Amendment to Master Direction (MD) on KYC_09.01.2020

Changes due to introduction of Video based Customer Identification Process (V-CIP)

Dear All,

Reserve Bank of India has introduced KYC process through video verification.  Please find below summary of changes
a) Definition of V-CIP has been inserted in Section 3 of the Master Direction.
 b) The process of V-CIP has been specified in Section 18 in terms of which, REs may undertake live V-CIP, to be carried out by an official of the RE, for establishment of an account based relationship with an individual customer, after obtaining his informed consent and shall adhere to the following stipulations:
i. The official of the RE performing the V-CIP shall record video as well as capture photograph of the customer present for identification and obtain the identification information as below:
• Banks: can use either OTP based Aadhaar e-KYC authentication or Offline Verification of Aadhaar for identification. Further, services of Business Correspondents (BCs) may be used by banks for aiding the V-CIP
. • REs other than banks: can only carry out Offline Verification of Aadhaar for identification.
ii. RE shall capture a clear image of PAN card to be displayed by the customer during the process, except in cases where e-PAN is provided by the customer. The PAN details shall be verified from the database of the issuing authority.

iii. Live location of the customer (Geotagging) shall be captured to ensure that customer is physically present in India iv. The official of the RE shall ensure that photograph of the customer in the Aadhaar/PAN details matches with the customer undertaking the V-CIP and the identification details in Aadhaar/PAN shall match with the details provided by the customer.

v. The official of the RE shall ensure that the sequence and/or type of questions during video interactions are varied in order to establish that the interactions are real-time and not pre-recorded.

vi. In case of offline verification of Aadhaar using XML file or Aadhaar Secure QR Code, it shall be ensured that the XML file or QR code generation date is not older than 3 days from the date of carrying out V-CIP. vii. All accounts opened through V-CIP shall be made operational only after being subject to concurrent audit, to ensure the integrity of process.

 viii. RE shall ensure that the process is a seamless, real-time, secured, end-to-end encrypted audiovisual interaction with the customer and the quality of the communication is adequate to allow identification of the customer beyond doubt. RE shall carry out the liveliness check in order to guard against spoofing and such other fraudulent manipulations.

 ix. To ensure security, robustness and end to end encryption, the REs shall carry out software and security audit and validation of the V-CIP application before rolling it out.

x. The audiovisual interaction shall be triggered from the domain of the RE itself, and not from third party service provider, if any. The V-CIP process shall be operated by officials specifically trained for this purpose. The activity log along with the credentials of the official performing the V-CIP shall be preserved.

xi. REs shall ensure that the video recording is stored in a safe and secure manner and bears the date and time stamp.

xii. REs are encouraged to take assistance of the latest available technology, including Artificial Intelligence (AI) and face matching technologies, to ensure the integrity of the process as well as the information furnished by the customer. However, the responsibility of customer identification shall rest with the RE.

xiii. RE shall ensure to redact or blackout the Aadhaar number in terms of Section 16.

 xiv. BCs can facilitate the process only at the customer end and as already stated in para B(b) above, the official at the other end of V-CIP interaction should necessarily be a bank official. Banks shall maintain the details of the BC assisting the customer, where services of BCs are utilized. The ultimate responsibility for customer due diligence will be with the bank.


Comments

Popular posts from this blog

Alternative Investment Funds

NISM Certification Requirements Before Launching an Alternative Investment Fund (AIF)

Revised SEBI Framework for Angel Funds: What Startups and Investors Need to Know