What is the AML regulatory framework in India, and which laws and rules apply?
FIU-IND's annual report for the year to 31 March 2025 counts 434,668 suspicious transaction reports, 17,313,368 cash transaction reports and 10,273,512 cross border wire transfer reports. In that year its Director issued eight compliance orders and fined five reporting entities a total of ₹30.49 crore.
The primary AML legislation in India is the Prevention of Money Laundering Act, 2002, in force since 1 July 2005; its main companion is the PML (Maintenance of Records) Rules, 2005. The PMLA primarily governs the laundering offense, the attachment and confiscation of proceeds, and the duties of reporting entities. Knowingly taking part in any process or activity connected with the proceeds of crime is an offense (s. 3), punished with 3 to 7 years of rigorous imprisonment and a fine (s. 4). The RBI's KYC Directions call the Act and the Rules the legal framework for India's AML regulations and CFT.
| Law or rulebook | Dated changes (in force, November 2026) | Its AML role |
|---|---|---|
| PMLA 2002 (Act 15 of 2003) | In force 1 July 2005; sections last amended by Act 23 of 2019 from 1 August 2019; Schedule changed by Act 18 of 2023 from 13 August 2024 | Offense and punishment (ss. 3, 4), attachment (s. 5), reporting entity duties (ss. 11A to 15), fines by the Director of FIU-IND (s. 13) |
| PML (Maintenance of Records) Rules, 2005 | Notified 1 July 2005 (G.S.R. 444(E)); Rule 9 amended 19 July 2024 (G.S.R. 419(E): CKYC retrieval, seven day update) | Reports and their clocks (Rules 3, 7, 8), group programs (Rule 3A), due diligence and beneficial owners (Rule 9), identity records (Rule 10) |
| RBI Know Your Customer Directions, 2025 (ten texts by entity type) | All issued 28 November 2025; commercial bank text updated as on 1 October 2026 | KYC, monitoring, reporting, sanctions and wire rules for each type of RBI regulated entity; earlier KYC instructions for commercial banks repealed (para 80) |
| RBI (Regulation of Payment Aggregators) Directions, 2025 | 15 September 2025 | Merchant due diligence and monitoring; FIU-IND registration for non bank aggregators (para 13) |
| SEBI master circular on AML and CFT | 6 June 2024 | Duties of SEBI registered intermediaries, including a 7 day STR line (para 74(ii)) |
| IRDAI Master Guidelines on AML/CFT, 2022 | 1 August 2022 | One text for all insurers, consolidating the 2013 and 2015 guidelines for general and life insurers |
| UAPA, 1967, s. 51A; WMD Act, 2005, s. 12A | Orders of 2 February 2021 and 1 September 2023, annexed to the RBI Directions for commercial banks | Freezing of terrorist and proliferation funds; checks against the UN Security Council lists and designated lists |
Who regulates AML compliance in India?
Who controls AML in India depends on the duty. FIU-IND, set up in 2004 under the Ministry of Finance's Department of Revenue, is the authority responsible for monitoring suspicious transactions: it holds and analyzes suspicious and cash transaction reports. Each regulator supervises its own sector, and all these regulatory bodies apply the same Act and Rules.
| Body | Who it covers | Role and basis (in force, November 2026) |
|---|---|---|
| FIU-IND | Every reporting entity | Receives reports on FINnet 2.0; its Director fines under s. 13 and, in consultation with each regulator, issues detection and reporting guidelines (Rule 7(3)) |
| Reserve Bank of India (RBI) | Banks, NBFCs and other entities it regulates; payment aggregators | Ten KYC Directions by entity type, 28 November 2025; Payment Aggregator Directions, 15 September 2025 |
| Securities and Exchange Board of India (SEBI) | Brokers and other intermediaries registered under s. 12 of the SEBI Act, 1992 | Master circular of 6 June 2024 |
| IRDAI | Life and general insurers | Master Guidelines on AML/CFT of 1 August 2022 |
| Pension Fund Regulatory and Development Authority (PFRDA) | Intermediaries it registers | Reporting entities under PMLA s. 2(1)(n)(iii) |
| Central Board of Indirect Taxes and Customs (CBIC) | Dealers in precious metals and stones; real estate agents | Regulator under Rule 2(1)(fa)(iii), (iv) |
| Enforcement Directorate (ED) | Anyone who launders | Investigates, provisionally attaches property (s. 5), files prosecution complaints |
The Serious Fraud Investigation Office (SFIO) investigates complex corporate frauds assigned to it under s. 212 of the Companies Act, 2013. Fraud under s. 447 of that Act is a PMLA scheduled offense (Part A, paragraph 29).
