Balancing Inclusion and Security: KYC Relaxations for Low-Income Groups

India has over 1.4 billion people, but for decades, millions among the poorest lacked access to even a basic bank account. One key reason? The Know Your Customer (KYC) procedure. Standard KYC requires a set of officially valid documents – proof of identity, proof of address – that many low-income individuals simply don’t possess. The Prevention of Money Laundering Act, 2002 (PMLA) is the backbone of India’s anti-money laundering framework, and KYC is one of its most critical compliance tools. But here’s where the law shows nuance: it also recognises that rigid KYC requirements, if applied uniformly, can end up excluding the very people the financial system is supposed to serve. This is why the PMLA and its regulatory framework allow for relaxations in KYC procedures for low-income group persons – a carefully calibrated balance between financial inclusion and the prevention of financial crime.

Why KYC matters under the PMLA, 2002 🔗

The PMLA, 2002 – which came into force on July 1, 2005 – was enacted to prevent money laundering and the proceeds of crime from entering India’s financial system. Under Sections 11A to 15 of the PMLA, reporting entities such as banks, co-operative banks, and financial institutions are obligated to verify the identity of their clients, maintain transaction records, and report suspicious activity. KYC is the primary mechanism through which this verification happens.

The RBI’s Master Direction on Know Your Customer (KYC), 2016 – issued under the PMLA framework – lays out the specific rules that banks and regulated entities must follow. It prescribes four core pillars: customer acceptance policy, risk management, customer identification, and transaction monitoring. However, the same framework also explicitly carves out a simpler path for certain categories of customers – particularly those who are low-risk or low-income.

The concept of risk categorisation 🔗

Before understanding the relaxations, it’s important to understand how risk categorisation works in the KYC framework. Reporting entities are required to classify their customers as low risk, medium risk, or high risk based on the nature of the customer, the type of transactions, and the source of funds. Low-risk customers – who typically include salaried individuals, pensioners, and people transacting in small amounts – are subject to a simplified due diligence process. This classification directly determines the level of KYC scrutiny applied.

The logic is straightforward: a daily wage worker depositing ₹500 a week poses a fundamentally different risk profile from a high-net-worth individual or a politically exposed person. Treating them the same would be both disproportionate and counterproductive to the goal of bringing more people into the formal banking system.

Small accounts: the core KYC relaxation for low-income individuals 🔗

The most significant KYC relaxation under the PMLA framework is the concept of the “small account.” This is specifically designed for individuals who do not possess any Officially Valid Document (OVD) – such as a passport, driving licence, Aadhaar, voter ID, or NREGA job card – which are normally required for standard KYC.

Under the RBI’s KYC Master Direction, a small account can be opened using just a self-attested photograph and the customer’s signature or thumb impression in the presence of a bank official. No OVD is required at the time of opening. This is a substantial relaxation, recognising the ground reality that many marginalised individuals lack formal identity documents.

However, small accounts come with defined transaction limits to manage the associated risks. As per RBI guidelines, the key restrictions applicable to small accounts are:

• The total credits in the account should not exceed ₹1,00,000 per financial year.
• The maximum balance should not exceed ₹50,000 at any point in time.
• Total debits (withdrawals and transfers) should not exceed ₹10,000 per month.
• Foreign remittances are not permitted unless the customer completes full KYC.

Small accounts are initially valid for 12 months and can be extended by another 12 months if the customer submits proof of having applied for an OVD. Once full KYC is completed, all these limits are removed and the account transitions into a regular account. This step-up model allows individuals to begin their banking journey immediately, without being locked out due to document unavailability.

Basic Savings Bank Deposit Account (BSBDA): financial inclusion in practice 🔗

The Basic Savings Bank Deposit Account (BSBDA) is the RBI’s flagship zero-balance account designed for financial inclusion. All banks in India are mandated to offer BSBDA to any individual, irrespective of income or employment status. When a BSBDA is opened using simplified KYC, it is classified as a BSBDA-Small Account and is subject to the same transaction restrictions described above.

The BSBDA is particularly significant for co-operative banks and urban co-operative banks (UCBs), which are among the key reporting entities under the PMLA. These institutions serve a large proportion of low-income and rural customers. The RBI’s directives to Urban Co-operative Banks make it clear that BSBDA accounts are subject to PMLA and KYC/AML norms, while also permitting simplified KYC for eligible customers.

The BSBDA provides free core banking services – cash deposits and withdrawals, ATM access, receipt of electronic payments, and a passbook – all without any minimum balance requirement or charges. This makes it a powerful vehicle for bringing low-income individuals into the formal economy, even before they complete full KYC.

Safeguards that accompany the relaxations 🔗

It is important to understand that KYC relaxations are not a removal of oversight – they are a recalibration of it. The PMLA framework ensures that relaxed KYC does not create loopholes for money laundering through several built-in safeguards.

Transaction monitoring 🔗

Reporting entities are required to subject all small accounts and simplified KYC accounts to ongoing transaction monitoring. Any unusual pattern – such as a sudden spike in deposits or a series of transactions just below the threshold – must be flagged and investigated. The PMLA mandates that suspicious transaction reports (STRs) be filed with the Financial Intelligence Unit – India (FIU-IND) whenever a transaction appears inconsistent with the customer’s known profile.

Upgrade requirement 🔗

Once a customer’s transactions exceed the defined limits, the bank is required to ask the customer to complete full KYC. The account is frozen for further transactions if the customer does not comply within the prescribed period. This ensures that small accounts cannot indefinitely substitute for full-KYC accounts.

