Skip to content
KYC Onboarding Spec by Rakesh Waghela

CERSAI / CKYC Circulars

Why this page is structured this way: All in-window entries are listed descending by date so the most recent regulatory state is the first thing a reader sees. Use Cmd-F / Ctrl-F for ID-based lookup. Cross-references from the rest of the site point at anchors on this page.

TL;DR

Section titled “TL;DR”
  • 20 circulars indexed in this issuer’s section.
  • 9 issued in 2025 or later.
  • 1 entries flagged [unknown — verify] in at least one field.
  • All entries trace to a primary issuer URL (or Wayback fallback) where research could verify the source.
  • AI-generated; read the linked PDF before acting on any provision.

Conceptual overview

Section titled “Conceptual overview”

This page is the complete listing of CERSAI / CKYC circulars in the project’s 2020–2026 sweep window. Each entry contains the verbatim circular ID, issue date, in-force date, status (in-force / superseded / withdrawn), applicable entity types, impact-area tags, a 2–4 sentence summary traceable to clauses, and the primary URL. Where the primary URL could not be re-fetched, an archive URL is provided in its place.

Entries (descending date)

Section titled “Entries (descending date)”

CKYC/2026/08

Section titled “CKYC/2026/08”

Notes that CKYCRR holds approximately 112 crore digitised CKYC records and that legacy-data compliance among REs remains a substantive concern (records held in silos prior to the framework becoming operative on 01-01-2017; CKYC records generated by one RE not linked by another; identifier mismatches). Prescribes a multi-parameter parallel-search workflow (Mobile, PAN, last-4 of Aadhaar+Name+DOB+Gender, Voter ID, DL, Passport, NREGA, NPR, CKYC reference ID) before resorting to fresh CKYC upload. Recommends SFTP bulk-search for REs not yet API-integrated, with migration to real-time API “at the earliest.” Re-iterates the sequential search → download → fresh-upload process to achieve CKYC compliance for legacy customers.

CKYC/2025/18

Section titled “CKYC/2025/18”

Introduces a new feature in CKYCRR enabling REs to flag KYC records of deceased customers via the CKYCRR Update process. On receipt of demise confirmation, the RE may flag the record as “Deceased” along with date of demise, documentary evidence and remarks in the “Other Details/Deceased Information” section of the “Update KYC – Individual” screen. Once flagged, all linked REs receive update notifications; flagged records will not be available for download but will remain retrievable through search responses with an ‘X’ prefix preceding the KYC identifier. Bulk Update file structure v1.3 is referenced. Effective December 19, 2025, 8 pm.

CKYC Search Communique (December 2025)

Section titled “CKYC Search Communique (December 2025)”

Operational guidance addressing complaints that REs were unable to retrieve CKYC records via search despite confirmed-match results at upload. Encourages multi-parameter CKYC search at the front end (single click triggering multiple API requests, with results consolidated client-side) and bulk search via SFTP for REs not yet integrated with APIs. Notes published CKYC API performance characteristics: average search response 0.2 seconds; a single IP address may send up to 20 requests per second; search response returns Name, Father Name, Age, Photo, list of OVDs, last-updated and create dates. Document carries no formal communique number on the header but is dated 03 December 2025.

CKYC/2025/16

Section titled “CKYC/2025/16”
  • date_issued: 2025-11-20
  • issuer: CERSAI
  • title: “Data Hygiene of Central KYC Records Registry (CKYCRR)”
  • applies_to: all-intermediaries
  • in_force_date: immediate
  • status: in-force
  • impact_areas: onboarding, kyc-modification, file-format, surveillance, system-audit, reporting
  • primary_url: https://www.ckycindia.in/ckyc/assets/doc/Data_Hygiene_of_CKYCRR.pdf

Consolidated reiteration of data-quality and hygiene parameters governing KYC uploads to CKYCRR. Reproduces the operating guidelines and technical specifications: mandatory and optional fields, permitted OVDs/e-documents, file structures, field-level validations for demographic data and identifiers, document scan resolution 150-200 DPI, photograph 200x230 pixels and max 100kb, file size limits 350kb (individual) / 5MB (legal entity), permitted file formats (.tif, .tiff, .pdf, .jpeg, .jpg), and PAN-structure validations. Reaffirms use of master lists (Pin Code, District, State, Country) for input standardisation.

