KYC (Know Your Customer)

Definition

Know Your Customer (KYC) is a regulatory and compliance process that requires businesses — particularly financial institutions, banks, insurance companies, and fintech platforms — to verify the identity and credentials of their customers before establishing a business relationship. In India, KYC is mandated by the Reserve Bank of India (RBI) under the Prevention of Money Laundering Act (PMLA), 2002, and the RBI's Master Direction on KYC. The process involves collecting and verifying identity proof (such as Aadhaar, PAN, passport) and address proof to ensure that the customer is who they claim to be and to assess potential risks of illegal activities like money laundering or terrorism financing.

KYC in India has evolved significantly with the introduction of digital verification methods. eKYC (electronic KYC) leverages the Aadhaar-based authentication system to enable instant identity verification through biometric or OTP-based methods. Video KYC (VKYC), permitted by RBI since 2020, allows remote onboarding through a live video interaction with a trained official. Central KYC (CKYC) is a centralized repository maintained by CERSAI where KYC records are stored and shared across financial institutions, eliminating the need for customers to submit KYC documents repeatedly. These digital methods have dramatically reduced onboarding time from days to minutes while maintaining regulatory compliance.

For businesses operating in India, KYC is not limited to customer onboarding — it extends to vendor verification, director identification, and beneficial ownership disclosure. Companies must conduct KYC on their vendors and partners as part of due diligence, and directors of companies must obtain a Director Identification Number (DIN) which itself requires KYC verification. Non-compliance with KYC norms can result in penalties, account freezing, or restrictions on business operations. OneFinOps integrates KYC verification into its vendor onboarding and compliance workflows, enabling businesses to verify vendor identities, validate PAN and GST registrations, and maintain a compliant vendor database with minimal manual effort.

Key Points

• KYC is mandatory in India under PMLA and RBI guidelines for all financial institutions, requiring verification of identity and address before establishing a business relationship.
• Digital KYC methods — eKYC (Aadhaar-based), Video KYC, and CKYC (centralized repository) — have transformed the process from paper-heavy to instant digital verification.
• KYC must be periodically updated: every 2 years for high-risk customers, every 8 years for medium-risk, and every 10 years for low-risk customers.
• Non-compliance with KYC norms can lead to account restrictions, penalties from the RBI, and exposure to money laundering and fraud risks.
• Business KYC extends beyond customers to include vendor verification, director identification (DIN-KYC), and beneficial ownership disclosure under MCA regulations.