63[(1) Every reporting entity shall
(a) at the time of commencement of an account-based relationship
(i) identify its clients, verify their identity, obtain information on the purpose and intended nature of the business relationship; and
(ii) determine whether a client is acting on behalf of a beneficial owner, and identify the beneficial owner and take all steps to verify the identity of the beneficial owner:
Provided that where the Regulator is of the view that money laundering and terrorist financing risks are effectively managed and where this is essential not to interrupt the normal conduct of business, the Regulator may permit the reporting entity to complete the verification as soon as reasonably practicable following the establishment of the relationship; and
(b) in all other cases, verify identity while carrying out
(i) transaction of an amount equal to or exceeding Rupees Fifty thousand, whether conducted as a single transaction or several transactions that appear to be connected, or
(ii) any international money transfer operations.
64[Provided that where a client is subscribing or dealing with depository receipts or equity shares, issued or listed in jurisdictions notified by the Central Government, of a company incorporated in India, and it is acting on behalf of a beneficial owner who is a resident of such jurisdiction, the determination, identification and verification of such beneficial owner, shall be as per the norms of such jurisdiction and nothing in the sub-rules (3) to (9) of these rules shall be applicable for due-diligence of such beneficial owner.
Explanation For the purposes of this proviso, the expression equity share means a share in the equity share capital of a company and equity share capital shall have the same meaning as assigned to it in the Explanation to Section 43 of the Companies Act, 2013.]
65[(1-A) Subject to the provisions of sub-rule (1), every reporting entity shall within 66[ten days] after the commencement of an account-based relationship with a client, file the electronic copy of the client's KYC records with the Central KYC Records Registry.
(1-B) The Central KYC Records Registry shall process the KYC records received from a reporting entity for de-duplicating and issue a KYC Identifier for each client to the reporting entity, which shall communicate the KYC Identifier in writing to their client.
(1-C) Where a client, for the purposes of clause (a) and clause (b), submits a KYC Identifier to a reporting entity, then such reporting entity shall retrieve the KYC records online from the Central KYC Records Registry by using the KYC Identifier and shall not require a client to submit the same KYC records or information or any other additional identification documents or details, unless
(i) there is a change in the information of the client as existing in the records of Central KYC Records Registry;
(ii) the current address of the client is required to be verified;
(iii) the reporting entity considers it necessary in order to verify the identity or address of the client, or to perform enhanced due diligence or to build an appropriate risk profile of the client.
(1-D) A reporting entity after obtaining additional or updated information from a client under sub-rule (1-C), shall as soon as possible furnish the updated information to the Central KYC Records Registry which shall update the existing KYC records of the client and the Central KYC Records Registry shall thereafter inform electronically all reporting entities who have dealt with the concerned client regarding updatation of KYC record of the said client.
(1-E) The reporting entity which performed the last KYC verification or sent updated information in respect of a client shall be responsible for verifying the authenticity of the identity or address of the client.
(1-F) A reporting entity shall not use the KYC records of a client obtained from the Central KYC Records Registry for purposes other than verifying the identity or address of the client and shall not transfer KYC records or any information contained therein to any third party unless authorised to do so by the client or by the Regulator or by the Director;
(1-G) The regulator shall issue guidelines to ensure that the Central KYC records are accessible to the reporting entities in real time.]
(2) For the purpose of clause (a) of sub-rule (1), a reporting entity may rely on a third party subject to the conditions that
67[(a) the reporting entity, within two days, obtains from the third party or from the Central KYC Records Registry records or the information of the client due diligence carried out by the third party.]
(b) the reporting entity takes adequate steps to satisfy itself that copies of identification data and other relevant documentation relating to the client due diligence requirements will be made available from the third party upon request without delay;
(c) the reporting entity is satisfied that such third party is regulated, supervised or monitored for, and has measures in place for compliance with client due diligence and record-keeping requirements in line with the requirements and obligations under the Act;
(d) the third party is not based in a country or jurisdiction assessed as high risk;
(e) the reporting entity is ultimately responsible for client due diligence and undertaking enhanced due diligence measures, as applicable; and
(f) where a reporting entity relies on a third party that is part of the same financial group, the Regulator may issue guidelines to consider any relaxation in the conditions (a) to (d).
