KYC in Indian Markets: KRAs, CKYC and SEBI Rules Explained

What KYC Actually Means for an Indian Trader

KYC, short for Know Your Customer, is the legally mandated process by which a SEBI registered intermediary (your stockbroker, depository participant or mutual fund) verifies that you are a real, identifiable person before letting you open a trading account or invest. It is not a formality your broker invented. It flows from the Prevention of Money Laundering Act, 2002 (PMLA) and the PML Rules, and SEBI operationalises it through its KYC and KRA master circulars. The aim is to stop laundered money, benami accounts and terror financing from entering the securities market.

In practice, your KYC bundle has four pieces that SEBI requires every intermediary to capture and validate: Proof of Identity (PoI), Proof of Address (PoA), a recent photograph, and your PAN linked to a valid bank account. Since PAN-Aadhaar linkage became mandatory, an unlinked PAN is treated as inoperative, which can freeze your KYC and block fresh trades. So the single most common reason a new demat account stalls is not a missing document but a PAN that is not linked to Aadhaar.

Importantly, KYC is about identity, not about your trading skill or safety. Once you clear KYC and your account goes live, the market treats you like every other participant. A KYC verified account does not reduce your risk, your brokerage, your Securities Transaction Tax (STT), or your tax liability. It simply gives you the key to the door.

The KYC Registration Agencies: CVL, NDML, CAMS, KARVY and BSE

A KYC Registration Agency (KRA) is a SEBI registered entity that stores and maintains your KYC record centrally so that you verify once and reuse it across the market. When you open an account, your broker uploads your verified KYC to one of these KRAs. The next intermediary you approach simply fetches the existing record instead of starting from scratch. There are currently five operational KRAs in India, and they are interoperable, meaning they exchange records among themselves under SEBI's KRA framework.

Because the KRAs are interoperable, it does not normally matter which one holds your record. If your KYC was first uploaded to CVL when you opened a Zerodha or Groww account, and you later open a second account with a different broker whose default KRA is NDML, the new broker pulls your record across the KRA network. You can check which KRA holds you and what your status is at the CVL KRA portal (cvlkra.com), the NDML portal (kra.ndml.in), or the CAMS and KFin KRA portals, using just your PAN.

KYC Status Codes You Will Actually See

When you look up your PAN on a KRA portal, you do not just get a yes or no. Under the SEBI KRA framework, your record carries one of several statuses, and each has real consequences for whether you can trade today or need to act first. Knowing these saves you from blaming the broker app when the real issue is your KRA record.

The distinction between Validated and merely Registered matters most when you switch brokers. A Validated record (typically Aadhaar e-KYC verified against UIDAI) is portable across the whole market, so you can open a second or third broking account without re-uploading a single document. A Registered-but-not-Validated record may force a fresh re-KYC at the new broker, which is the usual reason a second account opening unexpectedly asks for your documents again.

CKYC: The 14 Digit Identifier That Works Everywhere

CKYC (Central KYC) is a separate but linked system that sits above the securities-market KRAs. It is operated by CERSAI (Central Registry of Securitisation Asset Reconstruction and Security Interest of India), a body under the Ministry of Finance. Where a KRA serves the securities market, CKYC is designed to work across the entire financial sector, banks, NBFCs, insurers, mutual funds and brokers, on a single record.

When your CKYC is completed, CERSAI issues you a 14 digit CKYC Identifier, also called a KIN (KYC Identification Number). Any regulated financial entity can pull your verified KYC from the central registry using that number, so in theory you complete KYC once for your whole financial life. In day to day broking, the KRA layer is what gets checked first, but a clean CKYC record reduces friction across banks and mutual funds too.

• KRA = securities market only (brokers, depository participants, mutual funds), regulated by SEBI.
• CKYC = whole financial sector (banks, insurers, NBFCs and securities), run by CERSAI under the Finance Ministry.
• Your KIN is a 14 digit number; your KRA record is keyed to your PAN.
• Both can be Aadhaar e-KYC based; both aim for verify once, reuse everywhere.

