NSE IPO: Exchange Flags Regulatory, Tech, and AI Risks in DRHP

The National Stock Exchange (NSE) has filed its Draft Red Herring Prospectus (DRHP) for a massive ₹30,000 crore IPO, marking a historic moment for the Indian capital markets. However, the filing also provides a candid look at the significant regulatory, technological, and operational risks that could impact its future performance.

High Dependence on Derivatives Trading

A critical takeaway from the NSE’s filing is its heavy reliance on specific segments for revenue generation. In FY26, transaction charges accounted for a staggering 78.65% of the exchange's operating revenue. Within this, the concentration is even more pronounced: options trading alone contributed 60.22% of the total revenue from operations.

The exchange warned that recent SEBI measures aimed at strengthening the equity derivatives framework have already moderated trading activity across both cash and derivatives segments. Any further regulatory tightening, increases in transaction taxes, or a shift in investor preference toward alternative asset classes could significantly impact trading volumes and overall profitability.

Regulatory Scrutiny and Massive Settlement Costs

NSE’s journey toward listing has been shadowed by intense regulatory oversight. The exchange disclosed that it has received various show-cause notices, warning letters, and deficiency letters from SEBI regarding governance, technology, and compliance.

The financial impact of these regulatory challenges is evident in recent settlement costs. In October 2024, NSE paid over ₹643 crore in connection with proceedings related to its Trading Access Point (TAP) architecture. Furthermore, in July 2025, the exchange paid ₹40.35 crore under a settlement order linked to regulatory inspections. Ongoing legal proceedings regarding co-location and dark fibre matters remain unresolved, posing potential reputational and financial risks.

Technology Failures and Cybersecurity Threats

As a fully electronic trading platform, technology is both NSE's greatest asset and its biggest vulnerability. The exchange noted several past technical glitches, including a major incident in February 2021 where a five-hour trading halt occurred across all segments due to failures in risk management and settlement systems.

The filing also highlighted a significant cybersecurity threat in May 2025, when the NSE website faced a massive Distributed Denial-of-Service (DDoS) attack involving approximately 395 million hits within just 11 minutes. While operations remained largely intact, the incident slowed web access and underscored the persistent threat of cyberattacks.

The Emerging Double-Edged Sword of AI

NSE has identified Artificial Intelligence (AI) and Machine Learning (ML) as critical emerging risk areas. While these technologies enhance surveillance and analytics, they introduce new complexities:

  • Market Volatility: The rise of AI-driven algorithmic trading could amplify market volatility and trigger sudden price dislocations.
  • Market Manipulation: AI could enable new, sophisticated forms of market manipulation that are increasingly difficult for regulators to detect.
  • Cybersecurity Risks: The exchange warned of AI-powered cyberattacks, deepfake-enabled impersonation, and data leakage through third-party AI tools.

Key Takeaways

  • Revenue Concentration: NSE is heavily reliant on derivatives, with options trading contributing over 60% of total operating revenue.
  • Regulatory Burden: The exchange has faced significant financial penalties, including a ₹643 crore settlement, and remains under continuous SEBI oversight.
  • Tech & AI Risks: Beyond traditional cybersecurity threats, the rise of AI-driven trading and AI-powered cyberattacks represents a new frontier of operational risk.