HomeCirculars › RBI/2013-14/228

RBI Cracks Down on UCBs Over KYC Overreach

Current · Source: Reserve Bank of India · RBI/2013-14/228 · issued 05 Sep 2013 · ~2 min read
Quick answerRBI warns UCBs against demanding excessive personal details (dependents, assets, wedding date) during KYC. Only mandatory info is allowed upfront; optional data needs customer consent post-account opening. Banks must stop intrusive practices immediately.
The rule, in the simplest words
How it plays out — a real example

Priya, a KYC & compliance officer in Indore, was updating account forms for new customers. She remembered the RBI rule and stopped asking for details like 'number of dependents' or 'wedding date' upfront. Now, she only collects mandatory KYC info like name and address, and if a customer later wants a loan, she asks for optional details only after the account is open and with their clear consent.

What changed

RBI reiterated that UCBs must only collect mandatory KYC information at account opening or periodic updates. Optional details like family members, assets, or lifestyle can only be sought after account opening with explicit customer consent. The circular also clarified that all customer information must remain confidential and not be used for cross-selling without separate consent.

What it means for you

UCBs must immediately review their account opening forms and KYC processes to remove non-mandatory fields. This reduces compliance friction and customer complaints but requires banks to clearly distinguish mandatory vs optional information. Confidentiality obligations are reinforced, limiting cross-selling opportunities from KYC data.

What you must do

Who it affects

Primary (Urban) Co-operative Banks (UCBs), Compliance officers at UCBs, Branch managers and customer-facing staff at UCBs, Customers of UCBs

❓ Common questions

What specific information is considered 'non-mandatory' under this circular?

Examples include number of dependents, names of children, lifestyle details, number of foreign visits in last three years, family members abroad, assets and liabilities, spouse name and date of birth, wedding date, and investments. These are not required for KYC risk assessment.

Can we collect optional information from customers at all?

Yes, but only after the account is opened and with the customer's explicit consent. The customer must be told which information is mandatory for KYC and which is optional.

What are the consequences if a UCB continues to seek non-mandatory information?

RBI has directed strict adherence. Non-compliance could lead to regulatory action, including supervisory restrictions or penalties, as it violates KYC guidelines and customer privacy.

