NISM-Series-X-A: Investment Adviser (Level 1) · Key Regulations

Anti-Money Laundering and KYC Norms for Investment Advisers

Updated 11 October 2026 · Fact-checked

Anti-money laundering (AML) rules stop criminals from passing illegal money through the financial system. Under the PMLA, 2002, intermediaries must verify client identity (KYC), keep records, monitor transactions and report suspicious ones to FIU-IND. CKYC is a central KYC record that clients can reuse across institutions.

Understand Anti-Money Laundering and KYC Norms

Money laundering means disguising money earned from crime so that it looks legitimate. It is usually explained in three stages: placement (putting cash into the system), layering (moving it through many transactions to hide the trail) and integration (bringing it back as apparently clean money).

India's law on this is the Prevention of Money Laundering Act, 2002 (PMLA). It makes money laundering an offence and places duties on reporting entities. SEBI-registered intermediaries, including investment advisers, stock brokers, depositories participants and mutual funds, are covered. SEBI issues its own AML/CFT guidelines for them. CFT means combating the financing of terrorism.

The core duties are simple. Know your client. Keep records. Watch transactions. Report what looks suspicious. KYC (Know Your Client) is the first step. You collect proof of identity and address, and the client's PAN, and you verify them against originals or through approved electronic means. You also identify the beneficial owner, which is the real person who ultimately owns or controls the client when the client is a company, trust or other entity.

The CKYC system is a central KYC records registry. Once a client completes KYC with one regulated entity, a unique KYC Identification Number (KIN) is generated for the client. Other entities can then fetch the record instead of repeating the full process. It reduces duplicate paperwork. It does not remove the duty of the intermediary to be satisfied about the client.

A Suspicious Transaction Report (STR) is sent to the Financial Intelligence Unit - India (FIU-IND) when a transaction looks like it may involve proceeds of crime, has no clear economic purpose, or looks unusually complex. Intermediaries must not tell the client that a report has been filed. This ban on disclosure is called no tipping off. Intermediaries also apply a risk-based approach: higher-risk clients get enhanced due diligence, such as politically exposed persons (PEPs) or clients from high-risk jurisdictions. Records must be preserved for the period the law and SEBI require, so check your workbook for the exact period.

Key formulas to remember

Core AML duties: Identify client (KYC) → Keep records → Monitor transactions → Report suspicious ones; Remember this sequence. Most questions test one of these four duties.
Three stages of money laundering: Placement → Layering → Integration; Placement is entry into the system. Layering hides the trail. Integration brings money back looking clean.
Who receives STRs: Reporting entity → FIU-IND; The Financial Intelligence Unit - India is the central agency that receives and analyses suspicious transaction reports.
No tipping off: STR filed ⇒ client must not be informed; Telling the client about a report is a breach of the rules.
Beneficial owner: Beneficial owner = natural person who ultimately owns or controls the client; Look through companies, trusts and firms to a real person.
Risk-based approach: Higher risk client ⇒ enhanced due diligence; Examples of higher risk: PEPs, complex structures, high-risk jurisdictions.
CKYC identifier: KYC once → KIN generated → record reused by other entities; KIN is the KYC Identification Number assigned in the central registry.

How to solve Anti-Money Laundering and KYC Norms questions

Most AML and KYC questions test whether you know which duty applies and who is responsible. Use this method.

1Read the question and decide the theme: money laundering stages, KYC, CKYC, record keeping, STR or risk classification.
2Underline the key facts in the stem, such as the type of client, the transaction pattern and the action taken.
3Recall the matching duty from the core sequence: identify, record, monitor, report.
4Check the party. Is it the intermediary, FIU-IND, SEBI or the client? Many wrong options swap these.
5Look for absolute words like 'never', 'only' or 'always'. Rule-based answers usually have conditions.
6For scenario questions, ask if the facts are unusual or lack an economic purpose. If yes, the answer points to STR and enhanced due diligence.
7Eliminate options that ask you to tip off the client or skip verification. Then choose between the two remaining options.

Quickest way: Match the situation to the duty

When to use it: Use this when you have under a minute for a one-mark question and the stem describes a situation.

Opening an account or onboarding: think KYC and beneficial owner.
Client already has KYC elsewhere: think CKYC and KIN.
Unusual or unexplained transactions: think STR to FIU-IND.
Client is a PEP or high risk: think enhanced due diligence.
Any option that alerts the client about a report: reject it.

