Skip to content

TrackWizz

TrackWizz is a specialized AML (Anti-Money Laundering), PEP (Politically Exposed Person), and sanctions screening platform built for Indian capital markets participants. Under SEBI’s KYC norms and the PMLA (Prevention of Money Laundering Act, 2002), every stock broker must screen prospective clients against sanctions lists, PEP databases, and adverse media sources before activating a trading account — and must continue doing so on an ongoing basis throughout the client relationship.

AML screening is not a one-time check. SEBI requires ongoing monitoring with periodic rescreening at intervals determined by the client’s risk classification. TrackWizz provides access to over 120 global and Indian watchlists, including sanctions lists from the UN, OFAC (Office of Foreign Assets Control), the EU, and India’s UAPA (Unlawful Activities Prevention Act), as well as PEP databases covering both domestic and international politically exposed persons, and adverse media monitoring powered by a Refinitiv World-Check partnership. A positive hit does not automatically block account opening — it triggers Enhanced Due Diligence (EDD) by the compliance team, who must investigate and document their findings before a decision is made.

This page covers TrackWizz’s API specifications for screening operations, the breadth of its database coverage, the hit resolution and alert management workflows, risk scoring methodology, PMLA compliance tooling, and how the screening gate integrates into the maker-checker admin pipeline of our onboarding system.

  1. Overview
  2. Screening Databases (120+ Watchlists)
  3. Screening API
  4. PMLA Compliance
  5. Ongoing Monitoring
  6. Risk Scoring
  7. Non-Individual Entity Screening
  8. SEBI AML Framework
  9. Integration Details
  10. Reporting
  11. Pricing
  12. Edge Cases
  13. Alternatives Comparison
  14. Integration with Our System

TrackWizz is an Indian AML/CFT (Anti-Money Laundering / Combating the Financing of Terrorism) compliance platform specialized for capital markets participants. It provides automated screening of customers and entities against 120+ global and India-specific watchlists, with ongoing monitoring capabilities.

AttributeDetails
SpecializationCapital markets AML compliance (brokers, AMCs, banks, NBFCs)
Watchlists120+ global and Indian regulatory lists
Matching EngineFuzzy matching with Hindi-English transliteration, aliases, initials
PEP Coverage95+ global PEP databases including India-specific classifications
Adverse MediaRefinitiv World-Check partnership for news/media screening
DeploymentOn-premise or Cloud SaaS
API TypeREST / JSON
AuthenticationBearer token
PMLA ComplianceFull support: CDD, EDD, STR/CTR filing templates
Ongoing MonitoringReal-time alerts via webhook when customers appear on new lists
Regulatory FocusSEBI, RBI, FATF, PMLA, UAPA - designed for Indian regulated entities

Why TrackWizz for Indian Broking:

  • Deep coverage of India-specific lists (SEBI debarred, RBI defaulters, MHA banned orgs, UAPA, NIA, ED)
  • Fuzzy matching handles Indian name variations and Hindi-English transliterations
  • On-premise deployment option for firms with data residency requirements
  • Pre-built STR/CTR templates for FIU-IND filing
  • Used by brokers, AMCs, and banks for PMLA compliance

ListSourceUpdate Frequency
OFAC SDN (Specially Designated Nationals)US Treasury DepartmentReal-time (within hours of publication)
UN Security Council Consolidated ListUnited NationsReal-time
EU Sanctions ListEuropean External Action ServiceReal-time
HM Treasury Sanctions ListUK GovernmentReal-time
FATF High-Risk JurisdictionsFinancial Action Task ForceUpdated per FATF plenary (3x/year)
OFAC Consolidated Non-SDNUS TreasuryReal-time
Australian DFAT SanctionsAustralia Dept of Foreign AffairsDaily
Canadian OSFI ListOffice of Superintendent of Financial InstitutionsDaily
ListSourceRelevanceUpdate Frequency
SEBI Debarred EntitiesSEBI orders databasePersons/entities barred from securities marketDaily (as SEBI publishes orders)
RBI Defaulters ListReserve Bank of IndiaWilful defaulters, fraud accountsQuarterly (RBI publishes periodically)
UAPA Designated EntitiesUnlawful Activities (Prevention) Act, MHATerrorist individuals and organizationsReal-time (gazette notifications)
MHA Banned OrganizationsMinistry of Home AffairsBanned organizations under UAPAAs notified
NIA ListsNational Investigation AgencyTerror-accused, chargesheeted personsAs published
Enforcement Directorate OrdersED, Ministry of FinancePMLA attachment/prosecution ordersDaily
IRDA BlacklistInsurance Regulatory and Development AuthorityBlacklisted insurance agents/entitiesPeriodic
NHB DefaultersNational Housing BankHousing finance defaultersPeriodic
NCLT OrdersNational Company Law TribunalCompanies under insolvency/liquidationAs published
CBI Most WantedCentral Bureau of InvestigationFugitives, absconding accusedAs updated

2.3 PEP (Politically Exposed Person) Databases

Section titled “2.3 PEP (Politically Exposed Person) Databases”

TrackWizz screens against 95+ global PEP databases with particular depth for Indian PEPs.

Indian PEP Classification:

PEP CategoryExamplesRisk Level
Executive (Central)President, PM, Cabinet Ministers, Ministers of StateVery High
Executive (State)Chief Ministers, State Ministers, GovernorsVery High
Legislative (Central)Members of Parliament (Lok Sabha + Rajya Sabha)High
Legislative (State)Members of Legislative Assembly (MLAs), MLCsHigh
JudiciarySupreme Court / High Court JudgesHigh
Civil ServicesIAS, IPS, IFS officers (Joint Secretary and above)High
Regulatory BodiesSEBI Board members, RBI Board/Deputy GovernorsHigh
PSU HeadsCMD/MD of Central PSUs (Navratna, Maharatna)Medium-High
DefenceService Chiefs, Lt. General and aboveHigh
DiplomaticAmbassadors, High CommissionersMedium-High
Local GovernmentMayors, Municipal Commissioners (large cities)Medium

PEP Family Members (SEBI requires screening):

RelationshipScreening Required
SpouseMandatory
Children (including adult children)Mandatory
ParentsMandatory
SiblingsRecommended
In-laws (parents of spouse)Recommended
Close associates (known business partners)Recommended
SourceCoverage
Refinitiv World-CheckPartnership for global adverse media screening
News/Media ScreeningNegative coverage in major Indian and international media
Court RecordsPublished judgments involving financial crime
Regulatory ActionsPublished enforcement actions by SEBI, RBI, ED, CBI

Coverage includes: fraud, corruption, bribery, money laundering, terrorist financing, tax evasion, insider trading, market manipulation, drug trafficking, human trafficking, organized crime, cybercrime, environmental crime.

