RBI KYC Master Direction: Every Major Amendment Since 2016, Summarized

The RBI KYC Master Direction — formally the Master Direction – Know Your Customer (KYC) Direction, 2016, issued on 25 February 2016 — is amended periodically. Its headline changes include the Video-based Customer Identification Process (V-CIP) in January 2020, Financial Action Task Force (FATF)-aligned due-diligence updates in October 2023, and streamlined periodic KYC updation in 2025.

This is an explainer, not legal advice. For binding requirements, always refer to the Master Direction and the specific amendment circular on rbi.org.in.

What Is the RBI KYC Master Direction?

The Reserve Bank of India (RBI) consolidated its Know Your Customer (KYC) rules into a single instrument — Master Direction DBR.AML.BC.No.81/14.01.001/2015-16, the Master Direction – Know Your Customer (KYC) Direction, 2016, dated 25 February 2016. It applies to all Regulated Entities (REs) — banks, Non-Banking Financial Companies (NBFCs), payment banks, and others — and operationalises the Prevention of Money-laundering (Maintenance of Records) Rules, 2005 (the "PML Rules").

The Master Direction is a living document. Rather than replacing it each time the law changes, the RBI issues amendment circulars and republishes the direction "as amended up to" a given date — most recently updated as on 12 June 2025 on the RBI website. That is why practitioners always cite both the base direction and the relevant amendment.

Why does the Master Direction keep changing? Because its parent statutes move. When Parliament amends the Prevention of Money Laundering Act (PMLA) or the PML Rules, or when the FATF issues new recommendations, the RBI must fold those into the direction. Customer due diligence therefore evolves in step with anti-money-laundering (AML) policy.

Which Amendments Actually Matter?

Not every republication introduces something new. The chronological table below focuses on the changes that reshaped how Indian financial institutions onboard and monitor customers. Each row is tied to a specific, verifiable circular.

Sources: RBI notifications and the consolidated Master Direction. For the exact text of any row, refer to the linked circular.

The 2020 Amendment: V-CIP Changed Onboarding

The most consequential single change came on 9 January 2020 via circular DOR.AML.BC.No.27/14.01.001/2019-20. The RBI decided to permit Video-based Customer Identification Process (V-CIP) as a consent-based, alternate method of establishing a customer's identity for onboarding — treated on par with face-to-face verification.

The same circular, giving effect to PML Rules amendments notified in 2019, also defined "Digital KYC" (capturing a live photo plus an Officially Valid Document with geo-coordinates) and "equivalent e-document" (a digitally signed electronic document, including one in the customer's DigiLocker). Crucially, the direction encourages REs to use the latest technology — including Artificial Intelligence (AI) and face-matching — to secure the V-CIP process, while keeping ultimate responsibility for identification with the RE.

For banks, V-CIP can use OTP-based Aadhaar e-KYC or offline Aadhaar verification; for REs other than banks, only offline verification of Aadhaar is permitted. Where an Aadhaar XML file or Secure QR code is used, its generation date must not be older than three days from the date of the V-CIP.

The 2023 Amendment: FATF Alignment and FCRA

On 17 October 2023, circular DOR.AML.REC.44/14.01.001/2023-24 updated the direction to reflect PML Rules amendments of 4 September and 17 October 2023, aligned several instructions with FATF recommendations, refreshed the annexes tied to the Unlawful Activities (Prevention) Act (UAPA) and the Weapons of Mass Destruction Act, and added a new Section 55A on FCRA. In practice, this tightened beneficial-ownership and customer due diligence expectations.

What Are the Periodic KYC Updation Rules?

Periodic updation (often called "re-KYC") is where most retail customers actually encounter the Master Direction. The direction requires REs to periodically update KYC records, with the frequency keyed to the customer's risk category.

Before the due date, an RE must send at least three advance intimations (including at least one by letter); after the due date, at least three reminders (again including at least one by letter) to customers who have not complied. The 2025 amendment further streamlined how re-KYC can be completed and how the CKYCR can be used to avoid resubmitting documents — refer to the circular for the operative detail.

How AI Helps With Master Direction Compliance

Keeping pace with an evolving direction is an operational problem, not just a legal one. YuAccess automates the identity layer the Master Direction depends on — reading Officially Valid Documents, running face match and liveness during V-CIP, redacting Aadhaar numbers as Section 16 requires, and capturing a time-stamped audit trail for concurrent audit. That lets onboarding teams apply the current rules consistently across every application, and adapt quickly when the next amendment lands. The RE keeps ultimate responsibility for customer identification; AI simply makes each check faster, more uniform, and fully logged.

Explore how this works in practice in our guides on CKYC and VKYC automation, how AI automates Video KYC for banks and NBFCs, and automating KYC document verification with AI.

FAQ

Q1. What is the official name and date of the RBI KYC Master Direction? It is the Master Direction – Know Your Customer (KYC) Direction, 2016, issued on 25 February 2016 as DBR.AML.BC.No.81/14.01.001/2015-16, and amended periodically since.

Q2. When was V-CIP introduced? V-CIP was permitted by the amendment circular dated 9 January 2020 (DOR.AML.BC.No.27/14.01.001/2019-20), which treats video-based identification on par with face-to-face onboarding.

Q3. How often must KYC be updated? The Master Direction sets periodic updation at least once every 2 years for high-risk, 8 years for medium-risk, and 10 years for low-risk customers, with prescribed advance intimations and reminders.

Q4. Does the Master Direction require AI? No. It permits and encourages the use of AI and face-matching to strengthen V-CIP integrity, but responsibility for customer identification remains with the Regulated Entity.

Q5. Where can I read the current, consolidated version? The RBI publishes the Master Direction "as amended up to" a given date on rbi.org.in. Always check the latest consolidated text plus the specific amendment circular before acting.

Q6. Is this article legal advice? No. It is an explainer. For binding obligations, refer to the Master Direction and the relevant circular, and consult your compliance team.

Conclusion

The RBI KYC Master Direction has stayed current not by rewrites but by targeted amendments — V-CIP in 2020, FATF alignment in 2023, and periodic-updation streamlining in 2025. Understanding the chain of circulars is the difference between compliant onboarding and guesswork. When the next amendment arrives, the institutions that adapt fastest are those whose identity checks are already automated and auditable.

Bring your KYC onboarding in line with the current Master Direction. Talk to the YuVerse team to see YuAccess in action.

References

• Master Direction – Know Your Customer (KYC) Direction, 2016 — https://www.rbi.org.in/Scripts/BS_ViewMasDirections.aspx?id=11566
• Amendment introducing V-CIP, 9 January 2020 — https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=11783&Mode=0
• Amendment to the Master Direction on KYC, 17 October 2023 — https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12549&Mode=0