KRA KYC Process and CKYC: How a Broking Firm Verifies You

Open a demat account with one broker, then try to open a second account somewhere else, and something surprising happens: the second broker already knows you. Your name, PAN and address populate almost on their own. That shortcut is the KRA KYC process at work — a shared verification layer that lets you prove who you are once and reuse it across the entire securities market. Add CKYC, the government's central registry, and your identity becomes portable across banks, mutual funds and insurers too. This guide explains how KYC Registration Agencies and CKYC actually work, what the four KYC statuses mean, and what the KYC desk inside a broking firm does all day.

What the KRA KYC Process Actually Is

KYC stands for Know Your Customer — the mandatory check that confirms you are a real, identifiable person before any financial firm lets you transact. In the securities market, SEBI built a smarter version of this in 2011. Instead of every broker, depository participant and mutual fund collecting and storing your documents separately, they upload your verified details to a central utility called a KYC Registration Agency, or KRA.

Your PAN is the key that unlocks this record. Once your KYC sits with a KRA, any other SEBI-registered intermediary can fetch it using your PAN rather than making you submit everything again. A SEBI-registered intermediary is generally required to upload your KYC to a KRA within ten days of opening your account, which is why your second demat account feels almost pre-filled.

It helps to remember what this replaced. Before the KRA system, every intermediary kept its own KYC file. The same investor opening accounts with three brokers and two fund houses meant five separate document collections, five chances for a typo in an address, and five copies of a PAN card floating around. Centralising the record with a KRA cut that duplication, tightened data quality, and made it far easier for the regulator to spot a single person operating under mismatched details. For the investor, it simply means less friction every time you add a new account.

The core idea is "verify once, reuse everywhere" within the securities market. It cuts paperwork, speeds up onboarding and reduces the chance of mismatched records across your brokers. If you want to understand the machinery behind investing rather than just click through onboarding screens, a structured NSE and NCFM exam preparation program walks through exactly how market intermediaries operate.

The Five KYC Registration Agencies and the Shared Record

There is not one KRA but several, all registered with SEBI and all plugged into a common system so they can share records with each other. The agencies you will commonly encounter are run by the market's biggest infrastructure and registrar institutions:

• CVL KRA — operated by CDSL Ventures Limited, the arm of depository CDSL.
• NDML KRA — operated by NSDL Database Management Limited, from the NSDL depository group.
• CAMS KRA — from CAMS, a major registrar and transfer agent for mutual funds.
• KFin KRA — operated by KFin Technologies, formerly Karvy.
• BSE KRA — from the BSE group.

The exact lineup has shifted over the years — NSE's DotEx appeared on older SEBI lists — so treat the names as the current working set rather than a permanent roster. What matters is the design: because the KRAs are interoperable, it does not matter which one your first broker used. The record follows your PAN, not the agency.

How KYC Moves Through a Broking Firm, Step by Step

From the inside, KYC is not a single action but a short assembly line. Here is the journey a new investor's file takes once they decide to open an account.

1. Account opening. You submit the account form with PAN, address proof, bank details and a photograph, either on paper or through a digital onboarding flow.
2. KYC capture and verification. The firm records your details and completes In-Person Verification (IPV), today usually a short video or Aadhaar-based check.
3. Upload to a KRA. The broker pushes your verified record to a KRA, generally within ten days of opening the account.
4. Attribute validation. The KRA checks your core attributes — PAN, name, address, email and mobile — against official databases.
5. Status assigned. Based on that check, your record is marked Validated, Registered, On Hold or Rejected (explained below).
6. Push to CKYCRR. Following SEBI's 2024 directions, KRAs also upload records to the Central KYC Records Registry so your identity is available beyond securities too.

The Four KYC Statuses: Validated, Registered, On Hold, Rejected

Since the revised KYC process that took effect on 1 April 2024, with validation rules refined from 1 June 2024, every KRA record carries one of four statuses. This single word decides whether your identity travels freely or needs more work, so it is worth knowing exactly what each one means.

Source: SEBI and KRA circulars on the revised KYC process, 2024.

The practical takeaway: aim for a Validated status, because that is the only one that moves with you frictionlessly. A Registered record still lets you invest, but you may face extra steps the next time you onboard. On Hold and Rejected block transacting until you fix the underlying problem — most often an unlinked PAN and Aadhaar or an unverified email or mobile number.

Why a KYC Goes On Hold or Rejected, and How It Gets Fixed

Most KYC problems are not dramatic fraud cases; they are small data mismatches that quietly block an account. Knowing the usual culprits helps you clear them fast, whether you are an investor or the person at the KYC desk handling the file.

