Who Must Comply with RBI KYC Norms in India?
The RBI KYC Master Direction (formally Master Direction – Know Your Customer (KYC) Direction, 2016, last amended August 2025) is the authoritative KYC regulation for every entity the Reserve Bank of India oversees. It implements India's obligations under the Prevention of Money Laundering Act, 2002 (PMLA) and aligns with the Financial Action Task Force (FATF) 40 Recommendations.
Non-bank entities (fintechs, lending platforms, payment aggregators) without a direct RBI licence must comply through their banking partner's KYC programme or by becoming a KYC Registration Agency (KRA) under SEBI rules. See the full eKYC India guide for how digital verification fits into this framework.
Customer Due Diligence (CDD) Framework: SDD, CDD & EDD
The RBI KYC Master Direction establishes a risk-based approach (RBA) to customer identification. Regulated entities must classify every customer and product into a risk tier and apply the corresponding level of diligence. The August 2025 amendment expanded the definition of acceptable Officially Valid Documents (OVDs) and clarified digital CDD equivalence.
