SEBI's KYC Norms for Wealth Platforms: A Practical Breakdown
SEBI's KYC framework for wealth platforms runs through KYC Registration Agencies (KRAs) under the SEBI {KYC (Know Your Client) Registration Agency} Regulations, 2011. KRAs verify each client's PAN, name and address within two days, mark records as Validated once official databases and PAN-Aadhaar linkage confirm them, and share KYC across intermediaries — so investors onboard once.
This is an explainer, not legal advice. For binding requirements, refer to the official SEBI circulars.
For a wealth platform — a Registered Investment Adviser (RIA), stock broker, portfolio manager or mutual-fund distributor — Know Your Client (KYC) is not a one-off form. It is a shared, database-verified record that the Securities and Exchange Board of India (SEBI) governs through KRAs and, increasingly, the Central KYC Records Registry (CKYCR). This breakdown walks through what SEBI's norms actually require in 2026.
Who Sets KYC Rules for Wealth Platforms in India?
SEBI does, through a stack of instruments that has tightened steadily since 2023:
- The foundation — the SEBI {KYC (Know Your Client) Registration Agency} Regulations, 2011, last amended on 28 November 2024, which authorise KRAs to maintain and share client KYC.
- The operating rulebook — the Master Circular on KYC norms for the securities market (Circular No. SEBI/HO/MIRSD/SECFATF/P/CIR/2023/169, dated 12 October 2023), which specified the Risk Management Framework for KRAs.
- The 2024 simplification — Circular No. SEBI/HO/MIRSD/SECFATF/P/CIR/2024/41 dated 14 May 2024, which reviewed and eased that framework.
- The CKYCR link — Circular No. SEBI/HO/MIRSD/SECFATF/P/CIR/2024/79 dated 6 June 2024, on uploading KYC information from KRAs to the Central KYC Records Registry.
Once a client is KYC-registered through a KRA, other SEBI-registered intermediaries can fetch that record — so an investor who completes KYC with one broker can onboard with an RIA or fund distributor without repeating it.
What Does a KRA Actually Verify — and How Fast?
The 14 May 2024 circular is the practical heart of the framework. It directs KRAs to verify a defined set of attributes and, separately, to mark records as "Validated" only when they clear official databases.
Step | What happens | SEBI requirement |
|---|---|---|
Attribute verification | KRA checks the client's core identity fields | PAN, Name and Address verified within 2 days of receipt of KYC records |
Database validation | Attributes matched against official sources | Verified with Income Tax PAN database and Aadhaar XML / DigiLocker / M-Aadhaar |
PAN-Aadhaar linkage | Linkage confirmed for a "Validated Record" | Checked per Rule 114 AAA of the Income Tax Rules, 1962 |
Record sharing | Validated KYC reused across intermediaries | Client onboards once; other intermediaries fetch the record |
CKYCR upload | KRA pushes KYC into the central registry | Per the 6 June 2024 circular |
"Validated Record" is the status that matters. Under Para 100 (as modified), a record counts as validated only when the verified attributes clear official databases and PAN-Aadhaar linkage is confirmed. Where attributes cannot be verified against these sources, the record is not validated — refer to the official circular for the treatment of such clients before allowing further transactions.
How Does Risk-Based KYC Work for Investment Platforms?
SEBI's framework is risk-based, not one-size-fits-all. The Master Circular of 12 October 2023 built the Risk Management Framework around client risk categorisation, and the 2024 review simplified the verification burden while keeping the database checks intact. For a wealth platform, that means:
- Baseline validation for everyone — PAN, name, address and PAN-Aadhaar linkage, verified through the KRA.
- Enhanced diligence for higher-risk clients — additional checks proportionate to the client's risk profile, consistent with anti-money-laundering (AML) obligations.
- Ongoing, not one-time — records are kept current; changes flow back through the KRA and the CKYCR so the shared record stays reliable.
Aadhaar-based validation is now central. Because a Validated Record depends on PAN-Aadhaar linkage under Rule 114 AAA, platforms that collect clean, consented Aadhaar and PAN data upfront move clients to "Validated" faster and avoid downstream transaction blocks.
