CKYC Explained: A Complete Guide to Central KYC in India (2026 Edition)

If you have ever opened a bank account, started a mutual fund SIP, and bought an insurance policy in the same year, you have probably submitted the same PAN, the same Aadhaar, and the same address proof three different times. That repetition is exactly the problem CKYC was built to solve.

Central KYC, or CKYC, is India’s single, government-backed registry that lets you verify your identity once and reuse that verified record across every regulated financial institution in the country. In 2026, with CKYCRR 2.0 going live and real-time API-based verification replacing batch PDF uploads, CKYC has stopped being a back-office record-keeping system and started becoming the backbone of how Indians get onboarded to financial products.

This guide walks through what CKYC actually is, how the 14-digit CKYC number works, the four account categories you can fall under, what’s changing with CKYCRR 2.0, and how to register, retrieve, or update your record without running into the usual confusion.

CKYC stands for Central Know Your Customer. It is a centralised repository of KYC records maintained by CERSAI (Central Registry of Securitisation Asset Reconstruction and Security Interest of India), the body authorised by the Government of India to operate as the Central KYC Records Registry under the Prevention of Money Laundering Act (PMLA), 2002.

In plain terms: when you complete KYC with one regulated entity — say, your bank — your verified record is uploaded to the CKYC Registry and you are assigned a unique 14-digit CKYC number, also called a KYC Identification Number (KIN). Any other financial institution regulated by RBI, SEBI, IRDAI, or PFRDA can then pull that record using your KIN, instead of asking you to fill out forms and photocopy documents all over again.

That is the entire promise of Central KYC: do it once, use it everywhere.

The CKYC framework was announced in the Union Budget of 2012-13, formally went live in July 2016, and has since become mandatory for individuals engaging with most regulated financial institutions in India.

These four terms get used interchangeably, but they are not the same thing.

KYC is the umbrella process — the regulatory requirement that financial institutions must verify who their customers are.

eKYC is electronic KYC — typically Aadhaar-based, using OTP or biometric authentication instead of physical documents.

KRA KYC is run by KYC Registration Agencies like CAMS, CVL, Karvy, and NDML, and it serves only SEBI-regulated intermediaries (mutual fund distributors, stockbrokers, depositories). KRAs do feed records up to CKYCR, so you may have both a KRA record and a CKYC record linked to the same PAN.

CKYC is broader. It is a pan-regulator registry — covering RBI, SEBI, IRDAI, and PFRDA jurisdictions — and it is designed to be the single source of truth for KYC across banks, NBFCs, insurers, mutual funds, and pension funds alike.

The simplest way to think about it: KRA KYC works inside the capital markets bubble. CKYC works across the entire Indian financial system.

Once your KYC is registered, CERSAI generates a unique 14-digit identifier called the CKYC number or KIN (KYC
Identification Number). This number is system-generated, encrypted, and tied to your verified identity record — name, date of birth, address, photograph, and identity proof.

You will receive your CKYC number via SMS or email from CERSAI, usually within a few working days of submission. Once you have it, the CKYC number is what you quote — instead of resubmitting documents — when you open a new bank account, buy insurance, start an investment, or apply for a loan.

The first character of your CKYC number tells you what category your account falls under, which brings us to the next point.

Not every CKYC record looks the same. Depending on the documents you submitted at registration, your account is classified into one of four categories — and the prefix of your KIN reflects that category.

1. Normal Account Created when you submit any one of the six Officially Valid Documents (OVDs): PAN card, Aadhaar, Voter ID, Driving Licence, Passport, or NREGA Job Card. This is the most common and fully featured CKYC account, with no transaction restrictions. Most working professionals fall here.

2. Simplified Measures Account (Prefix: L) For customers who cannot produce one of the six standard OVDs but can submit other valid documents permitted under simplified KYC norms (utility bills, certain government-issued letters). These accounts carry transaction or balance limits and the KIN is prefixed with “L”.

3. Small Account (Prefix: S) A financial inclusion account, opened with just personal details, a passport-size photograph, and a self-attested signature or thumb impression. Designed for first-time, low-income, or rural customers, these accounts have strict limits on deposits, withdrawals, and overall balance. The KIN starts with “S”.

