What Happened
- The Central KYC Records Registry (CKYCRR), managed by CERSAI (Central Registry of Securitisation Asset Reconstruction and Security Interest), is being upgraded to CKYC 2.0 with a planned go-live by end of February 2026.
- CKYC 2.0 will integrate with DigiLocker, enabling financial institutions to verify customer documents — Aadhaar, PAN, driving licences — directly from secure government databases via API.
- Key new capabilities include: real-time document verification via DigiLocker, mobile number-based CKYC record search, full API connectivity for PAN and Aadhaar integration, and digital freeze/unfreeze of customer records.
- The upgrade eliminates the need for customers to submit physical KYC documents repeatedly across different financial service providers.
- Citizens will be able to access their own CKYC records, review stored information, and flag identity fraud through the upgraded system.
Static Topic Bridges
Central KYC Records Registry (CKYCRR) and CERSAI
The Central KYC Records Registry (CKYCRR) is a centralised repository of KYC records for financial customers, established under the Prevention of Money Laundering Act (PMLA), 2002. It is managed by CERSAI (Central Registry of Securitisation Asset Reconstruction and Security Interest of India) — a government company set up under the SARFAESI Act, 2002, with its role expanded to include CKYC management. The principle: a customer completes KYC once with any regulated financial institution, receives a 14-digit KYC identifier (CKYC number), and subsequent institutions can retrieve the KYC record instead of requiring fresh documentation.
- CERSAI: Government company (25% owned by Central Government, 75% by public sector banks and NHB)
- CKYC launched: 2017; regulated by SEBI, RBI, IRDAI, and PFRDA for their respective sectors
- 14-digit KYC identifier: issued to each customer; portable across banks, mutual funds, insurance, broking
- Participating institutions: thousands of banks, NBFCs, insurance companies, mutual funds connected to CKYC registry
- Annual KYC re-verification: currently required by some institutions — CKYC 2.0 aims to make KYC "once and done"
Connection to this news: CKYC 2.0 is a major upgrade to the existing registry — shifting from a static document repository to a dynamic, API-driven, DigiLocker-integrated real-time verification system that fundamentally transforms the customer onboarding experience.
DigiLocker and Digital Public Infrastructure
DigiLocker is a cloud-based platform under the Digital India programme, launched by the Ministry of Electronics and Information Technology (MeitY) in 2015, that enables citizens to store, share, and verify digital documents issued by government authorities. It operates as a government-to-citizen (G2C) document vault where documents like Aadhaar, PAN cards, driving licences, mark sheets, and property records are stored in their original, issuer-authenticated form. DigiLocker documents have the same legal validity as physical originals under the IT Act, 2000 (Section 4 of the Second Schedule).
- Launch: 2015 under MeitY; part of Digital India programme
- Users: over 30 crore registered users (as of 2025)
- Documents stored: over 6 billion issued documents
- Legal validity: DigiLocker documents accepted as originals under IT Act, 2000
- Issuer integration: over 2,300 issuing organisations including all major government departments
- Requester integration: accepted by banks, insurers, telecom companies for verification
Connection to this news: CKYC 2.0's integration with DigiLocker creates a seamless bridge between identity verification and document authentication — allowing financial institutions to pull verified documents in real time rather than relying on customer-submitted copies.
KYC Reforms and Anti-Money Laundering Framework
Know Your Customer (KYC) norms are mandated under the Prevention of Money Laundering Act (PMLA), 2002 and RBI's Master Direction on KYC to verify customer identity, assess financial risk, and prevent misuse of the financial system for money laundering, terrorist financing, and fraud. India's KYC framework aligns with FATF (Financial Action Task Force) Recommendations — particularly Recommendations 10 (Customer Due Diligence) and 11 (Record-Keeping). India is a full member of FATF and underwent a Mutual Evaluation Review.
- PMLA, 2002: Primary AML legislation; requires KYC by all "reporting entities" (banks, insurers, mutual funds, NBFCs, crypto exchanges)
- FATF Recommendations 10 & 11: Customer Due Diligence (CDD) and record-keeping standards India adheres to
- India's FATF status: Full member since 2010; last mutual evaluation 2023 — placed in "regular follow-up"
- Risk-based approach: low-risk customers (simplified KYC), high-risk customers (enhanced due diligence)
- V-CIP (Video-based Customer Identification Process): alternative to in-person KYC, introduced by RBI in 2020
Connection to this news: CKYC 2.0 strengthens India's AML infrastructure by enabling real-time, fraud-resistant identity verification while reducing compliance burden on both customers and financial institutions — a direct alignment with FATF's efficiency and effectiveness goals.
Key Facts & Data
- CKYC 2.0 go-live target: end of February 2026
- Managing entity: CERSAI (government company, 25% government-owned)
- Integration: DigiLocker API for real-time document verification
- DigiLocker users: 30+ crore; documents: 6+ billion
- CKYC identifier: 14-digit unique KYC number per customer
- Legal basis: PMLA, 2002 and RBI/SEBI/IRDAI/PFRDA KYC directions
- Benefit: one-time KYC across all financial sectors — banks, insurance, mutual funds, broking
- DigiLocker legal validity: IT Act, 2000 (Second Schedule, Section 4)