HomeCirculars › RBI/2011-12/309

RRBs Must Assess and Monitor ML/TF Risks

Current · Source: Reserve Bank of India · RBI/2011-12/309 · issued 21 Dec 2011 · ~1 min read
Quick answerRBI mandates RRBs to identify and assess money laundering and terror financing risks for customers, geographies, and products. Boards must approve policies to manage these risks, with enhanced measures for medium or high-risk categories. IBA guidance can support implementation.
The rule, in the simplest words
How it plays out — a real example

A KYC & compliance officer in Indore reviews a new customer from a high-risk country. She flags the account for enhanced due diligence, checks the customer's documents more carefully, and monitors all transactions closely, following the board-approved policy to prevent money laundering.

What changed

RBI now requires RRBs to formally identify and assess ML/TF risks across customers, countries, geographies, products, services, transactions, and delivery channels. This goes beyond earlier KYC/AML circulars that only required customer risk profiling and enhanced due diligence. Boards must approve risk management policies, and enhanced measures apply to medium or high-risk items.

What it means for you

RRBs must adopt a structured, board-approved risk-based approach to combat money laundering and terror financing. This means allocating resources more efficiently by focusing on higher-risk areas. Non-compliance can attract penalties under the Banking Regulation Act, 1949.

What you must do

Who it affects

All Regional Rural Banks (RRBs), Board of Directors of RRBs, Compliance and AML teams at RRBs, Risk management departments at RRBs

❓ Common questions

What is the key new requirement in this circular?

RRBs must now assess ML/TF risks for customers, geographies, products, services, transactions, and delivery channels, and have board-approved policies to manage these risks.

Can RRBs use external guidance for risk assessment?

Yes, RBI suggests using IBA's May 2011 report on Parameters for Risk Based Transaction Monitoring and its KYC/AML guidance note as a reference.

What happens if an RRB does not comply?

Non-compliance may attract penalties under Section 35A of the Banking Regulation Act, 1949 read with relevant PMLA rules.

📜 Read the original circular — full text as issued by RBI
RBI/2011-12/309 RPCD.CO.RRB.AML. BC.No.46 /03.05.33 (E) /2011-12 December 21, 2011 The Chairmen All Regional Rural Banks (RRBs) Dear Sir, Know Your Customer (KYC) norms/Anti-Money Laundering (AML) standards/Combating of Financing of Terrorism (CFT)/Obligation of banks under Prevention of Money Laundering Act (PMLA), 2002- Assessment and Monitoring of Risk Please refer to our circular RPCD.No.RRB.BC.81/03.05.33(E)/2004-05 dated February 18, 2005 on Know Your Customer (KYC) Guidelines - Anti-Money Laundering  Standards and RPCD.CO.RRB.AML.BC.No. 46/03.05.33(E)/2010-11 dated January 12, 2011 on Know Your Customer (KYC) norms/Anti-Money Laundering (AML) standards/Combating of Financing of Terrorism (CFT)/Obligation of banks under Prevention of Money Laundering Act (PMLA), 2002. 2. In terms of paragraph 2 of the circular dated February 18, 2005 and paragraph 2 of the circular dated January 12, 2011, RRBs are required to prepare a risk profile of each customer and apply enhanced due diligence measures on higher risk customers. Some illustrative examples of customers requiring higher due diligence have also been provided in the paragraph under reference.Further, paragraph 5 of the circular dated  February 18,2005requires RRBs to put in place policies, systems and procedures for risk management keeping in view the risks involved in a transaction, account or banking/business relationship. 3. The Government of India had constituted a National Money Laundering/Financing of Terror Risk Assessment Committee to assess money laundering and terror financing risks, a national AML/CFT strategy and institutional framework for AML/CFT in India.  Assessment of risk of Money Laundering /Financing of Terrorism helps both the competent authorities and the regulated entities in taking necessary steps for combating ML/FT adopting a risk-based approach. This helps in judicious and efficient allocation of resources and makes the AML/CFT regime more robust. The Committee has made recommendations regarding adoption of a risk-based approach, assessment of risk and putting in place a system which would use that assessment to take steps to effectively counter ML/FT. The recommendations of the Committee have since been accepted by the Government of India and need to be implemented. 4. Accordingly, RRBs should take steps to identify and assess their ML/TF risk for customers, countries and geographical areas as also for products/ services/ transactions/delivery channels, in addition to what has been prescribed in our circulars dated February 18, 2005. RRBs should have policies, controls and procedures, duly approved by their boards, in place to effectively manage and mitigate their risk adopting a risk-based approach as discussed above. As a corollary, RRBs would be required to adopt enhanced measures for products, services and customers with a medium or high risk rating. 5.  In this regard, Indian Banks' Association (IBA) has taken initiative in assessment of ML/FT risk in the banking sector. It has circulated to its member banks on May 18, 2011, a copy of their Report on Parameters for Risk Based Transaction Monitoring (RBTM) as a supplement to their guidance note on Know Your Customer (KYC) norms / Anti-Money Laundering (AML) standards issued in July 2009. The IBA guidance also provides an indicative list of high risk customers, products, services and geographies. RRBs may use the same as guidance in their own risk assessment. 6. These guidelines are issued under Section 35A of the Banking Regulation Act, 1949 read with Rule 7 of Prevention of Money-laundering (Maintenance of Records of the Nature and Value of Transactions, the Procedure and Manner of Maintaining and Time for Furnishing Information and Verification and Maintenance of Records of the Identity of the Clients of the Banking Companies, Financial Institutions and Intermediaries) Rules, 2005. Any contravention thereof or non-compliance shall attract penalties under B R Act, 1949. Please acknowledge receipt of the circular to our Regional Office concerned. Yours faithfully, (C.D. Srinivasan) Chief General Manager
Reproduced for reference with acknowledgment — Source: Reserve Bank of India · RBI/2011-12/309 · issued 21 Dec 2011. The plain-English explanation above is BankPulse’s own independent summary.
🧰 Tools — save, print, templates & related
Worked example & action-note template

