For an investment adviser, regulatory compliance is not something that can be completed once and then forgotten.

It runs through almost every part of the business — from client onboarding and KYC to risk profiling, investment suitability, fee structures, employee eligibility, disclosures and periodic audits.

A recent final order passed by the Securities and Exchange Board of India (SEBI) in the matter of Alliance Research, operated by Mr. Mudassir Hasan, brings this point into sharp focus.

The order follows a SEBI inspection covering the period from April 2018 to February 2020 and records several violations under the SEBI Act, the SEBI (Investment Advisers) Regulations and the PFUTP Regulations. SEBI ultimately imposed penalties of ₹1 lakh under Section 15EB and ₹5 lakh under Section 15HA, taking into account the regulatory action already faced by the notice.

But the larger message is more important than the ₹6 lakh penalty.

For investment advisers, weak Compliance can become a business risk long before it becomes a regulatory order.

How the Matter Started

Alliance Research was registered with SEBI as an Investment Adviser in April 2015.

SEBI conducted an inspection in February 2020 at its Jabalpur premises. The inspection examined whether the business was complying with the regulatory requirements applicable to investment advisers.

The inspection identified several areas of concern, including advisory activity before registration, shortcomings in KYC and risk profiling, suitability issues, fee practices, regulatory disclosures and audit requirements. An interim order was subsequently passed in January 2021, restricting the noticee from accessing the securities market and from acting as an investment adviser. Those directions were later confirmed.

The matter then moved through multiple regulatory proceedings.

A settlement application was filed but was rejected in July 2025. Separate enquiry and adjudication proceedings had already resulted in suspension of the registration for two months and a ₹6 lakh penalty. Later, summary proceedings relating to non-payment of renewal fees resulted in cancellation of the Investment Adviser registration.

The latest final order dealt with the remaining proceedings.

The First Red Flag: 

Investment Advice Before SEBI Registration

One of the most important findings concerned the period before the Investment Adviser registration was obtained.

SEBI found evidence that advisory fees had been received before April 16, 2015, the date on which registration was obtained. The order also noted that the noticee had admitted providing investment advisory services before registration, although he described it as a misunderstanding of the applicable requirement.

SEBI rejected that explanation.

The regulatory position was straightforward: a person cannot act as an investment adviser without the required registration.

The order also made an important compliance point — obtaining registration later does not retrospectively cure an earlier period of unregistered activity.

For businesses entering the financial advisory sector, this is a critical lesson:

Do not start the regulated activity first and assume the registration process will catch up later.

KYC Alone Is Not Enough

Another major issue involved KYC, risk profiling and product suitability.

The inspection found that the adviser had collected basic documents such as PAN, Aadhaar, identity and address proof. However, SEBI found that the complete KYC process required under the applicable framework had not been properly followed for certain clients.

More significantly, documentation relating to KYC, risk profiling and suitability assessment was not available for 14 clients in the sample of 46 clients examined during the inspection.

The noticee argued that the assessments had been conducted but that records could not be produced during the inspection.

SEBI did not accept an unsupported assertion in the absence of documentary evidence.

This is an important point for every regulated entity:

Compliance is not simply about doing something; it is also about being able to demonstrate that it was done.

A properly maintained compliance file can become the strongest defence during a regulatory inspection.

When the Client's Risk Profile Does Not Match the Product

The order also examined cases where products considered suitable for high-risk clients were recommended to clients classified as having low or medium risk appetites.

SEBI found that 21 out of 32 sample clients were sold products or services meant for higher-risk clients despite their documented risk categorisation.

The adviser argued that some clients were experienced traders and that they understood the risks.

But that was not enough.

SEBI emphasised that once an Investment Adviser has assessed and documented a client's risk profile, the adviser has an obligation to ensure that recommendations are consistent with that profile.

A simple warning such as "this product is risky" does not automatically make an unsuitable product suitable.

This distinction matters.

Risk disclosure and product suitability are not the same thing.

An adviser cannot simply transfer the responsibility to the client by disclosing the risk. The recommendation itself must be appropriate to the client's circumstances.

Risk Profiling Must Come Before the Advice

Another significant finding involved the timing of risk profiling.

SEBI observed that advisory fees had been received from 31 of the 46 sample clients before their risk profiles had been assessed and communicated.

The defence was that clients paid a subscription charge first and underwent risk profiling afterward.

