RBI KYC/AMLGUIDELINES
Complete guide to RBI KYC/AML guidelines - compliance requirements, documentation, risk assessment, and legal obligations for businesses and individuals.
TABLE OF CONTENTS
KNOW YOUR CUSTOMER & ANTI-MONEY LAUNDERING
Know Your Customer (KYC) and Anti-Money Laundering (AML) guidelines form the cornerstone of India's financial compliance framework. The RBI's comprehensive KYC/AML norms ensure financial institutions maintain robust customer identification, risk assessment, and transaction monitoring systems. Understanding these requirements is crucial for businesses, financial institutions, and individuals to ensure compliance and avoid regulatory penalties.
KYC/AML Framework
Key Objectives:
- Customer identification and verification
- Money laundering prevention
- Terrorist financing detection
- Financial system integrity
Regulatory Bodies:
- Reserve Bank of India (RBI)
- Financial Intelligence Unit (FIU-IND)
- Enforcement Directorate (ED)
- Ministry of Finance
📊 Compliance Scope
🎯 Key Components
⚖️ Legal Framework
LEGAL & REGULATORY STRUCTURE
📋 Legislative Framework
Primary Legislation
Prevention of Money Laundering Act (PMLA), 2002:
- • Defines money laundering offenses
- • Establishes reporting entities
- • Mandates customer due diligence
- • Prescribes record maintenance
- • Provides for asset attachment
- • Establishes adjudication process
RBI Act, 1934 & Banking Regulation Act, 1949:
- • RBI's regulatory powers
- • Banking supervision framework
- • Customer protection measures
- • Prudential regulations
- • Compliance monitoring
- • Penalty provisions
RBI Guidelines & Directions
Master Direction on KYC:
- • Customer identification procedures
- • Risk categorization framework
- • Enhanced due diligence norms
- • Ongoing monitoring requirements
- • Record keeping obligations
- • Compliance reporting
AML Standards:
- • Suspicious transaction reporting
- • Cash transaction reporting
- • Wire transfer regulations
- • Correspondent banking norms
- • Training requirements
- • Internal controls
International Standards
Standard | Source | Key Requirements |
---|---|---|
FATF 40 Recommendations | Financial Action Task Force | AML/CFT framework |
Basel Committee Guidelines | Basel Committee on Banking | Customer due diligence |
Wolfsberg Principles | Wolfsberg Group | Private banking standards |
UN Conventions | United Nations | Anti-terrorism financing |
CUSTOMER IDENTIFICATION PROGRAM
🆔 Identity Verification
Individual Customers
Identity Documents:
- • PAN card (mandatory for high-value transactions)
- • Aadhaar card
- • Passport
- • Voter ID card
- • Driving license
- • NREGA job card
Address Proof:
- • Utility bills (electricity, gas, water)
- • Bank account statements
- • Rental agreements
- • Property tax receipts
- • Employer certificates
- • Government correspondence
Corporate Customers
Company Documents:
- • Certificate of incorporation
- • Memorandum and Articles of Association
- • Board resolution for account opening
- • Power of attorney for authorized signatories
- • PAN card of the company
- • GST registration certificate
Beneficial Ownership:
- • Identification of ultimate beneficial owners
- • Shareholding pattern details
- • Control structure documentation
- • Director identification
- • Authorized signatory details
- • Related party disclosures
Special Categories
Non-Resident Indians
- • Passport with valid visa
- • Overseas address proof
- • Employment/income proof
- • NRI status declaration
- • FEMA compliance certificate
- • Tax residency certificate
Politically Exposed Persons
- • Enhanced due diligence
- • Source of wealth verification
- • Senior management approval
- • Ongoing monitoring
- • Relationship documentation
- • Regular review process
Trust & Foundations
- • Trust deed/foundation charter
- • Trustee identification
- • Beneficiary details
- • Settlor information
- • Registration certificates
- • Tax exemption documents
RISK-BASED APPROACH
🔍 Due Diligence Levels
Simplified Due Diligence (SDD)
Applicable to:
- • Low-risk customers
- • Government departments
- • Public sector undertakings
- • Listed companies
- • Regulated financial institutions
- • Small value accounts
Requirements:
- • Basic identity verification
- • Simplified documentation
- • Reduced ongoing monitoring
- • Lower transaction limits
- • Periodic review
- • Risk assessment documentation
Standard Due Diligence
Standard Requirements:
- • Complete identity verification
- • Address verification
- • Photograph requirement
- • Signature verification
- • Purpose of account opening
- • Source of funds verification
Ongoing Monitoring:
- • Transaction pattern analysis
- • Regular profile updates
- • Periodic KYC refresh
- • Suspicious activity monitoring
- • Risk rating review
- • Compliance reporting
Enhanced Due Diligence (EDD)
High-Risk Categories:
- • Politically Exposed Persons (PEPs)
- • Non-resident customers
- • High net worth individuals
- • Cash-intensive businesses
- • Correspondent banking relationships
- • High-risk jurisdictions
Additional Measures:
- • Senior management approval
- • Source of wealth verification
- • Enhanced ongoing monitoring
- • Frequent profile updates
- • Additional documentation
- • Regular relationship review
ANTI-MONEY LAUNDERING FRAMEWORK
🛡️ AML Program Components
Transaction Monitoring
Monitoring Systems:
- • Real-time transaction screening
- • Pattern recognition algorithms
- • Threshold-based alerts
- • Behavioral analysis
- • Cross-border transaction monitoring
- • Sanctions list screening
Red Flag Indicators:
- • Unusual transaction patterns
