Role of RBI and FEMA in KYC and AML Compliance
Every cross-border rupee transaction, whether an NRI wiring salary home, a US business paying an Indian contractor, or a student’s parents sending tuition, moves through a compliance regime authored by two forces working in parallel. The Reserve Bank of India sets the operational rulebook. The Foreign Exchange Management Act, along with the Prevention of Money Laundering Act, sets the legal foundation. Together they define who has to verify what, when, and how.
Most senders never read a page of either. They only see the results: a bank asking for a purpose code, a wire held for compliance review, a repatriation form that has to be signed by a Chartered Accountant. Understanding what sits behind those requests makes the whole system less opaque and makes clearing a review much faster.
Two Frameworks, One Enforcement Machine
India’s KYC and AML compliance regime rests on layered statutes. FEMA governs foreign exchange flows into and out of India. PMLA governs money-laundering prevention across the domestic and cross-border financial system. Together they authorize the RBI to write the rules that regulated entities, mostly banks and licensed payment providers, actually implement.
The relationship is easy to lose sight of. FEMA and PMLA are laws passed by Parliament. RBI circulars, master directions, and guidelines are the administrative rulebook the industry follows day to day. When a bank asks for a specific document or holds a specific transaction, the immediate instruction is almost always from an RBI circular, but the underlying authority to write that circular comes from FEMA or PMLA.
What US-Based Senders Get Wrong
The most common misconception is that “the bank is asking” for something arbitrary. It rarely is. The bank is executing an RBI master direction, which was written under authority delegated by FEMA or PMLA. Understanding this order helps senders push back accurately when a request feels wrong, and helps them comply quickly when it is right.
RBI’s Regulatory Role in KYC and AML
The RBI’s role has three parts.
Rule-writing. The RBI publishes master directions on KYC, AML, and Combating Financing of Terrorism that regulated entities are expected to build their internal programs around. These directions are updated periodically. The current KYC master direction, first issued in 2016 and amended multiple times, defines customer categories, acceptable documents, refresh cycles, and reporting obligations.
Supervision. The RBI inspects banks and licensed payment providers to verify that their KYC/AML programs are operating as designed. Findings from these inspections influence future rule-writing and can result in monetary penalties or restrictions on the entity’s operations.
Coordination. The RBI works with the Financial Intelligence Unit (FIU-IND), the Income Tax Department, and the Directorate of Enforcement to route suspicious transaction reports and financial intelligence to the agencies that can act on them. Banks file reports; the RBI helps route them.
The practical translation for a sender: when a customer service agent at an Indian bank cites “RBI guidelines” as the reason for a document request, it is almost always accurate, and it is worth asking which specific master direction or circular applies. That level of specificity often unblocks a faster response.
FEMA’s Role in the Compliance Stack
FEMA is the foreign exchange law that replaced the older FERA in 1999. It shifted the regulatory posture from control to management, which sounds abstract but changed the day-to-day experience meaningfully: FEMA treats most current-account transactions as freely permitted, and reserves the tighter controls for capital-account transactions.
For a US-to-India remittance sender, three FEMA provisions matter most.
Current-account vs capital-account classification. Family maintenance, tuition, medical treatment, gifts, and travel are current-account flows. Investment in Indian equities, real estate purchase, and outbound investment abroad are capital-account flows. The distinction determines which rules apply, which forms are required, and what the aggregate limits are.
The Liberalised Remittance Scheme (LRS). Under LRS, a resident Indian can remit up to USD 250,000 per financial year for eligible current-account and specified capital-account purposes. LRS applies to residents sending out of India, not to NRIs sending in. The scheme also carries specific reporting obligations, including tax collection at source (TCS) on certain thresholds.
Repatriation from NRO accounts. FEMA caps repatriation of NRO funds at USD 1 million per person per financial year, subject to Chartered Accountant certification via Form 15CB and reporting to the tax department via Form 15CA. This is the cap that most surprises US-based NRIs when they try to send Indian rental or dividend income back to a US bank account.
FEMA also carries penalties. Contraventions can attract fines of up to three times the amount involved, plus interest and confiscation in serious cases. Most contraventions get resolved through compounding, where the party pays a fine and the case is closed, but the exposure is real.
PMLA and the AML Layer
PMLA sits alongside FEMA and covers the money-laundering angle. It requires reporting entities (banks, NBFCs, payment providers, chit funds, casinos, and others) to maintain records of transactions, verify customer identities, and report suspicious transactions and large cash transactions to FIU-IND.
The reporting cadence under PMLA is stricter than under FEMA. Cash Transaction Reports (CTRs) cover cash transactions above a threshold. Suspicious Transaction Reports (STRs) cover transactions that appear unusual regardless of amount. Counterfeit Currency Reports (CCRs) cover fake-note detections. Non-Profit Organization Transaction Reports (NTRs) cover NPO-linked flows above a threshold.
None of these reports are visible to the customer. The reporting entity files, FIU-IND aggregates, and where appropriate the intelligence is shared with enforcement agencies. Filing a report is not the same as making an accusation; it is a data point in a larger surveillance system.
Enforcement Mechanisms
Enforcement of FEMA and PMLA is coordinated across several agencies.