CKYC/2025/11

Section titled “CKYC/2025/11”

Pursuant to the Hon’ble Supreme Court order dated April 30, 2025 on accessibility of digital KYC to differently abled persons, CKYCRR introduces four new fields under Personal Details for individuals and related persons of LE records: Differently Abled Status, Type of Impairment, Percentage of Impairment, and UDID Number. Changes impact Upload, Update and Download across screen, bulk file and API; bulk file structure version is upgraded from v1.2 to v1.3. Updated Download API v1.3 is referenced. Effective September 30, 2025, 8 pm.

CKYC/2025/10

Section titled “CKYC/2025/10”

Following complaints of unauthorised downloads and multiple update transactions traced to third-party-vendor technical glitches, CERSAI cautions that third-party vendors are technical service providers engaged by an RE “at their own risk and responsibility” and that no operational lapse will absolve the RE of its responsibility. REs availing third-party services are required to (1) exercise enhanced due-diligence and oversight in line with regulatory outsourcing guidelines, (2) review internal processes and access controls related to CKYC data, and (3) ensure compliance with information-security and data-access guidelines.

CKYC/2025/03_Revised

Section titled “CKYC/2025/03_Revised”

Adds a “Residential Status” field (Resident Individual / Non-Resident Indian / Foreign National / Person of Indian Origin) under Personal Details for individuals in CKYCRR (including related persons of Individual and Legal Entity records). For Foreign Nationals, allows “documents issued by Government departments of foreign jurisdictions and letters issued by the Foreign Embassy or Mission in India” as proof of address where the OVD does not contain address details, provided proof of identity is Passport, Driving Licence or Voter Identity Card. Changes impact Upload, Update and Download flows across screen, bulk file and API. Effective May 30, 2025, 8 pm.

CKYC/2025/04

Section titled “CKYC/2025/04”

Reminder to CKYC/2025/02 (April 04, 2025). Confirms CKYC Search API v1.3 and Download API v1.3 went live on May 09, 2025, and that v1.2 of both APIs will be decommissioned across test and production environments from May 31, 2025, 8 pm onwards. REs are advised to complete system readiness within the stipulated timeframe.

CKYC/2025/02

Section titled “CKYC/2025/02”

For each individual-record download request from REs, CKYCRR will trigger an OTP to the mobile number registered in the KYC record; the response is provided only after OTP validation. Upgrades CKYC Search API and CKYC Download API to v1.3 (SHA upgraded to SHA2; Download API gains an OTP submit/validate endpoint). Effective May 09, 2025, 8 pm. Search API v1.2 and Download API v1.2 disabled in production from May 31, 2025, 8 pm.

CKYC/2024/08

Section titled “CKYC/2024/08”

In continuation to CKYC/2024/04 (October 17, 2024) and CKYC/2024/06 (December 04, 2024), defers the go-live date for masking of the KYC Identifier from December 16, 2024 post 8:00 PM to January 20, 2025 post 8:00 PM. Communique states “no further extension in timelines would be considered.” Applies to all entities registered with CKYCRR.

CKYC/2024/06

Section titled “CKYC/2024/06”
  • date_issued: 2024-12-04
  • issuer: CERSAI
  • title: “Release Plan: Masking KYC Identifier in CKYCRR”
  • applies_to: all-intermediaries
  • in_force_date: 2025-01-20
  • status: superseded
  • superseded_by: CKYC/2024/08
  • impact_areas: onboarding, kyc-modification, file-format, cyber-security
  • primary_url: [unknown — verify]

Release-plan communique referenced in subsequent CKYCRR notifications (CKYC/2024/08 and CKYC/2024/04). Confirmed in CKYC/2024/08 as dated December 4, 2024 and as setting the original go-live for KYC Identifier masking at December 16, 2024 post 8:00 PM. Subsequently deferred via CKYC/2024/08. Direct PDF URL on ckycindia.in could not be located through public search; see OPEN_QUESTIONS.

CKYC/2024/04

Section titled “CKYC/2024/04”

Introduces masking of the KYC Identifier and a new CKYC reference ID. The KYC Identifier shall be available to REs only on successful download from CKYCRR using an authentication factor; in search responses and confirmed-match responses during upload, the KYC identifier is masked and a unique CKYC reference ID is returned. Changes impact Search, Download and Upload (Stage 1 / periodic response) across screen, bulk file and API. Search API v1.2 and Download API v1.2 and Bulk File Structure v1.2 are referenced. Original production date of December 15, 2024 was later deferred to January 20, 2025 by CKYC/2024/08.