List CategoryUpdate Frequency
International sanctions (OFAC, UN, EU)Real-time / within hours
SEBI debarred entitiesDaily
RBI defaultersQuarterly
UAPA/MHAAs gazette-notified (real-time ingestion)
ED/NIADaily
PEP databasesWeekly refresh
Adverse mediaDaily crawl
IRDA/NHB/NCLTPeriodic (weekly-monthly)

The watchlist and PEP database coverage described above forms the foundation of every screening call. The following section details the API contracts for invoking that screening — both for individual customers during real-time onboarding and for batch operations during periodic rescreening cycles.

Endpoint: POST /api/v1/screen

Authentication: Authorization: Bearer <token>

Request:

{
"reference_id": "SCR_<timestamp>_<pan>",
"name": "RAHUL SHARMA",
"dob": "1990-01-15",
"pan": "ABCDE1234F",
"gender": "M",
"father_name": "SURESH SHARMA",
"address": "Mumbai, Maharashtra",
"nationality": "Indian",
"country_of_residence": "IN",
"screening_type": "FULL",
"callback_url": "https://kyc.broker.com/webhooks/aml"
}
FieldTypeMandatoryDescription
reference_idStringYesUnique reference for this screening request
nameStringYesFull name (as per PAN/KYC documents)
dobString (YYYY-MM-DD)YesDate of birth
panString (10 chars)YesPAN number
genderString (M/F/T)NoGender
father_nameStringNoFather’s name (improves match accuracy)
addressStringNoAddress (city, state minimum)
nationalityStringYesNationality
country_of_residenceString (ISO 3166-1 alpha-2)NoCountry code
screening_typeEnumYesFULL (all lists), SANCTIONS_ONLY, PEP_ONLY, ADVERSE_MEDIA_ONLY
callback_urlString (URL)NoWebhook URL for async results / ongoing monitoring alerts

Response (Success):

{
"status": "COMPLETED",
"screening_id": "SCR-2024-001234",
"reference_id": "SCR_1705312200_ABCDE1234F",
"risk_level": "LOW",
"overall_result": "CLEAR",
"matches": [
{
"match_id": "MTH-2024-005678",
"list_name": "SEBI_DEBARRED",
"list_category": "REGULATORY",
"match_score": 45,
"match_type": "PARTIAL_NAME",
"matched_entity": "RAHUL SHARMA",
"matched_entity_details": {
"dob": "1975-03-20",
"order_number": "SEBI/WTM/2023/xxxx",
"debarment_period": "2023-05-01 to 2028-04-30"
},
"is_false_positive": true,
"false_positive_reason": "DOB mismatch (15 years difference)"
}
],
"pep_status": "NOT_PEP",
"pep_details": null,
"sanctions_hit": false,
"sanctions_details": [],
"adverse_media_hit": false,
"adverse_media_details": [],
"screening_summary": {
"lists_screened": 124,
"total_potential_matches": 1,
"auto_dismissed": 1,
"requiring_review": 0,
"confirmed_matches": 0
},
"timestamp": "2024-01-15T10:30:00Z",
"expires_at": "2025-01-15T10:30:00Z"
}

Response (PEP Hit):

{
"status": "COMPLETED",
"screening_id": "SCR-2024-001235",
"risk_level": "HIGH",
"overall_result": "HIT",
"pep_status": "PEP_FAMILY",
"pep_details": {
"pep_type": "FAMILY_MEMBER",
"related_pep_name": "RAJESH SHARMA",
"related_pep_designation": "Member of Parliament, Lok Sabha",
"relationship": "FATHER",
"pep_category": "LEGISLATIVE_CENTRAL",
"pep_since": "2019-05-23",
"confidence": 87
},
"sanctions_hit": false,
"adverse_media_hit": false,
"matches": [],
"timestamp": "2024-01-15T10:31:00Z"
}

Response (Sanctions Hit):

{
"status": "COMPLETED",
"screening_id": "SCR-2024-001236",
"risk_level": "CRITICAL",
"overall_result": "HIT",
"pep_status": "NOT_PEP",
"sanctions_hit": true,
"sanctions_details": [
{
"list_name": "UAPA_DESIGNATED",
"match_score": 95,
"match_type": "EXACT_NAME_DOB",
"matched_entity": "RAHUL SHARMA",
"designation_date": "2023-08-15",
"gazette_notification": "S.O. 1234(E)",
"offense_type": "TERRORIST_FINANCING"
}
],
"adverse_media_hit": true,
"adverse_media_details": [
{
"source": "REFINITIV",
"headline": "NIA files chargesheet against...",
"publication_date": "2023-09-01",
"categories": ["TERRORISM", "FINANCIAL_CRIME"]
}
],
"timestamp": "2024-01-15T10:32:00Z"
}

TrackWizz uses a proprietary fuzzy matching engine optimized for Indian names.