SEBI viewed this differently.

If the client is already being enrolled into an advisory programme and paying for it before the adviser knows the client's risk profile, there is no meaningful basis for determining whether the advisory service is suitable.

SEBI therefore held that risk profiling had effectively been reduced to a formality in those cases.

For investment advisers, the sequence matters:

Client information → KYC → Risk profiling → Suitability assessment → Appropriate advice

Not the other way around.

Fees Must Also Be Reasonable

The order also highlighted another area that sometimes receives less attention: investment adviser fees.

SEBI found that for 19 clients, the fees received were higher than their annual income, while for 17 clients the fees exceeded the proposed investment amounts disclosed in their risk profiling forms.

The adviser argued that clients had voluntarily paid the fees and that some clients had subscribed to multiple services.

SEBI did not consider client consent sufficient.

An Investment Adviser operates under a fiduciary obligation and is expected to act in the client's best interests. The order explains that fees must maintain a reasonable relationship with the client's financial capacity.

This creates an important practical compliance question for advisers:

Is the fee commercially reasonable not only for the business, but also in the context of the client's financial profile?

Documentation and Annual Compliance Audits Matter

The order also found that the adviser had not conducted the required yearly compliance audit during the relevant period.

SEBI clarified that the applicable regulations required an annual audit, even though the later guidelines provided more specific timelines for completing it.

This is a reminder that a compliance audit should not be treated as paperwork prepared only when registration renewal approaches.

A well-run Investment Adviser should maintain an internal compliance calendar covering:

• Annual compliance audit
• KYC records
• Risk profiling
• Suitability documentation
• Client communications
• Fee records
• Regulatory disclosures
• Employee and representative eligibility
• Changes in business address or other material information
• Investor grievance handling

Even an Expired Website Disclosure Can Become a Compliance Issue

One particularly practical finding involved an expired Brickwork Ratings rating.

The rating had expired in January 2019, but it continued to be displayed on the adviser's website for more than a year afterward.

SEBI held that an Investment Adviser has an obligation to keep material disclosures accurate and updated. However, it also specifically found that displaying the expired rating did not establish a PFUTP violation because there was insufficient evidence of client injury or deceitful intent.

This distinction is important.

Not every compliance lapse automatically becomes fraud.

But that does not make the lapse acceptable.

Website compliance is regulatory compliance too.

What Was the Final Action?

After considering the overall circumstances, including the previous regulatory restrictions, cancellation of registration and earlier penalty, SEBI applied the principle of proportionality.

The final order imposed:

• ₹1,00,000 under Section 15EB of the SEBI Act
• ₹5,00,000 under Section 15HA of the SEBI Act

The total monetary penalty was therefore ₹6,00,000. The penalty was required to be paid within 45 days of receipt of the order.

SEBI also noted that the interim restrictions imposed earlier were vacated through this order, while actions arising from separate enquiry, adjudication and summary proceedings remained unaffected.

The Bigger Lesson for Investment Advisers

The Alliance Research order is not simply about one adviser or one inspection.

It demonstrates how several small compliance gaps can eventually become a much larger regulatory problem.

The key lessons are clear:

Registration comes before regulated activity.

KYC must be properly completed and documented.

Risk profiling must happen before advice and suitability decisions.

High-risk products cannot simply be sold to low- or medium-risk clients because the client says they understand the risk.

Fees should be fair and reasonable in light of the client's financial circumstances.

Regulatory records must be maintained and readily available.

Website disclosures must remain accurate and current.

And perhaps most importantly, compliance should be continuous rather than reactive.

Shunyatax's View: 

Compliance Is a Business Function, Not Just a Regulatory Requirement

For SEBI-registered Investment Advisers, Research Analysts and other regulated financial businesses, regulatory compliance can become complicated when multiple requirements operate together.

A missed disclosure, incomplete client record, weak risk-profiling process or outdated regulatory document may appear insignificant on its own. But when these gaps accumulate, they can create serious exposure during a SEBI inspection.

If you are facing a SEBI compliance issue, regulatory notice, inspection, KYC or risk-profiling concern, investment adviser compliance requirement or documentation gap, Shunyatax Global can help review the situation, identify compliance weaknesses and build a structured corrective approach.

The best time to Strengthen Compliance is before a regulatory notice arrives.

📞 +91 9461514198

📩 office@shunyatax.in

🌐 www.shunyatax.in