NBFCs Must Complete KYC Risk Categorisation by March 2013
Current · Source: Reserve Bank of India · RBI/2012-13/144 · issued 26 Jul 2012 · ~1 min read
Quick answerRBI mandates all NBFCs to complete risk categorisation and profile updates for all existing customers by end-March 2013, citing lax compliance that exposes firms to operational risk.
The rule, in the simplest words
NBFCs (companies that give loans but are not banks) must finish sorting all their customers into risk groups (like low, medium, high risk) by March 2013.
They must also update each customer's profile (their personal and financial details) by the same deadline.
This rule is to stop bad guys from using NBFCs to hide dirty money (money laundering) or fund terrorism.
If NBFCs don't follow this, they could get in trouble with the RBI (India's central bank) and face more risk of being cheated.
How it plays out — a real example
A KYC & compliance officer in Indore, Priya, has a stack of old customer files from 2010. She now has to go through each one, decide if the customer is low-risk (like a regular salary earner) or high-risk (like someone with a big cash business), and update their address and ID proofs. She must finish this for all 500 customers by March 2013, or her NBFC could face a penalty from the RBI.
What changed
RBI observed that NBFCs are not effectively implementing KYC/AML/CFT guidelines, leaving them vulnerable to operational risk. The central bank now mandates a time-bound completion of risk categorisation and customer profile updates for all existing customers, with a deadline of end-March 2013.
What it means for you
NBFCs must urgently review and update customer risk profiles and identification data to meet regulatory standards. Failure to comply could increase operational risk and invite supervisory action. This directive reinforces the importance of KYC/AML/CFT measures in protecting the financial system.
What you must do
Complete risk categorisation and profile updates for all existing customers by end-March 2013.
Implement a system for periodic review of risk categorisation and customer identification data.
Ensure compliance with KYC/AML/CFT guidelines in both letter and spirit to mitigate operational risk.
Monitor and close alerts in accounts promptly as part of AML/CFT measures.
Who it affects
All Non-Banking Financial Companies (NBFCs), Residuary Non-Banking Companies (RNBCs)
❓ Common questions
What is the deadline for completing risk categorisation and profile updates?
The deadline is end-March 2013, as per the RBI circular dated July 26, 2012.
Why is RBI emphasising this now?
RBI observed laxities in KYC/AML implementation among NBFCs, which leaves them vulnerable to operational risk. This directive aims to strengthen compliance.
Does this apply to all NBFCs?
Yes, the circular is addressed to all Non-Banking Financial Companies and Residuary Non-Banking Companies.
📜 Read the original circular — full text as issued by RBI
RBI/2012-13/144
DNBS(PD).CC.No.298/03.10.42 /2012-13
July 26, 2012
All Non Banking Financial Companies /
Residuary Non Banking Companies
Dear Sir,
Know Your Customer (KYC) norms/Anti-Money Laundering (AML) standards/Combating of Financing of Terrorism (CFT)-Risk Categorization and updation of Customer Profiles
Please refer to para 16 on Assessment and Monitoring of Risk of Master Circular DNBS (PD) CC No.285 /03.10.42/ 2012-13 dated July 2, 2012 on KYC/AML/CFT
2. In order to have an effective implementation of KYC/AML/CFT measures, NBFCs were advised to put in place a system of periodic review of risk categorization of customers and updation of customer identification data.
3. In this context, a reference is invited to paragraphs 98 and 99 ( extracts enclosed , applicable to NBFCs also) of the Monetary Policy Statement 2012-13 announced on April 17,2012 on Implementation of KYC/AML Guidelines. NBFCs are aware that risk categorization of customers as also compilation and periodic updation of customer profiles and monitoring and closure of alerts in accounts by NBFCs are extremely important for effective implementation of KYC/AML/CFT measures. It is, however, observed that there are laxities in effective implementation of the Reserve Bank’s guidelines in this area, leaving NBFCs vulnerable to operational risk. NBFCs should, therefore, ensure compliance with the regulatory guidelines on KYC/AML/CFT both in letter and spirit.
4. Accordingly, NBFCs are advised to complete the process of risk categorization and compiling/updating profiles of all of their existing customers in a time-bound manner, and in any case not later than end-March 2013.