📜 Read the original circular — full text as issued by RBI
RBI/2013-14/228 UBD.BPD (PCB) Cir. No. 11/14.01.062/2013-14 September 05, 2013 The Chief Executive Officer All Primary (Urban) Co-operative Banks. Madam / Dear Sir, Know Your Customer (KYC)/Anti Money Laundering (AML) Standards/Combating Financing of Terrorism (CFT)/ Obligation of banks under Prevention of Money Laundering Act (PMLA), 2002 – Information sought by banks from customers - Primary (Urban) Co-operative Banks (UCBs) Please refer to the Master Circular UBD.BPD. (PCB).MC.No.16 /12.05.001/2013-14 dated July 1, 2013 on Know Your Customer (KYC) Norms / Anti-Money Laundering (AML) Measures/Combating Financing of Terrorism (CFT)/Obligation of banks under PMLA, 2002. The objective of these guidelines is to prevent banks from being used, intentionally or otherwise, by criminal elements for money laundering or terrorist financing activities. The KYC procedures also enable banks to know/understand their customers and their financial dealings better which in turn help them manage their risks prudently. However, it has come to the notice of Reserve Bank of India that banks are seeking personal information/ details like number of dependents, the names of sons and daughters, lifestyle, number of foreign visits undertaken during the last three years, details of family members/ relatives settled abroad, assets and liabilities, name and date of birth of spouse, wedding date, investments, etc from customers which are not mandatory and relevant to perceived risk of a prospective customer while complying with KYC/AML requirement during the process of opening an account or during periodic updation. This has led to customer complaints that banks are going overboard in seeking information for KYC compliance and thereby invading into their privacy. 2. In this connection, attention of Primary (Urban) Co-operative Banks (UCBs) is drawn to paragraph 2.1 of the Master Circular that information sought from customer is relevant to the perceived risk, is not intrusive, and is in conformity with the guidelines issued in this regard. Any other information from the customer should be sought separately with his/her consent and after opening the account. 3. It is, therefore, reiterated that only ‘mandatory’ information required for KYC purpose which the customer is obliged to give while opening an account should be obtained at the time of opening the account/ during periodic updation. 4. Other ‘optional’ customer details/ additional information, if required, may be obtained separately only after the account is opened with the explicit consent of the customer. The customer has a right to know what is the information required for KYC that she/he is obliged to give and what is the additional information sought by the bank that is optional. 5. Further, it is reiterated that banks should keep in mind that the information (both ‘mandatory’ – before opening the account as well as ‘optional’- after opening the account with the explicit consent of the customer) collected from the customer is to be treated as confidential and details thereof are not to be divulged for cross selling or any other like purposes. 6. UCBs are advised to ensure strict adherence to the same. Yours faithfully, (A.K. Bera) Principal Chief General Manager
Reproduced for reference with acknowledgment — Source: Reserve Bank of India · RBI/2013-14/228 · issued 05 Sep 2013. The plain-English explanation above is BankPulse’s own independent summary.
🧰 Tools — save, print, templates & related
Who does what — compliance checklist
🏦 Branch Manager
  • Audit current account opening forms and KYC updation templates to remove non-mandatory fields like dependents, spouse details, assets, and foreign travel history.
  • Train frontline staff to only ask for mandatory KYC info upfront and to seek optional details only after account opening with explicit customer consent.
📜 Compliance
  • Update internal policies to ensure customer data collected for KYC is not used for cross-selling or any other purpose without separate consent.
  • Communicate clearly to customers which information is mandatory for KYC and which is optional, as per RBI's directive.
Grouped from the action items above — a single circular may involve more than one team.
Worked example & action-note template

Example: if you are a Branch Manager at a bank this circular applies to (Primary (Urban) Co-operative Banks (UCBs), Compliance officers at UCBs, Branch managers and customer-facing staff at UCBs, Customers of UCBs), your first concrete step on “RBI Cracks Down on UCBs Over KYC Overreach” is: “Audit current account opening forms and KYC updation templates to remove non-mandatory fields like dependents, spouse details, assets, and foreign travel history.” (RBI issued this 05 Sep 2013).

  1. Circular: RBI/2013-14/228 -- RBI Cracks Down on UCBs Over KYC Overreach
  2. Issued: 05 Sep 2013
  3. Action required: Audit current account opening forms and KYC updation templates to remove non-mandatory fields like dependents, spouse details, assets, and foreign travel history.
  4. Action required: Train frontline staff to only ask for mandatory KYC info upfront and to seek optional details only after account opening with explicit customer consent.
  5. Action required: Update internal policies to ensure customer data collected for KYC is not used for cross-selling or any other purpose without separate consent.
  6. Action required: Communicate clearly to customers which information is mandatory for KYC and which is optional, as per RBI's directive.
  7. Owner: ____________ Target date: ____________
  8. Board/committee approval needed? Y / N
  9. Evidence filed in compliance register on: ____________
Built only from this circular’s own published fields — not legal advice; always confirm against the official RBI source.

💬 Banker Discussion

Discuss this circular with fellow bankers — reply, upvote what helps, report what doesn’t belong. Be professional; no client data. Views are the commenter’s own, not BankPulse’s.

Loading comments…
BankPulse Compliance Evidence Pack — generated 03 Aug 2026 · status cross-checked against RBI’s official withdrawal register (refreshed weekly).
Official RBI source: https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=8377&Mode=0 — Plain-English summary by BankPulse (bankpulse.ai), reviewed by our expert reviewer, CA Amit Jain. Independent platform, not affiliated with the Reserve Bank of India; is our own plain-English paraphrase, not RBI’s original wording.
Public beta — plain-English informational summaries. Always verify against the official RBI source (circular number cited on every page) before making compliance, credit, treasury, audit, or operational decisions. · Join our WhatsApp channel ↗