KYC Norms Explained — V-CIP, CKYC, PMLA 2002 & AML Compliance

Know Your Customer (KYC) norms form the backbone of Anti-Money Laundering (AML) and Counter-Financing of Terrorism (CFT) frameworks in Indian banking. For the JAIIB PPB examination, KYC is a high-weightage topic that appears in multiple question formats — from the legal framework under PMLA 2002 to the practical aspects of V-CIP (Video-based Customer Identification Process) and periodic updates. This comprehensive guide covers the complete KYC ecosystem including customer due diligence, CKYC registry, suspicious transaction reporting, beneficial ownership identification, and the latest regulatory requirements that every banking professional must master.

What is KYC? Full Form & Definition

KYC stands for "Know Your Customer" (also referred to as "Know Your Client"). It is a set of guidelines and procedures mandated by the RBI under the Prevention of Money Laundering Act (PMLA), 2002 and RBI Master Direction on KYC (2016, updated periodically). KYC requires financial institutions to verify the identity and address of all customers at the time of account opening and periodically thereafter. The KYC framework has four key pillars: Customer Acceptance Policy (CAP), Customer Identification Procedures (CIP), Monitoring of Transactions, and Risk Management.

The fundamental objective of KYC norms is to prevent banks from being used — intentionally or unintentionally — for money laundering, terrorist financing, or other financial crimes. KYC enables banks to understand their customers better, assess risk profiles, and detect unusual or suspicious activities early. Non-compliance with KYC norms can attract severe penalties including monetary fines, restrictions on business operations, and even cancellation of banking licenses in extreme cases.

Legal Framework — PMLA 2002

The Prevention of Money Laundering Act (PMLA) was enacted in 2002 and came into effect on July 1, 2005. It is the primary legislation governing anti-money laundering compliance in India. Under PMLA, the RBI issues KYC directions that all Regulated Entities (REs) — including banks, NBFCs, payment banks, and cooperative banks — must follow. The Act was significantly amended in 2009, 2012, and 2019 to align with the Financial Action Task Force (FATF) recommendations.

Key provisions of PMLA relevant to KYC include: Section 12 mandates reporting entities to maintain records of transactions and verify customer identity; Section 12A requires reporting of cash transactions and suspicious transactions to the Financial Intelligence Unit (FIU-IND); Section 13 empowers the Director of FIU to call for records and impose penalties; and Section 4 prescribes punishment for money laundering with rigorous imprisonment of 3 to 7 years (extendable to 10 years in certain cases).

V-CIP (Video-based Customer Identification Process)

V-CIP was introduced by the RBI in January 2020 to enable remote, paperless, and consent-based KYC verification through video interaction. This was a landmark reform that allowed banks to onboard customers digitally without requiring physical presence. V-CIP involves a real-time video interaction between the bank's trained official and the customer, during which the official verifies the customer's identity documents (Aadhaar, PAN, etc.) through a live video call.

Key features of V-CIP include: (a) The process must be seamless, secure, and end-to-end encrypted; (b) The customer's live photograph is captured during the video call along with the Aadhaar XML or Digilocker verification; (c) Geo-tagging and IP address logging are mandatory; (d) The entire video interaction must be recorded and stored for audit purposes; (e) The bank official conducting V-CIP must be specifically trained and authorized; (f) V-CIP can be used for both individual and proprietary firm accounts but NOT for trusts, companies, or partnership firms.

Periodic KYC Update Requirements

The RBI mandates that banks must periodically update the KYC records of all existing customers based on their risk categorization. The frequency of periodic updates is determined by the customer's risk profile:

Banks cannot restrict account operations solely on the grounds of KYC non-updation without giving adequate notice (at least 30 days). The RBI has also clarified that periodic KYC updates can be done through digital channels including net banking, mobile banking, and V-CIP, without requiring the customer to visit the branch physically.

CKYC (Central KYC) Registry

Central KYC (CKYC) is a centralized repository of KYC records maintained by the Central Registry of Securitisation Asset Reconstruction and Security Interest of India (CERSAI). The CKYC system was introduced to eliminate the need for customers to undergo KYC verification repeatedly with different financial institutions. Once a customer's KYC is done by one financial institution and uploaded to the CKYC registry, other institutions can download and use the same KYC records, thereby reducing duplication and customer inconvenience.

Every financial institution must generate a 14-digit CKYC Identifier (KIN — KYC Identification Number) for each customer and upload the KYC data to the CERSAI registry within 10 days of completing KYC. The CKYC number is linked to the customer's identity proof and remains valid across all financial institutions — banks, insurance companies, mutual funds, and intermediaries registered with SEBI.

Transaction Reporting — CTR & STR

Under PMLA and RBI's KYC directions, banks must file certain reports with the Financial Intelligence Unit-India (FIU-IND):

Banks must maintain records of all transactions (including CTRs and STRs) for a minimum period of 5 years from the date of the transaction. The STR filing is particularly important — banks must not tip off the customer that an STR has been filed, and the 7-day filing timeline starts from the date when the transaction is confirmed as suspicious by the Principal Officer of the bank.

Beneficial Ownership

Under the RBI's KYC framework, banks must identify the beneficial owners of all non-individual accounts (companies, trusts, partnerships). A beneficial owner is the natural person who ultimately owns or controls a customer or on whose behalf a transaction is being conducted. The identification thresholds are:

Key Points for JAIIB Exam

Sample MCQs for JAIIB PPB