What the SEBI KYC Master Circular Actually Specifies

SEBI does not leave KYC to each broker's whim. It consolidates the rules in its Master Circular on KYC (Know Your Client) Requirements for the securities market and the companion KRA Master Circular, both of which roll up earlier circulars into one reference document that intermediaries must follow. These circulars define the documents, the verification standard, and the responsibilities of brokers and KRAs. A few specifics every trader should know:

• PAN is mandatory as the primary identifier for KYC in the securities market, and it must be a valid, Aadhaar-linked (operative) PAN.
• The six KYC attributes that must be validated for a record to be treated as Validated KYC are PAN, name, address, mobile number, email and income/financial details where applicable, with the key fields checked against authentic sources such as the Income Tax database and UIDAI.
• KRAs must verify (and in the Validated category, source-validate) records and make them available to other intermediaries; you should not be asked to repeat a Validated KYC.
• Intermediaries must do periodic KYC review based on risk category (high, medium, low risk clients are re-reviewed at different intervals), and re-KYC is triggered when key details change.
• In-Person Verification (IPV) is required and, for digital onboarding, is satisfied through Aadhaar based e-KYC / video based IPV as permitted under the circular.

The practical upshot of the Validated KYC framework is portability. SEBI's intent in the circular is that a client who has completed a Validated KYC once should be able to open accounts with other registered intermediaries without submitting documents again. That is why a smooth second broker signup is a sign your first KYC was Validated, and a document-heavy one is a sign it was not.

The Documents and the Onboarding Flow, Step by Step

For an individual resident Indian, the document set is short, and most of it is now pulled digitally. The friction is almost never the documents themselves; it is mismatches between them. A name that reads RAJ KUMAR on PAN but RAJKUMAR on Aadhaar, or an address proof older than the broker accepts, is the classic cause of a Rejected status.

A typical fully digital flow at a broker like Zerodha, Groww or Upstox runs like this: you enter your PAN, the system checks your KRA status, you complete Aadhaar based e-KYC through a DigiLocker or OTP step, you link and penny-verify your bank account, you e-sign the account opening form with an Aadhaar OTP, and the broker uploads your Validated record to its KRA. When everything matches, the account is live within a day; some segments such as F&O may need an extra income proof step.

• To trade F&O (futures and options), most brokers additionally need income proof: a 6 month bank statement, salary slip, ITR or a holdings statement.
• Nominee details are now effectively required; you either add a nominee or explicitly opt out.
• Email and mobile must be your own and OTP-verified; using a relative or broker staff contact is a frequent cause of On Hold status.

A Worked Example: KYC Clears, Then the Real Costs Begin

Here is why traders should never confuse a clean KYC with a safe trade. KYC just unlocks the account. The moment you trade, STT, brokerage and tax apply. Consider a trader, Anjali, whose KYC clears as Validated and who immediately buys a Bank Nifty monthly call option. The numbers below are illustrative, not a recommendation, and not a promise of any return.

• Instrument: Bank Nifty monthly call option, lot size 30.
• She buys 2 lots (30 units) of the 52,000 strike call at a premium of Rs 300.
• Buy value of premium = 300 x 30 = Rs 9,000.
• Bank Nifty rises and the option premium climbs to Rs 480; she sells.
• Sell value of premium = 480 x 30 = Rs 14,400.

Gross gain on the premium = 14,400 minus 9,000 = Rs 5,400. But that is before costs. On options, STT is charged at 0.1 percent on the sell-side premium value, so STT here is roughly 0.001 x 14,400 = about Rs 14.4. A discount broker typically charges a flat fee of about Rs 20 per executed order, so a buy order and a sell order cost about Rs 40 in brokerage. Add exchange transaction charges, SEBI fees, stamp duty and 18 percent GST on (brokerage plus transaction charges), and total costs realistically land in the Rs 90 to Rs 130 range for this trade. Taking roughly Rs 110 of total charges, the net profit before tax is about 5,400 minus 110 = Rs 5,290.

Now tax. F&O profit is treated as business income, not capital gains. So Anjali's Rs 5,290 is added to her business income and taxed at her applicable slab rate, not at any special STCG or LTCG rate. If she had instead bought and sold Reliance shares in the cash segment and held them under a year, that profit would be short term capital gain taxed at 20 percent. Held over a year, it would be long term capital gain taxed at 12.5 percent on gains above Rs 1.25 lakh in the financial year. The point is unmissable: KYC was the easy part; STT, brokerage and the correct tax head are what actually determine what lands in her bank.