Which entities are subject to AML obligations in India?
A reporting entity under PMLA s. 2(1)(wa) is a banking company, a financial institution, an intermediary or a person carrying on a designated business or profession. Financial institutions include NBFCs, chit fund companies, housing finance institutions, payment system operators and the Department of Posts (s. 2(1)(l)). Intermediaries include SEBI registered market intermediaries, PFRDA registered intermediaries and recognized stock exchanges (s. 2(1)(n)). Designated businesses cover games of chance, casinos included, and, once notified, real estate agents and dealers in precious metals, precious stones and other high value goods (s. 2(1)(sa)).
Five virtual digital asset activities, from exchange and transfer to safekeeping and issuer offer services, were notified on 7 March 2023 when done for others in the course of business (FIU-IND letter of 4 July 2023). Trust and company service providers followed on 9 May 2023 (letter of 17 July 2023), with carve outs such as a lawyer or accountant who only files a company's formation declaration.
Registration on FINnet 2.0 runs in three stages: the entity, the Principal Officer and the Designated Director. Only then can reports be filed. FIU-IND's list of 30 September 2026 names 3,113 of the 8,411 RBI registered NBFCs as not registered, one of the 16 upper layer NBFCs among them.
What are the AML obligations for UPI and payment aggregators?
In its order of 1 March 2024, FIU-IND found that businesses running online gambling and other fraudulent services had routed proceeds through accounts at Paytm Payments Bank and its Payout service. The bank relied on a non compliant or unregulated entity for third party KYC (Rule 9(2)(c), (f)) and did not file STRs, in the manner and time the Rules set, on 34 beneficiary accounts paid from those Payout accounts. The fine was ₹5.49 crore.
In a UPI or card payment, each reporting entity in the chain carries its own duties. Whoever operates a system for clearing, payment or settlement between payer and beneficiary is a payment system operator, so a financial institution (s. 2(1)(l), (rb), (rc)). Payment aggregators also follow the RBI's Directions of 15 September 2025: merchant CDD, a check of merchants' later transactions against their business profile and, for non bank aggregators, FIU-IND registration and reporting (para 13(a), (h), (i)).
What must banks, crypto exchanges, payment firms and fintechs do?
| Sector | Supervisor | Main rulebook (in force, November 2026) | What stands out |
|---|---|---|---|
| Commercial banks | RBI | KYC Directions, 2025 for commercial banks | Principal Officer cannot be the Designated Director (para 14(3)); risk category reviewed at least every six months (para 41(1)); UN Security Council lists and the Schedules to the 2007 order checked daily (para 56(2)) |
| Small finance, payments, local area, regional rural and cooperative banks | RBI | Their own KYC Directions, 2025 | Issued the same day as the commercial bank text; read your own before relying on a paragraph number here |
| NBFCs | RBI | PMLA, Rules, NBFC KYC Directions, 2025 | FINnet 2.0 registration first: 3,113 not registered on 30 September 2026 |
| Payment aggregators | RBI | Payment Aggregator Directions, 2025 | Merchant CDD and monitoring; non bank aggregators register with FIU-IND (para 13) |
| Brokers and other intermediaries | SEBI | Master circular, 6 June 2024 | CTR by the 15th and STR within 7 days of the conclusion (para 74) |
| Insurers | IRDAI | Master Guidelines on AML/CFT, 2022 | One consolidated text for life and general insurers |
| Crypto exchanges and wallet providers | FIU-IND | PMLA s. 2(1)(sa)(vi), notification of 7 March 2023 | Register with FIU-IND; the Designated Director and Principal Officer attend an in person meeting (letter of 4 July 2023) |
| Trust and company service providers | FIU-IND | Notification of 9 May 2023 (S.O. 2135(E)) | Register on FINnet 2.0; professionals who only file a formation declaration are carved out |
| Fintechs | Depends on license | The row of the license held | PMLA duties only where the firm falls in a reporting entity class of s. 2(1)(wa) |
FIU-IND's orders reach virtual asset service providers that serve Indian clients from abroad. Binance, named through entities in the Seychelles, the Cayman Islands and Switzerland, was fined ₹18.82 crore on 19 June 2024 under s. 12(1) read with Rules 7(1), 3(1)(D), 7(3) and 8(2). Bybit Fintech Limited followed with ₹9.27 crore on 31 January 2025.
