KYC Compliance Complexities for Startups

Published on: April 30, 2025

The start-up ecosystem in India has experienced remarkable growth over the past decade. From just 471 start-ups in 2016, there are now over 143,000 enterprises recognised by the Department for Promotion of Industry and Internal Trade (DPIIT), including more than 100 unicorns. This surge is primarily driven by the Fintech sector, which is projected to reach a market size of $150 billion by 2025. By the end of this year, the sector's Assets Under Management (AUM) are expected to surpass $1 trillion.

With the help of integrated ecosystems like Unified Payments Interface (UPI), Immediate Payment Service (IMPS), prepaid payment instruments (PPIs), and the National Electronic Toll Collection (NETC), India recorded over 80 billion digital transactions worth $36.5 trillion in FY22. This growth trajectory paints a promising future for the Fintech sector in India.

However, the sector's promising growth has been marred by instances of financial misconduct and improprieties. The Reserve Bank of India's (RBI) Annual Report for 2021–22 noted a 34% increase in frauds involving cards and internet banking, with 3,596 reported cases in FY22. The industry has faced issues such as:

• Fraudulent UPI transactions
• E-wallet thefts
• KYC data breaches
• Loan app scams

These incidents have led to a trust deficit.

To combat these challenges, regulators like the RBI, Securities and Exchange Board of India (SEBI), and the Insurance Regulatory and Development Authority (IRDAI) have implemented regulations such as:

• RBI Master Direction on Know Your Customer (KYC)
• SEBI's KYC Registration Agency Regulations
• IRDAI's AML/CFT guidelines

RBI’s KYC Master Direction Highlights

• Companies must adopt a risk-based approach with board-approved policies for periodic updates.
• Video Customer Identification Process (V-CIP) software must be tested before use.
• SOPs must be established to ensure process integrity.
• V-CIP must reject spoofed/foreign IP connections.
• Video recordings should include geo-tagging and date-time stamps.
• Software should detect spoofing and verify authenticity.
• Trained officials must conduct these processes.

KYC procedures are not just a formality but a crucial step for verifying transaction authenticity and user identity. These guidelines align with Financial Action Task Force (FATF) recommendations on Anti-Money Laundering (AML) and Counter Financing of Terrorism (CFT). They help institutions avoid transactions involving:

• Corruption
• Terrorism financing
• Fraud
• Money laundering

Therefore, regulations must be implemented in both letter and spirit, as they are the cornerstone of a secure financial system.

Challenges Faced by Startups

The Fintech sector is heavily funded by Venture Capital (VC) firms, which expect high growth rates. This often leads to:

• A focus on rapid client acquisition
• Incentives for shorter onboarding processes
• High drop-off rates due to lengthy onboarding

As a result, some companies cut corners:

• Incomplete KYC verifications
• Unethical practices like mis-selling and aggressive loan recovery
• High-interest charges

The RBI has imposed monetary penalties on several service providers for violating KYC and AML regulations. In her 2023 budget speech, the Finance Minister proposed a risk-based approach to simplify the KYC process.

Inclusion and Accessibility Challenges

Current regulations require proof of both current and permanent addresses, which can be challenging for:

• Migrant workers
• Nomadic communities

Electronic KYC (eKYC) and video KYC were introduced to streamline processes. However:

• Only ID documents authenticated via DigiLocker e-Sign are accepted
• DigiLocker requires an Aadhaar number
• Video KYC must be done in real-time by bank officials
• Resource-intensive and hard to scale
• The digital divide further hampers adoption

The Way Forward

KYC regulations must be more flexible to match the Fintech industry's pace. Suggestions include:

• Expanding the Central KYC Registry (CKYCR) to allow moderated access for Fintechs
• Enabling faster onboarding using shared KYC data
• Leveraging the Digital Personal Data Protection Act to facilitate consent-based data sharing

As more individuals complete their KYCs, redundant verifications can be reduced. This would support faster, more inclusive, and more secure financial services in India's digital economy.