NSE IPO: Exchange Flags Regulatory, Tech and AI Risks in Draft Papers

The National Stock Exchange (NSE) has released its draft red herring prospectus (DRHP) ahead of its massive ₹30,000 crore public issue, which is poised to be India's largest-ever IPO. While outlining its growth potential, the exchange has proactively disclosed significant operational, regulatory, and emerging technological risks that could impact its future profitability.

High Reliance on Derivatives and Concentration Risks

A critical takeaway from the NSE's filing is its heavy dependence on derivatives trading for revenue generation. In FY26, transaction charges accounted for 78.65% of the exchange's operating revenue, with options trading alone contributing a massive 60.22% of total revenue from operations.

This concentration poses a structural risk, especially as the Securities and Exchange Board of India (SEBI) continues to tighten the equity derivatives framework. The exchange noted that recent regulatory measures have already moderated trading activity across both cash and derivatives segments. Furthermore, NSE faces "concentration risk" from its client base, as its top 10 trading members accounted for 46.78% of its operating revenue in FY26.

The DRHP highlights a history of intensive regulatory oversight. NSE disclosed that it has received various show-cause notices, warning letters, and deficiency letters from SEBI concerning operations, governance, and compliance.

Financial implications of these regulatory hurdles are already evident. The exchange disclosed paying over ₹643 crore in October 2024 to settle proceedings related to its Trading Access Point (TAP) architecture and network connectivity. Additionally, ₹40.35 crore was paid in July 2025 under a settlement order following regulatory inspections. Unresolved legal proceedings regarding co-location and dark fibre matters also remain a potential reputational and financial threat.

Technological Vulnerabilities and Cybersecurity Threats

As a fully electronic ecosystem, NSE identified technology outages and cyberattacks as primary operational risks. The exchange specifically recalled the February 2021 technical outage that caused a market-wide trading halt for over five hours.

Keselamatan siber kekal sebagai medan pertempuran yang berterusan; bursa tersebut mendedahkan bahawa pada Mei 2025, laman webnya telah dilanda serangan Distributed Denial-of-Service (DDoS) besar-besaran yang melibatkan kira-kira 395 juta akses dalam masa hanya 11 minit. Walaupun operasi sebahagian besarnya tidak terjejas, insiden tersebut telah menyebabkan kelembapan ketara dalam akses laman web.

Sempadan Baharu: Risiko Kecerdasan Buatan

Dalam satu pendedahan berpandangan jauh, NSE mengenal pasti Kecerdasan Buatan (AI) sebagai pedang bermata dua. Walaupun AI meningkatkan pengawasan dan analitik, bursa tersebut memberi amaran bahawa algoritma yang cacat atau kualiti data yang lemah boleh membawa kepada hasil yang berat sebelah dan pelanggaran kawal selia.

Bursa tersebut secara khusus menegaskan bahawa kebangkitan perdagangan algoritma yang dipacu AI boleh memperhebat ketidaktentuan pasaran dan mewujudkan bentuk manipulasi pasaran yang canggih. Selain itu, NSE memberi amaran terhadap ancaman zaman baharu seperti serangan siber berkuasa AI, penyamaran berasaskan deepfake, dan kebocoran data melalui alat AI pihak ketiga.

Ringkasan Utama

  • Pemusatan Hasil: NSE sangat bergantung kepada derivatif, dengan perdagangan opsyen sahaja memacu lebih 60% daripada jumlah hasil operasinya.
  • Beban Kawal Selia: Bursa tersebut telah menghadapi penalti kewangan yang besar, termasuk penyelesaian sebanyak ₹643 crore, dan kekal di bawah pengawasan berterusan SEBI.
  • Ancaman Teknologi & AI: Selain daripada keselamatan siber tradisional dan gangguan perkhidmatan, ketidaktentuan pasaran yang dipacu AI dan serangan siber canggih berkuasa AI dikenal pasti sebagai risiko utama yang muncul.