Matching Capabilities:

Variation TypeExampleHandling
Hindi-English transliteration”Rakesh” vs “Rakesh”Phonetic matching across scripts
Name order variations”SHARMA RAHUL” vs “RAHUL SHARMA”Token-order agnostic matching
Initials”R. SHARMA” vs “RAHUL SHARMA”Initial expansion matching
Aliases”Bobby” vs “Rajesh” (known alias)Alias database cross-reference
Common misspellings”RAAKESH” vs “RAKESH”Edit-distance matching (Levenshtein)
Prefix/suffix”Dr. RAHUL SHARMA” vs “RAHUL SHARMA”Title/honorific stripping
Middle name variations”RAHUL KUMAR SHARMA” vs “RAHUL SHARMA”Partial token matching
Patronymic patterns”RAHUL S/O SURESH” vs “RAHUL SHARMA”Father-name pattern recognition

Each potential match is assigned a score from 0 to 100:

Score RangeClassificationActionAuto-Resolvable
90-100High confidence matchImmediate escalation to compliance officerNo
70-89Probable matchManual review requiredNo
50-69Partial matchLikely false positive, review recommendedConfigurable
0-49Low matchAuto-dismiss (threshold configurable)Yes (default)

Score Calculation Factors:

  • Name similarity (weighted highest)
  • Date of birth match/proximity
  • PAN match (exact = +30 points)
  • Address/geography overlap
  • Father’s name match
  • Gender match

Endpoint: POST /api/v1/screen/batch

Request:

{
"reference_id": "BATCH_2024_Q1_001",
"screening_type": "FULL",
"callback_url": "https://kyc.broker.com/webhooks/aml-batch",
"customers": [
{
"customer_id": "CUST001",
"name": "RAHUL SHARMA",
"dob": "1990-01-15",
"pan": "ABCDE1234F",
"nationality": "Indian"
},
{
"customer_id": "CUST002",
"name": "PRIYA PATEL",
"dob": "1985-06-20",
"pan": "FGHIJ5678K",
"nationality": "Indian"
}
]
}

Response (async, results delivered via webhook):

{
"batch_id": "BATCH-2024-001234",
"status": "PROCESSING",
"total_records": 2,
"estimated_completion": "2024-01-15T10:45:00Z",
"callback_url": "https://kyc.broker.com/webhooks/aml-batch"
}

Webhook Callback (delivered per-customer as completed):

{
"event": "BATCH_SCREENING_RESULT",
"batch_id": "BATCH-2024-001234",
"customer_id": "CUST001",
"screening_id": "SCR-2024-001234",
"risk_level": "LOW",
"overall_result": "CLEAR",
"pep_status": "NOT_PEP",
"sanctions_hit": false,
"adverse_media_hit": false,
"timestamp": "2024-01-15T10:35:00Z"
}

Batch Limits:

  • Maximum 1,000 records per batch request
  • For larger volumes, split into multiple batch requests
  • Batch completion: typically 5-30 minutes depending on volume
  • Useful for: periodic re-screening, annual compliance reviews, portfolio-wide checks

Screening results are only as useful as the compliance framework that governs how they are acted upon. The next section maps TrackWizz’s capabilities to the specific requirements of the PMLA and its associated rules, covering Customer Due Diligence, Enhanced Due Diligence triggers, STR/CTR filing obligations, and record retention.

TrackWizz provides tooling aligned with the Prevention of Money Laundering Act, 2002 (PMLA) and the Prevention of Money Laundering (Maintenance of Records) Rules, 2005.

4.1 CDD (Customer Due Diligence) - Standard

Section titled “4.1 CDD (Customer Due Diligence) - Standard”

Applicable to all customers at onboarding and periodically thereafter.

CDD RequirementTrackWizz Role
Verify identity of customerScreening result confirms no identity conflicts
Understand nature of business/occupationRisk scoring based on occupation input
Assess risk profileAutomated risk classification (Low/Medium/High)
Screen against sanctions/PEP listsCore screening functionality
Ongoing monitoringContinuous watchlist monitoring with alerts
Record keepingFull audit trail of all screening decisions

4.2 EDD (Enhanced Due Diligence) - Triggered

Section titled “4.2 EDD (Enhanced Due Diligence) - Triggered”

EDD is triggered when any of the following conditions are met:

EDD TriggerTrackWizz DetectionRequired Action
PEP or PEP family memberpep_status != NOT_PEPSenior management approval, source of funds verification
High-risk country (FATF grey/black list)country_of_residence in FATF listEnhanced identity verification, source of wealth documentation
Sanctions list near-matchmatch_score 70-89 on sanctions listManual review by compliance officer, document findings
Adverse media hitadverse_media_hit = trueInvestigate nature of adverse media, assess materiality
Suspicious activity patternsPost-onboarding transaction monitoringFile STR if suspicion confirmed
High-value transactionsAs per broker’s internal policy thresholdsAdditional verification, senior management review
Complex ownership structureMultiple UBO layers identifiedTrace full ownership chain, verify all UBOs

FATF High-Risk Jurisdictions (as of Feb 2026):

CategoryCountriesImpact
Black List (Call for Action)North Korea, Iran, MyanmarProhibited or extreme restrictions
Grey List (Increased Monitoring)Updated per FATF plenaryEDD mandatory, enhanced scrutiny

Filed with FIU-IND (Financial Intelligence Unit - India) when suspicious activity is identified.

STR RequirementDetails
Filing deadlineWithin 7 working days of forming suspicion
Filed withFIU-IND (https://fiuindia.gov.in)
FormatPrescribed FIU-IND electronic format
Tipping offProhibited - customer must NOT be informed about STR filing
Record retention5 years from date of STR filing
TrackWizz supportPre-formatted STR template generation, auto-population of customer data

STR Indicators (Securities Market):

  • Frequent and rapid purchase/sale with no apparent profit motive
  • Trading in shares of companies with no fundamentals
  • Sudden spike in trading activity inconsistent with customer profile
  • Frequent off-market transfers
  • Multiple accounts with structurally similar trading patterns
  • Circular trading patterns
  • Front-running indicators
CTR RequirementDetails
ThresholdCash transactions exceeding Rs. 10 lakh (in aggregate per month)
Filing deadlineWithin 15 days of the month following the transaction
Filed withFIU-IND
TrackWizz supportAutomated CTR generation for threshold breaches

Note: Cash transactions are uncommon in broking (most settlements are electronic), but CTR reporting is still required if cash is received for any reason (e.g., margin payments in cash at branch).

