HomeCirculars › RBI/2011-12/415

Risk Assessment for Money Changing Activities under KYC/AML

Current · Source: Reserve Bank of India · RBI/2011-12/415 · issued 29 Feb 2012 · ~2 min read
Quick answerRBI mandates authorised persons to identify and assess money laundering/terrorism financing risks for customers, countries, products, and delivery channels. Board-approved policies and enhanced due diligence for medium/high-risk entities are required, following a national risk assessment committee's recommendations.
The rule, in the simplest words
How it plays out — a real example

A KYC & compliance officer in Indore reviews a new customer who wants to exchange a large amount of foreign currency. Following the rule, the officer checks the customer's country and the transaction type, finds it medium-risk, and applies enhanced due diligence by asking for extra documents and verifying the source of funds before approving the exchange.

What changed

RBI now requires authorised persons to conduct a formal risk assessment for money changing activities, covering customers, countries, geographical areas, products, services, transactions, and delivery channels. This goes beyond earlier guidelines that only required customer profiling and enhanced due diligence for higher-risk customers. The change stems from the government-accepted recommendations of the National Money Laundering/Financing of Terror Risk Assessment Committee.

What it means for you

Banks and other authorised persons must now implement a comprehensive, board-approved risk management framework for money changing activities. This means allocating resources more efficiently by focusing on higher-risk areas, and adopting enhanced measures for medium or high-risk customers and products. The risk-based approach aims to strengthen the AML/CFT regime without imposing uniform burdens on all transactions.

What you must do

Who it affects

All authorised persons (banks, money changers, etc.) handling money changing transactions, Agents and franchisees of authorised persons, Compliance and risk management teams in financial institutions

❓ Common questions

What is the key difference from the 2009 circular?

The 2009 circular required customer profiling and enhanced due diligence for higher-risk customers. This circular adds a formal risk assessment covering customers, countries, products, and delivery channels, with board-approved policies to manage those risks.

Do these rules apply to our agents and franchisees?

Yes, the guidelines apply mutatis mutandis to all agents and franchisees. The franchiser is solely responsible for ensuring their compliance.

What should we do if a customer or product is rated medium or high risk?

You must adopt enhanced due diligence measures for such customers, products, or services, as part of your risk-based approach.

