Central KYC Registry
Also written CKYCR · CKYC · Central KYC Records Registry
The Government's central digital store of KYC records for the whole financial sector, operated by CERSAI, which de-duplicates records and issues each client a unique KYC Identifier.
In plain language
Before CKYC, an investor proved who he was separately to his bank, his broker, his insurer and every mutual fund. The Central KYC Registry exists so that he proves it once, for the whole financial sector.
By a notification dated 26 November 2015, the Government of India authorised CERSAI — the Central Registry of Securitisation and Asset Reconstruction and Security Interest of India — to act as and perform the functions of the Central KYC Registry under the PML Rules, 2005: receiving, storing, safeguarding and retrieving the KYC records, in digital form, of all clients in the financial sector.
That last phrase is what makes CKYCR different from a KRA. A KRA is SEBI's, and covers the securities market. CKYCR sits above all four regulators.
How it works
An investor can get CKYC done through any financial intermediary regulated by RBI, SEBI, IRDAI or PFRDA — a bank, an NBFC, a stock broker, an AMC, a distributor or an insurance company. Registered intermediaries use the KYC template finalised by CERSAI.
The upload obligations are dated, and the dates are examined:
| Account type | Obligation |
|---|---|
| Individual accounts opened on or after 1 August 2016 | KYC data must be uploaded to CKYCR |
| Individual accounts opened before 1 August 2016 | Uploaded as and when updated KYC information is received |
| Legal Entity accounts opened on or after April 2021 | Uploaded to CKYCR |
| Legal Entity accounts opened before 1 April 2021 | Uploaded when updated KYC information is received |
CKYCR then processes each record for de-duplication and issues a unique KYC Identifier for that client back to the reporting entity. When an investor gives a registered intermediary his KYC Identifier together with consent to download, that intermediary retrieves the records online and the investor need not submit the same KYC records, information or any additional identification documents again — unless something in his information has changed since.
This sits alongside, not instead of, SEBI's KRA system, where PAN is the KYC identifier, records are shared between KRAs through an inter-operability process, and a record validated against UIDAI, OTP and the Income Tax database is marked KYC Validated while one based on a non-Aadhaar OVD is only KYC Registered and can transact only with existing funds.
A worked example
Mr Pillai completed KYC at his bank in 2019. The bank uploaded the record to CKYCR, which de-duplicated it and issued him a KYC Identifier.
In 2026 he decides to invest Rs 3,00,000 in an equity scheme of an AMC he has never dealt with. He quotes the KYC Identifier on the application and consents to the download. The RTA pulls his record from CKYCR — no fresh proof of identity, no fresh proof of address, no in-person verification. The application is in good order on day one and the money is invested at the applicable NAV rather than sitting through a KYC cycle.
Compare three routes an investor can take, and what each one costs him:
| Route | Limit | What is needed |
|---|---|---|
| CKYC Identifier with consent | No investment limit of its own | Nothing further, unless details changed |
| OTP-based eKYC using Aadhaar | Rs 50,000 per annum per mutual fund, paid electronically from the registered bank account | Aadhaar, PAN, registered mobile; no IPV |
| Above that limit | Unlimited | IPV or biometric authentication, through a distributor or at a CAMS/KFintech office |
Had Mr Pillai gone the OTP route instead, his Rs 3,00,000 would have been stopped at Rs 50,000 — the threshold is per annum per mutual fund, not per transaction, and crossing it requires in-person or biometric verification.
Separately, if he were a small investor keeping the year's total within Rs 50,000 per mutual fund, he could invest without PAN at all, quoting a PEKRN issued by a KRA — a composite Rs 50,000 covering micro-SIPs and lump sums together.
Why NISM asks about it
Chapter 12 (Investors in Mutual Funds) covers CKYCR at section 12.4.3, immediately after eKYC and KRAs, and the sequence matters: the paper wants you to be able to tell the three apart. The examinable facts are who operates CKYCR (CERSAI), under which rules (PML Rules, 2005), the 1 August 2016 and April 2021 cut-offs, and the effect of the KYC Identifier — no re-submission of records. Chapter 12's sample questions also test the Rs 50,000 composite PAN-exempt limit and which documents are officially valid.
Common exam traps
- CKYCR is not a KRA. CERSAI runs CKYCR for the whole financial sector under the PML Rules; a KRA is a SEBI-registered agency for the securities market, and uses PAN as the KYC identifier.
- CERSAI, not SEBI and not UIDAI, is the operator. The authorising notification is dated 26 November 2015.
- 1 August 2016 is the individual-account date; April 2021 is the legal-entity date. Older accounts are uploaded only when updated KYC information comes in.
- The KYC Identifier removes the paperwork, not the diligence. If the investor's information has changed, records must be furnished again.