Record TypeMinimum RetentionAuthority
Customer identification records5 years after business relationship endsPMLA Section 12
Transaction records5 years from date of transactionPMLA Rules
STR/CTR filing records5 years from date of filingFIU-IND guidelines
AML screening results5 years after business relationship endsSEBI AML Circular
EDD documentation5 years after business relationship endsPMLA Rules
Correspondence with FIU-IND5 years from date of correspondenceFIU-IND guidelines

Note: SEBI Stock Brokers Regulations 2026 require 8-year retention for KYC records overall, which supersedes the 5-year PMLA minimum for brokers.


PMLA compliance obligations do not end at onboarding. One of the most important aspects of a broker’s AML program is ongoing monitoring — ensuring that existing clients are continuously rescreened as watchlists are updated and that any changes in a client’s risk profile are detected promptly.

Customer Risk LevelMinimum Re-ScreeningSEBI Requirement
LowAnnuallySEBI mandates minimum annual re-screening
MediumSemi-annuallyRecommended best practice
High / PEPQuarterlyRecommended best practice

TrackWizz monitors all screened customers against watchlist updates in real-time. When a customer matches a newly published list entry, an alert is generated.

Webhook Alert Payload:

{
"event": "WATCHLIST_ALERT",
"alert_id": "ALT-2024-007890",
"customer_id": "CUST001",
"customer_name": "RAHUL SHARMA",
"customer_pan": "ABCDE1234F",
"original_screening_id": "SCR-2024-001234",
"new_match": {
"list_name": "ED_PMLA_ORDERS",
"list_category": "REGULATORY",
"match_score": 82,
"match_type": "NAME_DOB_MATCH",
"matched_entity": "RAHUL SHARMA",
"publication_date": "2024-06-15",
"details": "PMLA provisional attachment order under Section 5(1)"
},
"priority": "HIGH",
"requires_action_by": "2024-06-22T23:59:59Z",
"timestamp": "2024-06-15T14:00:00Z"
}

TrackWizz can ingest transaction data for pattern-based suspicious activity detection.

Monitored Patterns:

  • Unusual trading volume relative to customer profile
  • Rapid buy-sell cycles with minimal holding period
  • Concentration in illiquid/penny stocks
  • Sudden large fund transfers (in/out)
  • Trading activity inconsistent with declared income
  • Multiple linked accounts with coordinated activity

Note: Transaction monitoring requires feeding trade/settlement data from the back-office system (63 Moons ODIN or equivalent) to TrackWizz. This is typically a batch feed (daily EOD file).

Alert Generated
|
v
[OPEN] --> Assigned to compliance analyst
|
v
[UNDER REVIEW] --> Analyst investigates (documents, trading patterns, media)
|
+--> [ESCALATED] --> Senior compliance officer / Principal Officer review
| |
| +--> [STR FILED] --> STR submitted to FIU-IND
| |
| +--> [ACCOUNT RESTRICTED] --> Trading suspended pending investigation
| |
| +--> [DISMISSED] --> False positive, documented with reasons
|
+--> [DISMISSED] --> False positive at L1, documented with reasons
|
v
[CLOSED] --> Final resolution documented in audit trail

TrackWizz assigns a composite risk score and classification to each customer.

Risk LevelScore RangeImplication
LOW0-30Standard CDD, annual re-screening
MEDIUM31-60Enhanced monitoring, semi-annual re-screening
HIGH61-100EDD required, quarterly re-screening, senior management approval
Risk FactorWeightLow RiskMedium RiskHigh Risk
Geography (country of residence / nationality)25%India, US, UK, EU, Japan, AustraliaGCC, South-East Asia, non-FATF greyFATF grey/black list countries
Occupation15%Salaried, retired, studentBusiness owner, professionalArms dealer, casino operator, precious metals, virtual assets
Income Source15%Salary, pension, rental incomeBusiness income, investmentsUnverifiable sources, cash-intensive businesses
PEP Status20%Not PEPPEP family member / close associateDirect PEP
Adverse Media10%No hitsMinor/old negative coverageActive financial crime reporting
Transaction Patterns10%Normal trading activityOccasional spikesConsistent unusual patterns
Sanctions/Regulatory5%CleanNear-matches (dismissed)Active match or past enforcement action

The risk score feeds into the broker’s CDD/EDD decision matrix:

Risk Score
|
+--> LOW (0-30) --> Standard onboarding, no additional requirements
|
+--> MEDIUM (31-60) --> Flag for L2 review during onboarding
| Additional documentation may be requested
| Enhanced monitoring post-onboarding
|
+--> HIGH (61-100) --> BLOCK onboarding until EDD completed
Senior management must approve
Source of funds/wealth documentation mandatory
Quarterly re-screening
Principal Officer notification

Risk scoring applies to individuals, but brokers also onboard non-individual entities — companies, partnerships, HUFs, trusts, and other structures. Entity screening adds complexity because the broker must screen not just the entity itself but also its directors, partners, beneficial owners, and authorized signatories.

For corporate accounts, screening must cover the company AND all key individuals.

Screening Scope:

EntityScreening RequiredAPI Calls
Company nameScreen against all watchlists1 call (entity screening)
All directorsIndividual screening for each directorN calls (1 per director)
All UBOs (Ultimate Beneficial Owners)Individual screening for each UBON calls (1 per UBO)
Authorized signatoriesIndividual screeningN calls (1 per signatory)

UBO (Ultimate Beneficial Owner) Identification:

ThresholdRegulation
10% ownership or controlSEBI standard for securities market intermediaries
25% ownership or controlPMLA Rules general threshold
Effective control regardless of ownershipPMLA Rules (management/operational control)

Note: SEBI uses the stricter 10% threshold for intermediaries. All persons with 10% or more ownership stake, directly or indirectly, must be identified and screened.