What are the AML compliance requirements in India?
Measures to prevent money laundering in India follow from PMLA s. 12 and the Rules. A Principal Officer at management level furnishes the reports (Rules 2(1)(f), 7(2)); a Designated Director ensures overall compliance (Rule 2(1)(ba)). A commercial bank also verifies a customer's Permanent Account Number (PAN), where obtained, with the issuing authority (RBI para 17(10)). Rule 9(13) requires a documented risk assessment, and under Rule 9(14) regulators may set enhanced or simplified measures, never simplified ones on suspicion or higher risk.
The fourth column is where complead, formerly Sanction Scanner, names its control for each duty, or says the duty stays with the firm.
| Obligation | Legal basis (in force, November 2026) | What a program must do | How complead does it |
|---|---|---|---|
| Registration with FIU-IND | Rule 7(1); FIU-IND letters of 4 and 17 July 2023 | Register the entity, the Principal Officer and the Designated Director on FINnet 2.0; reports can be filed only after all three; failing to register is itself a breach that draws s. 13(2) action. | Done by the firm on FINnet 2.0; complead has no part in it. |
| Designated Director and Principal Officer | Rules 2(1)(ba), 2(1)(f), 7(1); RBI paras 14, 15 | Name both to the Director of FIU-IND; the Principal Officer works at management level; a commercial bank may not nominate its Principal Officer as Designated Director. | Each case names the reviewer who closed it. |
| Risk assessment | Rule 9(13) | Document the risk from clients, countries or areas, products, services, transactions and delivery channels, consistent with the national risk assessment; keep it current and open to competent authorities. | Detection rules can be limited to one product, segment or jurisdiction, and each edit is versioned, recording who made it, when and why. |
| Customer due diligence (CDD) | PMLA s. 11A; Rule 9(1); RBI para 21 | Identify the client and any beneficial owner and verify both at the start of an account based relationship, for occasional transactions of ₹50,000 or more (single or apparently connected) and for any international money transfer; where the regulator finds money laundering and terrorist financing risks effectively managed and it is essential not to interrupt the normal conduct of business, it may let verification finish as soon as reasonably practicable after the relationship starts. | Customer risk assessment and KYC rolls the checks on a client into one risk score. |
| Beneficial owners | PMLA s. 2(1)(fa); Rule 9(3) | Company: more than 10 percent of shares, capital or profits, or control by other means; partnership: more than 10 percent of capital or profits, or control by other means; unincorporated body: more than 15 percent; trust: author, trustees, beneficiaries with 10 percent or more and anyone with ultimate effective control; senior managing official where no person qualifies; no shareholder or beneficial owner check where the client or its controlling owner is listed on a stock exchange in India, or resident and listed in a jurisdiction the Central Government notifies, or is a subsidiary of such a listed entity (9(3)(f)). | KYB and UBO verification traces owners upward until natural persons are reached and reports any layer it cannot resolve as unresolved. |
| Politically exposed persons | Rule 2(1)(db); RBI para 45 | The Rules define PEPs by prominent public functions entrusted by a foreign country; a commercial bank needs senior management approval to open or continue the relationship, reasonable measures on the source of funds or wealth and enhanced monitoring, also for family members and close associates. | A PEP hit feeds the same customer score; a person decides, and the case shows who. |
| Central KYC records | Rule 9(1-A), (1-D) | File the client's KYC records with the Central KYC Records Registry within ten days of starting an account based relationship; send updated information within seven days or the period the Government notifies. | The registry filing stays with the firm. |
| Ongoing due diligence | Rule 9(12); RBI paras 40, 41(1), 42 | Examine transactions against the client's profile and, where needed, the source of funds; review due diligence on suspicion or doubt about earlier data; apply CDD to existing clients on materiality and risk; commercial banks review risk categories at least every six months and update KYC at least every 2, 8 or 10 years for high, medium and low risk. | Monitoring of a name starts and stops by API call, so a closed relationship drops out of screening. |
