Central KYC Registry (CKYCR) — KYC Compliance for NBFCs and Financial Institutions

Q: Is CKYCR compliance mandatory for all NBFCs?

Yes. All RBI-registered NBFCs must register on CKYCR, upload new customer KYC records, and integrate CKYCR download into their onboarding processes under PMLA obligations.

Q: What is a KYC Identifier Number (KIN)?

A unique 14-digit number assigned to each customer in CKYCR. New financial institutions can download pre-verified KYC using the KIN, eliminating repeated document submission.

Q: What documents are required to upload a KYC record to CKYCR?

Proof of identity, proof of address, photograph, and for PEPs, additional disclosures. For entities, corporate KYC documents including incorporation certificate and beneficial ownership details.

Q: What is the periodic KYC update obligation for NBFCs?

Every 2 years for high-risk, 8 years for medium-risk, and 10 years for low-risk customers. Changes must be uploaded to CKYCR within 30 days.

Comprehensive advisory on Central KYC Registry (CKYCR) compliance for NBFCs — KYC identifier registration, record upload, update obligations, and integration with the CERSAI-operated KYC registry to streamline customer onboarding.

CKYCR Registration Setup

Assistance with NBFC registration on the CKYCR platform operated by CERSAI — obtaining reporting entity credentials, setting up API integration, and configuring the KYC upload workflow.

KYC Record Upload & Management

Advisory on KYC record creation, upload of customer KYC data and documents to CKYCR, issuance of 14-digit KYC identifiers (KIN), and management of existing KYC records in the registry.

KYC Download & Verification

Implementation of CKYCR download facility for customer onboarding — enabling NBFCs to retrieve verified KYC records from the registry when customers provide their KIN, reducing re-KYC burden.

KYC Update Obligations

Advisory on periodic KYC update requirements — when changes in customer information must be uploaded to CKYCR and the obligations to update the registry within prescribed timelines when customer data changes.

AML Policy Integration

Integration of CKYCR processes with the NBFC's broader AML/CFT framework — risk-based KYC, enhanced due diligence for high-risk customers, and PMLA compliance. Connects with our Financial Intelligence Unit reporting advisory.

RBI KYC Master Direction Compliance

Gap analysis and implementation support for full compliance with the RBI's KYC Master Direction — customer identification, beneficial ownership identification, account monitoring, and re-KYC norms.

What is the Central KYC Registry (CKYCR)?

The Central KYC Registry (CKYCR) is a centralised repository of KYC records of customers of financial institutions in India, operated by the Central Registry of Securitisation Asset Reconstruction and Security Interest of India (CERSAI) under directions from the Government of India. When a customer's KYC is verified and uploaded to CKYCR by any reporting entity, subsequent financial institutions can download the KYC record using the customer's 14-digit KYC identifier — eliminating the need for repeated KYC documentation from the customer.

NBFCs are required to register with CKYCR and comply with obligations to upload new KYC records, update existing records when customer information changes, and download records when onboarding customers who provide a valid KIN. Non-compliance with CKYCR obligations is treated as a KYC deficiency and attracts regulatory action.

Frequently Asked Questions

Is CKYCR compliance mandatory for all NBFCs? +

Yes. All NBFCs registered with the RBI are reporting entities under the Prevention of Money Laundering Act (PMLA) and are required to comply with CKYCR obligations. NBFCs must register on the CKYCR platform, upload new individual customer KYC records, and integrate CKYCR download into their customer onboarding processes. Failure to comply is a KYC deficiency attracting RBI supervisory action.

What is a KYC Identifier Number (KIN)? +

A KYC Identifier Number (KIN) is a unique 14-digit number assigned to each customer whose KYC record is uploaded to the CKYCR. When a customer provides their KIN to a new financial institution, the institution can download the pre-verified KYC record from the registry without requiring the customer to submit fresh KYC documents. The KIN simplifies onboarding and reduces KYC friction for customers across multiple financial institutions.

Who operates the CKYCR in India? +

The CKYCR is operated by CERSAI (Central Registry of Securitisation Asset Reconstruction and Security Interest of India), a government company set up under Section 25 of the Companies Act. CERSAI was designated as the operator of CKYCR by the Ministry of Finance in 2011 and began operations in 2016. CERSAI also operates the Central Registry for mortgages and securitisation transactions.

What documents are required to upload a KYC record to CKYCR? +

For individual customers, the CKYCR upload requires: proof of identity (Aadhaar, PAN, passport, voter ID, or driving licence); proof of address; a recent photograph; and for politically exposed persons (PEPs), additional disclosures. For non-individual entities, corporate KYC documents including incorporation certificate, memorandum, and beneficial ownership details are required. The KYC Form prescribed by the government must be used.

What is the periodic KYC update obligation for NBFCs? +

NBFCs must periodically update KYC records based on customer risk category: every 2 years for high-risk customers; every 8 years for medium-risk customers; and every 10 years for low-risk customers. When a customer's KYC information changes, the updated record must be uploaded to CKYCR within 30 days. NBFCs must also refresh KYC at account re-activation and when suspicious transactions trigger enhanced due diligence.

Streamline Your NBFC's KYC Compliance with CKYCR

CKYCR integration, KYC upload setup, RBI KYC Master Direction compliance, and AML framework advisory.

F.A.Q.

What is GSTR-9 and why is it required?

GSTR-9 is an annual GST return that summarizes all transactions reported during the financial year. It is required to ensure proper reconciliation and compliance with GST laws.

Who is required to file GSTR-9?

All regular GST-registered taxpayers are required to file GSTR-9, except composition dealers, casual taxable persons, and non-resident taxpayers.

What is the due date for filing GSTR-9?

The due date is generally 31st December following the end of the relevant financial year, unless extended by the government.

What details are included in GSTR-9?

It includes details of outward supplies, inward supplies, input tax credit claimed, taxes paid, and adjustments made during the year.

Is GSTR-9 mandatory for all taxpayers?

GSTR-9 is mandatory for most regular taxpayers, but certain small taxpayers may get exemptions based on turnover thresholds notified by the government.

What happens if GSTR-9 is not filed on time?

Late filing may result in penalties and late fees, along with potential compliance issues or notices from GST authorities.