Imagine checking your demat account in November 2019 and seeing your shares are there — but a lender you've never heard of has a lien on them. You didn't pledge anything. You signed a Power of Attorney for your broker, just like every other retail investor in India, because that's what you did to open an account. And now those shares are collateral for a loan your broker took out — a loan you knew nothing about.
That's exactly what happened to more than 95,000 clients of Karvy Stock Broking.
What Karvy Actually Did
Karvy Stock Broking was one of India's largest brokers. By 2019 it had millions of registered clients, a recognizable brand, and a network spanning tier-2 and tier-3 cities. It looked perfectly legitimate.
Behind the scenes, Karvy had been quietly moving client shares — shares that clients owned outright and hadn't pledged — from client demat accounts into a single demat account held by Karvy itself. Once those shares sat in Karvy's own account, the broker did what any borrower would do with collateral: it pledged them to raise money.
The lenders were not small players. Karvy pledged client securities with Bajaj Finance, ICICI Bank, IndusInd Bank, and HDFC Bank. The total: ₹2,300 crore of client securities used as collateral for Karvy's own borrowing, without client knowledge or consent.
The mechanism that made this possible was the humble Power of Attorney — the PoA every client signs at account opening. The PoA allowed Karvy to move shares on a client's behalf, ostensibly to settle trades. Karvy used it to transfer shares into its own pool account instead.
The Night the Music Stopped
SEBI started picking up the trail in mid-2019. By November 22, 2019, the regulator had enough. It issued an ex-parte order barring Karvy from taking on new clients and freezing its ability to deal in securities. The National Stock Exchange followed, restricting Karvy from the equity derivatives segment.
For clients, this was a gut-punch. Positions couldn't be opened. Funds were inaccessible. The shares that should have been sitting quietly in demat accounts had effectively been hypothecated to lenders who had every legal right to hold on to them until Karvy repaid its loans — which Karvy couldn't do.
The Recovery of Debts tribunal got involved. NSE moved to recover funds by selling Karvy's own assets. Some clients eventually got their securities back, but the process stretched months. For anyone holding shares in a taxable account with a cost that mattered, or for people who needed liquidity urgently, the freeze was a financial emergency.
Karvy's founder and managing director C. Parthasarathy was arrested in December 2020. But the legal proceedings ground on well past that, and some recovery claims remained disputed years later.
Why Nobody Caught It Earlier
This is the uncomfortable question.
The shares were technically visible in Karvy's pool account. Depositories — NSDL and CDSL — have records of every demat transfer. Auditors reviewed Karvy's books. The banks lending money against those securities would have done due diligence.
And yet the misuse ran for years before it surfaced.
Part of the problem was structural. The PoA regime had grown too permissive. Brokers could move client securities using the PoA without those clients being notified in real time. There was no automatic check that said: this transfer is for settlement of a client trade, not for the broker's own use.
The second problem was that the pool account system meant client securities were aggregated. You couldn't easily look at Karvy's pool account and identify which specific shares belonged to which specific retail client. That opacity gave Karvy room to operate.
The third problem was that lenders — even large ones — weren't required to verify that the entity pledging securities actually owned them outright. Bajaj Finance and the banks were lending against collateral that, on paper, sat in Karvy's account. They had a perfected lien. Whether the shares were legitimately Karvy's to pledge wasn't their explicit regulatory obligation to verify.
What SEBI Changed After Karvy
SEBI moved fast. By June 2020, new rules were in place that fundamentally changed how broker-client securities work in India.
The key changes:
- Brokers can no longer hold client securities in a pooled account. Client shares must stay in the client's own demat account.
- If a client wants to offer shares as margin for trading, it happens through a pledge mechanism directly in the client's demat account — the shares never leave the client's ownership.
- The broker sees a margin credit based on that pledge. They cannot transfer the underlying shares out.
- PoA scope was narrowed significantly. Brokers can use PoA only for settlement of trades, with tight restrictions.
- CDSL and NSDL began sending clients SMS or email alerts any time a demat transfer or pledge is created on their account.
The net effect is that a broker today cannot do what Karvy did. There is no pool account to move your shares into. A pledge in your demat account shows up in your CDSL or NSDL statement the same day. You can see it. You can dispute it. The lien sits on your account, not in someone else's.
What This Means for Your Account Right Now
Open your CDSL Easiest or NSDL Speed-e account and look at your holdings. If you've pledged shares as margin with your broker — say, Zerodha, Groww, Angel One, or anyone else — you'll see a "pledged" annotation next to those specific shares. The shares are still in your name. The broker's name doesn't appear as holder.
That's the post-Karvy world working as intended.
There's still one thing to watch. Some clients give broader PoA than they need to. The current market practice is that you don't need to give PoA at all for delivery-based equity investing — DDPI (Demat Debit and Pledge Instruction) has replaced PoA for most settlement purposes since August 2022, again driven by SEBI. If your broker is still asking for a full, open-ended PoA rather than a DDPI, that's worth questioning.
Also check your demat statement once a quarter. CDSL and NSDL both send monthly consolidated account statements. If you see a pledge you didn't authorize, you have a grievance mechanism through SEBI's SCORES portal. Use it.
The Takeaway
Karvy was not a fringe operator. It was a mainstream, well-regarded broker with physical branches across India, and it misused ₹2,300 crore of client securities for years before anyone officially stopped it. The 95,000+ clients caught in the freeze didn't do anything wrong. They followed standard account-opening procedure.
The structural reforms that came out of November 2019 are genuinely significant. The pool account is gone. The pledge is visible. The PoA is narrower. These aren't minor tweaks — they close the exact loophole Karvy exploited.
What you should do today is simple: log into your depository account directly — not through your broker's app — and confirm your holdings appear unpledged, unless you specifically offered them as margin. Takes three minutes. The Karvy clients who wish they'd done that more often in 2018 and 2019 would tell you it's worth the habit.