Common mistakes in Anti-Money Laundering and KYC Norms

Saying STRs are filed with SEBI.
SEBI is the regulator, so students assume reports go to it.
Fix: Remember that STRs go to FIU-IND. SEBI sets the guidelines and supervises.
Thinking CKYC removes the need for any verification by the adviser.
The word 'central' suggests one check is enough for all time.
Fix: CKYC saves repeated paperwork, but the intermediary must still be satisfied about the client and follow its own risk-based checks.
Confusing the client with the beneficial owner.
For individuals they are often the same person, so the difference is ignored.
Fix: For companies and trusts, look through to the natural person who ultimately owns or controls the entity.
Believing an STR needs proof of a crime.
Students treat a report as an accusation.
Fix: A report is based on suspicion. The intermediary does not need to prove that money is illegal.
Informing the client that a report has been filed to be transparent.
It feels fair to tell the client.
Fix: Tipping off is prohibited. Never disclose that an STR has been or will be filed.
Treating all clients with the same level of checks.
Students think rules mean one fixed procedure.
Fix: Rules use a risk-based approach. Higher-risk clients need enhanced due diligence.

Worked examples

Example 1

An investment adviser notices that a new client, a small trading firm, makes frequent large transfers with no clear business reason, and the ownership structure is layered through several entities. What should the adviser do?
A. Ignore it because the client has valid PAN
B. Identify the beneficial owner, apply enhanced due diligence, and consider filing an STR with FIU-IND
C. File an STR with SEBI and inform the client
D. Close the account without any record

Show the solution

Identify the theme: unusual transactions and a layered ownership structure. This points to higher risk.
Duty one: look through the structure to find the beneficial owner, who is the natural person in control.
Duty two: apply enhanced due diligence because the risk is high.
Duty three: if suspicion remains, report to FIU-IND. Reports do not go to SEBI.
Check the options. A skips monitoring. C names the wrong recipient and tips off the client. D destroys records and skips reporting. B is correct.

Answer: B

Example 2

A client has completed KYC through a mutual fund and now wants to become a client of an investment adviser. Which statement is most accurate about CKYC?
A. The adviser can fetch the client's record using the KYC Identification Number, and still follows its own client due diligence
B. The client must repeat the full KYC from scratch every time
C. CKYC replaces all AML duties of the adviser
D. CKYC records can only be used by the entity that created them

Show the solution

Recall what CKYC is: a central registry of KYC records with a KIN for each client.
Purpose: other regulated entities can retrieve the record, so the client avoids repeating full paperwork. This rules out B and D.
Limit: CKYC does not remove AML duties such as monitoring, record keeping and risk assessment. This rules out C.
A states both the reuse and the continuing duty, so it is correct.

Answer: A

Exam tips

Expect one-mark recall questions: who receives STRs, what is tipping off, what is a beneficial owner, what is CKYC. Learn these four cold.
Watch for options that swap SEBI and FIU-IND. Reports go to FIU-IND.
On a negative-marking paper, a wrong answer costs 25% of the marks of that question. If you can remove two options, guess on the rest. If you cannot, skip.
Do not memorise numbers you are unsure of. If a question asks for a retention period or threshold, answer from your NISM workbook, not from memory of other sources.
In scenario questions, a mix of unusual activity and secrecy usually means suspicion, enhanced due diligence and an STR.

Practice questions from Key Regulations

Anti-Money Laundering and KYC Norms in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Anti-Money Laundering and KYC Norms: frequently asked questions

What are the main obligations of intermediaries under PMLA 2002?

Intermediaries that are reporting entities must verify client identity, identify beneficial owners, maintain records, monitor transactions and report suspicious transactions to FIU-IND. They must also follow a risk-based approach. SEBI's AML/CFT guidelines apply these duties to securities market intermediaries.

What is CKYC and how does it work?

CKYC is a central registry of KYC records. After a client completes KYC with one regulated entity, a KYC Identification Number is generated. Other entities can use it to fetch the record rather than collect everything again. They still apply their own due diligence.

Who receives a suspicious transaction report?

The report goes to the Financial Intelligence Unit - India (FIU-IND). It is not filed with the client or sent to the client. The intermediary must also avoid tipping off the client.

Does an investment adviser need to do KYC?

Yes. Investment advisers are SEBI-registered intermediaries and must complete KYC of clients before onboarding them, along with suitability and risk profiling. Records of the process must be kept.