KYC/AML Risk Categorization Deadline for RRBs and Co-op Banks
Current · Source: Reserve Bank of India · RBI/2011-12/597 · issued 11 Jun 2012 · ~1 min read
Quick answerRBI mandates all RRBs, StCBs, and CCBs to complete risk categorization and profile updates for all existing customers by March 31, 2013, citing lax compliance that exposes banks to operational risk.
The rule, in the simplest words
All RRBs (Regional Rural Banks), StCBs (State Co-operative Banks), and CCBs (Central Co-operative Banks) must finish sorting customers into risk groups (low, medium, high) and update their profiles by March 31, 2013.
Banks must set up a system to regularly check and update customer risk groups and information, not just do it once.
Banks must watch accounts closely and fix any warnings (alerts) that come up, to catch problems early.
Banks must follow all KYC/AML rules exactly as written and also in the spirit (meaning, not just checking boxes but really doing the right thing).
How it plays out — a real example
A KYC & compliance officer in Indore at a Central Co-operative Bank is reviewing customer files before the March 31, 2013 deadline. She notices that Mr. Sharma, a long-time borrower, still has an old profile with no risk category. She updates his identification details, assigns him a 'low risk' label because he has a steady income and clean history, and sets a reminder to review his profile again next year. This helps the bank avoid penalties and keeps it safe from money laundering risks.
What changed
RBI observed that banks are not fully implementing KYC/AML guidelines, leaving them vulnerable to operational risk. It now mandates a time-bound completion of risk categorization and customer profile updates for all existing customers, with a hard deadline of end-March 2013. This directive follows earlier circulars from 2008 and the Monetary Policy Statement 2012-13.
What it means for you
Banks must urgently review and update customer risk profiles and identification data to meet regulatory standards. Failure to comply could increase operational risk exposure and invite supervisory action. This is a clear signal that RBI expects rigorous, not just cosmetic, adherence to KYC/AML norms.
What you must do
Complete risk categorization and profile updates for all existing customers by March 31, 2013.
Establish a system for periodic review of risk categorization and customer data updation.
Ensure monitoring and closure of alerts in accounts is done effectively.
Review current KYC/AML processes to close any gaps in compliance, both in letter and spirit.
Who it affects
Regional Rural Banks (RRBs), State Co-operative Banks (StCBs), Central Co-operative Banks (CCBs)
❓ Common questions
What is the deadline for completing risk categorization and profile updates?
The deadline is end-March 2013, as per the Monetary Policy Statement 2012-13 and this circular.
Why is RBI emphasizing this now?
RBI observed laxities in implementing KYC/AML guidelines, which leave banks vulnerable to operational risk. This circular aims to enforce stricter compliance.
Does this apply to all customers or only new ones?
It applies to all existing customers. Banks must complete risk categorization and compile/update profiles for their entire customer base.
📜 Read the original circular — full text as issued by RBI
RBI/2011-12/597
RPCD.CO.RRB.RCB.AML.BC.No.81/07.40.00/2011-12
June 11, 2012
The Chairmen / CEOs of all Regional Rural Banks/
State and Central Co-operative Banks
Dear Sir,
Know Your Customer (KYC)/Anti-Money Laundering (AML)/Combating of
Financing of Terrorism (CFT) - Risk Categorization and Updation of Customer Profiles
Please refer to our circulars RPCD. CO. RRB. No. BC. 50/ 03.05.33(E)/2007-08 dated February 27, 2008 and RPCD. CO. RF. AML.BC. No.51/ 07.40.00/ 2007-08 dated February 28, 2008 on KYC/AML/CFT.
2. In order to have an effective implementation of KYC/AML/CFT measures, Regional Rural Banks (RRBs)/State and Central Co-operative Banks (StCBs/CCBs) were advised to put in place a system of periodic review of risk categorization of customers and updation of customer identification data.
3. In this context, a reference is invited to paragraphs 98 and 99 ( extracts enclosed ) of the Monetary Policy Statement 2012-13 announced on April 17, 2012 on Implementation of KYC/AML Guidelines. RRBs/ StCBs/CCBs are aware that risk categorization of customers as also compilation and periodic updation of customer profiles and monitoring and closure of alerts in accounts by banks are extremely important for effective implementation of KYC/AML/CFT measures. It is, however, observed that there are laxities in effective implementation of the Reserve Bank’s guidelines in this area, leaving banks vulnerable to operational risk. Banks should, therefore, ensure compliance with the regulatory guidelines on KYC/AML/CFT both in letter and spirit.
