A Financial Action Task Force report backs India’s concerns that the real risk in crypto lies in offshore, non-compliant virtual asset service providers (VASPs), not the asset class itself.