(3) The beneficial owner for the purpose of sub-rule (1) shall be determined as under
(a) where the client is a company, the beneficial owner is the natural person(s), who, whether acting alone or together, or through one or more juridical person, has a controlling ownership interest or who exercises control through other means.
Explanation. For the purpose of this sub-clause
1. Controlling ownership interest means ownership of or entitlement to more than twenty-five per cent of shares or capital or profits of the company;
2. Control shall include the right to appoint majority of the directors or to control the management or policy decisions including by virtue of their shareholding or management rights or shareholders agreements or voting agreements;
(b) where the client is a partnership firm, the beneficial owner is the natural person(s), who, whether acting along or together, or through one or more juridical person, has ownership of/entitlement to more than fifteen per cent of capital or profits of the partnership;
(c) where the client is an unincorporated association or body of individuals, the beneficial owner is the natural person(s), who, whether acting alone or together, or through one or more juridical person, has ownership of or entitlement to more than fifteen per cent of the property or capital or profits of such association or body of individuals;
(d) where no natural person is identified under (a) or (b) or (c) above, the beneficial owner is the relevant natural person who holds the position of senior managing official;
(e) where the client is a trust, the identification of beneficial owner(s) shall include identification of the author of the trust, the trustee, the beneficiaries with fifteen per cent or more interest in the trust and any other natural person exercising ultimate effective control over the trust through a chain of control or ownership; and
68[(f) where the client or the owner of the controlling interest is an entity listed on a stock exchange in India, or it is an entity resident in jurisdictions notified by the Central Government and listed on stock exchanges in such jurisdictions notified by the Central Government, or it is a subsidiary of such listed entities, it is not necessary to identify and verify the identity of any shareholder or beneficial owner of such entities.]
69[(4) Where the client is an individual, he shall for the purpose of sub-rule (1) submit to the reporting entity,
(a) the Aadhaar number where,
(i) he is desirous of receiving any benefit or subsidy under any scheme notified under Section 7 of the Aadhaar (Targeted Delivery of Financial and Other subsidies, Benefits and Services) Act, 2016 (18 of 2016); or
(ii) he decides to submit his Aadhaar number voluntarily to a banking company or any reporting entity notified under first proviso to sub-section (1) of Section 11-A of the Act; or
(aa) the proof of possession of Aadhaar number where offline verification can be carried out; or
(ab) the proof of possession of Aadhaar number where offline verification cannot be carried out or any officially valid document or the equivalent e-document thereof containing the details of his identity and address; and
(b) the Permanent Account Number or the equivalent e-document thereof or Form No. 60 as defined in Income Tax Rules, 1962; and
(c) such other documents including in respect of the nature of business and financial status of the client, or the equivalent e-documents thereof as may be required by the reporting entity.]
(4-A) 70[* * *]
(5) Notwithstanding anything contained in sub-rules (4) 71[and as an alternative thereto] 72[* * *], an individual who desires to open a small account in a banking company may be allowed to open such an account on production of a self-attested photograph and affixation of signature or thumb print, as the case may be, on the form for opening the account:
Provided that
(i) the designated officer of the banking company, while opening the small account, certifies under his signature that the person opening the account has affixed his signature or 73[thumb] print, as the case may be, in his presence:
74[Provided that where the individual is a prisoner in a jail, the signature or thumb print shall be affixed in presence of the officer in-charge of the jail and the said officer shall certify the same under his signature and the account shall remain operational on annual submission of certificate of proof of address issued by the officer in-charge of the jail.]
