Video Based Customer Identification Process (V-CIP): Rules and Controls

Bank branches are no longer the only gateway to opening an account digitally. The video based customer identification process (V-CIP) lets a bank complete Customer Due Diligence entirely over a live video call, without the customer visiting a branch. Recognised under the RBI Master Direction on Know Your Customer as a CDD procedure equivalent to in-person verification, V-CIP now underpins much of India's digital account-opening and e-KYC ecosystem. For IIBF's Digital Banking paper, examiners repeatedly test the precise operational controls — live unassisted video, geotagging, random liveness questions and independent audit — that decide whether a given V-CIP session is legally valid.

📹 What Is V-CIP and Why It Matters

The Video-Based Customer Identification Process (V-CIP) is a method by which a Regulated Entity (RE) — a bank, NBFC or payments entity — obtains identification information and documents of a prospective customer through a live, real-time video interaction, rather than a face-to-face meeting at a branch. Under the RBI Master Direction on KYC (as amended), V-CIP is explicitly treated as a Customer Due Diligence procedure and is deemed equivalent to physical, in-person verification once every prescribed control is satisfied. That single clarification is what makes V-CIP commercially important: an entity does not need to send an official to a customer's home or wait for the customer to visit a branch to complete onboarding.

This matters most for the digital-first banks, fintech-BC tie-ups and neobanking journeys covered in the Overview of Digital Banking chapter, and it dovetails directly with app-based onboarding discussed under Mobile Banking. Instead of a purely document-based e-KYC (which has its own limits), V-CIP gives a bank a full CDD-grade onboarding channel that still needs no branch footfall.

💡 Exam Tip: Remember the core distinction — Aadhaar OTP-based e-KYC alone is NOT full CDD, but a properly conducted V-CIP session IS treated as equivalent to in-person verification.

🛡️ Mandatory Operational Controls Under the Master Direction

The Master Direction is deliberately strict about how a V-CIP session must be run, because the entire legal weight of "in-person verification" rests on these controls being followed to the letter. First, the interaction must be live and unassisted — the customer answers questions from the authorised official in real time, on camera, with no scripted playback, no pre-recorded clip, and no third party feeding answers off-screen. Second, the customer's location must be geotagged and confirmed to be within India for the duration of the session; a video call originating outside Indian territory does not meet the requirement, regardless of the customer's citizenship.

Third, the official conducting the session must perform a random question liveness check — asking the customer to say a random number, word or phrase, or to display a specific gesture, in real time. This defeats attempts to spoof the process with a static photograph, a deepfake loop, or someone else's recorded video. Together, live interaction, geotagging and liveness verification form the three-legged stool that supports the entire legal fiction that a video call can substitute for a face-to-face branch visit — miss any one leg, and the onboarding does not qualify as valid CDD.

🔍 Audit, Recording and Retention Requirements

A V-CIP session is not "fire and forget." The Master Direction requires the RE to record the entire session with date and time stamps, and to store that recording securely — encrypted, access-controlled, and kept apart from the general document repository — so it can be produced later to supervisors, auditors or law-enforcement agencies. This recording, together with the underlying KYC documents, must be retained for the minimum period prescribed under the record-keeping framework that flows from the Prevention of Money Laundering Act (PMLA) Rules, which is currently five years from the end of the business relationship or the date of the transaction.

Equally important is the requirement for a concurrent audit of the V-CIP process, carried out by officials who are independent of the team responsible for sourcing or marketing the product. This segregation of duties exists precisely because the person selling an account has a commercial incentive to wave through a shaky video session; an independent auditor does not. Banks are expected to periodically sample completed V-CIP sessions, verify that geotagging, liveness checks and document capture were properly executed, and escalate any session that fails to meet the standard — including, where necessary, insisting the customer complete conventional in-person verification instead.

⚠️ Common Mistake: Students often assume V-CIP recording is optional "for the bank's convenience." It is a mandatory control — without it, neither the concurrent audit nor the five-year retention requirement can be satisfied.

🌍 Eligibility, Exclusions and Where V-CIP Does Not Apply

Because geotagging must confirm the customer is physically present in India during the call, V-CIP is not available to a customer who is outside the country at the time of onboarding — an NRI logging in from abroad cannot complete V-CIP for that reason alone, even if every other control would otherwise be met. The Master Direction also carves out categories where V-CIP is not an acceptable substitute for deeper due diligence, and REs retain full discretion to fall back to conventional physical verification whenever they have any doubt about the authenticity of a session, a mismatch in documents, or a suspicion of impersonation.

This eligibility boundary is also why V-CIP is discussed alongside Financial Inclusion in the syllabus — it widens access for genuine, India-resident customers in remote or under-served locations who cannot easily reach a branch, while the geotagging and liveness safeguards are what keep that widened access from becoming a fraud channel. Banks building fintech-assisted onboarding journeys, including Business Correspondent-led account opening, lean heavily on V-CIP for exactly this reason.

📌 Remember: No Indian geotag at the time of the call = no valid V-CIP, full stop — irrespective of how strong the rest of the documentation is.

💻 V-CIP in the Broader Digital Banking Exam Context

V-CIP does not sit in isolation; it is one thread in a much larger digital-onboarding and cybersecurity story that IIBF's Digital Banking paper expects candidates to connect. The same fraud vectors that liveness checks defend against — deepfakes, photo spoofing, session hijacking — are covered from the criminal-law side in cyber crime classification, which every V-CIP official should understand alongside the operational controls. On the regulatory-architecture side, V-CIP's data-sharing and consent principles connect naturally to open banking in India, where customer-consented data flows raise similar verification questions.

Once an account is opened via V-CIP, day-to-day servicing brings its own rulebook — for instance, a dispute raised on a UPI transaction from that very account is handled under the separate framework covered in UPI transaction dispute resolution. Candidates preparing for the Digital Banking paper should treat V-CIP, e-KYC, fraud controls and payment-dispute handling as one connected onboarding-to-servicing lifecycle rather than four unrelated topics — that is exactly how integrated-scenario questions are framed in the exam. For more chapter-linked reading on this theme, browse the Digital Banking tag hub on the blog.

🧠 Practice MCQs: Video-Based Customer Identification Process (V-CIP)

Want chapter-wise mock tests with 100+ MCQs? Start practising free →

❓ Frequently Asked Questions

V-CIP has quietly become one of the most exam-relevant control frameworks in Digital Banking precisely because it blends technology, regulation and fraud prevention into one process. Revisit the live-video, geotagging, liveness-check and audit requirements until you can name each one without hesitation, then test yourself against timed questions on the JAIIB/CAIIB course page to see how these concepts show up in a full-length paper.