Summary: KYC, or Know Your Customer, is an identity verification process that financial institutions use to confirm who their customers are. This guide explains why KYC is required, how verification works, which documents may be needed, and how e-KYC, CKYC, and KYC updation work.
Quick Overview
- KYC verifies a customer’s identity before or during access to financial services
- Financial institutions use KYC to meet regulatory requirements and reduce financial crime risks
- The KYC process can involve document checks, digital verification or video-based verification
- The documents required depend on the institution and the type of verification being completed
- e-KYC and CKYC make KYC easier to complete, but do not change its underlying purpose
- You may need to update KYC when your details change or when an institution asks for periodic re-KYC
If you have used apps like Paytm, Google Pay, opened a bank account, or applied for a loan, you have probably come across KYC. You may have submitted an Aadhaar document, entered your PAN details, or completed an identity check without knowing why.
KYC or “Know Your Customer” is a fundamental requirement to access regulated financial services. The KYC process varies by institution and product. Its basic purpose is to establish and verify who you are before a financial institution provides its services. This guide explains what KYC is, why it’s required, and clarifies the KYC process and re-KYC that helps you manage your financial accounts effectively.
What is KYC?
KYC stands for Know Your Customer. It is the required process for regulated financial institutions to identify and verify their customers’ identities before and during financial transactions.
Customer Due Diligence (CDD) forms the core layer of this process. The institution collects, verifies and assesses data for the purpose of knowing your profile and the legitimate purpose of the relationship. For legal entities, this also means identifying the individuals who ultimately own or control them.
The institution also undertakes ongoing risk assessments to classify your account. This makes KYC more than a one-time document check. It provides the verified data that the institution needs to open and maintain your account over time.
Aadhaar is a common document needed for KYC compliance, but it is only one of the valid ways to verify identity. The KYC requirements of a bank dealing with a savings account are different from those of a non-banking finance company opening a trading account. The precise documents needed for KYC depend on:
- Type of financial institution
- Particular financial product
- Nature of the relationship with the customer.
KYC is more than a banking formality. Understanding why it’s needed helps to understand the process.
Why is KYC Required?
KYC is an important regulatory requirement. It significantly reduces the risk of criminals abusing banking systems for:
- Money laundering
- Terrorist financing
- Financial fraud
- Identity theft
The Reserve Bank of India’s KYC framework forms part of India’s wider legal architecture, which the Prevention of Money Laundering Act, 2002, anchors.
Robust identity checks mean that it is very difficult for a criminal to open, operate or siphon off funds from an account in someone else’s identity. These rules help link financial accounts to verified customers and make misuse harder.
KYC also enables banks to conduct ongoing monitoring of transactions. Financial institutions monitor transactions against the customer’s risk profile and expected activity. Unusual patterns or higher-risk activity may trigger additional scrutiny. Where transaction patterns look unusual, or customer risk is high, institutions apply heightened scrutiny to satisfy their continuing regulatory obligations.
The checks depend on where you’re completing KYC and which service you’re using.
How Does KYC Verification Work?
The exact method depends on the institution you choose and the specific product you apply for. You can complete verification through physical branch visits, electronic data checks, or live video channels.
| Verification Method | How it Works | Best Used For |
| Physical KYC | Submitting physical KYC documents through the required verification process | Branch banking, traditional accounts |
| e-KYC (Digital) | Submitting paperless digital files or authenticating via OTP | Instant online mobile account opening |
| V-CIP (Video Call) | A live audio-visual interview with a bank official from home | Full KYC completion without visiting a branch |
The institution verifies your details using permitted legal processes. This does not always mean a direct, real-time check against a central government database; verification methods vary based on the platform’s technical structure.
V-CIP allows you to complete KYC without visiting a branch. During a live, recorded video session, an authorized bank official inspects your physical documents on screen, performs due diligence checks to prevent deepfakes or impersonation, and captures live coordinates via geotagging. Under RBI rules, V-CIP is an accepted alternative to face-to-face customer identification.
Once verified, the institution assigns you a risk category based on its customer risk assessment. Regulated entities generally categorize customers as low-, medium- or high-risk based on their risk assessment.
Your risk category dictates the frequency of your account updates and monitoring. It is strictly a compliance filter and does not automatically lower or raise your daily transaction or spending limits.
While the verification pathways can differ, certain documents are mandatory for completing KYC.
KYC Documents: What Do You Need?
KYC documents needed to verify your identity depend on the financial institution, the product you are applying for, and the nature of your relationship with the institution. There is no single checklist that applies to every KYC process. The foundational requirements generally include proof of identity, address and tax identification.
For individual account verification, RBI accepts government-issued records as Officially Valid Documents (OVDs) for identity and address verification. These include:
- Passport
- Driving License
- Proof of possession of an Aadhaar number
- Voter Identity Card (issued by the Election Commission of India)
- NREGA Job Card (duly signed by a State Government officer)
- A letter issued by the National Population Register containing your name and address details
Many consumers misclassify the PAN Card as an OVD. However, PAN is not an OVD under RBI’s KYC framework. PAN or Form 60 is a separate KYC requirement, and the institution verifies PAN details through the issuing authority.
