HomeCirculars › RBI/2009-10/488

RBI Clarifies KYC/AML Rules: Suspicion, STR Filing, PEPs & Principal Officer

Current · Source: Reserve Bank of India · RBI/2009-10/488 · issued 09 Jun 2010 · ~3 min read
Quick answerRBI clarifies that banks must conduct full-scale CDD before opening accounts if money laundering or terrorist financing is suspected. If unable to verify identity, file an STR with FIU-IND. PEP rules now explicitly cover beneficial owners and close relatives. Principal Officers must oversee all KYC/AML/CFT compliance.
The rule, in the simplest words
How it plays out — a real example

A KYC & compliance officer in Indore is opening a new account for a customer who wants to deposit a large sum of cash. The officer notices the customer seems nervous and cannot explain where the money came from. Because of this suspicion, the officer does full customer due diligence (checks the customer's ID, address, and source of money) before opening the account, as the RBI rule requires.

What changed

RBI clarified that whenever suspicion of money laundering or terrorist financing arises, or if a customer does not appear low-risk, banks must perform full customer due diligence before opening an account. It also specified that if a bank cannot apply appropriate CDD measures and is no longer satisfied with the customer's true identity, it must file a Suspicious Transaction Report (STR) with FIU-IND. For Politically Exposed Persons (PEPs), the existing instructions now explicitly apply to accounts where a PEP is the ultimate beneficial owner, and banks must apply enhanced CDD to PEPs, their close relatives, and accounts where a PEP is the beneficial owner. The Principal Officer's role is clarified to include overseeing and ensuring overall compliance with KYC/AML/CFT guidelines and PMLA obligations.

What it means for you

Banks must tighten their pre-account opening checks: any suspicion of money laundering or terrorist financing triggers full-scale CDD, not just simplified due diligence. If identity verification fails, banks cannot just walk away—they must file an STR with FIU-IND, adding a regulatory obligation. PEP rules now explicitly cover beneficial owners and close relatives, requiring senior management approval and enhanced ongoing monitoring for such accounts. Principal Officers now have a clearly defined responsibility to oversee all KYC/AML/CFT compliance, making them accountable for the bank's overall adherence to these norms.

What you must do

Who it affects

All Scheduled Commercial Banks (excluding RRBs), All India Financial Institutions, Local Area Banks, Compliance and AML teams, Principal Officers, Branch managers and account opening staff

❓ Common questions

When must we file an STR under this clarification?

You must file an STR with FIU-IND when you are unable to apply appropriate CDD measures and believe you no longer know the true identity of the account holder. This applies even if you decide to close the account.

Does the PEP rule now apply to beneficial owners?

Yes. The clarification explicitly states that instructions for PEPs also apply to accounts where a PEP is the ultimate beneficial owner. Banks must also apply enhanced CDD to close relatives of PEPs and accounts where a PEP is the beneficial owner.

What is the Principal Officer's clarified responsibility?

The Principal Officer must oversee and ensure overall compliance with all regulatory guidelines on KYC/AML/CFT issued from time to time, as well as obligations under the Prevention of Money Laundering Act, 2002 and its rules.

