The plain answer
The demat account is one of the safest structures in Indian finance, because your shares and your money are protected by separate layers that do not depend on your broker staying solvent. Shares sit with NSDL or CDSL, client money sits in segregated accounts that are upstreamed to the clearing corporation daily, trades are guaranteed by the clearing corporations until settlement, and investor protection funds stand behind specific failures.
What the layers do not protect is your own login and TPIN, which is where every real demat loss actually begins. The page below walks each layer in turn, states exactly what it covers, and closes with the one real failure in India’s modern history and what it proved.
The five layers
The safety of a demat account is not one mechanism; it is five, stacked so that each covers the failures of the ones below it. Here is the map before the detail.
| Layer | What it protects | Who runs it |
|---|---|---|
| Depository custody | Your shares, independent of the broker | NSDL / CDSL |
| Client fund segregation | Your cash, separate from broker money | Broker, under SEBI rules |
| Clearing guarantee | Every executed trade until settlement | NCL / ICCL |
| Investor Protection Fund | Compensation in specific failure scenarios | Exchanges, with SEBI floors |
| Regulatory oversight | The rules all of the above must follow | SEBI |
The stacking order is the design. A broker failure hits the first two layers not at all, because they never depended on the broker’s solvency. A settlement failure is absorbed by the third layer. The fourth layer exists for the residual cases where something slips through, and the fifth layer audits all of them continuously. Each layer is examined separately below.
Your money: segregation and upstreaming
SEBI’s client fund regulations require brokers to keep client money in separate accounts, distinct from their own capital, and to settle it on schedule. A broker’s financial trouble therefore lands on the broker’s own capital first. The separation was tightened further by SEBI’s circular of 12 December 2023: brokers and clearing members must now upstream all clear credit balances of clients to the clearing corporation by the end of every day, in the form of cash, a lien on fixed deposits created out of client funds, or a pledge of mutual fund overnight scheme units.
The mechanics of that rule deserve one paragraph, because they are the strongest current protection for idle cash. Client money enters through a designated upstreaming client nodal account and can only be paid out through a separate downstreaming account. By end of day, the clear balances sit with the clearing corporation, not with the broker, so the broker never holds your cash overnight. A broker failure on a given morning finds yesterday’s client balances already outside the broker’s reach.
A matching change protects securities mid-flow. From October 2024, per SEBI’s June 2024 circular, clearing corporations credit purchased securities directly to the client’s demat account instead of routing them through a broker pool account. The pool account had been the weak link in the 2019 Karvy episode, which the next sections cover. Both changes share one goal: at no point in the settlement cycle should client assets sit in an account a failing broker controls.
The clearing corporation guarantee
Every trade on NSE and BSE settles through a clearing corporation: National Clearing Limited (NCL) for NSE and Indian Clearing Corporation Limited (ICCL) for BSE. The clearing corporation becomes the buyer to every seller and the seller to every buyer, a structure called central counterparty clearing. Once your order executes, the guarantee of its settlement sits with the clearing corporation, not with the broker on the other side.
The guarantee is funded by real capital. Clearing corporations maintain settlement guarantee funds built from member contributions and their own reserves, and members post margin on their obligations. If a trading member defaults, the clearing corporation completes settlement from these funds and pursues the member separately. The investor on the other side of the default sees the trade settle; they do not see the recovery.
The scope is precise: the guarantee covers the settlement of executed trades. It does not cover market risk, and it does not cover funds that never entered the settlement system. Within that scope, it is the layer that has made Indian markets function through every default in their modern history.
The Investor Protection Fund
Each exchange maintains an Investor Protection Fund (IPF) that compensates eligible investors when a broker defaults and its own resources fall short. The limits are published: NSE raised its ceiling to ₹35 lakh per investor per defaulting or expelled member in August 2024, up from ₹25 lakh, and BSE publishes ₹15 lakh. SEBI sets a floor of at least ₹1 lakh per eligible claim at the major exchanges, so the funds are a regulated backstop with defined numbers, not an open-ended promise.
Two mechanics matter. Claims run through a formal process under the exchange byelaws, with a filing window that starts from the member’s declaration as a defaulter; claims filed after the prescribed period are not admitted, so the fund rewards investors who respond to a default notice. And the fund covers what remains after the earlier layers are exhausted: custody means the securities never needed rescuing, segregation and upstreaming mean the cash mostly sits beyond the broker’s reach, and the fund pays for the residual gap.
That is why this page describes the fund as the last layer, not the first. The layers before it are instant because they never depended on the broker. The fund is deliberate, because it exists for the cases where something still went wrong.
What the layers do not protect
Every layer above has a defined edge. Here is what sits beyond all five of them.
