KYC AML Latest RBI Updates 2026: Every JAIIB Candidate Must Know These Rule
If you are preparing for JAIIB in 2026. The KYC AML RBI updates are the one topic you cannot afford to skip. Every single attempt of the Principles.
Practices of Banking paper carries questions from this area. And in 2025-2026. The Reserve Bank of India has changed so many rules that revising from old notes is the fastest way to lose easy marks.
This guide breaks down everything in plain English. You will learn why KYC matters. How the AML framework works.
How risk categorisation happens. What beneficial ownership means, and exactly what the latest RBI circulars changed. We will also cover the JAIIB exam angle so you walk into the hall with zero confusion.
Key Takeaways
- KYC (Know Your Customer) is a continuous process. Not a one-time document check.
- AML (Anti-Money Laundering) is built on the PMLA. 2002 and prevents misuse of the banking system.
- Memorise the risk numbers: KYC update cycle 10 / 8 / 2 years for low / medium / high risk.
- STR has no minimum threshold — this is the most common trap question.
- The big 2025-2026 changes: domestic PEPs under EDD. Wider V-CIP scope and mandatory CKYCR upload.
Why KYC and AML Dominate the JAIIB Syllabus
Whenever a student asks me which JAIIB topic matters most. My answer is always two words: KYC and AML. This is not just a compliance chapter. It is a high-yield, high-frequency scoring area.
Banking is a trust business. KYC and AML are the rules that protect that trust. They stop criminals from hiding dirty money inside accounts. Because regulators treat this as critical, examiners do too. That is why the KYC AML RBI updates appear in the paper year after year.
What KYC Really Means — Understand the Concept, Not Just the Definition
KYC stands for Know Your Customer. It is the process by which a bank verifies a customer's identity. Address and financial dealings. But it is far more than collecting documents.
KYC is a continuous process. The bank establishes a relationship and then maintains it. This runs from account opening all the way through ongoing transaction monitoring. The relationship never stops being watched.
RBI formally regulates this through the Master Direction on KYC. 2016, which has been amended many times since. The 2025-2026 amendments make this direction more technology-friendly. More risk-based than ever before.
The Four Pillars of KYC
- Customer Acceptance Policy (CAP): Defines. Customers are acceptable and which are not.
- Customer Identification Procedure (CIP): Sets how identity is verified — documents. Biometrics or Video KYC.
- Transaction Monitoring: Keeps watch on account activity and flags suspicious patterns.
- Risk Management: Places each customer in a risk category. Applies due diligence accordingly.
The AML Framework — The Full System to Stop Money Laundering
AML stands for Anti-Money Laundering. It is the regulatory. Operational framework that ensures the banking system is not used to make illegal money look legitimate.
In India. The primary law is the Prevention of Money Laundering Act (PMLA), 2002. It has been amended several times, including in 2005, 2009, 2012 and 2019. Knowing the base year — 2002 — is a frequent one-mark question.
The Three Stages of Money Laundering
These three stages appear in JAIIB almost every attempt. Learn them in order.
- Placement: Pushing illegal cash into the banking system.
- Layering: Moving money through complex transactions to hide its source.
- Integration: Bringing the laundered money back into the legitimate economy.
A simple way to remember the flow is Placement → Layering → Integration. If you are doing focused practice, our mock tests include scenario questions that test exactly which stage a given transaction belongs to.
Risk-Based Approach (RBA) — The Most Important 2025-2026 Update
In 2025. RBI made the Risk-Based Approach under its KYC Master Direction far more structured. Banks must now explicitly classify customers into three categories. Each category gets a different level of due diligence. A different KYC review cycle.
Customer Risk Categories at a Glance
| Risk Category | Typical Customer Type | Due Diligence Level | KYC Update Frequency |
|---|---|---|---|
| Low Risk | Salaried individuals, pensioners, government employees | Simplified Due Diligence | Every 10 years |
| Medium Risk | Self-employed, small businesses, traders | Standard Due Diligence | Every 8 years |
| High Risk | PEPs, NRIs, high-cash businesses, NGOs | Enhanced Due Diligence | Every 2 years |
Memory trick: Low 10, Medium 8, High 2. This periodicity shows up in MCQ form very often. Lock the numbers in now. Always confirm the exact cycle on the latest official IIBF notification before your attempt. As RBI can revise it.
Politically Exposed Persons (PEPs) and Enhanced Due Diligence
Politically Exposed Persons are people who hold. Or have held, a prominent public function. Think ministers, senior government officials, senior judiciary, and senior military officers. Their family members and close associates also fall into this category.
Here is the big change. Under the 2025 guidelines. Domestic PEPs are now treated on par with foreign PEPs.
Are brought under Enhanced Due Diligence. Earlier, EDD was mandatory mainly for foreign PEPs. This shift has a high probability of appearing in your exam.
Beneficial Ownership (BO) — A Sharp New Focus Area
A Beneficial Owner is the natural person who ultimately controls an entity or truly owns its funds. Banks must now identify the real owner. Not just the registered name on paper.
Why does this matter? Criminals often hide behind companies and trusts. Identifying the beneficial owner pierces that veil. The thresholds differ by entity type, and examiners love to twist them.