Corporate Screening Request:

{
"reference_id": "SCR_CORP_001",
"entity_type": "CORPORATE",
"entity_name": "ACME TRADING PVT LTD",
"cin": "U74999MH2020PTC123456",
"pan": "AABCA1234F",
"country_of_incorporation": "IN",
"screening_type": "FULL",
"directors": [
{
"name": "RAHUL SHARMA",
"din": "12345678",
"dob": "1990-01-15",
"pan": "ABCDE1234F",
"nationality": "Indian",
"is_foreign_resident": false
}
],
"ubos": [
{
"name": "SURESH SHARMA",
"dob": "1960-05-20",
"pan": "FGHIJ5678K",
"ownership_percentage": 51,
"nationality": "Indian"
}
]
}
Entity TypeScreen Entity NameScreen IndividualsWho to Screen
HUFYes (HUF name)YesKarta + coparceners (if known)
Partnership FirmYes (firm name)YesAll partners individually
LLPYes (LLP name)YesAll designated partners + UBOs (10%+)
CompanyYes (company name)YesAll directors + all UBOs (10%+)
Body CorporateYes (entity name)YesAll directors + all UBOs (10%+)
TrustYes (trust name)YesAll trustees + known beneficiaries + settlor
SocietyYes (society name)YesOffice bearers (President, Secretary, Treasurer)
NRI IndividualYesYesAdditional country-risk screening for country of residence

7.3 UBO Identification for Complex Structures

Section titled “7.3 UBO Identification for Complex Structures”

For layered ownership / shell company structures:

TrackWizz approach:
1. Screen the top-level entity
2. Identify all direct shareholders/partners with 10%+ stake
3. For corporate shareholders, drill down to identify natural persons
4. Continue until all natural person UBOs are identified
5. Screen every natural person UBO individually
6. Flag if ownership chain includes:
- Entities in FATF high-risk jurisdictions
- Bearer share structures
- Nominee arrangements
- Multi-layered offshore structures (3+ layers)

Escalation: If UBO cannot be identified (opaque structures, non-cooperative entities), TrackWizz flags this as a risk factor. SEBI guidelines require that brokers must NOT proceed with onboarding if UBO cannot be identified.


Master Circular: SEBI/HO/MIRSD/DOP/P/CIR/2023/37 (March 15, 2023) Consolidated with: SEBI/HO/MIRSD/MIRSD-SEC-2/P/CIR/2023/168 (October 2023)

This circular prescribes AML/CFT obligations for all SEBI-registered intermediaries, including stock brokers.

8.2 Broker Obligations under SEBI AML Framework

Section titled “8.2 Broker Obligations under SEBI AML Framework”
ObligationDetailsTrackWizz Support
Customer Identification & VerificationIdentify customer, verify identity using reliable documentsScreening confirms no identity conflicts with watchlists
Risk CategorizationClassify customers as Low/Medium/High riskAutomated risk scoring and classification
Ongoing MonitoringMonitor transactions, periodic account reviewsReal-time watchlist monitoring + transaction pattern analysis
STR/CTR FilingFile with FIU-IND when suspicious activity detectedPre-formatted STR/CTR templates, auto-population
Staff TrainingRegular AML training for all staffTrackWizz provides training materials and awareness resources
Designated Principal OfficerAppoint Principal Officer for AML complianceAlert routing to designated Principal Officer
Record RetentionMinimum 5 years (8 years per SEBI 2026 Regulations for brokers)Full audit trail stored within retention period
Annual AuditInternal audit of AML proceduresCompliance dashboard with audit-ready reports
FATF ComplianceScreen against FATF lists, apply EDD for high-risk countriesFATF grey/black list integrated in screening
Wire Transfer RulesOriginator/beneficiary information for fund transfersNot directly applicable to screening, but customer data verified

The designated Principal Officer (PO) is the single point of contact with FIU-IND.

ResponsibilityHow TrackWizz Helps
Oversee AML compliance programManagement dashboard with KPIs
Review and file STRsSTR template generation, review workflow
Respond to FIU-IND queriesAudit trail provides historical screening data
Ensure staff trainingTraining module tracking
Annual AML audit coordinationCompliance reports for auditors
Escalation of high-risk mattersAlert routing directly to PO for critical matches
AuthorityPenalty TypeAmount/Action
SEBIMonetary penaltyUp to Rs. 1 crore per violation
SEBISuspension/cancellationBroker registration suspension or cancellation
FIU-INDPenalty for non-filingRs. 10,000 per day of non-compliance
PMLA (ED)Criminal prosecutionImprisonment up to 7 years + fine
PMLA (ED)Provisional attachmentAttachment of property involved in money laundering

With the regulatory framework established, the following section covers the practical details of integrating with TrackWizz’s API — authentication, environments, rate limits, SLAs, webhook configuration, and error handling.

AttributeDetails
ProtocolREST over HTTPS (TLS 1.2+)
Data FormatJSON (request and response)
Character EncodingUTF-8
API Versionv1 (current)

Token Acquisition:

POST /api/v1/auth/login
Content-Type: application/json
{
"client_id": "your_client_id",
"client_secret": "your_client_secret"
}

Response:

{
"access_token": "eyJhbGciOiJSUzI1NiIs...",
"token_type": "Bearer",
"expires_in": 3600,
"refresh_token": "dGhpcyBpcyBhIHJlZnJl..."
}

Usage: Include in all subsequent requests:

Authorization: Bearer eyJhbGciOiJSUzI1NiIs...

