Understanding Banking KYC Regulations in India
When opening a savings account, applying for a home loan, or updating Know Your Customer (KYC) records at an Indian bank, customers are routinely asked to furnish identity and address documentation.
Because bank accounts are central to personal financial security, understanding your rights regarding Aadhaar submission under Reserve Bank of India (RBI) regulations is critical.
What RBI Master Directions State About Masked Aadhaar
The Reserve Bank of India governs all commercial banks (SBI, HDFC, ICICI, etc.), regional rural banks, NBFCs, and payment wallets through the Master Direction – Know Your Customer (KYC) Direction, 2016 (regularly updated).
Section 16 of the RBI Master Directions explicitly clarifies:
- Masked Aadhaar is Legally Mandatory for Physical Records: Where a customer submits an Officially Valid Document (OVD) containing an Aadhaar number for offline verification, the customer is expected to redact or blackout the first 8 digits.
- Bank’s Duty of Redaction: If a customer submits a photocopy where the 12 digits are visible, the bank official is legally mandated to blackout the first 8 digits before scanning or archiving the document.
- Prohibition of Core Storage: Unregulated physical storage of unredacted 12-digit Aadhaar copies is a regulatory non-compliance liability under RBI audit standards.
The Two Modes of Banking Verification
To avoid confusion at the branch counter, distinguish between the two verification methods:
Mode 1: Offline Physical Verification (Paper Submission)
- You submit physical photocopies of your documents.
- You should submit a Masked Aadhaar showing only the last 4 digits (
XXXX-XXXX-9876). - You should add a purpose-limiting watermark:
FOR STATE BANK OF INDIA SAVINGS ACCOUNT OPENING — DD/MM/YYYY. - The bank uses the last 4 digits, your photograph, and your permanent address to verify your identity.
Mode 2: Real-Time e-KYC (Biometric or OTP)
- Carried out via an authorized micro-ATM terminal or biometric fingerprint reader.
- You enter your 12-digit number or 16-digit Virtual ID (VID) directly into an encrypted terminal connected to UIDAI central servers.
- The bank receives cryptographic verification directly from UIDAI; no paper photocopy is retained.
Alternatives to Aadhaar for Bank Accounts
Under Supreme Court directives, Aadhaar is not mandatory to open a bank account. If you prefer not to share your Aadhaar in any format, banks are legally obligated to accept any of the following Officially Valid Documents (OVDs):
- Valid Indian Passport
- Voter Identity Card issued by the Election Commission of India
- Driving Licence issued by state transport authorities
- Job card issued by NREGA duly signed by an officer of the State Government