HomeCirculars › RBI/2009-10/439

RBI flags high-risk jurisdictions for NBFC KYC/AML compliance

Live · in forceNo withdrawal recorded as of 20 Jun 2026. Reviewed by Vikram Jain; always verify against the official RBI source below.
Issued by RBI: 30 Apr 2010  ·  Decoded by BankPulse: 20 Jun 2026, 15:38 IST
⏱ ~2 min read
📄 Official RBI source ↗
Quick answerRBI has directed all NBFCs and RNBCs to factor in AML/CFT deficiencies of Iran, Angola, North Korea, Ecuador, Ethiopia, Pakistan, Turkmenistan, and Sao Tome and Principe when assessing customer risk, based on FATF's February 2010 statement.

What changed

RBI issued a circular on April 30, 2010, updating the list of jurisdictions with strategic AML/CFT deficiencies as per FATF's February 18, 2010 statement. It categorizes these jurisdictions into three groups: those requiring countermeasures (Iran), those with unaddressed deficiencies (Angola, DPRK, Ecuador, Ethiopia), and those previously identified with lingering issues (Pakistan, Turkmenistan, Sao Tome and Principe). NBFCs and RNBCs must now consider risks from these countries in their KYC/AML processes.

What it means for you

NBFCs and RNBCs must enhance due diligence for any transactions or relationships involving these jurisdictions, as they pose higher money laundering and terrorist financing risks. This could lead to stricter screening, additional documentation, or even rejection of business from these countries. Lenders should update their risk assessment frameworks and ensure compliance officers are aware of these specific geographies.

What you must do

Who it affects

All Non-Banking Financial Companies (NBFCs), Residuary Non-Banking Companies (RNBCs), Compliance Officers and Principal Officers of NBFCs/RNBCs, Regional Offices of the Department of Non-Banking Supervision (DNBS)

Which jurisdictions require countermeasures according to this circular?

Iran is the only jurisdiction where FATF calls for countermeasures to protect the international financial system from ongoing and substantial money laundering and terrorist financing risks.

What should NBFCs do if they have existing customers from these high-risk jurisdictions?

NBFCs should conduct enhanced due diligence on such customers, reassess the risk profile, and consider applying additional monitoring or restrictions as per their AML/CFT policies.

Is there a deadline for submitting the receipt of this circular?

The circular does not specify a deadline, but it advises that an acknowledged receipt be submitted by the Compliance Officer/Principal Officer to the concerned DNBS Regional Office.

Track this rule
⏳ How this rule evolved — History Map →Full RBI rulebook crosswalk →
AI-drafted · 3-model AI consensus fact-check · under the editorial review of Vikram Jain · decoded & published by BankPulse · 20 Jun 2026, 15:38 IST
Official RBI source: https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=5641&Mode=0 — Plain-English summary by BankPulse (bankpulse.ai), reviewed by Vikram Jain. Independent platform, not affiliated with the Reserve Bank of India; never reproduces RBI text verbatim.