RBI Master Direction on KYC: Last Updated March 4, 2021 – Who Must Comply and How It Affects You
The Reserve Bank of India (RBI) just released a new circular on KYC norms. If you've ever opened a bank account, this affects you. Here's everything you need to know about the latest RBI news in plain English.
- RBI issued Master Direction on KYC on February 25, 2016, last updated on March 4, 2021, introducing video-based KYC and simplified norms for small accounts.
- All banks, NBFCs, payment system operators, and asset management companies must comply with the KYC Master Direction.
- Bharat Bill Payment System (BBPS), operated by NPCI under RBI oversight, covers over 20,000 billers as of 2026.
- CRILC requires banks to report all credit exposures of ₹5 crore and above; wilful defaulter status can be declared for any default amount if conditions are met.
- Account Aggregator framework, started in September 2021, requires explicit, revocable user consent before sharing financial data between institutions.
- RBI Master Direction on KYC applies to all banks, NBFCs, payment operators, and asset management companies.
- BBPS is operated by NPCI and covers over 20,000 billers for one-stop bill payment.
- CRILC requires reporting of all loans above ₹5 crore; wilful defaulter status can be declared for any default amount.
- Account Aggregator framework requires explicit, revocable user consent before sharing financial data.
- NACH is batch-processed for fixed recurring payments; UPI e-mandate is real-time and allows variable amounts up to ₹15,000.
What Is the RBI Master Direction on KYC and Who Must Comply?
The RBI Master Direction on KYC is a set of rules that tells banks and other financial institutions how to verify your identity when you open an account or do a transaction. Think of it as the rulebook for 'knowing your customer.'
Who must follow these rules? Every bank (public, private, cooperative), every NBFC (non-banking financial company), every payment system operator (like Paytm or Google Pay), and every asset management company (mutual funds). If they handle your money, they must follow the KYC Master Direction.
The latest update came on March 4, 2021, which introduced video-based KYC and simplified the process for small accounts. For the full text, visit the official RBI page.
Explain the Bharat Bill Payment System (BBPS) and Who Operates It
BBPS is a one-stop platform for paying all your bills — electricity, water, gas, DTH, mobile, insurance, even school fees. You don't need to visit different websites or apps for each bill. One platform, one payment.
Who runs it? The National Payments Corporation of India (NPCI) operates BBPS under RBI's oversight. NPCI is the same company that runs UPI (Unified Payments Interface). So if you've used UPI, you already trust the same operator.
As of 2026, BBPS covers over 20,000 billers across India. Banks, payment apps, and even post offices can act as 'bill payment agents' on BBPS.
What Are the CRILC and Wilful Defaulter Reporting Thresholds in India?
CRILC stands for Central Repository of Information on Large Credits. It's a database maintained by RBI that tracks all large loans in the banking system. If a company takes a loan of ₹5 crore or more from any bank, that loan must be reported to CRILC.
Why does this matter? If a borrower defaults on one loan, all banks can see it immediately. This prevents a borrower from taking multiple loans from different banks without anyone knowing.
Wilful defaulter reporting: A borrower who has the ability to repay but chooses not to, or who has diverted the loan funds for other purposes, can be declared a wilful defaulter. Banks must report such cases to CRILC and to credit bureaus (like CIBIL). Once declared, the borrower and their directors are barred from getting new loans from any bank.
The threshold for CRILC reporting is ₹5 crore. For wilful defaulter classification, there is no minimum amount — any default can lead to wilful defaulter status if the conditions are met.
How Does the RBI Account Aggregator Consent Framework Work?
The Account Aggregator (AA) system is like a digital postman for your financial data. It doesn't store your data — it just moves it from one place to another, but only with your permission.
Here's how it works in three steps:
- Step 1: You want a loan. The lender (say, a bank) asks for your bank statements, mutual fund holdings, and insurance details.
- Step 2: You log into an Account Aggregator app (like OneMoney or Finvu). You see exactly what data is being requested — account balance, transaction history, etc. You can choose to share or not share each item.
- Step 3: You give explicit consent (usually via Aadhaar OTP or mobile OTP). The AA fetches the data from your bank/mutual fund/insurance company and sends it to the lender. You can revoke consent anytime.
The key rule: No data moves without your explicit, revocable consent. The AA cannot see your data — it only encrypts and forwards it. This framework started in September 2021 and now covers over 100 financial institutions.
What Is the NACH / e-Mandate System and How Does It Differ from UPI e-Mandate?
NACH stands for National Automated Clearing House. It's the system that powers auto-debit for EMIs, insurance premiums, mutual fund SIPs, and recurring payments. When you set up a 'standing instruction' to pay your loan EMI every month, NACH makes it happen.
How NACH works: You sign a mandate (paper or e-mandate) authorizing your bank to debit a fixed amount on a fixed date. The bank debits your account and sends the money to the biller. It's batch-processed — all mandates are executed at once, usually at the end of the day.
UPI e-mandate is different. It works on UPI (Unified Payments Interface) and allows recurring payments of up to ₹15,000 per transaction. The key difference: UPI e-mandate is real-time (instant), while NACH is batch-processed (takes 1-2 days). UPI e-mandate also allows variable amounts (like a phone bill that changes each month), while NACH typically requires a fixed amount.
Both are regulated by RBI. NACH is operated by NPCI, same as UPI.
RBI News: The One Angle Nobody Covers — How These Rules Affect Your Daily Life
Most news articles just list the rules. But here's what nobody tells you: These five systems — KYC, BBPS, CRILC, Account Aggregator, and NACH — are the invisible plumbing of your financial life.
When you open a bank account, KYC rules decide how much paperwork you need. When you pay your electricity bill on Google Pay, BBPS is working behind the scenes. When you apply for a loan, the bank checks CRILC to see if you have other loans. When you share your bank statement for a loan, the Account Aggregator makes it secure. When you set up an auto-debit for your SIP, NACH executes it.
Understanding these systems helps you make smarter decisions. For example, if you know how CRILC works, you'll never default on a small loan thinking 'it's just ₹50,000' — because it could affect your ability to get a bigger loan later. If you know how Account Aggregator works, you'll never share your bank statement via email again — use an AA app instead, it's safer.
How to Stay Updated on RBI News
RBI releases new circulars, master directions, and policy updates almost every week. Here's how to stay on top:
- Official RBI website: rbi.org.in — all circulars are published here.
- BankPulse: We decode every major RBI circular in plain English. Check our RBI Monetary Policy explainer and Repo Rate guide.
- RBI's mobile app: RBI has a 'RBI News' app for Android and iOS — push notifications for circulars.
- WhatsApp channels: Many banks and financial news channels share RBI updates. But always verify with the official source.
For exam aspirants, our RBI Recruitment 2026 guide covers everything from Grade B to Assistant exams.
Questions people ask
The RBI Master Direction on KYC was last updated on March 4, 2021, introducing video-based KYC and simplified norms for small accounts. All financial institutions must comply.
BBPS is operated by the National Payments Corporation of India (NPCI) under RBI's oversight. NPCI also runs UPI.
Banks must report all credit exposures of ₹5 crore and above to CRILC. This includes loans, guarantees, and letters of credit.
The AA framework requires your explicit, revocable consent before any financial data is shared. The AA cannot see your data — it only encrypts and forwards it.
NACH is batch-processed (takes 1-2 days) and typically requires a fixed amount. UPI e-mandate is real-time and allows variable amounts up to ₹15,000 per transaction.
All RBI circulars are published on the official website at rbi.org.in under 'Notifications' or 'Circulars'. You can also subscribe to their email alerts.