How AI Helps
Wealth platforms lose the most time at the front door — chasing mismatched PANs, blurry proofs and unlinked Aadhaar records that stall a KRA validation. AI-led onboarding fixes this at capture. YuVerse's YuAccess identity and KYC suite runs Video KYC (VKYC), liveness and face-match, reads and validates PAN and address documents, and flags PAN-Aadhaar mismatches before the file ever reaches a KRA — so more records clear as "Validated" on the first attempt. It routes exceptions to a reviewer rather than forcing a manual queue for every client. The outcome is faster account opening, fewer stuck transactions and an audit trail that maps cleanly to SEBI's attribute and validation requirements — without shifting compliance accountability away from the intermediary.
FAQ
Q1. Do wealth platforms have to run their own KYC or use a KRA? Both connect. SEBI-registered intermediaries collect KYC and register it through a KRA, which verifies the attributes and maintains the record. Other intermediaries can then fetch the validated record, so the client is not asked to complete KYC repeatedly.
Q2. How long can a KRA take to verify KYC attributes? Under the 14 May 2024 circular, KRAs verify PAN, name and address within 2 days of receiving the KYC records. Database validation and PAN-Aadhaar linkage determine whether the record is then marked as "Validated".
Q3. What makes a KYC record "Validated" under SEBI norms? The verified attributes must clear official databases — the Income Tax PAN database and Aadhaar XML / DigiLocker / M-Aadhaar — and PAN-Aadhaar linkage must be confirmed per Rule 114 AAA of the Income Tax Rules, 1962.
Q4. Is Aadhaar mandatory for investment KYC? The framework ties "Validated Record" status to PAN-Aadhaar linkage, so Aadhaar-based validation is central in practice. Refer to the official SEBI circular for how records are treated when linkage cannot be established.
Q5. What is CKYCR and how does it relate to KRAs? The Central KYC Records Registry (CKYCR) is a central repository of KYC records. SEBI's 6 June 2024 circular requires KRAs to upload KYC information to CKYCR, widening reuse of a client's KYC across the financial system.
Q6. Does using AI for onboarding change our SEBI obligations? No. AI can capture, read and pre-validate documents, but the intermediary and KRA remain responsible for meeting SEBI's verification, validation and record-keeping requirements. Automation speeds the process; it does not transfer accountability.
Conclusion
For wealth platforms, SEBI's KYC norms reward getting the record right the first time — clean PAN and Aadhaar data, correct attributes and a fast path to "Validated" status. The 2011 KRA Regulations, the 2023 Master Circular and the 2024 review circulars together define a shared, database-verified, risk-based system that lets investors onboard once and transact everywhere. Build capture and validation to those standards and onboarding stops being a bottleneck.
For related reading, see our guides on AI for CKYC and VKYC automation in Indian banking, how to automate KYC document verification with AI, and Aadhaar-based eKYC for streamlined digital onboarding.
Onboard investors once, validate on the first try. Talk to the YuVerse team
References
- SEBI — Review of validation of KYC records by KRAs under Risk Management Framework (Circular No. SEBI/HO/MIRSD/SECFATF/P/CIR/2024/41, 14 May 2024) — https://www.sebi.gov.in/legal/circulars/may-2024/review-of-validation-of-kyc-records-by-kras-under-risk-management-framework-_83367.html
- SEBI — Uploading of KYC information by KRAs to Central KYC Records Registry (Circular No. SEBI/HO/MIRSD/SECFATF/P/CIR/2024/79, 6 June 2024) — https://www.sebi.gov.in/legal/circulars/jun-2024/uploading-of-kyc-information-by-kyc-registration-agencies-kras-to-central-kyc-records-registry-ckycrr-_84006.html
- SEBI {KYC (Know Your Client) Registration Agency} Regulations, 2011 (last amended 28 November 2024) — https://www.sebi.gov.in/legal/regulations/nov-2024/securities-and-exchange-board-of-india-kyc-know-your-client-registration-agency-regulations-2011-last-amended-on-november-28-2024-_89274.html
- SEBI — Master Circular on Know Your Client (KYC) norms for the securities market (12 October 2023) — https://www.sebi.gov.in/legal/master-circulars/oct-2023/master-circular-on-know-your-client-kyc-norms-for-the-securities-market_77945.html