KYC for Non-Individuals: HUFs, Companies, NRIs and FPIs

The individual flow above is the common case, but the KYC requirement scales up sharply for non-individuals. A Hindu Undivided Family (HUF) account needs the HUF PAN plus the Karta's individual KYC and a declaration of coparceners. A private limited company or LLP must submit its certificate of incorporation, PAN, board resolution authorising trading, the Memorandum and Articles, and individual KYC of every authorised signatory and beneficial owner. The principle behind this is the same as for individuals: SEBI wants to know the real human beings who ultimately control and benefit from the account.

For NRIs, KYC ties into the PIS (Portfolio Investment Scheme) or non-PIS route, with NRE or NRO bank linkage, passport, visa or PIO/OCI proof and overseas address proof. Foreign Portfolio Investors (FPIs) go through a Designated Depository Participant and a far more detailed KYC, including beneficial ownership disclosure under SEBI's FPI regulations. These categories sit well beyond a weekend signup, and most need professional help to onboard correctly.

• Individual resident: PAN, Aadhaar based e-KYC, bank proof, simple and fast.
• HUF: HUF PAN plus Karta KYC and coparcener declaration.
• Company / LLP: incorporation docs, board resolution, signatory and beneficial owner KYC.
• NRI: passport, visa/OCI, NRE/NRO linkage, PIS routing where applicable.
• FPI: onboarded via a Designated Depository Participant with full beneficial ownership disclosure.

Re-KYC, Periodic Review and Why Accounts Get Frozen

KYC is not strictly a one and done event. Under SEBI's periodic review requirement, intermediaries must refresh KYC at intervals that depend on your risk classification, and they must trigger re-KYC whenever a material detail changes, a new address, a new mobile number, a new bank, or a change in your name. The most common surprise for an existing trader is finding the account suddenly restricted not because of anything they did wrong on a trade, but because a KYC attribute went stale or a regulatory refresh fell due.

The single biggest freeze trigger in recent years has been the PAN-Aadhaar link. If your PAN becomes inoperative because it is not linked to Aadhaar, your KYC effectively goes On Hold and you can be blocked from placing fresh trades until you relink and your status updates across the KRA. Mobile and email re-verification mandates have similarly caught out long-dormant accounts. None of this is the broker being difficult; it is the KRA and SEBI framework doing exactly what it is designed to do.

• Update KYC promptly after any change of address, phone, email, name or bank.
• Keep PAN linked to Aadhaar so your PAN stays operative and your KYC stays active.
• If an account is frozen, check your KRA status first; the fix is usually a re-KYC or a relink, not a new account.
• High-risk classified clients face more frequent periodic review than low-risk clients.

Common KYC Mistakes That Stall Accounts

Almost every failed KYC traces back to a small mismatch rather than a missing document. The verification engines compare your PAN name, Aadhaar name and bank name letter by letter, so an initial expanded in one place and abbreviated in another, a maiden versus married surname, or a stale address will throw a Rejected or On Hold status. Fixing the source document, not re-submitting the same mismatched set, is the only real cure.

• Name mismatch across PAN, Aadhaar and bank account, the number one cause of rejection.
• PAN not linked to Aadhaar, leaving PAN inoperative and KYC On Hold.
• Address proof older than the broker accepts, or a different address on different documents.
• Using someone else's mobile or email, which fails OTP-based In-Person Verification.
• Blurred or cropped document uploads where the issuing details are not readable.
• Skipping income proof when applying for the F&O segment.

Sources and Further Reading

For authoritative rules and to confirm current requirements, refer to SEBI (Securities and Exchange Board of India) and its Master Circular on KYC Requirements, the KRA portals such as CVL KRA, NDML KRA, the depositories NSDL and CDSL, and CERSAI for CKYC. Always confirm current documents, attributes, rates and tax rules on the official source before you act, because these are revised periodically.

Sources and Further Reading

For authoritative data and further reading on this topic, refer to SEBI (Securities and Exchange Board of India), NSDL, CDSL and SEBI Investor Education. Always confirm current rules, rates and contract specifications on the official source before you trade.