For more complex relationships, institutions may also ask about your occupation or business activity, source of funds, and financial status.
Digital KYC changes how your verification happens because you may not have to visit the physical branch.
e-KYC and Online KYC: How Digital Verification Works
e-KYC is an electronically completed verification framework. It does not introduce a completely new set of identity rules; it provides a secure, paperless way to carry out standard regulatory checks. You can complete digital KYC using:
- Aadhaar authentication: Using your Aadhaar details electronically via secure UIDAI servers (OTP or biometric verification)
- DigiLocker integration: Retrieving digitally issued documents from your DigiLocker account
- CKYC records: Allowing an authorized institution to retrieve your existing KYC information from the central database, with your consent
- V-CIP systems: Completing full face-to-face verification via encrypted video connections
Digital routes also apply to servicing existing accounts. Where permitted, authorized institutions can retrieve your KYC information from CKYC instead of collecting it again.
KYC Status Tracking and CKYC 2.0
India’s Central KYC Records Registry (CKYCRR), managed by CERSAI, securely stores your verified identity files so that authorized financial institutions can retrieve them when permitted under the applicable rules. Once registered, CERSAI assigns you a permanent, unique 14-digit KYC Identifier, KIN.
This database can reduce repetitive paperwork when you use financial services across different institutions. Once you update your KYC record in the central registry, an authorized institution can retrieve it when permitted under the applicable rules.
The financial ecosystem is actively transitioning to CKYC 2.0. This upgrade features real-time API connectivity and automated verification links. Banks and insurers initiated this rollout, while mutual fund houses and capital-market participants are progressively adopting the infrastructure.
Having a CKYC number does not give you a lifelong pass. CKYC acts as a reusable record, not a permanent waiver of future verification. A financial platform can lawfully reject a central pull and demand fresh proofs if your central file is missing required data fields, your identity or address documents have expired, or spelling inconsistencies exist between your old CKYC profile and a new application.
To ensure compliance, you may have to update the KYC, called the Re-KYC process.
KYC in Banking and Investments
Verify once and reuse where possible. That’s the idea behind two related but separate systems.
In banking, RBI’s framework lets you use your KYC across accounts and services at the same or different regulated banks and NBFCs through the CKYC registry, subject to applicable rules.
Securities-market products, including mutual funds, stocks, and bonds on platforms like Jiraaf, follow a separate SEBI KYC framework supported by KYC Registration Agencies (KRAs). CKYC complements this framework but doesn’t replace it. An active CKYC record doesn’t by itself mean your KYC is valid in the securities market. Depending on your KYC status, you may need to complete or update it before investing.
Once your KYC is valid in the securities-market system, you can generally use it across SEBI-registered intermediaries. You usually don’t need to repeat it for each new broker, fund house, or bond platform.
KYC doesn’t remove every step. A broker or NBFC may still request additional documents if your information is incomplete, outdated, or needs further verification. But within each system, you don’t start from zero each time.
Re-KYC: When Do You Need to Update Your Details?
Your personal details change over time, so financial entities are legally bound to refresh their data records periodically. This is known as Re-KYC, and it operates on a strict, risk-adjusted calendar counting from your account opening date or your last documented update.
- High-risk profiles: Must be updated every 2 years
- Medium-risk profiles: Must be updated every 8 years
- Low-risk profiles: Must be updated every 10 years
If your name, marital status, and residential address have not changed since your last verification, you do not need to run through the entire paperwork process. Eligible low-risk customers can satisfy Re-KYC compliance by submitting a Self-Declaration confirming that their records are unchanged. You can process this via internet banking, official apps, or at a local bank ATM. A similar streamlined upload process applies if only your address has changed.
The RBI requires banks to send at least three advance intimations before the KYC due date, including at least one by letter. After the due date, banks must send at least three reminders, including at least one by letter.
For low-risk individual customers, RBI requires KYC to be updated within one year of the date it fell due or by June 30, 2026, whichever is later. If your KYC was due earlier, check with your bank whether your one-year deadline has passed and update it without delay.
If you do not complete Re-KYC after the required notices and reminders, the consequences can depend on the applicable rules and the institution’s process. RBI guidelines allow regulated entities to impose restrictions on KYC-non-compliant accounts after due notice. For this reason, it is better to complete the required update by the notified deadline rather than wait for restrictions to apply.
Re-KYC messages can also create an opportunity for phishing scams. Fraudsters may text urgent warnings like “Your account will be blocked in 24 hours, click this link to update your KYC immediately” to get your personal details, passwords, or OTPs. Complete KYC updates only through your bank or financial institution’s official app, website, or branch.
Conclusion
CKYC is still evolving, and Re-KYC requirements continue to apply based on your risk category and applicable deadlines. Your role remains straightforward: keep track of your Re-KYC timeline, complete any required updates by the notified deadline, and stay alert to phishing attempts that use KYC or compliance deadlines to pressure you into sharing personal details or OTPs.
Keep track of your Re-KYC timeline, complete any required updates by the notified deadline, and stay alert to phishing attempts that use KYC or compliance deadlines to pressure you into sharing personal details or OTPs.