(ii) the small account shall be opened only at Core Banking Solution linked banking company branches or in a branch where it is possible to manually monitor and ensure that foreign remittances are not credited to a small account and that the stipulated limits on monthly and annual aggregate of transactions and balance in such accounts are not breached, before a transaction is allowed to take place;
(iii) the small account shall remain operational initially for a period of twelve months, and thereafter for a further period of twelve months if the holder of such an account provides evidence before the banking company of having applied for any of the officially valid documents within twelve months of the opening of the said account, with the entire relaxation provisions to be reviewed in respect of the said account after twenty-four months;
75[(iiia) Notwithstanding anything contained in clause (iii), the small account shall remain operational between 1st April, 2020 and 30th June 2020 and such other periods as may be notified by the Central Government;]
(iv) the small account shall be monitored and when there is suspicion of money laundering or financing of terrorism or other high risk scenarios, the identity of client shall be established 76[as per the provisions of sub-rule (4)];
77[* * *]
78[(v) the foreign remittance shall not be allowed to be credited into the small account unless the identity of the client is fully established as per provision of sub-rule (4):]
79[* * *]
80[(6) Where the client is a company, it shall for the purposes of sub-rule (1), submit to the reporting entity the certified copies of the following documents 81[or the equivalent e-documents thereof], namely
(i) certificate of incorporation;
(ii) Memorandum and Articles of Association;
(iii) Permanent Account Number of the company;
(iv) a resolution from the Board of Directors and power of attorney granted to its managers, officers or employees, as the case may be, to transact on its behalf; 82[and]
83[(v) such documents as are required for an individual under sub-rule (4) relating to beneficial owner, managers, officers or employees, as the case may be, holding an attorney to transact on the company's behalf.]]
84[(7) Where the client is a partnership firm, it shall, for the purposes of sub-rule (1), submit to the reporting entity the certified copies of the following documents 85[or the equivalent e-documents thereof], namely
(i) registration certificate;
(ii) partnership deed;
(iii) Permanent Account Number of the partnership firm; and
86[(iv) such documents as are required for an individual under sub-rule (4) relating to beneficial owner, managers, officers or employees, as the case may be, holding an attorney to transact on its behalf.]]
87[(8) Where the client is a trust, it shall, for the purposes of sub-rule (1), submit to the reporting entity the certified copies of the following documents 88[or the equivalent e-documents thereof], namely
(i) registration certificate;
(ii) trust deed;
(iii) Permanent Account Number or Form No. 60 of the trust; and
89[(iv) such documents as are required for an individual under sub-rule (4) relating to beneficial owner, managers, officers or employees, as the case may be, holding an attorney to transact on its behalf.]]
90[(9) Where the client is an unincorporated association or a body of individuals, it shall submit to the reporting entity the certified copies of the following documents 91[or the equivalent e-documents thereof], namely
(i) resolution of the managing body of such association or body of individuals;
(ii) Permanent account number or Form No. 60 of the unincorporated association or a body of individuals;
(iii) power of attorney granted to him to transact on its behalf; 92[and]
93[(iv) such documents as are required for an individual under sub-rule (4) relating to beneficial owner, managers, officers or employees, as the case may be, holding an attorney to transact on its behalf;]
(v) such information as may be required by the reporting entity to collectively establish the existence of such association or body of individuals.]
(10) Where the client is a juridical person, the reporting entity shall verify that any person purporting to act on behalf of such client is so authorised and verify the identity of that person.
(11) No reporting entity shall allow the opening of or keep any anonymous account or account in fictitious names or account on behalf of other persons whose identity has not been disclosed or cannot be verified.
(12)(i) Every reporting entity shall exercise ongoing due diligence with respect to the business relationship with every client and closely examine the transactions in order to ensure that they are consistent with their knowledge of the client, his business and risk profile and where necessary, the source of funds.
(ii) When there are suspicion of money laundering or financing of the activities relating to terrorism or where there are doubts about the adequacy or veracity of previously obtained client identification data, the reporting entity shall review the due diligence measures including verifying again the identity of the client and obtaining information on the purpose and intended nature of the business relationship, as the case may be.
(iii) The reporting entity shall apply client due diligence measures also to existing clients on the basis of materiality and risk, and conduct due diligence on such existing relationships at appropriate times or as may be specified by the regulator, taking into account whether and when client due diligence measures have previously been undertaken and the adequacy of data obtained.
(13)(i) Every reporting entity shall carry out risk assessment to identify, assess and take effective measures to mitigate its money laundering and terrorist financing risk for clients, countries or geographic areas, and products, services, transactions or delivery channels that is consistent with any national risk assessment conducted by a body or authority duly notified by the Central Government.
(ii) The risk assessment mentioned in clause (i) shall
(a) be documented;
(b) consider all the relevant risk factors before determining the level of overall risk and the appropriate level and type of mitigation to be applied;
(c) be kept up to date; and
(d) be available to competent authorities and self-regulating bodies.
