Skip to content

User Journey

This section documents the KYC (Know Your Customer) onboarding journey mandated by SEBI, the exchanges (NSE, BSE, MCX), and the depositories (CDSL, NSDL). The journey is structured as 9 sequential screens, each mapping to specific regulatory requirements. Every field collected traces to a compliance obligation under SEBI KYC Master Circular (SEBI/HO/MIRSD/MIRSD-SEC-2/P/CIR/2023/168), PMLA requirements, or exchange/depository registration specifications.

This section walks you through every screen the customer sees, what the system does behind the scenes at each step, and why the screens are ordered the way they are. Read these pages in sequence. By the end, you will have a complete mental model of the onboarding pipeline.

Each screen has a single clear purpose. Every field maps directly to a regulatory requirement or a downstream system dependency.

ScreenTitleWhat Happens
1. Mobile RegistrationMobile / Email RegistrationUser enters mobile, OTP verified. Device risk assessment fires async.
2. PAN + DOBPAN + Date of BirthUser enters PAN + DOB. 4 async API calls fire: PAN Verify, KRA Lookup, CKYC Search, AML Screen.
3. DigiLocker ConsentDigiLocker Consent (Redirect)Redirect to DigiLocker. Harvests identity fields. IPV/VIPV exempted per SEBI circular.
4. Confirm IdentityConfirm IdentityPre-filled from DigiLocker + KRA + CKYC. User enters email only.
5. Bank AccountBank AccountUser enters account, IFSC, type. Penny Drop fires async.
6. Trading PreferencesTrading PreferencesSegment toggles. Income proof if F&O/Commodity selected per SEBI requirements.
7. NominationsNominationsUp to 10 nominees (SEBI Jan 2025). Opt-out requires video declaration.
8. Declarations GateDeclarations + Blocking GateFATCA, PEP, T&C checkboxes. Blocking gate: all async checks must pass.
9. Review + eSignReview + Face Match + e-SignReview application, selfie face match, Aadhaar OTP e-Sign. Done.

The user provides a minimal set of fields across all 9 screens. Remaining fields are pre-filled from DigiLocker (Government of India’s digital document platform), KRA (KYC Registration Agency), CKYC (Central KYC registry), or IFSC lookup. The architecture maximises pre-fill from authoritative government and regulatory sources per the DigiLocker-first approach permitted under SEBI circular SEBI/HO/MIRSD/DOP/CIR/P/2020/73.

User-typed fields: Mobile, PAN (Permanent Account Number), DOB (Date of Birth), Email, Bank Account Number, IFSC, Account Type, Segment Toggles, Nominee details (if adding), Declaration checkboxes.

The following regulatory mandates drive the screen sequencing and data collection:

  • Mobile OTP verification — required for Aadhaar-based authentication (eKYC and eSign) and as the primary communication channel for KRA and exchange notifications
  • DigiLocker-based Aadhaar eKYC — provides IPV exemption per SEBI circular SEBI/HO/MIRSD/DOP/CIR/P/2020/73, eliminating the need for video In-Person Verification
  • Parallel verification — PAN verification against NSDL/Protean, KRA lookup, CKYC search (CERSAI), and AML/PEP screening per SEBI AML/CFT guidelines must all complete before account activation
  • Single eSign — one Aadhaar OTP signature on the complete application PDF, legally valid under IT Act 2000 Section 3A
  • Blocking gate — all verification results must be evaluated before eSign per SEBI KYC norms; no account shall be activated with unresolved verification failures

For vendor implementation options, see Vendor Integrations.