The RBI Master Direction on KYC and AML Standards for NBFCs, updated in 2024, consolidates all know-your-customer and anti-money laundering requirements for non-banking financial companies registered with RBI. It mandates customer identification procedures, risk categorization, beneficial ownership tracking up to 25% threshold, enhanced due diligence for high-risk customers and PEPs, ongoing monitoring, and reporting of suspicious transactions to FIU-IND. The framework aligns NBFCs with banking sector standards under the Prevention of Money Laundering Act, 2002, requiring designated Principal Officers, comprehensive record-keeping for ten years, and periodic audits of AML systems.

• Creates level playing field between NBFCs and banks by imposing uniform KYC/AML standards, reducing regulatory arbitrage and enhancing customer confidence in NBFC sector
• Facilitates digital onboarding through Video-based Customer Identification Process (V-CIP) and Central KYC Registry integration, reducing customer acquisition costs by 40-60% for tech-enabled NBFCs
• Enables risk-based approach allowing simplified due diligence for low-risk customers while focusing resources on high-risk segments like real estate financing and bullion trading
• Provides legal protection to NBFCs and their officers when reporting suspicious transactions in good faith, eliminating fear of customer litigation
• Strengthens India's FATF compliance posture by bringing shadow banking sector under robust AML surveillance, protecting financial system integrity

• Many smaller NBFCs lack dedicated compliance teams and rely on outsourced KYC vendors without adequate oversight, leading to poor quality customer records and missing beneficial ownership documentation
• Customer risk categorization remains subjective with inconsistent parameters across NBFCs; many continue using basic three-tier low-medium-high classification without granular risk scoring models
• Beneficial ownership identification stops at immediate layers; NBFCs struggle to trace complex layered structures involving offshore entities, particularly in gold loan and vehicle financing segments
• Transaction monitoring systems in mid-sized NBFCs are rule-based with high false positives (often 80-90%), overwhelming compliance teams and delaying genuine suspicious transaction reporting to FIU-IND
• Periodic KYC updation compliance is poor with 30-40% customer records becoming stale beyond prescribed timelines, especially in geographically dispersed microfinance portfolios

• DHFL (Dewan Housing Finance Limited) collapsed in 2019 partly due to inadequate beneficial ownership verification; shell companies controlled by promoters received loans worth ₹14,046 crore without proper KYC, highlighting gaps in related party transaction monitoring that the 2024 Direction specifically addresses.
• Religare Finvest faced RBI penalties in 2020 for KYC deficiencies when it disbursed corporate loans exceeding ₹2,000 crore to entities without adequate beneficial ownership documentation and PEP screening, leading to fund diversion cases under investigation by SFIO and ED.
• Bajaj Finance successfully implemented AI-driven transaction monitoring in 2023, reducing false positive STR alerts by 65% while improving detection of layering patterns in personal loan accounts, demonstrating best-practice compliance that smaller NBFCs struggle to replicate due to technology investment constraints.

• Implement continuous KYC (CKYC) using API integrations with UIDAI, MCA, and GSTN databases for real-time beneficial ownership validation rather than relying on annual manual verification cycles
• Adopt consortium-level transaction monitoring for retail NBFCs to identify mule accounts and synthetic identities through cross-institutional pattern analysis, similar to banking sector GFCNET initiatives
• Invest in natural language processing tools to scan unstructured data from customer interactions, social media, and adverse media for dynamic PEP identification beyond static government lists
• Establish specialized AML cells for high-risk product lines like gold loans and invoice discounting with sector-specific red flag libraries, moving beyond generic transaction threshold alerts