(14)(i) The regulator shall issue guidelines incorporating the requirements of 94[sub-rules (1) to (13) 95[, sub-rule (15) and sub-rule (17)]] and may prescribe enhanced or simplified measures to verify the client's identity taking into consideration the type of client, business relationship, nature and value of transactions based on the overall money laundering and terrorist financing risks involved.
Explanation. For the purpose of this clause, simplified measures are not acceptable whenever there is a suspicion of money laundering or terrorist financing, or where specific higher-risk scenarios apply or where the risk identified is not consistent with the national risk assessment.
96[(ia) The guidelines issued under clause (i) shall also include appropriate
(A) exemptions, limitations and conditions and alternate and viable means of identification, to provide account based services to clients who are unable to undergo biometric authentication; 97[* * *]
(B) relaxation for continued operation of accounts for clients who are unable to provide Permanent Account Number or Form No. 60; 98[and]
99[(C) exemption, limitations and conditions and alternate and viable means of identification, to provide account based services of clients who are unable to undergo Aadhaar authentication for receiving any benefit or subsidy under any scheme notified under Section 7 of the Aadhaar (Targeted Delivery of Financial and Other subsidies, Benefits and Services) Act, 2016 (18 of 2016);]
owing to injury, illness or infirmity on account of old age or otherwise, and such like causes.]
100[(ii) Every reporting entity shall formulate and implement a Client Due Diligence Programme, incorporating the requirements of sub-rules (1) to (13) 101[, sub-rule (15) and sub-rule (17)] and guidelines issued under clause (i) and (ia).]
(iii) the Client Due Diligence Programme shall include policies, controls and procedures, approved by the senior management, to enable the reporting entity to manage and mitigate the risk that have been identified either by the reporting entity or through national risk assessment.]
102[(15) Where the client has submitted
(a) his Aadhaar number under clause (a) of sub-rule (4) to the banking company or a reporting entity notified under first proviso to sub-section (1) of Section 11-A, such banking company or reporting entity shall carry out authentication of the client's Aadhaar number using e-KYC authentication facility provided by the Unique Identification Authority of India;
(b) proof of possession of Aadhaar under clause (aa) of sub-rule (4) where offline verification can be carried out, the reporting entity shall carry out offline verification;
(c) an equivalent e-document of any officially valid document, the reporting entity shall verify the digital signature as per the provisions of the Information Technology Act, 2000 (21 of 2000) and any rules issues thereunder and take a live photo as specified under Annexure 1.
(d) any officially valid document or proof of possession of Aadhaar number under clause (ab) of sub-rule (4) where offline verification cannot be carried out, the reporting entity shall carry out verification through digital KYC as specified under Annexure 1:
Provided that for a period not beyond such date as may be notified for a class of reporting entity, instead of carrying out digital KYC, the reporting entity pertaining to such class may obtain a certified copy of the proof of possession of Aadhaar number or the officially valid document and a recent photograph where an equivalent e-document is not submitted.
Explanation. Obtaining a certified copy by the reporting entity shall mean comparing the copy of the proof of possession of Aadhaar number where offline verification cannot be carried out or officially valid document so produced by the client with the original and recording the same on the copy by the authorised officer of the reporting entity as per the provisions contained in the Act.]
103[(16) Every reporting entity shall, where its client 104[submits a proof of possession of Aadhaar Number containing Aadhaar Number, ensure that such client redacts or blacks out] his Aadhaar number through appropriate means where the authentication of Aadhaar number is not required under sub-rule (15).]
105[(17)(i) A client already having an account based relationship with a reporting entity, shall submit his Permanent Account Number 106[or equivalent e-document thereof] or Form No. 60, on such date as may be notified by the Central Government, failing which the account shall temporarily cease to be operational till the time the Permanent Account Number 107[or equivalent e-document thereof] or Form No. 60 is submitted by the client:
Provided that before temporarily ceasing operations for an account, the reporting entity shall give the client an accessible notice and a reasonable opportunity to be heard.
Explanation. For the purpose of this clause, temporary ceasing of operations 108[in relation to an account] means the temporary suspension of all transactions or activities in relation to that account by the reporting entity till such time the client complies with the provisions of this clause;
(ii) if a client having an existing account based relationship with a reporting entity gives in writing to the reporting entity that he does not want to submit his Permanent Account Number 109[or equivalent e-document thereof] or Form No. 60, as the case may be, the client's account with the reporting entity shall be closed and all obligations due in relation to the account shall be appropriately settled after establishing the identity of the client in the manner as may be determined by the regulator.]