- • Large cash transactions
- • Rapid movement of funds
- • Transactions with high-risk countries
- • Structuring to avoid reporting
- • Inconsistent customer behavior
Suspicious Activity Reporting
STR Requirements:
- • Suspicious Transaction Report (STR)
- • Cash Transaction Report (CTR)
- • Cross-border Wire Transfer Report
- • Counterfeit Currency Report
- • Non-Profit Organization Transaction Report
- • Electronic Fund Transfer Report
Reporting Timeline:
- • STR: Within 7 days of detection
- • CTR: Within 15 days of transaction
- • Wire transfers: Within 5 days
- • Counterfeit currency: Immediately
- • NPO transactions: Within 15 days
- • Follow-up reports as required
Internal Controls
Policies & Procedures
- • AML policy framework
- • KYC procedures manual
- • Risk assessment methodology
- • Escalation procedures
- • Record keeping policies
- • Training programs
Organizational Structure
- • Compliance officer appointment
- • AML committee formation
- • Three lines of defense
- • Segregation of duties
- • Reporting hierarchy
- • Board oversight
Technology Systems
- • AML software solutions
- • Transaction monitoring systems
- • Customer screening tools
- • Case management systems
- • Regulatory reporting platforms
- • Data analytics tools
RISK-BASED APPROACH
⚖️ Risk Categorization
Customer Risk Factors
Low Risk:
- • Salaried employees
- • Government employees
- • Pensioners
- • Students
- • Small business owners
- • Regulated entities
High Risk:
- • Politically Exposed Persons
- • Non-resident customers
- • Cash-intensive businesses
- • Money service businesses
- • High net worth individuals
- • Trusts and foundations
Geographic Risk
High-Risk Jurisdictions:
- • FATF non-cooperative countries
- • Countries with weak AML controls
- • Offshore financial centers
- • Countries under sanctions
- • Tax havens
- • Conflict zones
Risk Mitigation:
- • Enhanced due diligence
- • Additional documentation
- • Source of funds verification
- • Ongoing monitoring
- • Senior management approval
- • Regular review
Product & Service Risk
Risk Level | Products/Services | Risk Factors |
---|---|---|
Low | Savings accounts, term deposits | Limited transaction flexibility |
Medium | Current accounts, credit cards | Higher transaction volumes |
High | Private banking, trade finance | Complex structures, high values |
Very High | Correspondent banking, remittances | Cross-border, anonymity risk |
REGULATORY REPORTING
📊 Reporting Framework
Mandatory Reports
Transaction Reports:
- • Cash Transaction Report (CTR) - ₹10 lakh+
- • Suspicious Transaction Report (STR)
- • Cross-border Wire Transfer Report
- • Electronic Fund Transfer Report
- • Counterfeit Currency Report
- • Non-Profit Organization Report
Compliance Reports:
- • Annual AML compliance report
- • KYC compliance certificate
- • Internal audit reports
- • Training completion reports
- • System validation reports
- • Risk assessment updates
Record Keeping
Customer Records:
- • KYC documents and verification
- • Account opening forms
- • Transaction records
- • Correspondence files
- • Risk assessment documentation
- • Periodic review records
Retention Period:
- • Customer records: 5 years after closure
- • Transaction records: 5 years
- • STR records: 5 years
- • Training records: 5 years
- • Audit reports: 8 years
- • System logs: As per policy
Penalties for Non-Compliance
PMLA Penalties
- • Monetary penalty up to ₹5 lakh
- • Imprisonment up to 7 years
- • Asset attachment and confiscation
- • License cancellation
- • Director disqualification
- • Criminal prosecution
RBI Penalties
- • Monetary penalty
- • Business restrictions
- • Enhanced supervision
- • Corrective action plans
- • Public disclosure
- • License conditions
Reputational Risk
- • Public censure
- • Media coverage
- • Customer loss
- • Investor confidence
- • Business impact
- • Market perception
IMPLEMENTATION BEST PRACTICES
For Financial Institutions
- ☐ Develop comprehensive KYC/AML policies
- ☐ Implement risk-based approach
- ☐ Establish robust monitoring systems
- ☐ Train staff on compliance requirements
- ☐ Conduct regular internal audits
- ☐ Maintain proper documentation
- ☐ Ensure timely regulatory reporting
- ☐ Update systems with regulatory changes
For Businesses
- ☐ Understand KYC requirements
- ☐ Maintain updated documentation
- ☐ Cooperate with bank requests
- ☐ Report changes in business structure
- ☐ Ensure beneficial ownership transparency
- ☐ Implement internal controls
- ☐ Monitor transaction patterns
For Individuals
- ☐ Keep identity documents updated
- ☐ Provide accurate information
- ☐ Respond to bank queries promptly
- ☐ Report address changes
- ☐ Understand transaction limits
- ☐ Maintain transaction records
- ☐ Be aware of suspicious activities
Technology Solutions
- ☐ Automated KYC verification
- ☐ AI-powered transaction monitoring
- ☐ Digital identity verification
- ☐ Blockchain for audit trails
- ☐ Machine learning for risk scoring
- ☐ Cloud-based compliance platforms
- ☐ Real-time sanctions screening
GET EXPERT KYC/AML COMPLIANCE ASSISTANCE
CONTINUE READING
Non-Banking Financial Companies (NBFCs): Licensing and How They Differ from Banks
Complete guide to NBFCs - licensing requirements, regulatory framework, and differences from banks.
Digital Payment Platforms: RBI Regulations for Wallets and UPI
Complete guide to digital payment platforms under RBI regulations with compliance requirements.
Foreign Remittances: FEMA Rules for Sending Money Abroad
Complete guide to foreign remittances under FEMA rules with compliance requirements.