4. OTP-Based eKYC Account (Prefix: O) Created using Aadhaar-based electronic KYC — the customer submits an Aadhaar XML/PDF from the UIDAI portal along with a photograph, and the identity is verified through an OTP sent to the Aadhaar-linked mobile number. The KIN starts with “O”. OTP-based accounts often have temporary limits until full KYC is completed.

If you are unsure which category you fall under, the first letter of your CKYC number will tell you.

This is the part most older blogs miss, and it matters.

The biggest shift in India’s KYC infrastructure was announced in the Union Budget 2025 speech and is rolling out through 2026: the upgrade from CKYC 1.0 to CKYCRR 2.0, the revamped Central KYC Records Registry. The new system is being deployed in phases, with the core registry expected to go live by early 2026 and broader integration continuing through the year.

Here is what actually changes:

From PDFs to APIs. CKYC 1.0 worked on static PDF uploads, where institutions submitted records in batches. CKYCRR 2.0 replaces those PDFs with real-time JSON and XML API submissions, which means data flows continuously instead of in overnight batches.

DigiLocker integration. CKYCRR 2.0 ties into DigiLocker for live document validation, so the registry can verify document authenticity at the moment of upload rather than relying on the institution’s own verification.

Aadhaar masking and consent-based access. A long-overdue privacy upgrade: Aadhaar numbers are masked in the new registry, and every time a financial institution accesses your record, it requires OTP-based consent from you. No more silent lookups.

A consumer self-service portal. For the first time, individuals get a view-only dashboard showing which institutions have accessed their KYC record and the option to revoke access in real time. This is a meaningful step toward actual data sovereignty for users.

Continuous due diligence. CKYC 1.0 was essentially a one-time onboarding tool. CKYCRR 2.0 is built around lifecycle KYC — periodic refresh, trigger-based updates, and ongoing risk assessment, which aligns with RBI’s push toward perpetual KYC.

For institutions, CKYCRR 2.0 means rebuilding integrations around real-time APIs and stronger data quality controls. For consumers, it mostly means faster onboarding, better privacy, and visibility you never had before.

To complete CKYC registration with any participating financial institution, you will typically need:

A duly filled and signed CKYC application form (or KRA application with Supplementary KYC form, depending on the entity).

One self-attested proof of identity — PAN, Aadhaar, Voter ID, Driving Licence, Passport, or NREGA Job Card.

One self-attested proof of address — any of the above except PAN, since PAN does not carry an address. If your correspondence and permanent addresses differ, you must submit proof for both.

Originals are required at the time of submission for verification. If originals are not available, copies must be attested by an authorised entity. Many institutions now accept digital submission via DigiLocker, which removes most of the photocopy hassle.

Walk into any RBI, SEBI, IRDAI, or PFRDA-regulated institution that handles your financial relationship — your bank, mutual fund house, insurance company, or NBFC — and the CKYC process gets initiated as part of standard onboarding. You do not separately apply to CERSAI.

Step 1. Submit the filled CKYC form and supporting documents to the financial institution.

Step 2. The institution verifies your documents against the source — your Aadhaar with UIDAI, your PAN with the Income Tax database, and so on.

Step 3. Once verification clears, the institution uploads your record to the Central KYC Registry maintained by CERSAI.

Step 4. CERSAI validates the upload, checks for duplicates, and generates your unique 14-digit CKYC number.

Step 5. You receive the CKYC number via SMS or email, usually within 2 to 7 working days.

From the next financial product you apply for onwards, you simply quote your CKYC number — no fresh documents required, unless your details have changed.

If you have lost or forgotten your CKYC number, there are a few ways to retrieve it:

Through your bank or financial institution. Log into the customer portal of any institution where you completed KYC, navigate to the CKYC or KYC Details section, and your number will be displayed.

Through KRA portals. KYC Registration Agencies like CAMS, CVL, Karvy, and NDML provide CKYC lookup using your PAN.

Through the official CKYC India portal at ckycindia.in, where the “View Your CKYC Card” feature lets you download the card associated with your record.

With CKYCRR 2.0’s consumer dashboard rolling out, this lookup process is expected to become much smoother through a centralised self-service interface.

For customers, the benefits compound the more you use the financial system. You stop carrying photocopies. Onboarding for new products takes minutes instead of days. Updates to your KYC at one institution propagate to others. And under CKYCRR 2.0, you finally see who is accessing your data and can pull the plug on it.