110[(18) In case of officially valid document furnished by the client does not contain updated address, the following documents 111[or their equivalent e-documents thereof] shall be deemed to be officially valid documents for the limited purpose of proof of address
(a) utility bill which is not more than two months old of any service provider (electricity, telephone, post-paid mobile phone, piped gas, water bill);
(b) property or Municipal tax receipt;
(c) pension or family pension payment orders (PPOs) issued to retired employees by Government Departments or Public Sector Undertakings, if they contain the address;
(d) letter of allotment of accommodation from employer issued by State Government or Central Government Departments, statutory or regulatory bodies, public sector undertakings, scheduled commercial banks, financial institutions and listed companies and leave and licence agreements with such employers allotting official accommodation:
Provided that the client shall submit updated officially valid document 112[or their equivalent e-documents thereof] with current address within a period of three months of submitting the above documents.]
113[(19) Where a client has provided his Aadhaar number for identification under clause (a) of sub-rule (4) and wants to provide a current address, different from the address as per the identity information available in the Central Identities Data Repository, he may give a self-declaration to that effect to the reporting entity.]
114[9-A. Functions and obligations of the Central KYC Records Registry. (1) The Central Government shall within a period of 115[one hundred and eighty days] from the date of coming into force of the Prevention of Money-laundering (Maintenance of Records) Amendment Rules, 2015 set-up a Central KYC Records Registry having its own seal for the purpose of receiving, storing, safeguarding and retrieving electronic copies of KYC records obtained by the reporting entities from their clients in accordance with these rules.
(2) The Central KYC Registry shall perform the following functions and obligations, namely
(a) shall follow any operating instructions issued by the Regulator, consistent with the guidelines referred to in clause (g) and issue the same to implement the requirements of these rules;
(b) shall be responsible for storing, safeguarding and retrieving the KYC records and making such records available online to reporting entities or Director;
(c) shall take all precautions necessary to ensure that the electronic copies of KYC records are not lost, destroyed or tampered with and that sufficient back up of electronic records are available at all times at an alternative safe and secure place;
(d) shall cause an annual audit of its controls, systems, procedures and safeguards and shall undertake corrective actions for deficiencies, if any;
116[Explanation. For the purpose of this clause, a document shall be deemed to an officially valid document even if there is a change in the name subsequent to its issuance provided it is supported by a marriage certificate issued by the State Government or Gazette notification, indicating such a change of name.]
(e) shall provide information only to the reporting entities which are registered with it on payment of fees as specified by the Regulator;
(f) shall appoint a compliance officer who shall be responsible for monitoring the compliance of the Act, the rules made and the notifications issued thereunder and also the guidelines and instructions issued by the Central Government and the Regulator and for redressal of client's grievances; the compliance officer shall immediately and independently report to the Central Government any non-compliance observed by him;
(g) the Regulator in consultation with the Central Government and the Central KYC Records Registry may issue guidelines to be followed by the reporting entities for filing the KYC records with the Central KYC Records Registry or any other matter in connection with or incidental thereto;
(h) the Central Government, in consultation with Regulator, may by notification in the public interest and in the interest of the regulated entities, direct that any of the provisions of Rule 9 or Rule 9-A,
(i) shall not apply to a class or classes of regulated entities; or
(ii) shall apply to the class or classes of regulated entities with such exceptions, modifications and adaptations as may be specified in the notification.]
117[9-B. Inspection by Reserve Bank of India. (1) The Reserve Bank may, with respect to functions of the Central Registry referred to in Rule 9-A, call for any information, statement or other particulars from the Central Registry or cause an inspection of the Central Registry to be made by one or more of its officers as the Reserve Bank may deem fit.
(2) The Reserve Bank shall supply to the Central Registry, a Copy of the report of such inspection.
(3) It shall be the duty of every director or officer or employee of the Central Registry to produce before the officer making an inspection under sub-section (1) all such books, accounts and other documents in his custody and to furnish him with any statement and information relating to the affairs of the Central Registry, as the said officer may require of him.
(4) The expenses of the inspection under sub-rule (1) shall be borne by the Central Registry.]