| Threshold reports | Rules 3(1)(A), (B), (BA), (C), (E), (F); 8(1), 8(3) | Cash (CTR), non profit receipts (NTR), counterfeit currency (CCR) and cross border wire (CBWTR) reports monthly by the 15th of the next month; purchases and sales of immovable property of ₹50 lakh or more registered by the reporting entity, quarterly by the 15th. | Each reporting line can be built as a rule without code and tested on 30, 60 or 90 days of past data first. |
| Suspicious transaction reports (STRs) | Rules 2(1)(g), 3(1)(D), 7(3), 8(2), 8(4); SEBI para 74(ii); RBI paras 54, 55 | Run an internal mechanism that detects suspicious transactions, attempted ones included; the Principal Officer reports promptly once satisfied (SEBI intermediaries: within 7 days of the conclusion); each day of delay, or of a misreported transaction left uncorrected, is a separate violation; a commercial bank may not restrict an account merely because an STR was filed. | Each alert shows the rule that fired and the signals that matched, and regulatory compliance and reporting keeps reporting support inside case management. |
| Sanctions and freezing | UAPA s. 51A (order of 2 February 2021); WMD Act s. 12A (order of 1 September 2023); RBI paras 17(9), 56, 57 | A commercial bank holds no account in a name on the UN Security Council's ISIL and Al Qaida list or its Taliban list, and verifies those lists and the Schedules to the 2007 order daily, taking every change into account; it reports accounts resembling a listed name to FIU-IND and advises the Ministry of Home Affairs; on a WMD Act match it carries out no transaction and informs the Central Nodal Officer. | Client screening covers the UN lists with OFAC, EU, UK (HMT), DFAT and SECO and 200+ national regimes; confirm the 2007 order's Schedules sit in your list set. |
| Wire transfers | RBI para 74 | Cross border wires, and domestic wires from account holders, carry originator and beneficiary data; domestic wires of ₹50,000 and above from non account holders carry it too. | Payment screening screens originator and beneficiary through the API as each transfer runs. |
| Record keeping | PMLA s. 12(3), (4); Rule 10; RBI para 50 | Transaction records 5 years from the transaction; identity records, account files and business correspondence 5 years after the account closes or the relationship ends, whichever is later. | Every screening search is logged with the searcher, the query, the time and the result, a no match result included. |
| Confidentiality and group programs | PMLA ss. 12(2), 14; Rules 3A, 8(6) | Keep reports and records confidential; groups run group wide programs with safeguards against tipping off; s. 14 protects the entity, its directors and employees from civil or criminal proceedings for furnishing information, save as s. 13 provides. | A policy duty that stays with the firm. |
Which thresholds apply in 2026?
In India, 1 lakh is 100,000 rupees and 1 crore 10 million. Picture a customer who deposits ₹4 lakh in cash three times in a month. No deposit crosses ₹10 lakh, but if the three are integrally connected, the ₹12 lakh series falls under Rule 3(1)(B) and goes into the next CTR. For a company client, the beneficial owner line sits at more than 10 percent of shares, capital or profits (Rule 9(3)(a)).
| Line | Amount | Basis (in force, November 2026) |
|---|---|---|
| Cash transaction report | Cash above ₹10 lakh | Rule 3(1)(A) |
| Connected cash | Integrally connected series under ₹10 lakh each, above ₹10 lakh in a month | Rule 3(1)(B) |
| Non profit receipts | Above ₹10 lakh | Rule 3(1)(BA) |
| Cross border wire report | Above ₹5 lakh, origin or destination in India | Rule 3(1)(E) |
| Immovable property | ₹50 lakh or more, registered by the reporting entity, quarterly | Rules 3(1)(F), 8(3) |
| Due diligence on occasional transactions | ₹50,000 or more, single or apparently connected | Rule 9(1) |
| Beneficial owner | Above 10% (company, partnership); above 15% (unincorporated body); 10% or more (trust beneficiaries) | Rule 9(3) |
| Domestic wire data, non account holders | ₹50,000 and above | RBI para 74(1)(iv) |
| Aadhaar OTP eKYC accounts at commercial banks | Balance up to ₹1 lakh; credits up to ₹2 lakh a financial year; term loans up to ₹60,000 a year; full CDD within one year | RBI para 25(3) to (7) |
How fast must a suspicious transaction report reach FIU-IND?
Rule 8(2) sets no number of days: the Principal Officer files "promptly" once "satisfied that the transaction is suspicious". SEBI's intermediaries have 7 days from arriving at that conclusion (para 74(ii)).
Picture a broker's analyst who flags trades on a Monday; the Principal Officer concludes on the Wednesday that they are suspicious. Under SEBI's circular the suspicious transaction report is due by the following Wednesday, while a bank under Rule 8(2) alone files promptly. Both clocks run from the conclusion. The case file should record the alert date and the conclusion date.