For financial institutions, the case is even stronger. A single manual KYC verification costs an institution between ₹200 and ₹500 per customer when you factor in document collection, verification, storage, and retrieval. Multiplied across millions of customers, that is a serious cost line. Institutions using CKYC integration have reported onboarding times falling by over 40%, with median verification time dropping from around 5 minutes to under 3 minutes per customer, and rejection rates from incomplete records dropping nearly to zero.

There is also a fraud and AML angle. Centralised, cryptographically verified records make document forgery — a forged utility bill, a tampered PAN — significantly harder. By standardising identity at a national level, CKYC strengthens the financial system’s ability to flag money laundering, identify duplicate identities, and meet PMLA reporting obligations.

A note worth flagging: relying on a CKYC record does not absolve a financial institution of its own KYC obligations. Recent RBI guidance has been explicit that reliance is permitted only where the record is current and PMLA-compliant, and the relying entity must still apply its own risk-based customer due diligence. CKYC is a starting point, not an exit ramp.

Outdated records. If your address, mobile number, or email changed and you never updated KYC at your primary institution, every downstream institution using CKYC will see the stale data. Update once, propagate everywhere.

Duplicate records. Sometimes a customer ends up with two CKYC numbers — usually because PAN and Aadhaar were submitted in different formats at different institutions. CERSAI runs deduplication, but if you suspect duplicates, raise it with your institution.

Account type mismatches. A small or OTP-based account (S- or O-prefix) carries transaction limits. If you are running into rejections at higher-value transactions, check whether your CKYC record needs upgrading to a Normal account by submitting full OVDs.

Confusing CKYC with KRA KYC. A SEBI-only KRA record is not enough for non-SEBI institutions. Make sure your CKYC record is in place before assuming your KYC is “done everywhere”.

Until recently, CKYC was largely an individual-customer story. That has changed. The Central KYC Registry now supports legal entity CKYC, covering companies, partnerships, trusts, and other non-individual customers. For institutions onboarding business clients — particularly in lending, trade finance, and corporate banking — being able to pull a verified legal entity record cuts onboarding time substantially and is becoming a regulatory expectation rather than a nice-to-have.

If you are a fintech, NBFC, bank, or insurer building or rebuilding your onboarding stack for the CKYCRR 2.0 environment, the practical work is the same: real-time API integration, consent management, periodic refresh logic, and audit trails for every access event.

Is CKYC mandatory in India? Yes. For most individuals engaging with regulated financial institutions, CKYC registration is part of the onboarding process and is effectively mandatory under PMLA-aligned KYC norms.

How long is a CKYC number valid? The CKYC number itself does not expire, but the underlying KYC record may need periodic updates depending on your risk category. High-risk customers face shorter refresh cycles.

Can I have more than one CKYC number? You should not. The system is designed for one KIN per individual. If duplicates exist, raise it with your bank or directly with CERSAI through an authorised institution.

Is CKYC the same as Aadhaar? No. Aadhaar is one of the documents you can use to complete CKYC, but CKYC is the registry that holds your verified KYC profile across regulators. Aadhaar is an ID. CKYC is a record.

How do I update my CKYC details? Through any of the financial institutions where you hold a relationship. The institution updates the record at CERSAI, and the change reflects across the registry.

What is the difference between CKYC and CKYCRR? CKYCRR (Central KYC Records Registry) is the regulatory framework and the registry itself. CKYC is the customer-facing process and identifier. In practice the terms are used interchangeably.

CKYC has gone from a useful back-office repository in 2016 to genuine financial infrastructure in 2026. With CKYCRR 2.0 bringing real-time APIs, DigiLocker integration, OTP-based consent, and a consumer dashboard, the system is finally living up to its original promise — a single, secure, verifiable identity that works across every regulated financial institution in India, with the user actually in control of their data.

If you have not checked your CKYC status recently, the easiest first step is to log into your primary bank’s customer portal and look up your KIN. If you are an institution still running on PDF-era integrations, the move to API-based CKYCRR 2.0 is no longer optional — it is the new floor.

Either way, the days of submitting the same PAN photocopy three times in one year are, finally, ending.