Beneficial Ownership Thresholds
| Entity Type | BO Threshold (Ownership %) |
|---|---|
| Companies | More than 25% of shares / voting rights / profit |
| Partnership Firms | More than 15% of capital or profit |
| Trusts | More than 15% of beneficiary interest |
| Unincorporated associations | More than 15% ownership interest |
Keep the split simple: 25% for companies, 15% for everything else. This distinction is regularly twisted in the exam. So confirm the current figures on the latest official IIBF notification if you are unsure.
Video KYC (V-CIP) — New Guidelines for 2025-2026
RBI introduced the Video-based Customer Identification Process (V-CIP) in 2020. In 2025, its scope and the list of eligible entities were expanded. This is a modern, paperless way to onboard customers.
- Non-Banking Financial Companies (NBFCs) can now also use V-CIP.
- Re-KYC can be completed through V-CIP as well.
- During V-CIP. The customer is verified using a live photo. An ID document and Aadhaar OTP.
- The process must run under a bank officer's supervision. It cannot be fully automated.
- V-CIP recordings must be stored for a minimum of 5 years.
Reports Under PMLA — CTR, STR, CCR and NTR
These reports are mandatory under PMLA. And their thresholds are heavily tested in JAIIB. Get the numbers and timelines right and these are guaranteed marks.
| Report Type | Threshold / Trigger | Reporting Authority | Timeline |
|---|---|---|---|
| CTR (Cash Transaction Report) | Cash transactions above ₹10 lakh in a month | FIU-IND | By 15th of the following month |
| STR (Suspicious Transaction Report) | Any transaction, irrespective of amount | FIU-IND | Within 7 days of suspicion |
| CCR (Counterfeit Currency Report) | Detection of counterfeit notes | FIU-IND | Within 15 days |
| NTR (NPO Transaction Report) | Transactions by non-profit organisations | FIU-IND | By 15th of the following month |
One point deserves a highlight. STR has no minimum threshold. Even if a transaction is for ₹100.
It must be reported when it looks suspicious. The classic trap asks for the "minimum amount for an STR". The correct answer is no minimum threshold.
Latest RBI KYC Updates 2025-2026 — The Exam-Worthy Points
JAIIB rewards candidates who track current regulatory changes. Here are the key updates introduced across 2025-2026 that you should expect in the paper.
- Aadhaar OTP-based eKYC: Now permitted for limited-purpose accounts too. Not just savings accounts.
- Periodic Re-KYC simplification: For low-risk customers. A self-declaration is sufficient — no branch visit is mandatory.
- Central KYC Registry (CKYCR): All Regulated Entities must upload customer data. Once KYC is done. Another entity can fetch the data using the CKYCR number instead of repeating it.
- Accounts of minors: A guardian's KYC is compulsory. And fresh KYC is required when the minor turns 18.
- Freezing of accounts: If periodic KYC is not completed. The bank first applies a debit freeze. Then a complete freeze — a step-wise process clarified in recent circulars.
For diagrams, memory tricks and chapter-wise notes on all of this, browse our free guides, which explain each point visually.
FATF and India's AML Framework
The Financial Action Task Force (FATF) is the international body that sets AML. Counter-terrorism financing standards. India is a FATF member.
India's Mutual Evaluation Report gave the country an overall good rating. While suggesting improvement in areas such as beneficial ownership transparency. Reporting by non-bank entities. For the exact assessment year and findings. Confirm on the latest official IIBF notification or FATF publication.
From an exam view. The FATF 40 Recommendations matter — especially Recommendation 10 (Customer Due Diligence). Recommendation 11 (Record Keeping) and Recommendation 20 (Reporting of Suspicious Transactions).
How to Study This Topic — A Practical Plan
KYC and AML can feel like a wall of numbers. Break it into a simple. Repeatable routine and it becomes one of your easiest scoring chapters.
- Day 1 — Concepts: Read KYC. AML. The four pillars. The three laundering stages until the logic is clear.
- Day 2 — Numbers: Drill the risk cycles. CTR/STR thresholds and BO percentages using flashcards.
- Day 3 — Updates: Focus only on the 2025-2026 changes — domestic PEPs, V-CIP, CKYCR.
- Day 4. Application: Solve scenario questions where you decide what the bank must do.
- Day 5 — Revision: Re-attempt the summary table from memory. Then take a timed quiz.
Active recall beats re-reading. Test yourself daily with our mock tests rather than passively highlighting notes.
Common Mistakes JAIIB Candidates Make
Most marks are lost not from hard concepts, but from avoidable errors. Watch out for these.
- Studying outdated rules: Old books miss the 2025-2026 changes. Always cross-check the latest official IIBF notification.
- Assuming STR has a limit: It does not. Any suspicious transaction is reportable, regardless of value.
- Mixing up BO thresholds: 25% is only for companies; partnerships and trusts use 15%.
- Confusing record-keeping years: The PMLA retention period is 5 years, not 10.
- Ignoring exceptions: Examiners build traps around the one case that breaks the pattern.