Token Lifecycle:

  • Access token valid for 1 hour (3600 seconds)
  • Refresh token valid for 24 hours
  • Refresh before expiry using POST /api/v1/auth/refresh
  • Rotate client credentials quarterly (security best practice)
EnvironmentPurposeAccess
Sandbox/UATTesting and developmentContact TrackWizz for test credentials
ProductionLive screeningActivated after UAT sign-off

Sandbox Notes:

  • Sandbox returns synthetic match results for testing
  • Specific test names trigger specific responses (e.g., “OFAC TEST ENTITY” returns sanctions hit)
  • No real watchlist data in sandbox
  • Rate limits apply (same as production)
EndpointRate LimitBurst Limit
POST /api/v1/screen50 TPS (transactions per second)100 TPS for 10 seconds
POST /api/v1/screen/batch10 requests/minuteN/A
GET /api/v1/screen/{id}100 TPS200 TPS
POST /api/v1/auth/login10 requests/minuteN/A

Rate Limit Headers:

X-RateLimit-Limit: 50
X-RateLimit-Remaining: 48
X-RateLimit-Reset: 1705312260
MetricTarget
Screening response time< 5 seconds (P95)
Batch processing< 30 minutes for 1,000 records
API uptime99.9%
Webhook delivery< 60 seconds from event
Support response< 4 hours (critical), < 24 hours (standard)
Data centerIndia-based (regulatory compliance)

Webhook Setup:

POST /api/v1/webhooks/register
{
"url": "https://kyc.broker.com/webhooks/aml",
"events": ["WATCHLIST_ALERT", "BATCH_SCREENING_RESULT", "MONITORING_ALERT"],
"secret": "webhook_signing_secret_xxxxx"
}

Webhook Verification (HMAC-SHA256):

X-TrackWizz-Signature: sha256=d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3

Verify by computing HMAC-SHA256(webhook_secret, request_body) and comparing with the header value.

Retry Policy: 3 retries with exponential backoff (30s, 2m, 10m). After 3 failures, alert is queued and webhook marked unhealthy.

HTTP CodeError CodeMeaningAction
200-SuccessProcess response
400INVALID_INPUTMalformed request or missing mandatory fieldsFix input and retry
400INVALID_PANPAN format invalidValidate PAN format before calling
400INVALID_DOBDate format not YYYY-MM-DDFix date format
401TOKEN_EXPIREDBearer token expiredRefresh token and retry
401INVALID_TOKENToken invalid or revokedRe-authenticate
403IP_NOT_WHITELISTEDCalling IP not in whitelistAdd IP to whitelist in TrackWizz dashboard
404SCREENING_NOT_FOUNDScreening ID does not existVerify screening ID
429RATE_LIMIT_EXCEEDEDToo many requestsImplement exponential backoff, retry after Retry-After header
500INTERNAL_ERRORTrackWizz server errorRetry with exponential backoff (max 3 retries)
503SERVICE_UNAVAILABLEMaintenance or source unavailableRetry after delay, check status page

Error Response Format:

{
"error": {
"code": "INVALID_INPUT",
"message": "Field 'dob' is required for screening_type FULL",
"details": {
"field": "dob",
"constraint": "required"
}
},
"request_id": "REQ-2024-567890"
}
OptionDescriptionProsCons
Cloud SaaS (Recommended)TrackWizz-hosted, API-only integrationFast setup (1-2 weeks), no infra management, auto-updates to watchlistsData leaves broker’s network, ongoing subscription
On-PremiseTrackWizz software deployed in broker’s data centerData stays in-house, full control, customizableHigher upfront cost, manual watchlist updates, longer setup (4-8 weeks)

Beyond the screening API itself, TrackWizz provides a reporting layer that supports regulatory filings, management oversight, and audit readiness. The following section details the available reports and the management dashboard.

TrackWizz generates pre-formatted STR templates compatible with FIU-IND’s electronic filing system.

STR Template Fields (auto-populated from screening data):

  • Reporting entity details (broker name, SEBI registration number)
  • Customer identification details (name, PAN, DOB, address)
  • Account details (trading account number, BO ID)
  • Suspicious transaction details (date, amount, type, description)
  • Reason for suspicion (mapped from screening results and analyst notes)
  • Supporting documentation list

Automated CTR generation when cash transaction thresholds are breached:

  • Individual cash transaction > Rs. 10 lakh
  • Aggregate cash transactions > Rs. 10 lakh in a calendar month
  • Connected cash transactions < Rs. 10 lakh individually but > Rs. 10 lakh in aggregate (structuring detection)
ReportFrequencyContent
AML Compliance SummaryMonthlyScreening volumes, hit rates, resolution stats
PEP RegisterQuarterlyList of all PEP customers with EDD status
High-Risk Customer ReportQuarterlyAll customers classified as High risk with current status
STR/CTR Filing RegisterMonthlyAll STRs/CTRs filed with FIU-IND
False Positive ReportMonthlyDismissed matches, rates by list type
Re-Screening ComplianceQuarterlyCustomers due/overdue for re-screening
Annual AML Audit ReportAnnuallyComprehensive report for internal/external auditors

TrackWizz provides a web-based dashboard with:

Dashboard WidgetMetric
Screening VolumeDaily/weekly/monthly screening counts
Hit RatePercentage of screenings with matches (by list type)
False Positive RatePercentage of matches dismissed as false positives
Alert QueueOpen alerts pending review (with aging)
Risk DistributionCustomer base breakdown by Low/Medium/High risk
SLA ComplianceAlert resolution time vs. target
STR Filing StatusFiled vs. pending STRs
Re-Screening DueCustomers due for periodic re-screening

Every screening decision is logged with:

  • Screening request and full response
  • Analyst who reviewed (if manual review)
  • Decision taken (approve / reject / escalate)
  • Reason for decision (especially for dismissed matches)
  • Timestamp of each action
  • Supervisor approval (if escalated)

The audit trail is immutable and retained for the configured retention period (minimum 5 years, recommend 8 years per SEBI 2026 Regulations).