• PAN and Aadhaar not linked. The single most common hold. If your PAN is inoperative because it is not linked to Aadhaar, validation against the official database fails and the record cannot progress.
• Unverified email or mobile. If the contact detail on record cannot be confirmed, the status can sit on hold until you re-verify it, typically through a one-time password.
• Name or address mismatch. A spelling difference between your PAN record and your address proof — an initial expanded in one and not the other — is enough to break an automated match.
• Illegible or outdated documents. A blurred upload or an expired proof sends the record toward Rejected, requiring a fresh submission.

The fix is almost always the same shape: correct the underlying detail with your intermediary, who then re-submits the record to the KRA for re-validation. You do not usually approach the KRA directly — your broker or fund house is the channel. Once the attribute passes, the status moves up to Registered or Validated and transacting resumes.

KRA KYC vs CKYC: What's the Difference?

People often use KRA KYC and CKYC interchangeably, but they are two different systems that happen to overlap. The simplest way to hold them apart: KRA is the securities market's own KYC utility under SEBI, while CKYC is a national registry that spans every regulated financial sector.

CKYC stands for Central KYC and is run by CERSAI — the Central Registry of Securitisation Asset Reconstruction and Security Interest of India — under the Prevention of Money Laundering Act rules. When your CKYC is created, you receive a 14-digit KYC Identification Number (KIN). That number, and the record behind it, can be used by banks, insurers and mutual funds, not just brokers.

CKYC itself comes in a few record types — Normal, Simplified Measures (commonly carrying an "L" prefix on the KIN), Small ("S") and OTP-based eKYC ("O") — reflecting how much documentation was used to build the record. Following SEBI's June 2024 circular, KRAs began uploading securities KYC data to the CKYC registry from 1 August 2024, so the two systems increasingly feed each other rather than sit in silos.

Turning the KRA KYC Process Into a Career

Everything above is run, day to day, by people. In a broking firm, the KYC desk sits inside operations and is one of the most common entry points for freshers into the capital market. The work is exact rather than glamorous: checking documents, chasing missing details, resolving On Hold cases, and keeping records clean across the KRA and CKYC systems.

It is also a genuine launchpad. Understanding the KRA KYC process end to end is the first rung towards operations, surveillance and compliance roles. We have covered adjacent roles in our guide to back-office jobs in stock broking for freshers, the client-facing split in dealer vs relationship manager careers, and the compliance track in our explainer on the NISM Series III-A compliance officer role.

What ties these roles together is certification. Most of them expect you to clear the relevant NISM or NCFM exams, which test exactly the rules a KYC desk applies. Building that knowledge in a structured way — rather than picking it up piecemeal on the job — is what turns a data-entry task into a career.

Frequently Asked Questions

What is the KRA KYC process in simple terms?

It is the system that lets you complete KYC once for the securities market and reuse it everywhere. Your broker verifies your documents and uploads them, keyed to your PAN, to a SEBI-registered KYC Registration Agency. Any other broker, depository participant or mutual fund can then fetch that record instead of re-collecting everything.

How do I check my KRA KYC status?

KRA portals let you enter your PAN and see your current status — Validated, Registered, On Hold or Rejected. Many brokers also surface it during onboarding. If it shows On Hold or Rejected, your intermediary will tell you which attribute, such as PAN–Aadhaar linkage or an unverified contact detail, needs fixing.

Is KRA KYC the same as CKYC?

No. KRA KYC is the securities market's KYC utility under SEBI, identified by your PAN. CKYC is a central registry run by CERSAI under money-laundering rules, covering banks and insurers too, and it issues a 14-digit KIN. Since August 2024, KRAs also upload records to the CKYC registry, so the systems are linked.

What does Validated status mean and why does it matter?

Validated means all five core attributes — PAN, name, address, email and mobile — were confirmed against official databases. It is the best status to have because the record is fully portable: you can open a new account at another SEBI intermediary without redoing KYC.

Do I need to do KYC again for every new broker?

Usually not. If your KRA record is Validated, a new broker can reuse it and onboarding is quick. If it is only Registered, you may be asked to complete some KYC steps again. On Hold or Rejected records must be corrected before you can transact anywhere.

Disclaimer: This article is for educational purposes only and does not constitute investment advice. Markets carry risk — please do your own research or consult a qualified financial professional before investing. NIFM provides training and exam preparation; certification exams conducted by regulatory or professional bodies are administered by those bodies independently.