Example: if you are a Compliance officer at a bank this circular applies to (All Regional Rural Banks (RRBs), Board of Directors of RRBs, Compliance and AML teams at RRBs, Risk management departments at RRBs), your first concrete step on “RRBs Must Assess and Monitor ML/TF Risks” is: “Identify and assess ML/TF risks for customers, geographies, products, services, transactions, and delivery channels.” (RBI issued this 21 Dec 2011).

  1. Circular: RBI/2011-12/309 -- RRBs Must Assess and Monitor ML/TF Risks
  2. Issued: 21 Dec 2011
  3. Action required: Identify and assess ML/TF risks for customers, geographies, products, services, transactions, and delivery channels.
  4. Action required: Develop board-approved policies, controls, and procedures to manage and mitigate these risks.
  5. Action required: Apply enhanced due diligence and monitoring for medium or high-risk customers, products, and services.
  6. Action required: Use IBA's guidance on risk-based transaction monitoring and high-risk indicators as a reference.
  7. Action required: Acknowledge receipt of this circular to your regional RBI office.
  8. Owner: ____________ Target date: ____________
  9. Board/committee approval needed? Y / N
  10. Evidence filed in compliance register on: ____________
Built only from this circular’s own published fields — not legal advice; always confirm against the official RBI source.

💬 Banker Discussion

Discuss this circular with fellow bankers — reply, upvote what helps, report what doesn’t belong. Be professional; no client data. Views are the commenter’s own, not BankPulse’s.

Loading comments…
BankPulse Compliance Evidence Pack — generated 03 Aug 2026 · status cross-checked against RBI’s official withdrawal register (refreshed weekly).
Official RBI source: https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=6885&Mode=0 — Plain-English summary by BankPulse (bankpulse.ai), reviewed by our expert reviewer, CA Amit Jain. Independent platform, not affiliated with the Reserve Bank of India; is our own plain-English paraphrase, not RBI’s original wording.
Public beta — plain-English informational summaries. Always verify against the official RBI source (circular number cited on every page) before making compliance, credit, treasury, audit, or operational decisions. · Join our WhatsApp channel ↗