ComponentPrice RangeNotes
Per-screening (individual)Rs. 5-15Depends on screening_type and volume commitment
Per-screening (entity)Rs. 10-25Higher due to entity + director/UBO screening
Ongoing monitoringRs. 2-5 per customer per monthOR annual per-customer fee
Batch screeningRs. 3-10 per recordVolume discount on bulk
Dashboard accessIncludedWeb portal for compliance team
Webhook alertsIncludedReal-time monitoring alerts
STR/CTR templatesIncludedReport generation
Monthly VolumeDiscount
< 1,000 screeningsStandard pricing
1,000 - 5,00010-15% discount
5,000 - 20,00020-25% discount
20,000+Custom pricing (negotiate)
ComponentPrice RangeNotes
License fee (one-time)Rs. 10-25 lakhDepends on deployment size
Annual maintenance15-20% of license feeIncludes watchlist updates, patches
Per-transaction feeRs. 1-5Lower than SaaS due to upfront license
ImplementationRs. 5-10 lakhSetup, configuration, training

11.4 Estimated Monthly Cost for a Retail Broker

Section titled “11.4 Estimated Monthly Cost for a Retail Broker”
ScenarioNew Accounts/MonthRe-ScreeningMonthly Cost (Approx.)
Small broker5005,000 annualRs. 15,000-25,000
Mid-size broker5,00050,000 annualRs. 75,000-1,50,000
Large broker50,0005,00,000 annualRs. 5,00,000+ (custom)

Real-world AML screening inevitably encounters edge cases — common names generating excessive false positives, customers whose status changes after onboarding, transliteration ambiguities, and more. The following section documents these scenarios and the recommended handling approach.

12.1 Common Indian Names Generating False Positives

Section titled “12.1 Common Indian Names Generating False Positives”

Problem: Names like “Amit Kumar”, “Rahul Sharma”, “Priya Patel” match hundreds of watchlist entries.

Solution:

Mitigation strategy:
1. Always provide DOB + PAN along with name (reduces false positives by ~80%)
2. Configure auto-dismiss threshold at 50 (dismiss all matches scoring below 50)
3. Use father's name as additional differentiator
4. Address/geography matching further reduces false positives
5. Build a whitelisted false-positive database (see 12.5)

12.2 Customer Cleared Initially but Later Sanctioned

Section titled “12.2 Customer Cleared Initially but Later Sanctioned”

Scenario: Customer passes screening at onboarding, but 6 months later appears on SEBI debarred list.

Handling:

1. TrackWizz ongoing monitoring detects the new match
2. Webhook alert sent to broker's system (priority: CRITICAL)
3. Compliance team reviews within 24 hours
4. If confirmed match:
a. Freeze trading account immediately
b. Notify designated Principal Officer
c. File STR with FIU-IND if applicable
d. Notify exchanges (NSE/BSE) per SEBI requirement
e. Document all actions in audit trail

SEBI Requirement: Screen spouse, children, and parents of PEPs.

Challenge: Customer may not disclose PEP relationship. TrackWizz handles this by:

  1. Matching father’s name against PEP database
  2. Surname matching against known PEP families
  3. Address proximity matching (same household)
  4. Media/news cross-reference for PEP family connections

If PEP family relationship discovered post-onboarding:

  • Upgrade risk classification to HIGH
  • Trigger EDD
  • Obtain senior management approval for continued relationship
  • Increase monitoring frequency to quarterly

Scenario: Customer changes name after marriage (e.g., “Priya Patel” becomes “Priya Sharma”).

Handling:

  1. Customer notifies broker of name change
  2. Re-screen with new name via POST /api/v1/screen
  3. Link new screening_id to original screening_id in records
  4. Update ongoing monitoring to use new name
  5. Retain old name screening records (do not delete)

Capability: Once a match is dismissed as a false positive, TrackWizz can be configured to not re-alert for the same match in subsequent screenings.

Configuration:

POST /api/v1/whitelist
{
"customer_pan": "ABCDE1234F",
"dismissed_match_id": "MTH-2024-005678",
"reason": "Different DOB (1990 vs 1975), different father name, verified PAN-Aadhaar link",
"approved_by": "compliance_officer_id",
"valid_until": "2025-01-15T00:00:00Z"
}

Rules:

  • Whitelisting is customer-specific + match-specific
  • Whitelist has expiry (re-review required, typically annual)
  • New matches from different lists are NOT auto-whitelisted
  • Whitelist audit trail maintained
  • Whitelist can be revoked at any time

Problem: Hindi names transliterated to English have multiple valid spellings.

HindiPossible English Spellings
(Rakesh)Rakesh, Rakeesh, Raksh
(Sharma)Sharma, Sharema, Sharmaa
(Gupta)Gupta, Guptaa, Gopta
(Srinivasan)Srinivasan, Srinivaasan, Shrinivasan
(Choudhary)Choudhary, Chowdhury, Chaudhary, Choudhury, Chowdhary

TrackWizz handles this with phonetic matching algorithms (Soundex, Metaphone, and Indian-language-specific phonetic rules).

Scenario: A customer’s name matches a deceased person on a historical watchlist.

Handling: If DOB clearly differs and the watchlisted entity is confirmed deceased, auto-dismiss with documented reason. However, if the customer shares name AND DOB with a deceased watchlisted entity, flag for manual review (possible identity theft).


FeatureTrackWizzComplyAdvantageIDfy AMLBureau.id
FocusAML/CFT complianceGlobal AML complianceIdentity + AMLDevice fraud prevention
Indian Regulatory ListsExcellent (SEBI, RBI, MHA, UAPA, ED, NIA)Good (global focus, some Indian lists)Good (150+ entities)N/A (not AML)
PEP Coverage95+ global databases200+ global databasesBasic PEP screeningN/A
Adverse MediaRefinitiv World-Check partnershipOwn AI-powered screeningBasic media screeningN/A
Deployment OptionsSaaS + On-premiseSaaS onlySaaS onlySaaS only
India SpecializationHigh (built for Indian regulatory landscape)Medium (global platform)Medium (Indian company but broader focus)High (Indian device fraud)
Ongoing MonitoringYes (webhook alerts)Yes (webhook alerts)LimitedN/A
STR/CTR TemplatesYes (FIU-IND format)No (global format)NoN/A
Pricing (per screen)Rs. 5-15$0.50-2 (Rs. 40-170)Rs. 5-15Rs. 2-5 (device check)
API Response Time< 5 seconds< 3 seconds< 5 seconds< 1 second
Best ForIndian broker AML/PMLA complianceGlobal firms, multi-jurisdictionQuick integration, basic screeningFraud prevention layer (device fingerprinting)
Integration Time1-2 weeks1-2 weeks1 week1 week

