Submit Article
Legal Analysis. Regulatory Intelligence. Jurisprudence.
Search articles, case studies, legal topics...
India-RBI

Digital KYC: Aadhaar, Video KYC, and the Central KYC Registry

See also: [Related: KYC & Anti-Money Laundering — The Complete Regulatory Timeline]

300 wpm
0%
Chunk
Theme
Font

For most of its history, Indian KYC was a paper process. A customer walked into a branch, carried original documents, waited for manual verification, and repeated the entire exercise at every bank, mutual fund, and insurance company they dealt with. That began to change in 2012 with the Unique Customer Identification Code, accelerated through the Aadhaar integration in 2016, survived a Supreme Court ruling that nearly killed it in 2018, and culminated in January 2020 with the introduction of Video-based Customer Identification — just in time for a pandemic that made branch visits impossible. Seventy-one RBI circulars track this transformation.

See also: KYC & Anti-Money Laundering — The Complete Regulatory Timeline

For the practical question — what documents do you actually need to open a bank account today — see Can I Open a Bank Account with Just Aadhaar?.

Timeline Overview

2011: "Small Account" concept (relaxed KYC for financial inclusion)
2012: UCIC mandate (Unique Customer Identification Code)
2013: SHG simplified KYC
2015: CKYCR established + FATCA/CRS integration
2016: Master Direction adds Aadhaar-based eKYC (OTP + biometric)
2018: Supreme Court strikes down Section 57 of Aadhaar Act
2019: Aadhaar becomes voluntary OVD; DBT/non-DBT bifurcation
2020: V-CIP introduced + Digital KYC defined + e-Documents accepted
2023: PML Rules alignment + FCRA section added
2025: Entity-specific KYC Directions with V-CIP embedded

Phase 1: The UCIC Foundation (2012–2013)

Before digital KYC could work, each customer needed a unique identifier. The UCIC mandate accomplished this:

June 11, 2012 — Co-operative Banks & RRBs:

"The increasing complexity and volume of financial transactions necessitate that customers do not have multiple identities within a bank, across the banking system and across the financial system." Know Your Customer (KYC)/Anti-Money Laundering (AML)/Combati...

"A Working Group constituted by the Government of India has proposed the introduction of unique identifiers for customers across different banks and Financial Institutions for setting up a centralized KYC Registry." Know Your Customer (KYC)/Anti-Money Laundering (AML)/Combati...

Phase 2: CKYCR — Central KYC Records Registry (2015)

Establishment (November 2015)

CKYCR Establishment RBI/2015-16/251 (November 26, 2015) established the CKYCR:

"The Government has vide a notification dated July 7, 2015, amended the Prevention of Money Laundering (Maintenance of Records) Rules, 2005, for setting up of the Central KYC Records Registry (CKYCR). In terms of the notification, the proposed CKYCR would receive, store, safeguard and retrieve the KYC records in digital form of a client." Central KYC Records Registry (CKYCR) - template for Know You...

The cross-sector retrieval principle — verify once, use everywhere:

"The KYC records received and stored by the CKYCR could be retrieved online by any reporting entity across the financial sector for the purpose of establishing an account based relationship." Central KYC Records Registry (CKYCR) - template for Know You...

FATCA/CRS Integration

The CKYCR template was designed to simultaneously satisfy domestic KYC and international tax compliance:

"As the KYC data captured by the template also fulfil the reporting requirement under FATCA and CRS." Central KYC Records Registry (CKYCR) - template for Know You...

FATCA/CRS Reporting (August 2015)

FATCA/CRS Reporting RBI/2015-16/165 (August 28, 2015, 5 refs) operationalized FATCA/CRS:

"India has signed the Inter-Governmental Agreement (IGA) with the USA on July 9, 2015, for Improving International Tax Compliance and implementing the Foreign Account Tax Compliance Act (FATCA)." Reporting requirement under Foreign Account Tax Compliance A...

Key thresholds for FATCA due diligence:
- Individual depository accounts: >USD 50,000 for US reportable
- Entity depository accounts: >USD 250,000
- No threshold for CRS (all accounts reportable)

CKYCR Upload Mandate (2016 Master Direction)

The 2016 Master Direction codified the upload requirement:

"REs shall capture customer's KYC records and upload onto CKYCR within 10 days of commencement of an account-based relationship with the customer." (RBI_11566, Para 56)

Phase 3: Aadhaar Integration & The Supreme Court (2016–2019)

Initial Aadhaar Integration (2016 Master Direction)

The 2016 Master Direction (KYC Master Direction (Master Direction - Know Your Customer (KYC) Direct)) included Aadhaar in the list of Officially Valid Documents (OVDs) and permitted Aadhaar-based eKYC for account opening. Two modes were available:
1. Biometric authentication — fingerprint or iris scan verified against the UIDAI database
2. OTP-based authentication — one-time password sent to the registered mobile number

OTP-based accounts had transaction limits:

"The aggregate balance of all the deposit accounts of the customer shall not exceed rupees one lakh. The aggregate of all credits in a financial year shall not exceed rupees two lakh. Accounts opened using OTP based e-KYC shall not be allowed for more than one year unless identification as per paragraph 16 or V-CIP is carried out." (RBI_11566, Para 17)

The Supreme Court Disruption (September 2018)

Justice K.S. Puttaswamy v. Union of India (September 26, 2018) upheld Aadhaar's validity but struck down Section 57 of the Aadhaar Act, which had allowed private entities to use Aadhaar for authentication. This invalidated the regulatory basis for mandatory Aadhaar-based KYC by banks.