An Often-Missed Concept — Record Keeping
Under Section 12 of the PMLA. Banks must maintain transaction records for a minimum of 5 years. Even after an account is closed. KYC documents must also be preserved for 5 years after account closure.
This shows up as a "5 years or 10 years" trap. The correct answer is 5 years. If a question phrases it unusually. Confirm on the latest official IIBF notification.
Exam-Ready Summary Table
| Concept | Key Detail / Threshold |
|---|---|
| KYC Master Direction | RBI Master Direction on KYC, 2016 (amended continuously) |
| Low Risk KYC Update | Every 10 years |
| Medium Risk KYC Update | Every 8 years |
| High Risk KYC Update | Every 2 years |
| CTR Threshold | Cash transactions above ₹10 lakh per month |
| STR Threshold | No minimum — any suspicious transaction |
| STR Filing Timeline | Within 7 days of identifying suspicion |
| CTR Filing Timeline | By 15th of the following month |
| Reporting Authority | FIU-IND (Financial Intelligence Unit — India) |
| BO Threshold — Companies | More than 25% |
| BO Threshold — Partnerships / Trusts | More than 15% |
| V-CIP Recording Storage | Minimum 5 years |
| Domestic PEPs | Now under Enhanced Due Diligence (2025 update) |
| PMLA Year | Prevention of Money Laundering Act, 2002 |
| FATF Membership | India is a FATF member |
| CKYCR | Central KYC Registry — one-time KYC for all entities |
| Money Laundering Stages | Placement → Layering → Integration |
JAIIB Exam Angle — Where to Focus
From this topic, JAIIB usually carries 4 to 7 questions, and sometimes more. Several are case-study based: you get a scenario. Must decide what the bank should do.
The concepts that fetch the most marks are:
- Risk categorisation and KYC update frequency (memorise the numbers)
- CTR and STR thresholds and reporting timelines
- Beneficial ownership thresholds by entity type
- V-CIP rules and eligibility
- Inclusion of domestic PEPs under EDD
- The role and working of the CKYCR
- The three stages of money laundering
Frequently Asked Questions
What is the difference between KYC and AML?
KYC is the process of verifying who your customer is. Monitoring the relationship. AML is the wider framework.
Built on the PMLA. That prevents the banking system from being misused for money laundering. KYC is a core tool inside the larger AML framework.
Is there a minimum amount for filing an STR?
No. A Suspicious Transaction Report has no minimum threshold. Any transaction that appears suspicious must be reported to FIU-IND. Regardless of the amount, within 7 days of forming the suspicion.
How often must KYC be updated for different customers?
The standard cycle is every 10 years for low-risk. Every 8 years for medium-risk and every 2 years for high-risk customers. Always confirm the current periodicity on the latest official IIBF notification. Since RBI can revise it.
What is the beneficial ownership threshold for companies?
For companies. The beneficial owner is generally a natural person holding more than 25% of shares. Voting rights or profit. For partnership firms, trusts and unincorporated associations, the threshold is more than 15%.
How many questions come from KYC and AML in JAIIB?
Typically 4 to 7 questions in the Principles and Practices of Banking paper. Including some case-study items. Because the count is reliable. Mastering this chapter offers strong return on your study time.
Conclusion — Your Strategy Until Exam Day
KYC and AML are not static compliance rules. They form a living. Evolving framework that RBI refreshes with new circulars every year. JAIIB specifically tests whether you are aware of the latest changes.
So do not revise from old books alone. Cover the latest 2025-2026 KYC AML RBI updates thoroughly. And confirm any unclear figure on the latest official IIBF notification.
Keep three mantras in mind:
- Memorise the numbers: 10-8-2, 25%-15%, ₹10 lakh, 7 days — these come up directly.
- Memorise the exceptions: STR has no threshold — a classic trap.
- Memorise the 2025-2026 changes: domestic PEP EDD, V-CIP expansion, mandatory CKYCR upload.
Work hard, work in the right direction, and this exam is yours. All the best from Ashish Sir and the entire Learning Sessions family.
Related Guides
📚 Free Learning Sessions resources — connect & crack your exam
- 📝 Free mock tests — chapter-wise, exam-pattern, with instant solutions
- 🎮 Matching games — gamified revision of key terms & concepts
- 📄 Study notes & PDFs — downloadable chapter material
- 🎥 Video classes on YouTube — subscribe to @learningsessions
💬 Want the full course? WhatsApp your course name to 8360944207 and our team will set you up.
📱 Study on the go — get our iOS & Android app at iibf.store/app.
For more on KYC AML. See the official IIBF circulars. Our chapter-wise free notes on iibf.store.
For more on “KYC AML”, explore our free mock tests and chapter notes on iibf.store.
Bookmark this page — we keep our “KYC AML” guidance current as IIBF revises its rules.
Still researching “KYC AML”? Always confirm the latest position on the official IIBF site first.
Practise exam-style questions on “KYC AML” free on iibf.store to lock in the concept.
Save this “KYC AML” guide and revisit it during your revision week.
Our free notes cover “KYC AML” alongside the wider syllabus in one place on iibf.store.
Take a free mock test, download chapter PDFs, or watch a video class — all included on iibf.store.
Keep reading
