Not legal advice
Shared IPs, VPNs, and trading access
This page is not legal, tax, or investment advice. It does not describe a SEBI rule. We could not find a SEBI circular that tells a retail internet user to buy a static IP from their ISP. If a broker or a platform requires one, that requirement is theirs. Read it in their written policy.
Why a normal home connection gets flagged
Some platforms reject logins from an address that many people share, from a datacenter, or from a VPN. CGNAT is exactly the first case: the address is a real public IPv4, and it is still shared. The platform cannot see your name in the address. It sees “this IP was used by a lot of users” and applies its own rule. A VPN usually moves you into the second or third case and makes the check stricter, not looser.
A readiness check
- On the connection you will trade from, open the CGNAT check. If it says the address is likely shared, or the router WAN address does not match, a platform that forbids shared IPs can refuse you.
- Open the privacy check. A WebRTC leak or a datacenter ASN means the site may be seeing a different network than you think.
- If the platform’s written rule requires a static public IPv4, ask the ISP, using the ISP guide. Keep the ticket.
- If the only problem is a wrong city, fix the geolocation. Do not buy a static IP to repair a bad database pin. Start with the location checker.
Nothing here guarantees that a platform will accept you. Do not send anyone money for an “approved trading IP”.