4. Accordingly, RRBs/StCBs/CCBs are advised to complete the process of risk categorization and compiling/updating profiles of all of their existing customers in a time-bound manner, and in any case not later than end-March 2013.
Yours faithfully,
(C.D.Srinivasan)
Chief General Manager
Monetary Policy Statement 2012-13
Implementation of KYC/AML Guidelines
98. Risk categorisation of customers as also compilation, periodic updation of customer profiles and monitoring and closure of alerts in accounts by banks are very important for effective implementation of KYC, anti-money laundering (AML) and combating of financing of terrorism (CFT) measures apart from helping their business development. It is, however, observed that there are laxities in effective implementation of the Reserve Bank’s guidelines on KYC/AML measures. Any weakness in the KYC/AML process would leave banks vulnerable to operational risk. Banks should, therefore, ensure compliance with the regulatory guidelines on KYC/AML in both letter and spirit. Accordingly, it is proposed:
to mandate banks to complete the process of risk categorisation and compiling/updating profiles of all of their existing customers in a time-bound manner, and in any case not later than end-March 2013.
99. Detailed guidelines in this regard will be issued separately.
Reproduced for reference with acknowledgment — Source: Reserve Bank of India · RBI/2011-12/597 · issued 11 Jun 2012. The plain-English explanation above is BankPulse’s own independent summary.
Establish a system for periodic review of risk categorization and customer data updation.
📜 Compliance
Complete risk categorization and profile updates for all existing customers by March 31, 2013.
Ensure monitoring and closure of alerts in accounts is done effectively.
Review current KYC/AML processes to close any gaps in compliance, both in letter and spirit.
Grouped from the action items above — a single circular may involve more than one team.
Worked example & action-note template
Example: if you are a Compliance officer at a bank this circular applies to (Regional Rural Banks (RRBs), State Co-operative Banks (StCBs), Central Co-operative Banks (CCBs)), your first concrete step on “KYC/AML Risk Categorization Deadline for RRBs and Co-op Banks” is: “Complete risk categorization and profile updates for all existing customers by March 31, 2013.” (RBI issued this 11 Jun 2012).
Circular: RBI/2011-12/597 -- KYC/AML Risk Categorization Deadline for RRBs and Co-op Banks
Issued: 11 Jun 2012
Action required: Complete risk categorization and profile updates for all existing customers by March 31, 2013.
Action required: Establish a system for periodic review of risk categorization and customer data updation.
Action required: Ensure monitoring and closure of alerts in accounts is done effectively.
Action required: Review current KYC/AML processes to close any gaps in compliance, both in letter and spirit.
Owner: ____________ Target date: ____________
Board/committee approval needed? Y / N
Evidence filed in compliance register on: ____________
Built only from this circular’s own published fields — not legal advice; always confirm against the official RBI source.
💬 Banker Discussion
Discuss this circular with fellow bankers — reply, upvote what helps, report what doesn’t belong. Be professional; no client data. Views are the commenter’s own, not BankPulse’s.
BankPulse Compliance Evidence Pack — generated 03 Aug 2026 · status cross-checked against RBI’s official withdrawal register (refreshed weekly). Official RBI source: https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=7266&Mode=0 — Plain-English summary by BankPulse (bankpulse.ai), reviewed by our expert reviewer, CA Amit Jain. Independent platform, not affiliated with the Reserve Bank of India; is our own plain-English paraphrase, not RBI’s original wording.
Help us keep this accurate
Found an inaccuracy or have an improvement? Tell us. Every report is reviewed by our team before any change is made — nothing goes live unverified.
Public beta — plain-English informational summaries. Always verify against the official RBI source (circular number cited on every page) before making compliance, credit, treasury, audit, or operational decisions. · Join our WhatsApp channel ↗
BANKPULSE · FREE DAILY BRIEF
Get RBI updates for your role
Every important RBI update, decoded in plain English — for your career, exams & financial awareness.
We collect only your email, name and role, used solely to send your brief — never sold or shared. Withdraw anytime via the unsubscribe link in any email. Independent platform, not affiliated with the RBI. Information, not legal advice.
REPORT AN ERROR · BETA
Spotted an error? Earn 500 BankPulse Credits
Help us stay accurate. If your correction is verified true and approved by our founder, you earn 500 BankPulse Credits — redeemable when the platform monetises.
Reviewed by a human before any credit is awarded. We never change the site from crowd input without verification.
WANT A NEW FEATURE · BETA
What would make BankPulse more useful for you?
Tell us what to build next — a tool, a data view, a role page, anything. We read every suggestion.
Thank you — your ideas directly shape what we build.