RBI's KYC Rule: Why Your Bank Keeps Asking for Documents You Already Gave
Your bank sends a text: 'Please update your KYC.' You gave them your PAN card three years ago. Nothing has changed — so why ask again? It isn't laziness. It's a law with your name on it.
- Re-KYC is mandated by RBI's Master Direction on Know Your Customer (KYC), issued under the Prevention of Money Laundering Act (PMLA), 2002
- Banks must sort every customer into a risk category — low, medium, or high — and re-verify higher-risk customers more often (check your bank's KYC policy or RBI's Master Direction for exact review periods)
- RBI has clarified that banks cannot fully freeze an account merely for pending periodic KYC updation without prior notice; only a debit-only restriction can follow proper notice (verify the exact circular date on RBI's official website)
- Many banks now allow re-KYC through video call, e-KYC, or self-declaration without a branch visit, if your address and details are unchanged
- RBI's supervisory inspections check whether banks follow KYC norms, and lapses can trigger regulatory action against the bank — not the customer
- Re-KYC exists because of the PMLA, 2002 and RBI's Master Direction on KYC — it's law, not a bank's whim
- Higher-risk customers are re-verified more frequently than low-risk ones
- RBI has barred banks from fully freezing accounts solely for pending re-KYC without prior notice (verify exact date on RBI's official site)
- Many re-KYC updates can now be done online if your details haven't changed
What is KYC re-verification, actually?
KYC stands for 'Know Your Customer.' When you opened your account, the bank checked who you are — PAN, Aadhaar, address proof, photo. That was KYC verification. Re-verification (or 're-KYC') is the bank confirming, again, that this information still holds true. Think of it as a passport renewal, not a fresh application.
Who forces the bank to do this?
Not the bank's own choice. RBI's Master Direction on KYC is the rulebook, flowing from the Prevention of Money Laundering Act, 2002 (PMLA). Every bank, NBFC, and payment company in India must comply.
The law exists because dirty money — from fraud, drugs, or terror financing — needs a clean-looking bank account to hide in. If a bank stops checking who really owns an account, criminals can hide behind stale records.
Why does the timing feel random?
It isn't random — it's risk-based. RBI requires banks to bucket every customer as low, medium, or high risk, based on income pattern, transaction size, and profession. High-risk customers — say, someone with large cash deposits or a politically sensitive role — get asked to re-verify more often than a salaried, low-risk customer. Confirm the exact review periods for each category on RBI's official Master Direction page, since banks can also apply stricter internal timelines.
What if you ignore the message?
Earlier, some banks froze accounts entirely — no debit, no credit — the moment re-KYC lapsed. RBI has since clarified that a full freeze isn't fair if the delay isn't the customer's fault: banks must send reminders first, and can restrict only debit transactions after proper notice (check RBI's official circular for the exact date and wording). This matters if you've ever faced a loan account frozen or a savings account gone silent over what felt like pure bureaucracy — there's now a defined process banks must follow, not a switch they can flip instantly.
Can you do it without visiting a branch?
Often, yes. If none of your details have changed, many banks allow re-KYC through a self-declaration online, a video call, or app-based e-KYC using Aadhaar. A branch visit is usually needed only when your address, name, or document type has genuinely changed.
Questions people ask
It's RBI's consolidated rulebook, issued under the PMLA, 2002, on verifying and re-verifying customer identity. Every RBI-regulated entity that opens accounts — banks, NBFCs, payment firms — must comply.
It depends on your risk category — low, medium, or high — as assessed by the bank. Higher-risk customers are asked more frequently. Check RBI's official Master Direction for the exact periods your bank should follow.
Not immediately and not fully. RBI has clarified that banks must give notice first and can only apply a debit restriction, not block incoming money, after following due process. Confirm the exact circular on RBI's official website.
Not always. If your address and personal details are unchanged, many banks let you complete re-KYC online via e-KYC, video verification, or a self-declaration form.
Yes, indirectly. RBI's <a href='/articles/how-rbi-inspects-a-bank-supervisory-examination/'>supervisory inspections</a> check whether banks follow KYC norms, and lapses can lead to regulatory action against the bank, not the customer.