- Market risk. Shares can fall in value. The infrastructure protects ownership; it does not protect prices, and no regulator can.
- Credential fraud. A transferred OTP or shared TPIN is a self-inflicted loss the layers cannot undo, because the system executed exactly what the credentials authorised.
- Bad decisions. Regulation protects the record, not the trade. Investment outcomes remain the investor’s own.
- Fraud outside the registered system. Money sent to an unregistered “advisory” app or a stranger’s account never entered the demat structure, so none of its layers apply.
What the Karvy case proved
The strongest evidence for the architecture is the test it already passed. In November 2019, SEBI passed an ex parte interim order against Karvy Stock Broking Ltd after an exchange inspection found client securities had been transferred to the broker’s own account and pledged to lenders without client authorisation. SEBI barred the broker from taking new clients and directed NSDL and CDSL not to honour its instructions, while permitting transfers back to clients who had paid in full.
The recovery followed the layers in order. On 2 December 2019, NSDL transferred securities worth ₹2,013.77 crore back into the accounts of 83,806 clients. When the lenders objected and claimed their pledges, SEBI held the pledges invalid in December 2019, because the clients had never authorised the transfers that created them. The shares returned to the people whose BO accounts held them, which is exactly what depository custody promises.
The honest reading of the episode cuts both ways. The custody layer performed: client holdings came back to clients. But the episode was not painless or instant; it ran through interim orders, tribunal appeals and months of process, and the clients who had to wait experienced the difference between a guarantee and a timeline. The post-Karvy reforms, the daily upstreaming of client funds and the direct payout of securities, exist because the 2019 process exposed which intermediate accounts were still exposed.
What people usually get wrong
My broker holds my shares, so a broker failure loses them
The depository holds the record. Broker failure changes your access layer, never your ownership, and the Karvy transfers back to clients are the proof.
The Investor Protection Fund covers everything
It compensates specific failure scenarios within published limits, through a claims process with a filing window. The custody, segregation and guarantee layers are the real protection; the fund is the backstop.
A safe account means safe returns
Account safety and market risk are different axes. The safest account in the world still holds shares whose prices move.
An online broker is less safe than a traditional one
The protective layers are statutory and apply to every SEBI-registered broker, online-first or not. The relevant differences between brokers are service and pricing, not the custody structure.
Questions people ask
No. The shares never sit with the broker. They are credited to your BO account with NSDL or CDSL, and the broker is only the access layer. A broker that shuts down cannot touch holdings it never held, and the monthly CAS from the depository is your independent record.
Brokers must keep client funds in segregated accounts, separate from their own money, and under SEBI’s December 2023 circular the clear credit balances are upstreamed to the clearing corporation by the end of each day. Brokerage failures affect the broker’s own capital first, not the segregated client pool. What the segregation does not protect against is your own login being compromised, which is why the OTP and TPIN habits matter.
The depositories are SEBI-regulated institutions holding the market’s entire electronic record, created under the Depositories Act, 1996, with continuous supervision and settlement backing through the clearing corporations. The structure has functioned through broker failures and market shocks since 1996, and the depositories are subject to SEBI’s cyber security and cyber resilience framework.
Each exchange maintains an Investor Protection Fund that compensates eligible investors in specific failure scenarios, subject to published limits and a claims process. NSE raised its ceiling to ₹35 lakh per investor per defaulting member in August 2024, from ₹25 lakh earlier; BSE publishes ₹15 lakh. It is the last layer, not the first: the custody, segregation and guarantee layers are designed to make it unnecessary.
In November 2019 SEBI found Karvy Stock Broking had pledged client securities without authorisation, and passed an order barring it from new business while directing the depositories to act. NSDL then transferred securities worth ₹2,013.77 crore back to 83,806 clients, and SEBI held the unauthorised pledges invalid. The case shows both that the architecture recovers client assets, and that recovery runs through an administered process, not instantly.
Your own credentials. Every layer on this page has held through India’s real broker failures; the losses that actually reach investors start with a shared OTP, a TPIN given on a phone call, or a remote-access app installed for a stranger. The institutional layers are the safest part of the system; the human layer is where fraud lives.
Sources
- SEBI. Circular SEBI/HO/MIRSD/MIRSD-PoD-1/P/CIR/2023/187 on upstreaming of clients’ funds by stock brokers and clearing members, 12 December 2023.
- NSE. “Investor Protection Fund Trust.” Accessed 16 August 2026.
- Livemint. “NSDL comes to the rescue of Karvy’s retail clients.” Accessed 16 August 2026.
- NSDL. Official website, investor protection documentation. Accessed 16 August 2026.
- CDSL. Official website. Accessed 16 August 2026.