RBI Guidelines Explained: KYC, BBPS, CRILC, Account Aggregator & NACH e-Mandate

You walk into a bank branch. The teller asks for your Aadhaar, a selfie, and a utility bill. You wonder: why so many checks? The answer is a single document—the RBI Master Direction on KYC. It's one of over 200 active guidelines the Reserve Bank issues every year. This page is your map through that maze.

What Exactly Are RBI Guidelines?

RBI guidelines are legally binding rules issued by the Reserve Bank of India under the Reserve Bank of India Act, 1934, the Banking Regulation Act, 1949, and other statutes. They come in three forms:

• Master Directions – comprehensive, consolidated rules on a single topic (e.g., KYC, Priority Sector Lending).
• Circulars – updates, clarifications, or new instructions on existing rules.
• Notifications – formal announcements of new regulations or amendments.

Think of Master Directions as the constitution for a specific area—say, KYC—and circulars as the amendments. Every bank, NBFC, payment system operator, and fintech must comply. Failure can mean penalties, restrictions, or even licence cancellation.

Who Must Comply with the RBI Master Direction on KYC?

The RBI Master Direction on KYC (2016) applies to every entity regulated by the RBI that deals with customer accounts. That includes:

• Scheduled Commercial Banks (public, private, foreign)
• Regional Rural Banks (RRBs)
• Local Area Banks
• All India Financial Institutions (like NABARD, SIDBI, NHB)
• Non-Banking Financial Companies (NBFCs)
• Payment system operators (e.g., Paytm, PhonePe, Google Pay)

The rule is simple: before opening an account or providing a service, the entity must verify the customer's identity using officially valid documents (OVDs) like Aadhaar, PAN, Voter ID, or passport. The customer must also be categorised as low, medium, or high risk, with periodic reviews based on that risk level.

Explain the Bharat Bill Payment System (BBPS) and Who Operates It

The Bharat Bill Payment System (BBPS) is a centralised, interoperable platform for paying all recurring bills—electricity, water, gas, DTH, insurance premiums, loan EMIs, and more. It's operated by the National Payments Corporation of India (NPCI) under the oversight of the RBI's Department of Payment and Settlement Systems (DPSS).

BBPS works like a hub-and-spoke model: billers (e.g., electricity boards) connect through Bharat Bill Payment Operating Units (BBPOUs)—entities like banks or fintechs that aggregate bills. Customers can pay at any agent (bank branch, retail outlet, app) and get a standardised receipt. As of July 2026, over 25,000 billers are live on BBPS, processing more than 100 million transactions monthly.

What Are the CRILC and Wilful Defaulter Reporting Thresholds?

CRILC stands for Central Repository of Information on Large Credits. It's a database maintained by the RBI that collects credit information on all borrowers with aggregate exposure of ₹5 crore and above from any bank or NBFC. Banks must report this data quarterly. The system helps lenders spot over-leveraged borrowers early.

Wilful defaulter reporting has a different threshold: ₹25 lakh and above. A wilful defaulter is a borrower who has the capacity to pay but doesn't, or who has diverted or siphoned off funds. Banks must report such cases to the RBI and credit information companies (CIBIL, Experian, etc.). Once tagged, the borrower and their directors/partners are blacklisted from accessing new credit from any bank.

How Does the RBI Account Aggregator Consent Framework Work?

The RBI Account Aggregator (AA) framework, launched in September 2021, lets you share your financial data—bank statements, mutual fund holdings, insurance policies, tax returns—across regulated entities with your explicit, revocable consent. Think of it as a data highway with you in the driver's seat.

Here's how it works step-by-step:

1. You give consent on an AA app (e.g., OneMoney, Finvu, CAMS Finserv) to fetch data from a Financial Information Provider (FIP)—your bank, mutual fund, insurer.
2. The AA asks for your consent: what data, for how long, and for what purpose (e.g., loan application).
3. Once you approve, the AA securely fetches the data and shares it with the Financial Information User (FIU)—say, a lender evaluating your loan.
4. You can revoke consent anytime. The AA never sees your data; it only routes it.

The framework is governed by the RBI (Account Aggregator) Directions, 2016. As of July 2026, over 50 banks and 30 NBFCs are live on the AA network, and more than 10 million consent requests have been processed.

What Is the NACH / e-Mandate System and How Does It Differ from UPI e-Mandate?

NACH (National Automated Clearing House) is a bulk payment system operated by NPCI. It's used for recurring payments like loan EMIs, mutual fund SIPs, insurance premiums, and salary credits. An e-mandate is the digital authorisation you give to your bank to debit your account automatically on a set date.

UPI e-mandate is a newer, faster version. Instead of waiting for the NACH cycle (which runs on specific days), UPI e-mandate processes payments instantly via UPI. Key differences:

• Speed: NACH takes T+1 or T+2 days; UPI e-mandate is real-time.
• Amount limit: NACH has no per-transaction cap; UPI e-mandate is capped at ₹15,000 per transaction (as of July 2026).
• Authentication: NACH uses a one-time mandate registration; UPI e-mandate requires UPI PIN for each transaction above ₹5,000.
• Use case: NACH for high-value, scheduled payments (EMIs, SIPs); UPI e-mandate for small, frequent payments (subscriptions, utility bills).

How RBI Guidelines Affect Your Daily Banking

Every time you open a bank account, take a loan, pay a bill, or invest, RBI guidelines are at work. Here's how:

• KYC norms mean you need valid ID and address proof. No shortcuts.
• Priority Sector Lending (PSL) rules force banks to lend 40% of their adjusted net bank credit to agriculture, MSMEs, and education. That's why small businesses get loans.
• Cash Reserve Ratio (CRR) and Statutory Liquidity Ratio (SLR) determine how much money banks can lend. When RBI cuts SLR, as it did in July 2026 to 18%, banks free up funds for lending.
• MCLR (Marginal Cost of Lending Rate) is the benchmark for most floating-rate loans. When RBI changes the repo rate, MCLR moves, and your EMI changes.

For a deeper dive, read our explainers on Cash Reserve Ratio and SLR Rate Cut to 18%.

Questions people ask