CKYC/NOTIF/2024/01

Section titled “CKYC/NOTIF/2024/01”

Introduces a Bulk File Update facility on the CKYCRR web application and via SFTP to allow REs to update multiple individual and legal entity KYC records simultaneously. Where an RE is linked to a record (through upload or download), updates made by another linked institution are communicated via an “Unsolicited Updates” report available in Logs & Reports and the SFTP response folder. Annexure 1 lists the bulk update file structure and sample files in the Downloads section of the CKYC website.

CKYC/2023/04

Section titled “CKYC/2023/04”

In view of the Digital Personal Data Protection Act 2023, all reporting entities registered with CKYCR are directed to obtain explicit customer consent for downloading CKYC records from the Registry. CERSAI observed that the consent clause was missing from many account-opening forms and CKYC upload/update templates and requires its inclusion.

CERSAI/2023-24

Section titled “CERSAI/2023-24”

Signed by the Central Registrar and MD & CEO, this advisory standardises scanning of photographs and OVDs uploaded to CKYCR: 150-200 DPI resolution; passport-size colour photograph, 200x230 pixels, max 100kb; max file size 350kb (individual) / 5MB (legal entity); permitted formats .tif, .tiff, .pdf, .jpeg, .jpg. Issued to nodal officers of reporting entities to curb rejections and ensure image quality.

CKYC/2022/03

Section titled “CKYC/2022/03”

Cyber-security advisory citing pandemic-era remote-work risks: social engineering, ransomware, phishing. Prescribes protective measures including HTTPS validation, password hygiene, avoidance of unknown links/attachments and untrusted apps, restricted Wi-Fi exposure, and review of app permissions. Applies to all entities registered with CKYCRR.

CKYC/2022/01

Section titled “CKYC/2022/01”

In terms of gazette notification CG-DL-E-04012022-232403 dated January 04, 2022 by the Department of Revenue, sub-rule (1A) of Rule 9 of the PML Rules, 2005 shall not apply to Foreign Portfolio Investors. Accordingly, reporting entities (including brokers handling FPI accounts) need not upload FPI-related KYC records to CKYCRR.

CKYC/2021/04

Section titled “CKYC/2021/04”

Notifies replacement of the CERSAI public key used in CKYCR API services (upload, search, download). The new public key was made available in the test environment on December 10, 2021 and went live in production on January 07, 2022 post 8:00 pm. Reporting entities were required to update their systems to use the new key.

CKYC/2020/11

Section titled “CKYC/2020/11”

Extends CKYCR to Legal Entities (LEs), pursuant to Rule 9(1A) of the PML Rules, with effective go-live in production on April 02, 2021. Reporting entities are required to upload KYC data of LE accounts to CKYCR per their respective regulator’s directions. Annexure 1 lists the LE KYC template, bulk file structures, Search API and Download API references (same files as the revised individual template).

CKYC/2020/04

Section titled “CKYC/2020/04”

Confirms the go-live date of October 3, 2020 for the revised Individual KYC template (KYC_Template_Individual_2.0 with Annexure A1_2.0) first notified under Communique CKYC/2020/01 dated January 10, 2020. The revised template, file structures, and API documents were available in the CKYCR test environment from January 28, 2020. Communique states “no further extension of time will be granted” and instructs all entities registered with CKYCR to prepare systems by the go-live date.

Practical notes

Section titled “Practical notes”
  • [gotcha] Circular IDs are case-sensitive and the issuer’s exact punctuation matters when looking them up on the official site.
  • [industry practice] Most ops teams subscribe to the issuer’s email distribution list rather than scraping the site — leads to more reliable real-time tracking.
  • [risk trade-off] Some entries are marked [unknown — verify] where the agent could not re-fetch the primary URL or the document used informal numbering; treat those as leads, not citations.

Verified through

Section titled “Verified through”

2026-05-14

AI-generated and not legal advice. See the project README for the full disclaimer.

Built by Rakesh Waghela — Technology & Product Consultant

LinkedIn @webiyo Topmate

Available for consulting and collaboration on technology, product strategy, and system architecture. Connect on LinkedIn.

· We respect your privacy and comply with GDPR

Disclaimer: This documentation was generated using Claude Code, an AI-powered LLM by Anthropic, as a research and capability estimation exercise. AI models can hallucinate — information here may be inaccurate, incomplete, or outdated. Any resemblance to the products or documentation of any specific vendor or organization is purely coincidental and unintended. This project is not directly inspired by any particular product, vendor, or proprietary system, and no plagiarism is intended. All content is based on publicly available information. This is not legal, financial, or compliance advice.