Central KYC Registry
Also written CKYCR · CKYC · Central KYC Records Registry
The Government's central digital store of KYC records for the whole financial sector, operated by CERSAI, which de-duplicates records and issues each client a unique KYC Identifier.
In plain language
Before CKYC, an investor proved who he was separately to his bank, his broker, his insurer and every mutual fund. The Central KYC Registry exists so that he proves it once, for the whole financial sector.
By a notification dated 26 November 2015, the Government of India authorised CERSAI — the Central Registry of Securitisation and Asset Reconstruction and Security Interest of India — to act as and perform the functions of the Central KYC Registry under the PML Rules, 2005: receiving, storing, safeguarding and retrieving the KYC records, in digital form, of all clients in the financial sector.
That last phrase is what makes CKYCR different from a KRA. A KRA is SEBI's, and covers the securities market. CKYCR sits above all four regulators.
How it works
An investor can get CKYC done through any financial intermediary regulated by RBI, SEBI, IRDAI or PFRDA — a bank, an NBFC, a stock broker, an AMC, a distributor or an insurance company. Registered intermediaries use the KYC template finalised by CERSAI.
The upload obligations are dated, and the dates are examined:
| Account type | Obligation |
|---|---|
| Individual accounts opened on or after 1 August 2016 | KYC data must be uploaded to CKYCR |
| Individual accounts opened before 1 August 2016 | Uploaded as and when updated KYC information is received |
| Legal Entity accounts opened on or after April 2021 | Uploaded to CKYCR |
| Legal Entity accounts opened before 1 April 2021 | Uploaded when updated KYC information is received |
CKYCR then processes each record for de-duplication and issues a unique KYC Identifier for that client back to the reporting entity. When an investor gives a registered intermediary his KYC Identifier together with consent to download, that intermediary retrieves the records online and the investor need not submit the same KYC records, information or any additional identification documents again — unless something in his information has changed since.
This sits alongside, not instead of, SEBI's KRA system, where PAN is the KYC identifier, records are shared between KRAs through an inter-operability process, and a record validated against UIDAI, OTP and the Income Tax database is marked KYC Validated while one based on a non-Aadhaar OVD is only KYC Registered and can transact only with existing funds. A KRA may only validate independently where KYC was completed using Aadhaar as the OVD, and it validates three things: UIDAI for Aadhaar, OTP (or successful email/SMS delivery) for mobile number and email id, and the Income Tax database for PAN.
PAN-Aadhaar linkage no longer decides KYC status. Chapter 12 now carries SEBI's circular dated 14 May 2024, and its effect is precise: PAN-Aadhaar linkage is disconnected from ascertaining the KYC status. A client whose PAN-Aadhaar linkage is not found to be verified is still allowed to transact with the existing intermediary, subject to a valid PAN — but that client's KYC is not allowed portability in the securities market. So the penalty for a missing linkage is the loss of portability to a new intermediary, not a blocked folio at the existing one.
That sits alongside the KRA's own risk-management verification, which is unchanged: the KRA must verify PAN, name and address within the prescribed time of receiving the records, and also verify the mobile number and email id. A client whose details cannot be verified is not allowed to transact further until they are. The May 2024 circular removed the linkage test from the KYC-status question; it did not remove this verification.
Two places the linkage still bites, and the chapter numbers matter. Chapter 11 (Role of RTA in Tax Computation), page 154, says plainly that if PAN is not linked with Aadhaar, higher TDS will get attracted — a tax consequence, and the workbook does not quantify it. Chapter 12, page 168, is the KYC-status rule above. The two are not in conflict: after May 2024 an unlinked PAN can still cost the investor tax at a higher rate while leaving him able to transact with his existing intermediary. Cross-reference, not from this workbook: Series II-A's workbook (chapter 11, page 129) still states the older demat-side position — that eligible demat account holders who fail to link PAN with Aadhaar in time become KYC non-compliant (inoperative PAN) with restrictions on debit and credit transactions. Answer each paper from its own text.
A worked example
Mr Pillai completed KYC at his bank in 2019. The bank uploaded the record to CKYCR, which de-duplicated it and issued him a KYC Identifier.
In 2026 he decides to invest Rs 3,00,000 in an equity scheme of an AMC he has never dealt with. He quotes the KYC Identifier on the application and consents to the download. The RTA pulls his record from CKYCR — no fresh proof of identity, no fresh proof of address, no in-person verification. The application is in good order on day one and the money is invested at the applicable NAV rather than sitting through a KYC cycle.
Compare three routes an investor can take, and what each one costs him:
| Route | Limit | What is needed |
|---|---|---|
| CKYC Identifier with consent | No investment limit of its own | Nothing further, unless details changed |
| OTP-based eKYC using Aadhaar | Rs 50,000 per annum per mutual fund, paid electronically from the registered bank account | Aadhaar, PAN, registered mobile; no IPV |
| Above that limit | Unlimited | IPV or biometric authentication, through a distributor or at a CAMS/KFintech office |
Had Mr Pillai gone the OTP route instead, his Rs 3,00,000 would have been stopped at Rs 50,000 — the threshold is per annum per mutual fund, not per transaction, and crossing it requires in-person or biometric verification.