Recommendation: TrackWizz is the primary choice for Indian broker AML compliance due to:

  1. Deep coverage of India-specific regulatory lists (SEBI, RBI, MHA, UAPA, ED)
  2. Hindi-English transliteration-aware fuzzy matching
  3. Pre-built STR/CTR templates for FIU-IND
  4. On-premise deployment option for data-sensitive firms
  5. Cost-effective for Indian market (Rs. pricing vs. USD)

Bureau.id as Complement: Bureau.id addresses device fraud (99.7% persistence device fingerprinting, 200+ risk signals) which is a separate concern from AML screening. Consider adding Bureau.id as a complementary fraud prevention layer for detecting:

  • Multiple accounts from same device
  • Device spoofing / emulators
  • Bot-driven account creation
  • Proxy/VPN usage during onboarding

Finally, this section ties everything together by describing how TrackWizz fits into our specific onboarding flow, where the screening gate sits in the pipeline, how screening results map to the master dataset fields, and how ongoing rescreening is scheduled.

AML screening runs as a BLOCKING GATE before account approval. No account can be activated without a CLEAR or manually-approved AML screening result.

Onboarding Flow Position:
PAN Verified [V1] -----> KRA Lookup [V4] -----> Bank Verified [V3]
|
v
+---------------------+
| AML SCREENING [V10]| <-- BLOCKING GATE
| TrackWizz |
+---------------------+
| |
v v
CLEAR HIT
| |
v v
Proceed Route to
to e-Sign Compliance
[V6] Team
Step 1: Collect screening data
|--- name: from PAN verification (R02) or KRA fetch
|--- dob: from PAN verification or Aadhaar
|--- pan: from user input (verified)
|--- nationality: from KYC form
|--- address: from Aadhaar/DigiLocker
|--- father_name: from KRA record or Aadhaar
|
Step 2: Call TrackWizz screening API
|--- POST /api/v1/screen
|--- Wait for synchronous response (< 5 seconds)
|
Step 3: Process result
|--- IF overall_result = "CLEAR" AND risk_level = "LOW":
| -> Auto-approve, store screening_id, proceed to next step
|
|--- IF overall_result = "CLEAR" AND risk_level = "MEDIUM":
| -> Flag for L2 review during admin validation (Step 26-29)
| -> Allow onboarding to continue (non-blocking)
|
|--- IF overall_result = "HIT" AND sanctions_hit = true:
| -> BLOCK immediately
| -> Route to Principal Officer
| -> DO NOT proceed with onboarding
| -> Consider STR filing
|
|--- IF overall_result = "HIT" AND pep_status != "NOT_PEP":
| -> Route to compliance team for EDD
| -> Onboarding paused until EDD completed and approved
| -> Senior management sign-off required
|
|--- IF overall_result = "HIT" AND adverse_media_hit = true:
| -> Route to compliance team for review
| -> Assess materiality of adverse media
| -> Document decision (proceed with EDD or reject)
|
Step 4: Register webhook for ongoing monitoring
|--- TrackWizz monitors customer against future watchlist updates
|--- Webhook alerts routed to compliance alert queue
|
Step 5: Store results
|--- screening_id -> stored in application record
|--- risk_level -> stored for risk classification
|--- pep_status -> mapped to KYC_MASTER_DATASET K01, K02
|--- Full response -> stored for audit trail (8-year retention)
TrackWizz Response FieldMaster Dataset FieldSectionNotes
pep_status (PEP/PEP_FAMILY)is_pep (K01)K: AML/ComplianceBoolean: true if PEP
pep_details.relationshipis_pep_related (K02)K: AML/ComplianceBoolean: true if PEP family
pep_details.pep_typepep_typeKPEP, PEP_FAMILY, PEP_ASSOCIATE
pep_details.related_pep_namepep_related_person_nameKName of related PEP
risk_levelaml_risk_levelKLOW, MEDIUM, HIGH
screening_idaml_screening_idR: Third-Party ResultsUnique screening reference
sanctions_hitEscalation flag-If true: do not onboard, report
adverse_media_hitEDD trigger-If true: enhanced due diligence
TriggerActionImplementation
New account onboardingFull screeningSynchronous API call during onboarding flow
Annual re-screeningBatch re-screen all active customersMonthly batch job (screen 1/12th of customer base each month)
Customer data changeRe-screen with updated dataTriggered when customer updates name, address, or nationality
Watchlist update alertReview alert, investigateWebhook-triggered, routed to compliance queue
Regulatory directiveAd-hoc screening against specific listOn-demand batch screening

Batch Re-Screening Job:

Cron: 0 2 1 * * (1st of every month at 2 AM)
1. Query all active customers where:
- last_screening_date < (today - (365 / risk_frequency_multiplier))
- Risk frequency: LOW=365 days, MEDIUM=180 days, HIGH=90 days
2. Extract: name, dob, pan, nationality, address
3. Submit to TrackWizz batch API (up to 1,000 per batch)
4. Process webhook results:
- CLEAR: update last_screening_date
- HIT: create compliance alert, assign to analyst
5. Generate re-screening compliance report
ScenarioHandling
TrackWizz API timeout (> 10 seconds)Retry once. If still fails, queue for async processing. DO NOT auto-approve.
TrackWizz API 5xx errorRetry up to 3 times with exponential backoff (5s, 15s, 45s)
TrackWizz API 429 (rate limited)Queue request, retry after Retry-After header value
TrackWizz completely unavailablePause onboarding. AML screening is a BLOCKING requirement - cannot be skipped.
Webhook delivery failureTrackWizz retries 3 times. If all fail, poll GET /api/v1/alerts every 15 minutes.

Critical Rule: AML screening must NEVER be bypassed or skipped. If TrackWizz is unavailable, onboarding must be paused until screening can be completed. This is a regulatory requirement under PMLA and SEBI AML guidelines.


This document should be read alongside Vendor Integrations (Section 12: V10) and Master Dataset (Section K: AML/Compliance) for the complete integration context.