Home / Security
Security
How your money, your units and your information are protected when you invest through us.
Last updated: 27 September 2026
This website
This website is a static, read-only set of pages. It has no login, no forms and no cookies, and it collects no personal information — see our Privacy Policy. No transaction of any kind can be made on this website.
Your money never passes through us
Sumraksha does not hold, receive or pay out investor money or units. Under SEBI circular SEBI/HO/IMD/IMD-I DOF5/P/CIR/2022/29 dated 15 March 2022, distributors and other channel partners are barred from using pool accounts for mutual fund transactions. Every payment you make moves directly from your own bank account to the mutual fund or the clearing corporation, and every redemption is credited directly to your own registered bank account. We never accept cash, or a cheque, mandate or payment instrument in our own name or account, for a mutual fund investment.
How your transactions are authenticated
We process transactions through NSE’s Mutual Fund platform, NMF II. Under the same SEBI circular, redemption requests placed online require two-factor authentication — one factor being a One-Time Password sent directly to your own email address or mobile number registered with the mutual fund, not to us. Purchases and other transactions on the platform likewise require your own login and your own authorisation; Sumraksha does not see, store or have access to your OTP, login password or transaction PIN at any point.
Registering your own contact details
Always register your own mobile number and email address, not ours, in your mutual fund folios. Statements, transaction confirmations and OTPs are sent to whichever contact details are registered, so this is what keeps them under your control. We never ask to register our contact details in place of yours.
What Sumraksha will never do
We will never ask you for your OTP, login password, PIN or card CVV, ask you to transfer money into a personal or third-party account, or contact you from any number, email address or handle other than the ones listed on this website. See our Grievance Redressal page for how to report anything suspicious.
Our own obligations
As required by the AMFI Code of Conduct, we maintain the infrastructure, including cyber security, needed to serve investors, restrict access to investor information to staff who need it, and keep records of your KYC and instructions securely. See our Code of Conduct and Privacy Policy pages.
Made under SEBI circular SEBI/HO/IMD/IMD-I DOF5/P/CIR/2022/29 dated 15 March 2022 on discontinuation of pool accounts and two-factor authentication, and the AMFI Code of Conduct for Mutual Fund Distributors.