Aadhaar-based e-KYC as a bridge 🔗

One of the most transformative developments in the KYC landscape has been the integration of Aadhaar-based e-KYC. By April 2023, India had recorded over 14.95 billion Aadhaar-based e-KYC transactions across banking, telecom, and insurance – a testament to how widely this tool has been adopted. Banks can now onboard customers in face-to-face mode using Aadhaar biometric authentication, dramatically reducing the documentation burden while maintaining a robust identity verification trail.

The 2025 KYC amendments: extending the relaxation further 🔗

In June 2025, the RBI introduced significant amendments to the KYC Master Direction, further easing compliance burdens on low-risk customers. Under the KYC (Amendment) Directions, 2025, individual customers categorised as low risk are now allowed to continue all transactions even after their KYC update falls due, with a grace period extending to one year from the due date or June 30, 2026, whichever is later. During this period, their accounts remain under regular monitoring.

Additionally, banks are now permitted to use Business Correspondents (BCs) – local agents such as NGOs, self-help group facilitators, microfinance institutions, and even local shopkeepers – to collect KYC self-declarations from customers. This is particularly meaningful for rural and semi-urban populations who find it difficult to visit a bank branch. The 2025 amendments also mandate that banks organise KYC update camps at rural and semi-urban branches to reduce the backlog of pending KYC updates.

Banks are also required to send at least three advance intimations – including at least one by letter – before restricting a customer’s account for KYC non-compliance. This procedural safeguard ensures that accounts are not suddenly frozen, particularly for Direct Benefit Transfer (DBT) recipients and Jan Dhan account holders who depend on these accounts for welfare payments.

Financial inclusion and PMLA: two sides of the same coin 🔗

India’s financial inclusion story has been significantly shaped by KYC relaxations. The Pradhan Mantri Jan Dhan Yojana (PMJDY), launched in 2014, leveraged simplified KYC norms to bring hundreds of millions of previously unbanked individuals into the formal system. All PMJDY accounts are BSBDAs – accounts opened under the same simplified framework discussed above.

At the same time, these accounts are firmly embedded in the PMLA compliance architecture. The reporting entities – including co-operative banks – cannot treat simplified KYC as an exemption from their AML obligations. They must still maintain records, monitor transactions, and report suspicious activity. The relaxation is in the process of identification, not in the obligation of monitoring.

This is the central insight of India’s approach: financial inclusion and anti-money laundering are not opposing goals. A person without a formal address slip is not inherently a money launddering risk. The law recognises this, and the framework is designed accordingly – bringing people into the system first, verifying them progressively, and monitoring them continuously.

Key takeaways for understanding the legal framework 🔗

For students and practitioners engaging with the PMLA and KYC law as it applies to co-operative and financial institutions, the following points summarise the legal position on KYC relaxations for low-income group persons:

• Legal basis: The relaxations flow from the PMLA, 2002 read with the Prevention of Money Laundering (Maintenance of Records) Rules, 2005, and the RBI’s KYC Master Direction, 2016.
• Small accounts: Permitted without OVDs, subject to defined transaction caps (₹50,000 balance, ₹1 lakh annual credits, ₹10,000 monthly debits).
• Risk-based approach: The lower the customer’s risk profile, the simpler the KYC requirement – but monitoring obligations remain.
• Time-bound validity: Small accounts are valid for 12 months, extendable to 24 months, after which full KYC is required.
• Safeguards remain: Transaction monitoring, STR reporting, and upgrade obligations ensure the anti-money laundering framework is not compromised.
• 2025 updates: Low-risk customers now have extended grace periods for KYC updation, and Business Correspondents can assist with the process in remote areas.

What do you think? Given that millions of low-income individuals still lack officially valid documents, do the current KYC relaxation limits – such as the ₹50,000 balance cap – strike the right balance between inclusion and security, or should the thresholds be revisited? And with Business Correspondents now authorised to facilitate KYC updates, how should co-operative banks ensure that this decentralised process does not become a vulnerability in the anti-money laundering framework?

References

1. https://www.indiafilings.com/learn/prevention-of-money-laundering-maintenance-of-records-amendment-rules-2023/
2. https://globalinvestigationsreview.com/guide/the-guide-anti-money-laundering/third-edition/article/india-deep-dive-the-prevention-of-money-laundering-act-and-compliance-requirements
3. https://www.rbi.org.in/Scripts/BS_ViewMasDirections.aspx?id=11566
4. https://fly.finance/blog/student-account/rbi-guidelines-on-basic-savings-bank-deposit-account-bsbda/
5. https://en.wikipedia.org/wiki/Basic_Savings_Bank_Deposit_Account
6. https://www.rbi.org.in/commonman/Upload/English/Notification/PDFs/05MD17E67B8A6F93462CAEA7C2E30B27C653.pdf
7. https://www.lexology.com/library/detail.aspx?g=051102c5-9058-43c8-99c0-9c1def734dc4
8. https://in.springverify.com/blog/kyc-in-india/
9. https://sarafpartners.com/rbi-notifies-amendments-to-reserve-bank-of-india-know-your-customer-kyc-directions-2016/
10. https://ssrana.in/articles/kyc-simplified-rbis-customer-centric-kyc-amendment-explained/
11. https://www.tandfonline.com/doi/full/10.1080/23322039.2024.2381682