broker fails
India has seen broker failures (Karvy Stock Broking is the canonical recent example, 2019). The depository structure held up — investors got their shares back, even though the broker itself went under for fund misuse. The recovery process for funds is slower; SEBI runs an investor protection fund for limited compensation.
In practice, the worst case for an investor at a failing broker is friction (delayed transfers, paperwork) rather than total loss of holdings. The shares remain at the depository.
The real risk — account-level fraud
Almost every reported case of money loss in Indian demat accounts traces back to user-side credential compromise, not broker-side failure. The common vectors:
- Phishing — fake "login" links via email or SMS that look identical to the broker's page.
- OTP sharing — caller pretending to be from the broker asks for the OTP "to fix an issue".
- Credential reuse — same password as another site that got breached.
- Public Wi-Fi sniffing — rare but possible on unsecured networks.
How to protect your demat account
A small set of habits removes almost all account-level risk:
- Use a unique, long password — a password manager makes this trivial.
- Enable biometric / PIN login on the broker app.
- Never share OTPs. SEBI-registered brokers never call to ask for them. SEBI, NSE and CDSL / NSDL never call to ask for them.
- Always access the broker URL via a saved bookmark, not via links in messages.
- Review the login-history page in your account periodically. Report unrecognised sessions immediately.
- Keep your registered mobile and email current. Out-of-date contact details are a backdoor.
Where to escalate if something goes wrong
If you suspect fraud or have an unresolved broker grievance, the SEBI escalation path is — broker desk → broker's compliance officer → SEBI SCORES (scores.sebi.gov.in) → SMART ODR (smartodr.in) for online dispute resolution. Each level has a defined SLA. See any broker's customer-care page on this site for the structured escalation steps.
Frequently asked
What people ask about is a demat account safe?.
Yes, structurally. SEBI's architecture puts shares with the depository (CDSL or NSDL), not the broker, and segregates client funds. Broker failure does not put your shares at risk. The real risk is user-side credential compromise.
They remain safe with CDSL or NSDL — the broker is only a participant, not the custodian. You initiate a transfer of holdings to a new broker via the depository. Karvy investors (2019) all recovered their shares this way.
SEBI requires client funds to sit in a segregated client bank account, separate from the broker's own operating account. Brokers cannot legally use client funds for their business. Real-world enforcement has been imperfect — Karvy is the famous case — but SEBI has since tightened rules and brokers are reconciled more often.
No. SEBI has phased out physical share certificates for trading since 2019. Demat is the only viable form, and it is also safer than physical paper (which can be lost, stolen, forged, or damaged).
Size is a weak signal of safety. SEBI regulation and depository custody apply equally across SEBI-registered brokers. What matters more is the broker's compliance track record (check SEBI's public action history) and your own security habits.