Skip to content

Admin Workflow

Every KYC (Know Your Customer) application that flows through the system must pass a dual review before any data is submitted to regulators, exchanges, or depositories. This dual review is called the “maker-checker” process — a concept borrowed from banking operations where no single person can both initiate and approve a transaction. In our context, the “maker” is often the system itself (automatically verifying data against thresholds), and the “checker” is a human supervisor who gives the final sign-off. Think of it as the quality control station on the assembly line: the maker inspects each item against a checklist, and the checker does a final spot-check before the item ships. This page explains when applications sail through automatically, when they get flagged for human review, and what the checker is ultimately responsible for.

The workflow has three tiers: automated approval (the majority of cases), manual review by operations staff (the maker), and final sign-off by a supervisor (the checker). Let us walk through each.

StepRoleActionOutcome
10Maker (System)Auto-verify all checks against thresholds. If ALL pass → auto-approve.Auto-approved (80-85% of cases)
10Maker (Ops)If any check is marginal (e.g., name match 70-89%), manually review flagged fields.Approved / Escalated / Rejected
11Checker (Supervisor)Review maker’s decision. Final approval or rejection. Mandatory — no batch processing without it.Checker Approved → batch pipelines fire
EscComplianceAML (Anti-Money Laundering) HIGH risk, PEP (Politically Exposed Person) matches, sanctions hits escalated from maker. Enhanced CDD (Customer Due Diligence) required.Approved with conditions / Rejected

In plain English: Step 10 is where the system (or an operations team member) reviews the application. Step 11 is where a supervisor gives the final green light. Only after Step 11 does the batch pipeline start submitting data to KRAs, exchanges, and depositories.

The key to keeping the process efficient is the auto-approve criteria. The better your upstream data capture and verification, the higher the percentage of applications that pass through without human involvement.

Application is auto-approved if ALL conditions are met:

CheckThresholdSource
PAN (Permanent Account Number) status= E (valid)Decentro PAN API (Application Programming Interface)
PAN-Aadhaar linked= YDecentro PAN API
PAN name vs DigiLocker name>= 90% matchInternal name matcher
Penny drop name match>= 80%Decentro Penny Drop
Face match score>= 85%HyperVerge
Liveness detection= PassHyperVerge
AML risk= LOWTrackWizz
PEP match= NoneTrackWizz
Sanctions match= NoneTrackWizz

In plain English: if the customer’s PAN is valid and linked to Aadhaar, their name matches across documents, their selfie matches their photo ID, they pass liveness detection, and they have no AML/PEP/sanctions flags, the system auto-approves without any human touching it.

When an application does not meet all the auto-approve thresholds, it gets flagged for manual review. The triggers below define exactly which checks can be marginal (and therefore resolvable by a human reviewer) versus which ones must be escalated to compliance.

TriggerConditionAction Required
Name mismatchPAN vs DigiLocker match 70-89%Verify names visually, check for initials/abbreviations
Penny drop marginalName match 60-79%Check bank name vs Aadhaar name
Face match marginalScore 70-84%Review selfie quality, request retake if needed
AML MEDIUM riskRisk score above LOW thresholdReview hit details, confirm false positive or escalate
PEP declaredUser self-declared PEP = YesEnhanced CDD: verify position, source of wealth
Income mismatchDeclared vs verified income diverge > 50%Review income proof documents

In plain English: most manual reviews are caused by name discrepancies between documents. A 75% name match between PAN and DigiLocker does not necessarily mean fraud — it often just means “Rajesh K” on one document and “Rajesh Kumar” on another.

Once the maker (whether automated or human) has made a decision, the checker performs the final review.

Checker ActionWhenResult
ApproveMaker auto-approved or manually approvedBatch pipelines fire (KRA, CKYC, UCC, BO)
RejectFraud indicators, compliance red flagsApplication rejected, client notified
Send BackMissing information, unclear documentationReturns to maker for re-review

In plain English: the checker is the last human gate. Once they approve, the system immediately begins submitting the customer’s data to all the agencies described in the Batch Pipeline page. If they reject, the customer is notified and the application is closed. If they send it back, it returns to the maker queue for additional review.