The Directorate of Enforcement (ED) investigates alleged FEMA contraventions and PMLA offenses. Its FEMA jurisdiction is administrative and can lead to compounding or adjudication. Its PMLA jurisdiction is criminal and can lead to attachment of property and prosecution.
The Financial Intelligence Unit (FIU-IND) receives and analyzes reports from reporting entities and shares intelligence with the ED and other agencies.
The Income Tax Department enforces the tax-linked pieces, particularly around LRS reporting, Form 15CA/15CB accuracy, and TCS collection.
The RBI enforces prudential and operational compliance at the regulated entity level, and can impose monetary penalties or business restrictions.
For a sender, the enforcement piece matters mostly in tail-risk terms. Routine remittances that follow the rules almost never end up in front of any of these agencies. Where senders get into trouble is with structured payments, undeclared source of funds, or use of channels that fall outside the regulated system.
Penalties Framework
Penalties under FEMA and PMLA vary by contravention type and severity.
FEMA contraventions typically attract fines of up to three times the amount involved, subject to compounding. Compounding is a formal process where the party pays a determined fine and the case is closed without prosecution. Most retail-level contraventions (a late reporting, an incorrect purpose code, an over-limit remittance discovered after the fact) get compounded.
PMLA offenses can carry criminal penalties, imprisonment terms, and attachment of property involved in the alleged offense. Attachment is provisional at first and can become permanent following adjudication.
RBI penalties on regulated entities are administrative, typically monetary, and sometimes accompanied by operational restrictions. These do not directly reach the customer, but a bank operating under an RBI restriction may be slower or more conservative in what it clears.
Comparing Bank and Fintech Handling Under the Same Rules
Both banks and licensed cross-border fintechs operate under the same RBI, FEMA, and PMLA framework. The customer experience diverges because of the distribution model.
| Compliance Area | Traditional Bank Channel | Licensed Cross-Border Fintech |
|---|---|---|
| KYC onboarding | Branch or portal, days | Digital, in seconds |
| Purpose code selection | Customer picks from a list | Customer picks from a guided list |
| Form 15CA/15CB for NRO | Filed separately, submitted to bank | Integrated into the transfer flow where applicable |
| Suspicious activity monitoring | Automated, opaque | Automated, sometimes visible in-app |
| Refresh KYC | Periodic branch or portal request | In-app prompt |
| Response to a hold | Phone or branch | In-app upload |
The rulebook is identical. The customer-facing surface is what differs.
Travel Tip: Match the Purpose Code to the Actual Purpose
The single most avoidable friction point in a remittance is a mismatched purpose code. RBI has a defined list of codes for FEMA reporting, and choosing the closest match matters. Sliq Pay is a cross-border payments app that makes it easier for customers to pick the right purpose code from the RBI list; the customer still makes the selection, in line with the regulatory expectation that the party in interest owns the classification.
Frequently Asked Questions
Which law governs cross-border remittances into India? FEMA is the primary law governing foreign exchange transactions into and out of India, with RBI as the regulator that issues implementing rules. PMLA sits alongside FEMA to handle the money-laundering angle.
What is the LRS annual limit? USD 250,000 per resident individual per financial year, for eligible current-account and specified capital-account transactions.
Does LRS apply to NRIs? No. LRS is for resident individuals sending out of India. NRIs sending funds into India use different channels (NRE, NRO, direct wire) and NRIs repatriating out use the NRO framework with its own limits.
What is the annual repatriation limit from an NRO account? USD 1 million per person per financial year, subject to Form 15CA and Form 15CB filings.
Are Form 15CA and Form 15CB set by RBI or by the tax department? Form 15CA is filed with the Income Tax Department. Form 15CB is a Chartered Accountant certificate. Both are required for most non-exempt repatriations from NRO accounts.
Who investigates FEMA contraventions? The Directorate of Enforcement handles FEMA investigations. Most retail contraventions are resolved through compounding rather than prosecution.
Is Sliq Pay regulated? Sliq Pay operates as a US-registered Money Services Business with FinCEN (NMLS ID 2714589, MSB Registration 31000298221871) and works within Indian regulatory framework on the receive side through licensed banking partners.
What triggers a suspicious transaction report from an Indian bank? Transactions that appear unusual relative to the customer’s profile, structured payments that seem designed to avoid reporting thresholds, or patterns that match typologies published by FIU-IND. The customer is typically not notified when a report is filed.
Before the Next Remittance
RBI and FEMA are not obstacles. They are the regulatory scaffolding that makes cross-border money movement possible while keeping it traceable. Senders who understand the layers, know their purpose codes, and keep their KYC file current move through the system with the least friction.
For US-to-India transfers where a digital KYC, transparent purpose-code selection, and an in-app compliance experience matter, Sliq Pay is worth keeping alongside the traditional bank channel. You can join the waitlist at sliq-pay.com.
Disclaimer
The information provided on this blog is for general informational purposes only and does not constitute legal, financial, tax, or professional advice. Product features, pricing, eligibility, and availability may vary by country, user type, regulatory requirements, and are subject to change.
Please refer to Sliq Pay’s Terms of Use and official product pages for the most accurate and up-to-date information. Sliq Pay makes no representations or warranties regarding the completeness, accuracy, or reliability of the content.