- The Rs 50,000 OTP-eKYC ceiling is per annum per mutual fund, and is separate from the Rs 50,000 composite PAN-exemption for micro-SIPs and lump sums. They are different rules that share a number.
- IPV is not required where KYC is completed through Aadhaar authentication with UIDAI, or where the form and documents came in online or through DigiLocker and can be verified online.
- A "KYC Registered" investor is not the same as "KYC Validated" — the former, based on a non-Aadhaar OVD, can transact only with existing funds.
Check yourself
1.What is the CKYCR, who operates it, and what does a KYC Identifier achieve?
- a)SEBI operates it and it applies only to mutual funds
- b)CERSAI acts as the Central KYC Registry under the PML Rules, receiving, storing, safeguarding and retrieving KYC records in digital form for the whole financial sector; it de-duplicates records and issues a unique KYC Identifier, on production of which with the investor's consent an intermediary retrieves records online and the investor need not resubmit them
- c)Each intermediary keeps its own registry with no sharing
- d)It applies only to legal entities
Show the answer
Answer: (b) CERSAI acts as the Central KYC Registry under the PML Rules, receiving, storing, safeguarding and retrieving KYC records in digital form for the whole financial sector; it de-duplicates records and issues a unique KYC Identifier, on production of which with the investor's consent an intermediary retrieves records online and the investor need not resubmit them
Vide Notification dated November 26, 2015, the Government of India authorised the Central Registry of Securitisation and Asset Reconstruction and Security Interest of India (CERSAI) to act as and to perform the functions of the Central KYC Registry (CKYCR) under the PML Rules 2005, including receiving, storing, safeguarding and retrieving the KYC records in digital form of all the clients in the financial sector.
CERSAI, not SEBI — and of all the clients in the financial sector, not only mutual fund investors, which disposes of option A.
Its reach across regulators: to get CKYC done, one may approach a financial intermediary regulated by RBI, SEBI, IRDAI or PFRDA like a bank, a NBFC, a stock broker, AMC, a distributor or an Insurance company.
Option C describes the position the registry was created to end.
Option D is wrong on scope. CKYCR covers both: uploads are required in respect of all individual accounts opened on or after August 1, 2016, and SEBI has further rolled out the implementation of CKYCR for Legal Entity (LE) accounts opened on or after April 2021 — with older accounts of either kind uploaded as and when updated KYC information is received from the clients.
What the identifier does: CKYCR shall process the KYC records received from a reporting entity for de-duplication and issue a unique KYC Identifier for each client to the reporting entity. Where an investor submits a KYC Identifier to a registered intermediary, providing consent to download records from CKYCR, then such intermediary shall retrieve the KYC records online from CKYCR using the KYC Identifier and the investor shall not be required to submit the same KYC records or information or any other additional identification documents or details, unless there is a change in the information.
Consent is required, and the relief lasts until the information changes.
The KRA system runs alongside — KYC once completed, is valid across mutual funds and all the other SEBI-registered intermediaries, with sharing through inter-operability process (IOP).
Where this is taught
Free preparation for NISM Series II-BRelated terms
- FATCA and CRSTwo cross-border tax transparency regimes — one American, one OECD — under which a mutual fund's registrar identifies foreign-taxable investors and reports their accounts to the CBDT for automatic exchange.
- Folio numberThe unique account number a fund house allots to an investor, under which the registrar holds that investor's units across every scheme of the fund, along with the bank mandate, address and signature.
- Official Point of AcceptanceA location a mutual fund has formally designated to receive transaction requests, where the application is time-stamped — and that stamp, not the moment the investor handed the form over, decides which NAV applies.
- Third-party chequeA payment for a mutual fund investment drawn from a bank account of which the first holder is not an account holder — not acceptable, and the reason registrars run third-party verification on every subscription.
- Know Your CustomerThe identity and address check every investor must clear before a bank, broker or depository participant will open an account — mandatory under the Prevention of Money Laundering Act, 2002.
- International Financial CentreA financial centre that serves customers outside its own jurisdiction — in India, GIFT IFSC, where the AML rules are written for a cross-border, cashless, foreign-currency business.
- Client Due DiligenceScreening and verifying a client using reliable, independent sources — identity, beneficial owner, purpose of the relationship — and then continuing to scrutinise it for as long as it lasts.
- In-person verificationThe mandatory step in which an authorised official physically confirms that the person opening the account is the person in the KYC documents, and records who did it, when, and in what capacity.
- Video In-Person VerificationIPV conducted over a live, recorded video interaction through the intermediary's own app — with informed consent, random questions, a liveliness check and a tamper-proof time-stamped recording.
- Retention periodsHow long AML records must be kept: five years from the transaction for transaction records, and five years after the relationship ends or the account is closed, whichever is later, for identity records.