What are the penalties for AML noncompliance in India?
| Breach | Basis (in force, November 2026) | Ceiling |
|---|---|---|
| Money laundering | PMLA s. 4 | Rigorous imprisonment of 3 to 7 years and a fine with no cap; up to 10 years where the proceeds relate to an offense under the Narcotic Drugs and Psychotropic Substances Act, 1985 (Part A, paragraph 2 of the Schedule) |
| Reporting entity duties | PMLA s. 13(1A), (2) | Without prejudice to other action: a written warning, directions, periodic reports, or a penalty of ₹10,000 to ₹1 lakh for each failure on the entity, its Designated Director or any employee; the Director may also order an audit by a panel accountant |
| Late or misreported reports | Rule 8(4) | Each day of delay a separate violation |
| Contravention by a company | PMLA s. 70 | Every person in charge of the business liable, unless they prove no knowledge or all due diligence; a director or officer whose consent, connivance or neglect is proved is liable too |
| False information causing an arrest or search | PMLA s. 63(1) | Given wilfully and maliciously: up to 2 years or ₹50,000, or both |
| Refusing to answer, sign or attend a summons | PMLA s. 63(2) | ₹500 to ₹10,000 for each default |
| Proceeds of crime | PMLA ss. 5(1), 8(5) | Provisional attachment for up to 180 days from the order, where the officer has reason to believe, recorded in writing, that a person holds proceeds of crime likely to be concealed or transferred so as to frustrate confiscation (s. 5(1) and its provisos); confiscation if the Special Court finds laundering at the end of trial |
Two tracks run side by side. The Director of FIU-IND enforces the reporting entity duties under s. 13, and each failure counts on its own. The ED investigates laundering itself, and Special Courts try it (s. 44). Section 4 once capped the fine at ₹5 lakh; Act 2 of 2013 removed the cap from 15 February 2013.
Which firms has FIU-IND fined since 2024?
Union Bank of India's order of 1 October 2024 is typical. At its Hill Road branch in Mumbai, an NBFC and entities sharing a registered address and beneficial owners moved funds in circles. Alerts were "closed with minimal justification", and the bank filed one STR. FIU-IND fined it ₹54 lakh. It cites rules including 3(1)(D), 7(3), 8(2) and 9(12) and tells the bank to reassess monitoring where alerts on an account are closed "in a cursory manner".
The table holds ten of the 20 compliance orders dated 2024 and 2025. The same findings recur across them: alerts closed without analysis, STRs not filed, registration skipped. Nine of the ten add directions, some with a 90 day or three month deadline.
| Date | Entity | Outcome | Main findings |
|---|---|---|---|
| 1 March 2024 | Paytm Payments Bank | ₹5.49 crore | Payout accounts used by gambling and fraud businesses; reliance on a non compliant third party for KYC; no STRs on 34 beneficiary accounts |
| 3 June 2024 | Axis Bank | ₹1.6625 crore | No STRs on a fraudulent account opened in the National Security Guard's name; alerts closed without investigation; authority to act not verified (Rules 3(1)(D), 7(3), 8(2), 9(1)(a), 9(10), 9(12)(i)) |
| 19 June 2024 | Binance | ₹18.82 crore | Unregistered VDA service provider serving Indian clients; Rules 7(1), 3(1)(D), 7(3), 8(2) |
| 1 October 2024 | Union Bank of India | ₹54 lakh | One STR on circular transfers; alerts closed with minimal justification |
| 31 December 2024 | Bonanza Portfolio | ₹19.40 lakh | STRs not filed on alerted accounts; SEBI orders against clients not used in monitoring; ongoing due diligence (Rules 3(1)(D), 8(2), 9(12)) |
| 31 January 2025 | Bybit Fintech Limited | ₹9.27 crore | Unregistered VDA service provider; Rules 3(1)(D), 7(1), 7(2), 7(3), 8(2), 8(4) |
| 6 March 2025 | Coinbase India | Warning (s. 13(2)(a)) and directions | Obligations not met in time; cooperation weighed; operations in India ceased |
| 8 April 2025 | Union Bank of India | ₹37 lakh | Section 12 with Rules 3, 7 and 9, on a notice of 6 November 2020 |
| 22 and 30 December 2025 | Rajgurunagar Sahakari Bank; The Gandhinagar Nagarik Cooperative Bank | Warnings, directions, three months to comply | Rajgurunagar: cash reports and internal mechanism (Rules 3(1)(A), (B), 7(2), 7(3), 8(1)); Gandhinagar: no effective STR mechanism (Rules 3(1)(D), 7(2), 7(3), 8(2)), told to form a dedicated AML team |
Which high profile money laundering cases show how the ED works?