The May 2019 Restructuring

Aadhaar Voluntary KYC Amendment RBI/2018-19/190 (since withdrawn) (May 29, 2019, 14 downstream refs) restructured the entire Aadhaar-KYC relationship:

Aadhaar becomes voluntary:

"Banks have been allowed to carry out Aadhaar authentication/offline-verification of an individual who voluntarily uses his Aadhaar number for identification purpose." Amendment to Master Direction (MD) on KYC

"Proof of possession of Aadhaar" as a new OVD category:

"'Proof of possession of Aadhaar number' has been added to the list of Officially Valid Documents (OVD) with a proviso that where the customer submits 'Proof of possession of Aadhaar number' as OVD, he may submit it in such form as are issued by the Unique Identification Authority of India (UIDAI)." Amendment to Master Direction (MD) on KYC

DBT/non-DBT bifurcation:
- For Direct Benefit Transfer recipients: Aadhaar required, eKYC authentication permitted
- For non-DBT customers: Any OVD accepted; Aadhaar is voluntary

Aadhaar number redaction mandate:

"REs shall ensure that the customers (non-DBT beneficiaries) while submitting Aadhaar for Customer Due Diligence, redact or blackout their Aadhaar number." Amendment to Master Direction (MD) on KYC

PAN/Form 60 mandate:

"For non-individual customers, PAN/Form No. 60 of the entity shall be obtained apart from other entity related documents." Amendment to Master Direction (MD) on KYC

Temporary ceasing for non-compliance:

"For existing bank account holders, PAN or Form No. 60 is to be submitted within such timelines as may be notified by the Government, failing which account shall be subject to temporary ceasing till PAN or Form No. 60 is submitted. However, before temporarily ceasing operations for an account RE shall give the customer an accessible notice and a reasonable opportunity to be heard." Amendment to Master Direction (MD) on KYC

Phase 4: V-CIP and Digital KYC (2020)

The January 2020 Amendment

V-CIP and Digital KYC Introduction RBI/2019-20/138 (since withdrawn) (January 9, 2020, 21 downstream refs) introduced three landmark concepts:

1. Video-based Customer Identification Process (V-CIP):

"With a view to leveraging the digital channels for Customer Identification Process (CIP) by Regulated Entities (REs), the Reserve Bank has decided to permit Video based Customer Identification Process (V-CIP) as a consent based alternate method of establishing the customer's identity, for customer onboarding." Amendment to Master Direction (MD) on KYC

V-CIP requirements:
- Live video interaction between an authorised official and the customer
- Geotagging: "Live location of the customer shall be captured to ensure that customer is physically present in India."
- Anti-spoofing: "RE shall carry out the liveliness check in order to guard against spoofing and such other fraudulent manipulations."
- AI and face matching encouraged: "REs are encouraged to take assistance of the latest available technology, including Artificial Intelligence (AI) and face matching technologies."
- 3-day XML freshness: "XML file or QR code generation date is not older than 3 days from the date of carrying out V-CIP."
- Concurrent audit: "All accounts opened through V-CIP shall be made operational only after being subject to concurrent audit."
- Banks vs. non-banks: Banks can use OTP-based Aadhaar eKYC during V-CIP; non-bank REs can only use offline Aadhaar verification.
- Business Correspondents: Banks may use BCs to aid V-CIP.

2. Digital KYC:

"'Digital KYC' has been defined as capturing live photo of the customer and officially valid document or the proof of possession of Aadhaar, along with the latitude and longitude of the location where such live photo is being taken by an authorised officer of the Reporting Entity." Amendment to Master Direction (MD) on KYC

3. Equivalent e-Documents:

"'Equivalent e-document' has been defined as an electronic equivalent of a document, issued by the issuing authority of such document with its valid digital signature including documents issued to the digital locker account of the customer." Amendment to Master Direction (MD) on KYC

This was the formal recognition of DigiLocker documents as valid for KYC purposes. The Governor's May 2021 statement announced further expansion of V-CIP to proprietorship firms, authorised signatories, and beneficial owners of legal entities — see Governor's Statement, May 5, 2021 (PR_51526).

COVID-19 Acceleration

While V-CIP was introduced pre-COVID (January 2020), the pandemic lockdowns made it operationally critical. Physical branch visits became impossible during lockdowns, making video-based onboarding the primary channel for new account opening during March–June 2020.

The V-CIP Definition in the 2016 Master Direction (as amended)

The Master Direction defined V-CIP formally:

"An alternate method of customer identification with facial recognition and customer due diligence by an authorised official of the RE by undertaking seamless, secure, live, informed-consent based audio-visual interaction with the customer to obtain identification information required for CDD purpose, and to ascertain the veracity of the information furnished by the customer through independent verification and maintaining audit trail of the process." (RBI_11566, Para 3(b)(xvi))

Phase 5: The 2025 Consolidation — Digital KYC as Standard

All 10 entity-specific KYC Directions issued in November–December 2025 include V-CIP and Digital KYC as standard features — no longer an amendment or addition but a native part of the framework.

The Directions also formalized the Designated Director's role:

"'Designated Director' means a person whom the bank designates to ensure overall compliance with the obligations imposed under chapter IV of the PML Act and the Rules and shall include the Managing Director or a whole-time Director, whom the Board of Directors has duly authorised." Reserve Bank of India (Commercial Banks – Know Your Customer...

For the story of how the Supreme Court's Aadhaar judgment rewrote KYC overnight — see The Aadhaar Moment.

Last updated: April 2026

Written by Sushant Shukla
1.5×

More in

Legal Wires

Legal Wires

Stay ahead of the legal curve. Get expert analysis and regulatory updates natively delivered to your inbox.

Success! Please check your inbox and click the link to confirm your subscription.