Separately, if he were a small investor keeping the year's total within Rs 50,000 per mutual fund, he could invest without PAN at all, quoting a PEKRN issued by a KRA — a composite Rs 50,000 covering micro-SIPs and lump sums together.
Why NISM asks about it
Chapter 12 (Investors in Mutual Funds) covers CKYCR at section 12.4.3, immediately after eKYC and KRAs, and the sequence matters: the paper wants you to be able to tell the three apart. The examinable facts are who operates CKYCR (CERSAI), under which rules (PML Rules, 2005), the 1 August 2016 and April 2021 cut-offs, and the effect of the KYC Identifier — no re-submission of records. Section 12.4.2 on KRAs, on page 168, adds the newer one: SEBI's circular dated 14 May 2024 disconnects PAN-Aadhaar linkage from the KYC status, leaving an unverified-linkage client able to transact with the existing intermediary on a valid PAN but without KYC portability. A question here either asks what an unverified PAN-Aadhaar linkage now costs the client (portability, not the ability to transact), or asks which status — KYC Validated or KYC Registered — a non-Aadhaar OVD produces. Chapter 12's sample questions also test the Rs 50,000 composite PAN-exempt limit and which documents are officially valid.
Common exam traps
- CKYCR is not a KRA. CERSAI runs CKYCR for the whole financial sector under the PML Rules; a KRA is a SEBI-registered agency for the securities market, and uses PAN as the KYC identifier.
- CERSAI, not SEBI and not UIDAI, is the operator. The authorising notification is dated 26 November 2015.
- 1 August 2016 is the individual-account date; April 2021 is the legal-entity date. Older accounts are uploaded only when updated KYC information comes in.
- The KYC Identifier removes the paperwork, not the diligence. If the investor's information has changed, records must be furnished again.
- The Rs 50,000 OTP-eKYC ceiling is per annum per mutual fund, and is separate from the Rs 50,000 composite PAN-exemption for micro-SIPs and lump sums. They are different rules that share a number.
- IPV is not required where KYC is completed through Aadhaar authentication with UIDAI, or where the form and documents came in online or through DigiLocker and can be verified online.
- A "KYC Registered" investor is not the same as "KYC Validated" — the former, based on a non-Aadhaar OVD, can transact only with existing funds.
- Since SEBI's circular dated 14 May 2024, PAN-Aadhaar linkage does not determine KYC status. An unverified linkage costs the client KYC portability, not the ability to transact with the existing intermediary on a valid PAN. An answer that freezes the folio is answering the pre-2024 position.
- Do not read that circular as making the linkage irrelevant. Chapter 11, page 154, still attaches higher TDS to a PAN not linked with Aadhaar — a tax consequence the circular does not touch, and one the workbook does not quantify.
- The demat side of Series II-A reads differently — there an unlinked PAN is "KYC non-compliant (inoperative PAN)" with debit and credit restrictions. That is another paper's text, at chapter 11 page 129 of the II-A workbook; do not mix the two in one answer.
Check yourself
1.What is the CKYCR, who operates it, and what does a KYC Identifier achieve?
- a)SEBI operates it and it applies only to mutual funds
- b)CERSAI acts as the Central KYC Registry under the PML Rules, receiving, storing, safeguarding and retrieving KYC records in digital form for the whole financial sector; it de-duplicates records and issues a unique KYC Identifier, on production of which with the investor's consent an intermediary retrieves records online and the investor need not resubmit them
- c)Each intermediary keeps its own registry with no sharing
- d)It applies only to legal entities
Show the answer
Answer: (b) CERSAI acts as the Central KYC Registry under the PML Rules, receiving, storing, safeguarding and retrieving KYC records in digital form for the whole financial sector; it de-duplicates records and issues a unique KYC Identifier, on production of which with the investor's consent an intermediary retrieves records online and the investor need not resubmit them
Vide Notification dated November 26, 2015, the Government of India authorised the Central Registry of Securitisation and Asset Reconstruction and Security Interest of India (CERSAI) to act as and to perform the functions of the Central KYC Registry (CKYCR) under the PML Rules 2005, including receiving, storing, safeguarding and retrieving the KYC records in digital form of all the clients in the financial sector.
CERSAI, not SEBI — and of all the clients in the financial sector, not only mutual fund investors, which disposes of option A.
Its reach across regulators: to get CKYC done, one may approach a financial intermediary regulated by RBI, SEBI, IRDAI or PFRDA like a bank, a NBFC, a stock broker, AMC, a distributor or an Insurance company.
Option C describes the position the registry was created to end.