The ED's statistics give the scale as of 31 March 2026: 8,851 enforcement case information reports, 3,501 provisional attachment orders worth ₹236,016.61 crore, convictions in 56 of 60 completed trials and ₹63,142.65 crore restituted to victims and legitimate claimants. The FATF's 2024 evaluation places India's main laundering risks in fraud, cyber enabled fraud included, corruption and drug trafficking.
The ED's Guwahati office provisionally attached ₹2.12 crore on 7 October 2026 in 43 accounts at six banks after a fake "digital arrest" of a senior citizen, who had paid ₹2.13 crore in 19 transfers. The money passed through layers of mule accounts, then left as cash, digital currency or gateway payments.
Is India on any FATF or international AML watchlist?
No. India has been a FATF member since 2010, and FIU-IND works with other FIUs through the Egmont Group. The FATF, the Asia/Pacific Group on Money Laundering (APG) and the Eurasian Group (EAG) published their joint mutual evaluation of India on 19 September 2024 and placed it in regular follow up, with a report back to the Plenary in three years.
India rated Compliant on 11 Recommendations, Largely compliant on 26 and Partially compliant on 3: R.8 (non profit organizations), R.12 (politically exposed persons) and R.28 (supervision of designated businesses). Six of 11 effectiveness outcomes are Substantial and 5 Moderate. The evaluators flagged that domestic PEPs are not covered, and that measures and supervision for designated businesses and virtual asset service providers are at an early stage.
India was not on the FATF's gray list of 19 June 2026. FinCEN's release after the plenary of 30 October 2026 lists four removals: Monaco, Bulgaria, the Democratic Republic of the Congo and Côte d'Ivoire. It names no addition. The call for action list stays at Iran, the DPRK and Burma.
How do AML solutions for India cover screening and monitoring?
Picture a payment aggregator (illustrative) with the para 13 duties above and a Rule 7(3) mechanism to detect what Rule 3 makes it report.
On complead, client screening and ongoing monitoring logs every merchant search with its result, a no match included, and each name is screened among 3,500+ sanctions, PEP and watchlists from 220+ jurisdictions, refreshed every 15 minutes.
In transaction monitoring, those Rule 3 lines and a business profile check run as rules built without code, backtested on 30, 60 or 90 days of history and scoped to one merchant segment. The RBI's commercial bank Directions invite banks to consider "artificial intelligence and machine learning (AI and ML) technologies to support effective monitoring" (para 40). Agents work the routine alerts to a close and attach the evidence, the narrative and the work log. The Principal Officer decides the rest and files on FINnet 2.0, and the case records who decided.
What were the recent updates to AML in India in 2025 and 2026?
From the regulators' own texts:
- 8 April 2025. FIU-IND fines Union Bank of India again, ₹37 lakh.
- 15 September 2025. The RBI issues its Payment Aggregator Directions, with merchant due diligence in para 13.
- 28 November 2025. The RBI issues ten KYC Directions by entity type, from commercial banks to asset reconstruction companies.
- 22 and 30 December 2025. FIU-IND warns two cooperative banks, with three months to comply.
- 18 September 2026. An amendment on certified copies for non resident customers reaches the commercial bank text.
- 30 September 2026. FIU-IND lists 3,113 NBFCs not registered on FINnet 2.0.
- 30 October 2026. FinCEN's note on the FATF plenary lists four gray list removals and no addition.
Next, India reports back to the FATF Plenary three years after its 2024 evaluation.
The next question is the KYC file itself, meaning the documents and verification routes a reporting entity may accept, and the India section of KYC requirements by country answers it.
What the 2026 PDF adds. The guide itself is all here, free to read. Every legal line on it was read on 4 November 2026 in FIU-IND's consolidated PMLA and Rules, the RBI, SEBI and IRDAI texts and the orders themselves. The PDF, requested through the form beside this page, adds four working templates: an STR decision log (alert, Principal Officer review, date satisfied, date filed), a monthly report calendar for the 15th, a beneficial owner worksheet at 10 and 15 percent and a KYC update planner for the 2, 8 and 10 year cycles.
