RBI KYC and banking overlay
Published by Finin2min
RBI-regulated entities must integrate PMLA requirements with the Master Direction on KYC, including customer acceptance, risk management, periodic updation
Finin2min summary
RBI-regulated entities must integrate PMLA requirements with the Master Direction on KYC, including customer acceptance, risk management, periodic updation, V-CIP and sanctions screening.
Legal anchors
- RBI KYC Direction, 2016 as reviewed
- PMLA and PML Rules
How to analyse it
- Map entity-specific RBI applicability.
- Maintain board-approved KYC policy.
- Use risk-based periodic updation.
- Integrate CKYCR, wire and sanctions controls.
Practical illustration
A low-risk customer submits a self-declaration for unchanged KYC. The bank should follow the RBI route applicable to risk and customer type and issue acknowledgement.
What can go wrong?
- Account restrictions without due notice
- No risk-based differentiation
- Weak beneficial-owner refresh
Evidence pack
- KYC policy
- Risk model
- Customer notices
- Updation audit trail
Decision workflow
- Freeze the facts and effective date.
- Identify the controlling Act, rule, notification, circular and jurisdictional overlay.
- Prepare a calculation or exposure note.
- Collect the evidence pack before filing, payment, signing or response.
- Record reviewer conclusion and assumptions.
Quick Q&A
Is the result automatic?
No. Map entity-specific RBI applicability.
What is the most important control?
Integrate CKYCR, wire and sanctions controls.
What should be escalated?
Account restrictions without due notice, especially where money, deadlines, enforcement, personal liability or irreversible transaction steps are involved.
Official source trail
- PMLA, 2002 — FIU-IND
- PMLA, 2002 PDF — FIU-IND
- PML Maintenance of Records Rules, 2005 — FIU-IND
- FIU-IND FAQs
Secondary commentary may help interpretation, but it is not the source of law.