📜 Read the original circular — full text as issued by RBI
RBI/2009-10/488 DBOD.AML.BC.No.108/14.01.001/2009-10 June 9, 2010 The Chairmen and Chief Executive Officers All Scheduled Commercial Banks excluding RRBs/ All India Financial institutions/ Local Area Banks Dear Sir, Know Your Customer (KYC) norms/Anti-Money Laundering (AML) standards/Combating of Financing of Terrorism (CFT)/Obligation of banks under Prevention of Money Laundering Act (PMLA), 2002. Please refer to the Master Circular DBOD.AML.BC. No.2/14.01.001/ 2009-10 dated July 01, 2009 on Know Your Customer (KYC) norms/Anti-Money Laundering (AML) standards/Combating of Financing of Terrorism (CFT) /Obligation of banks under Prevention of Money Laundering Act (PMLA), 2002. Suspicion of money laundering/terrorist financing 2. With a view to preventing banks from being used, intentionally or unintentionally, by criminal elements for money laundering or terrorist financing, it is clarified that whenever there is suspicion of money laundering or terrorist financing or when other factors give rise to a belief that the customer does not, in fact, pose a low risk, banks should carry out full scale customer due diligence (CDD) before opening an account. Filing of STR 3. Kind attention is invited to the instructions contained in Para 2.3(a)(iv) and also Para 2.8 of the Master Circular dated July 1, 2009 referred to above, in terms of which a bank should not open an account (or should consider closing an existing account) when it is unable to apply appropriate CDD measures. It is clarified that in the circumstances when a bank believes that it would no longer be satisfied that it knows the true identity of the account holder, the bank should also file an STR with FIU-IND. Politically Exposed Persons (PEPs) 4. In terms of instructions contained in Para 5 of circular dated September 11, 2009 on the subject, in the event of an existing customer or the beneficial owner of an existing account, subsequently becoming a PEP, banks should obtain senior management approval to continue the business relationship and subject the account to the CDD measures as applicable to the customers of PEP category including enhanced monitoring on an ongoing basis. It is clarified that the instructions contained in paragraph 5 of the circular dated September 11, 2009, are also applicable to accounts where a PEP is the ultimate beneficial owner. Further, in regard to PEP accounts, it is reiterated that banks should have appropriate ongoing risk management procedures for identifying and applying enhanced CDD to PEPs, customers who are close relatives of PEPs, and accounts of which a PEP is the ultimate beneficial owner. Principal Officer 5. With reference to Para 2.15 of the Master Circular dated July 1, 2009 referred to above, regarding appointment and responsibility of the Principal Officer, it is clarified that the role and responsibilities of the Principal Officer should include overseeing and ensuring overall compliance with regulatory guidelines on KYC/AML/CFT issued from time to time and obligations under the Prevention of Money Laundering Act, 2002, rules and regulations made thereunder, as amended form time to time. 6. These guidelines are issued under Section 35A of the Banking Regulation Act, 1949. Any contravention thereof or non-compliance shall attract penalties under Banking Regulation Act. Yours faithfully, (Vinay Baijal) Chief General Manager
Reproduced for reference with acknowledgment — Source: Reserve Bank of India · RBI/2009-10/488 · issued 09 Jun 2010. The plain-English explanation above is BankPulse’s own independent summary.
🧰 Tools — save, print, templates & related
Who does what — compliance checklist
🏦 Branch Manager
  • Update account opening procedures to mandate full-scale CDD whenever there is suspicion of money laundering or terrorist financing, or if the customer does not appear low-risk.
📜 Compliance
  • Ensure that if your bank cannot apply appropriate CDD measures and is no longer satisfied with a customer's identity, an STR is filed with FIU-IND before closing the account.
  • Extend PEP-related CDD and enhanced monitoring to accounts where a PEP is the ultimate beneficial owner, and also to close relatives of PEPs.
  • Clarify in your internal policies that the Principal Officer's role includes overseeing and ensuring overall compliance with all KYC/AML/CFT guidelines and PMLA obligations.
  • Train frontline and compliance staff on these clarifications, especially the new STR filing trigger and the expanded PEP definition.
Grouped from the action items above — a single circular may involve more than one team.
Worked example & action-note template

Example: if you are a Branch Manager at a bank this circular applies to (All Scheduled Commercial Banks (excluding RRBs), All India Financial Institutions, Local Area Banks, Compliance and AML teams, Principal Officers, Branch managers and account opening staff), your first concrete step on “RBI Clarifies KYC/AML Rules: Suspicion, STR Filing, PEPs & Principal Officer” is: “Update account opening procedures to mandate full-scale CDD whenever there is suspicion of money laundering or terrorist financing, or if the customer does not appear low-risk.” (RBI issued this 09 Jun 2010).

  1. Circular: RBI/2009-10/488 -- RBI Clarifies KYC/AML Rules: Suspicion, STR Filing, PEPs & Principal Officer
  2. Issued: 09 Jun 2010
  3. Action required: Update account opening procedures to mandate full-scale CDD whenever there is suspicion of money laundering or terrorist financing, or if the customer does not appear low-risk.
  4. Action required: Ensure that if your bank cannot apply appropriate CDD measures and is no longer satisfied with a customer's identity, an STR is filed with FIU-IND before closing the account.
  5. Action required: Extend PEP-related CDD and enhanced monitoring to accounts where a PEP is the ultimate beneficial owner, and also to close relatives of PEPs.
  6. Action required: Clarify in your internal policies that the Principal Officer's role includes overseeing and ensuring overall compliance with all KYC/AML/CFT guidelines and PMLA obligations.
  7. Action required: Train frontline and compliance staff on these clarifications, especially the new STR filing trigger and the expanded PEP definition.
  8. Owner: ____________ Target date: ____________
  9. Board/committee approval needed? Y / N
  10. Evidence filed in compliance register on: ____________
Built only from this circular’s own published fields — not legal advice; always confirm against the official RBI source.

💬 Banker Discussion

Discuss this circular with fellow bankers — reply, upvote what helps, report what doesn’t belong. Be professional; no client data. Views are the commenter’s own, not BankPulse’s.

Loading comments…
BankPulse Compliance Evidence Pack — generated 03 Aug 2026 · status cross-checked against RBI’s official withdrawal register (refreshed weekly).
Official RBI source: https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=5717&Mode=0 — Plain-English summary by BankPulse (bankpulse.ai), reviewed by our expert reviewer, CA Amit Jain. Independent platform, not affiliated with the Reserve Bank of India; is our own plain-English paraphrase, not RBI’s original wording.
Public beta — plain-English informational summaries. Always verify against the official RBI source (circular number cited on every page) before making compliance, credit, treasury, audit, or operational decisions. · Join our WhatsApp channel ↗