The Reserve Bank of India issued its comprehensive NBFC–Know Your Customer Directions, 2025 on November 28, 2025, subsequently updated on December 29, 2025. This Master Direction consolidates and supersedes all prior KYC instructions applicable to Non-Banking Financial Companies — representing the most significant overhaul of NBFC KYC compliance in recent years.

⚠️ Regulatory Alert
These directions carry criminal liability under PMLA for Principal Officers and Directors. Each day of non-compliance can constitute a separate violation. RBI inspection teams are actively testing these provisions in 2025–26.

This analysis translates every provision into the language auditors speak: what to test, what data to pull, what red flags signal a problem, and what real-world failures demonstrate the consequences of non-compliance.

📋 How to Use This Analysis
The interactive framework below covers all 16 regulations across 3 risk tiers. Each entry links regulation text → business impact → system requirements → audit procedure → forensic red flags. Use the Table of Contents in the sidebar to jump to specific provisions.
RBI NBFC–KYC Directions 2025 · Audit Intelligence Framework · Interactive Table

The full analysis above covers all 16 provisions with complete audit procedures. The framework is designed to be used as a working audit checklist — each red flag is drawn from real RBI inspection findings and enforcement actions.

📌 Key Takeaways
1. Sanctions screening is daily — not monthly, not at onboarding. Each missed day = separate violation.

2. Blocking low-risk accounts before June 30, 2026 is itself a violation — even if KYC is overdue.

3. V-CIP vendor must retain zero data. Most fintech V-CIP vendors currently retain video data — a direct RBI violation.

4. Designated Director ≠ Principal Officer. Same person holding both roles = automatic regulatory violation.

5. CKYCR upload within 10 days — not in weekly batches. Check your CKYCR upload compliance rate.

Always refer to the original RBI circular (DOR.AML.REC.No.280/14.01.003/2025-26) as the definitive regulatory guidance. This analysis is for professional compliance and audit use only.