Yours faithfully,
(Chandana Dasgupta)
Deputy General Manager
Encl: as above
Monetary Policy Statement 2012-13
Implementation of KYC/AML Guidelines
98. Risk categorisation of customers as also compilation, periodic updation of customer
profiles and monitoring and closure of alerts in accounts by banks are very important for
effective implementation of KYC, anti-money laundering (AML) and combating of financing of terrorism (CFT) measures apart from helping their business development. It
is, however, observed that there are laxities in effective implementation of the Reserve Bank’s guidelines on KYC/AML measures. Any weakness in the KYC/AML process would leave banks vulnerable to operational risk. Banks should, therefore, ensure compliance with the regulatory guidelines on KYC/AML in both letter and spirit. Accordingly, it is proposed:
to mandate banks to complete the process of risk categorisation and compiling/updating profiles of all of their existing customers in a time-bound manner,
and in any case not later than end-March 2013.
99. Detailed guidelines in this regard will be issued separately.
Reproduced for reference with acknowledgment — Source: Reserve Bank of India · RBI/2012-13/144 · issued 26 Jul 2012. The plain-English explanation above is BankPulse’s own independent summary.
Implement a system for periodic review of risk categorisation and customer identification data.
📜 Compliance
Complete risk categorisation and profile updates for all existing customers by end-March 2013.
Ensure compliance with KYC/AML/CFT guidelines in both letter and spirit to mitigate operational risk.
Monitor and close alerts in accounts promptly as part of AML/CFT measures.
Grouped from the action items above — a single circular may involve more than one team.
Worked example & action-note template
Example: if you are a Compliance officer at a bank this circular applies to (All Non-Banking Financial Companies (NBFCs), Residuary Non-Banking Companies (RNBCs)), your first concrete step on “NBFCs Must Complete KYC Risk Categorisation by March 2013” is: “Complete risk categorisation and profile updates for all existing customers by end-March 2013.” (RBI issued this 26 Jul 2012).
Circular: RBI/2012-13/144 -- NBFCs Must Complete KYC Risk Categorisation by March 2013
Issued: 26 Jul 2012
Action required: Complete risk categorisation and profile updates for all existing customers by end-March 2013.
Action required: Implement a system for periodic review of risk categorisation and customer identification data.
Action required: Ensure compliance with KYC/AML/CFT guidelines in both letter and spirit to mitigate operational risk.
Action required: Monitor and close alerts in accounts promptly as part of AML/CFT measures.
Owner: ____________ Target date: ____________
Board/committee approval needed? Y / N
Evidence filed in compliance register on: ____________
Built only from this circular’s own published fields — not legal advice; always confirm against the official RBI source.
💬 Banker Discussion
Discuss this circular with fellow bankers — reply, upvote what helps, report what doesn’t belong. Be professional; no client data. Views are the commenter’s own, not BankPulse’s.
BankPulse Compliance Evidence Pack — generated 03 Aug 2026 · status cross-checked against RBI’s official withdrawal register (refreshed weekly). Official RBI source: https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=7471&Mode=0 — Plain-English summary by BankPulse (bankpulse.ai), reviewed by our expert reviewer, CA Amit Jain. Independent platform, not affiliated with the Reserve Bank of India; is our own plain-English paraphrase, not RBI’s original wording.
Help us keep this accurate
Found an inaccuracy or have an improvement? Tell us. Every report is reviewed by our team before any change is made — nothing goes live unverified.
Public beta — plain-English informational summaries. Always verify against the official RBI source (circular number cited on every page) before making compliance, credit, treasury, audit, or operational decisions. · Join our WhatsApp channel ↗
BANKPULSE · FREE DAILY BRIEF
Get RBI updates for your role
Every important RBI update, decoded in plain English — for your career, exams & financial awareness.
We collect only your email, name and role, used solely to send your brief — never sold or shared. Withdraw anytime via the unsubscribe link in any email. Independent platform, not affiliated with the RBI. Information, not legal advice.
REPORT AN ERROR · BETA
Spotted an error? Earn 500 BankPulse Credits
Help us stay accurate. If your correction is verified true and approved by our founder, you earn 500 BankPulse Credits — redeemable when the platform monetises.
Reviewed by a human before any credit is awarded. We never change the site from crowd input without verification.
WANT A NEW FEATURE · BETA
What would make BankPulse more useful for you?
Tell us what to build next — a tool, a data view, a role page, anything. We read every suggestion.
Thank you — your ideas directly shape what we build.