KYC Norms and Bank Account Operations: JAIIB 2026 Guide
For any candidate sitting the JAIIB Principles and Practices of Banking paper, kyc norms and bank account operations sit right at the heart of the syllabus. Know Your Customer is not just a compliance checkbox; it is the legal and operational foundation on which every deposit account, payment and lending relationship in an Indian bank rests. The Reserve Bank of India treats it as a frontline defence against money laundering, terror financing and fraud.
In this 2026 guide we walk through what the regulator actually requires, how the different categories of customer due diligence work, the documents a branch accepts, and how these rules shape day-to-day account operations. Whether you are revising for the exam or refreshing your branch practice, this article connects the theory to what really happens at the counter.
The framework flows from the Prevention of Money Laundering Act, 2002 (PMLA) and the RBI Master Direction on Know Your Customer, which the central bank updates regularly. Every scheduled commercial bank, small finance bank, payments bank and co-operative bank must comply, and the JAIIB syllabus expects you to know the structure cold.
What KYC Norms Actually Require
At their core, kyc norms require a bank to establish and verify the identity of every customer before opening an account and to monitor the relationship on an ongoing basis. RBI breaks the obligation into four building blocks: a Customer Acceptance Policy, a Customer Identification Procedure (CIP), ongoing transaction monitoring, and Risk Management.
- Customer Acceptance Policy: No account is opened in anonymous or fictitious names, or where identity cannot be verified.
- Customer Identification Procedure: The bank collects an Officially Valid Document (OVD) and verifies identity and address.
- Ongoing monitoring: Transactions are watched against the customer's declared profile to spot anomalies.
- Risk categorisation: Customers are classified as low, medium or high risk, which decides how often KYC is reviewed.
The accepted OVDs are the passport, driving licence, Voter ID, Aadhaar (or the proof of possession of Aadhaar), NREGA job card and the PAN. Aadhaar-based e-KYC and video-based customer identification (V-CIP) are now mainstream, letting banks onboard customers remotely while still meeting the verification standard. Candidates should remember that PAN or Form 60 is mandatory for most accounts under the Income Tax rules, working alongside the OVD. If you want structured drills on these definitions, the JAIIB course on iibf.store maps every point to the latest RBI Master Direction.
Customer Due Diligence and Risk Categorisation
Customer Due Diligence (CDD) is the engine that drives kyc norms. The depth of diligence depends on the assessed risk. Low-risk customers such as salaried individuals and small savers attract simplified due diligence, while high-risk customers, including non-resident clients, trusts, politically exposed persons (PEPs) and those with complex ownership, attract Enhanced Due Diligence (EDD).
Under EDD a bank digs deeper into the source of funds, the beneficial ownership and the purpose of the relationship. For company and partnership accounts, identifying the beneficial owner (broadly, the natural person owning more than the prescribed threshold or exercising control) is compulsory. Periodic updation of KYC is also risk-driven: every two years for high-risk, every eight years for low-risk, and every ten years for medium-risk customers, unless the rules are revised.
Banks must also screen customers against sanctions and watch lists and file a Suspicious Transaction Report (STR) or Cash Transaction Report (CTR) with the Financial Intelligence Unit-India (FIU-IND) where thresholds or red flags are triggered. A CTR covers cash transactions above Rupees 10 lakh in a month. These reporting duties flow directly from PMLA and are a favourite exam area. You can sharpen recall with practice questions on the iibf.store mock tests, which mirror the JAIIB pattern.
Types of Bank Accounts and Their Operation
Bank account operations build directly on a completed KYC. The main deposit products are savings, current, recurring and fixed deposit accounts, each with its own operating rules. Savings accounts are for individuals and certain non-trading entities, with limits on the nature of transactions. Current accounts suit businesses with high transaction volumes and carry no interest. Term deposits lock funds for a fixed tenor at a contracted rate.
RBI also mandates the Basic Savings Bank Deposit Account (BSBDA), a zero-balance account that delivers financial inclusion with a minimum set of free services. For customers who cannot immediately produce full documentation, a Small Account can be opened with relaxed KYC, subject to caps on balance (Rupees 50,000), annual credits (Rupees 1 lakh) and monthly withdrawals.
- Single, joint, and either-or-survivor mandates govern who can operate the account.
- Nomination under the Banking Regulation Act lets one nominee receive the balance on death of the holder.
- Minors can open accounts, operated by a guardian or independently above the prescribed age, per bank policy.
Operational events such as cheque clearing, standing instructions, stop-payment requests, and account dormancy all follow defined rules. An account becomes inoperative if there is no customer-induced transaction for over two years, and re-activation requires fresh KYC verification. To test yourself on these distinctions, try the quick match game on iibf.store.
KYC in Day-to-Day Account Operations and Compliance
Strong kyc norms do not end at onboarding; they thread through the whole life of the account. When a customer changes address, adds a mandate, or upgrades from a Small Account to a regular one, the branch re-runs the relevant due diligence. Periodic KYC updation letters, re-verification at first transaction after a dormant spell, and beneficial-owner refreshes for entities are all part of the routine.
The compliance stakes are high. RBI and the FIU can levy penalties for KYC and PMLA breaches, and supervisory action follows systemic lapses. This is why banks invest heavily in transaction-monitoring software, name-screening tools and staff training. For the JAIIB candidate, the practical message is that KYC is a continuous control, not a one-time form.
Technology has reshaped the field. The Central KYC Records Registry (CKYCR) stores a customer's KYC once and shares it across regulated entities using a unique CKYC Identifier, cutting duplication. Aadhaar e-KYC, V-CIP and digital document verification through DigiLocker now let banks open compliant accounts in minutes. Candidates should stay current with the latest circulars on the RBI website and track rate and policy changes via the RBI rates tracker. For ongoing exam updates, the IIBF news desk keeps you posted.
Frequently Asked Questions
What is the difference between KYC and CDD?
KYC is the broad framework of knowing your customer, covering acceptance policy, identification, monitoring and risk management. Customer Due Diligence is the specific verification step within it, where the bank confirms identity, address and, for higher-risk clients, source of funds and beneficial ownership before and during the relationship.
How often must KYC be updated under RBI norms?
Updation is risk-based. High-risk customers are re-verified every two years, medium-risk every ten years and low-risk every eight years, unless RBI revises these intervals. Updation is also triggered by changes in customer details, the first transaction after dormancy, or a change in risk category.
Can I open a bank account without full KYC documents?
Yes, a Small Account can be opened with self-attested limited documentation, subject to a balance cap of Rupees 50,000, annual credits of Rupees 1 lakh and monthly withdrawals of Rupees 10,000. It remains valid for a limited period within which full KYC must be completed to continue operating it.
What is the Central KYC Registry (CKYCR)?
The CKYC Records Registry is a centralised repository that stores a customer's verified KYC data once and shares it across all regulated financial entities through a unique CKYC Identifier. It removes repeat documentation, speeds up onboarding and is managed under PMLA rules by CERSAI.
Final Takeaways
For the JAIIB PPB paper, treat kyc norms and bank account operations as one connected story: identity verification feeds account opening, risk categorisation drives ongoing diligence, and reporting closes the loop with regulators. Master the OVD list, the CDD tiers, the account types and the updation cycle, and you will handle most exam questions confidently. Ready to test your grip? Start a full-length mock on the iibf.store test series or enrol in the structured JAIIB course today and walk into the exam hall prepared.
Take a free mock test, download chapter PDFs, or watch a video class — all included on iibf.store.