📜 Read the original circular — full text as issued by RBI
RBI/2011-12/415 A.P. (DIR Series) Circular No. 86 February 29, 2012 To All Authorised Persons Madam/ Dear Sir, Know Your Customer (KYC) norms / Anti-Money Laundering (AML) standards / Combating the Financing of Terrorism (CFT) / Obligation of Authorised Persons under Prevention of Money Laundering Act (PMLA), 2002, as amended by Prevention of Money Laundering (Amendment) Act, 2009- Assessment and Monitoring of Risk – Money Changing Activities Attention of all the Authorised Persons (APs) is invited to the Anti-Money Laundering Guidelines governing money changing transactions, issued vide A.P. (DIR Series) Circular No. 17 [A.P. (FL/RL Series) Circular No. 04] dated November 27, 2009 , as amended from time to time. 2.   In terms of paragraph 4.3 (b) and (c) of the aforesaid circular, APs should prepare a profile for each customer, where a business relationship is established, based on risk categorisation and apply enhanced due diligence measures on higher risk customers. Some illustrative examples of customers requiring higher due diligence have also been provided in the paragraph under reference. Further, paragraph 4.8 (a) of the aforesaid circular requires APs to put in place policies, systems and procedures for risk management keeping in view the risks involved in a transaction or business relationship. 3. The Government of India had constituted a National Money Laundering / Financing of Terror Risk Assessment Committee to assess money laundering and terror financing risks, a national AML / CFT strategy and institutional framework for AML/CFT in India.  Assessment of risk of Money Laundering /Financing of Terrorism helps both the competent authorities and the regulated entities in taking necessary steps for combating ML / FT adopting a risk-based approach. This helps in judicious and efficient allocation of resources and makes the AML/CFT regime more robust. The Committee has made recommendations regarding adoption of a risk-based approach, assessment of risk and putting in place a system which would use that assessment to take steps to effectively counter ML/FT. The recommendations of the Committee have since been accepted by the Government of India and need to be implemented. 4. Accordingly, APs should take steps to identify and assess their ML/TF risk for customers, countries and geographical areas as also for products/ services/ transactions/delivery channels, in addition to what has been prescribed in the aforesaid circular, referred to in paragraph 4 of the above-mentioned circular dated November 27, 2009. APs should have policies, controls and procedures, duly approved by their boards, in place to effectively manage and mitigate their risk adopting a risk-based approach as discussed above. As a corollary, APs would be required to adopt enhanced measures for products, services and customers with a medium or high risk rating. 5. APs may design risk parameters according to their activities for risk based transaction monitoring, which will help them in their own risk assessment. 6. All the other instructions contained in the A.P. (DIR Series) Circular No. 17 [A.P. (FL/RL Series) Circular No. 04] dated November 27, 2009, as amended from time to time, shall remain unchanged. 7. These guidelines would also be applicable mutatis mutandis to all agents/franchisees of the APs and it will be the sole responsibility of the franchisers to ensure that their agents/ franchisees also adhere to these guidelines. 8. Authorised Persons should bring the contents of this circular to the notice of their constituents concerned. 9. The directions contained in this circular have been issued under sections 10(4) and Section 11(1) of the Foreign Exchange Management Act, 1999 (42 of 1999) and also under the Prevention of Money Laundering Act (PMLA), 2002 as amended by Prevention of Money Laundering (Amendment) Act, 2009 and Prevention of Money-Laundering (Maintenance of Records of the Nature and Value of Transactions, the Procedure and Manner of Maintaining and Time for Furnishing Information and Verification and Maintenance of Records of the Identity of the Clients of the Banking Companies, Financial Institutions and Intermediaries) Rules, 2005, as amended from time to time and are without prejudice to permissions / approvals, if any, required under any other law. Yours faithfully, (Meena Hemchandra) Chief General Manager-in-Charge
Reproduced for reference with acknowledgment — Source: Reserve Bank of India · RBI/2011-12/415 · issued 29 Feb 2012. The plain-English explanation above is BankPulse’s own independent summary.
🧰 Tools — save, print, templates & related
Worked example & action-note template

Example: if you are a Compliance officer at a bank this circular applies to (All authorised persons (banks, money changers, etc.) handling money changing transactions, Agents and franchisees of authorised persons, Compliance and risk management teams in financial institutions), your first concrete step on “Risk Assessment for Money Changing Activities under KYC/AML” is: “Identify and assess ML/TF risks for customers, countries, products, services, transactions, and delivery channels in money changing activities.” (RBI issued this 29 Feb 2012).

  1. Circular: RBI/2011-12/415 -- Risk Assessment for Money Changing Activities under KYC/AML
  2. Issued: 29 Feb 2012
  3. Action required: Identify and assess ML/TF risks for customers, countries, products, services, transactions, and delivery channels in money changing activities.
  4. Action required: Develop board-approved policies, controls, and procedures to manage and mitigate these risks using a risk-based approach.
  5. Action required: Apply enhanced due diligence measures for customers, products, or services rated medium or high risk.
  6. Action required: Design risk parameters tailored to your activities for risk-based transaction monitoring.
  7. Action required: Ensure all agents and franchisees comply with these guidelines, with franchisers taking full responsibility.
  8. Owner: ____________ Target date: ____________
  9. Board/committee approval needed? Y / N
  10. Evidence filed in compliance register on: ____________
Built only from this circular’s own published fields — not legal advice; always confirm against the official RBI source.

💬 Banker Discussion

Discuss this circular with fellow bankers — reply, upvote what helps, report what doesn’t belong. Be professional; no client data. Views are the commenter’s own, not BankPulse’s.

Loading comments…
BankPulse Compliance Evidence Pack — generated 03 Aug 2026 · status cross-checked against RBI’s official withdrawal register (refreshed weekly).
Official RBI source: https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=7028&Mode=0 — Plain-English summary by BankPulse (bankpulse.ai), reviewed by our expert reviewer, CA Amit Jain. Independent platform, not affiliated with the Reserve Bank of India; is our own plain-English paraphrase, not RBI’s original wording.
Public beta — plain-English informational summaries. Always verify against the official RBI source (circular number cited on every page) before making compliance, credit, treasury, audit, or operational decisions. · Join our WhatsApp channel ↗