Option D is wrong on scope. CKYCR covers both: uploads are required in respect of all individual accounts opened on or after August 1, 2016, and SEBI has further rolled out the implementation of CKYCR for Legal Entity (LE) accounts opened on or after April 2021 — with older accounts of either kind uploaded as and when updated KYC information is received from the clients.
What the identifier does: CKYCR shall process the KYC records received from a reporting entity for de-duplication and issue a unique KYC Identifier for each client to the reporting entity. Where an investor submits a KYC Identifier to a registered intermediary, providing consent to download records from CKYCR, then such intermediary shall retrieve the KYC records online from CKYCR using the KYC Identifier and the investor shall not be required to submit the same KYC records or information or any other additional identification documents or details, unless there is a change in the information.
Consent is required, and the relief lasts until the information changes.
The KRA system runs alongside — KYC once completed, is valid across mutual funds and all the other SEBI-registered intermediaries, with sharing through inter-operability process (IOP).
Where this is taught
Free preparation for NISM Series II-BRelated terms
- FATCA and CRSTwo cross-border tax transparency regimes — one American, one OECD — under which a mutual fund's registrar identifies foreign-taxable investors and reports their accounts to the CBDT for automatic exchange.
- Folio numberThe unique account number a fund house allots to an investor, under which the registrar holds that investor's units across every scheme of the fund, along with the bank mandate, address and signature.
- Official Point of AcceptanceA location a mutual fund has formally designated to receive transaction requests, where the application is time-stamped — and that stamp, not the moment the investor handed the form over, decides which NAV applies.
- Third-party chequeA payment for a mutual fund investment drawn from a bank account of which the first holder is not an account holder — not acceptable, and the reason registrars run third-party verification on every subscription.
- Know Your CustomerThe identity and address check every investor must clear before a bank, broker or depository participant will open an account — mandatory under the Prevention of Money Laundering Act, 2002.
- PAN-Aadhaar linkageA demat account holder who fails to link PAN with Aadhaar in time has the account frozen for debits and credits, with the PAN itself treated as inoperative under SEBI's KYC rules.
- International Financial CentreA financial centre that serves customers outside its own jurisdiction — in India, GIFT IFSC, where the AML rules are written for a cross-border, cashless, foreign-currency business.
- Digital KYCKYC done by an authorised officer capturing a live photo of the customer and of the original OVD or Aadhaar proof, with the latitude and longitude of the place, through the entity's own authenticated app.
- Third-party relianceUsing another regulated firm's client due diligence instead of doing your own — permitted under Rule 9(2) of the PML Rules on six conditions, with the relying entity still ultimately responsible.
- KYC IdentifierThe unique number or code the Central KYC Records Registry assigns to a client after de-duplicating its KYC records — the key a reporting entity uses to fetch those records instead of asking for them again.
- Equivalent e-documentAn electronic version of a document issued by the issuing authority itself with its valid digital signature, including one issued to the client's digital locker account — accepted wherever the original is.
- PAN exemptionThe relaxation that lets small mutual fund investors invest without a PAN — up to a composite Rs 50,000 a year in micro-SIPs and lump sums — by quoting a PAN Exempt KYC Reference Number from a KRA.
- DigiLockerSEBI's digital-locker push to cut unclaimed mutual fund assets — storing account statements so a registered nominee gets an alert on the investor's demise, without replacing the folio's own nominee.
- Statement of Financial TransactionsThe Income Tax Act report a mutual fund trustee files on purchases of Rs 10 lakh or more per investor per year, plus a separate SFT-081 filing on transactions attracting capital gains.
- Client Due DiligenceScreening and verifying a client using reliable, independent sources — identity, beneficial owner, purpose of the relationship — and then continuing to scrutinise it for as long as it lasts.
- In-person verificationThe mandatory step in which an authorised official physically confirms that the person opening the account is the person in the KYC documents, and records who did it, when, and in what capacity.
- Video In-Person VerificationIPV conducted over a live, recorded video interaction through the intermediary's own app — with informed consent, random questions, a liveliness check and a tamper-proof time-stamped recording.
- Retention periodsHow long AML records must be kept: five years from the transaction for transaction records, and five years after the relationship ends or the account is closed, whichever is later, for identity records.
- Uniform KYC formatSEBI's rule that every registered intermediary uses the same KYC form and supporting documents — Part I of the account opening form built on CERSAI's templates, Part II left to the intermediary.
- Unique Client CodeThe single code a broker assigns to a client once KYC is complete, mapped to that client's PAN and demat account, under which every one of the client's orders must be entered on the exchange.
- KYC Registration AgencyA SEBI-created agency that holds an investor's verified KYC record centrally, so that one KYC completed with any securities market intermediary works with all the others.
- GuardianThe adult who transacts on behalf of a minor investor, completes KYC in their own name, and signs the application and payment instruments, because a minor cannot contract.