DEPOSIT ACCOUNT OPENING RULES: A DETAILED LEGAL ANALYSIS UNDER INDIAN LAW AND INTERNATIONAL REGULATORY STANDARDS

ABSTRACT

Opening a deposit account is a fundamental banking activity that establishes a contractual relationship between a bank and its customer. The process is governed by statutory provisions, regulatory directions, customer identification requirements, anti-money laundering obligations, privacy principles and the bank’s internal customer acceptance policy. In India, the Reserve Bank of India (RBI) plays a central role in regulating deposit accounts and prescribing Know Your Customer (KYC) requirements.

This paper examines the legal framework governing the opening of savings accounts, current accounts, fixed deposits and other deposit accounts in India. It discusses the relevant provisions of Indian banking legislation, KYC and anti-money laundering requirements, account-opening procedures, customer rights, the position of minors and legal entities, and the consequences of non-compliance. It also examines seven judicial decisions relevant to account opening, banking negligence, privacy, customer identification and the legal relationship between banks and customers. Finally, it considers international standards developed by the Financial Action Task Force (FATF), the Basel Committee on Banking Supervision and other regulatory frameworks.

Keywords: Deposit account, bank account opening, Know Your Customer, RBI, anti-money laundering, customer due diligence, banking law, privacy, judicial decisions, international banking standards.

1. INTRODUCTION

A deposit account is an account maintained by a bank or another legally authorised deposit-taking institution to receive, hold and repay money in accordance with applicable law and the contractual terms governing the account.

Deposit accounts are commonly classified as follows:

1. Savings bank accounts.
2. Current accounts.
3. Fixed deposit or term deposit accounts.
4. Recurring deposit accounts.
5. Special-purpose deposit accounts, including accounts maintained under applicable government schemes.
6. Non-resident deposit accounts, such as Non-Resident External (NRE) and Non-Resident Ordinary (NRO) accounts, subject to foreign exchange regulations.

The opening of a deposit account is not merely an administrative exercise. It requires the bank to establish the identity of the applicant, verify the information supplied, understand the nature and purpose of the proposed relationship, assess applicable risks and comply with regulatory requirements.

At the same time, account-opening procedures must not become arbitrary or unnecessarily burdensome. Banks must distinguish between mandatory legal requirements, risk-based due diligence and additional requirements arising from their internal policies.

The principal objectives of deposit-account opening rules are to:

• Prevent money laundering, terrorist financing, fraud and identity theft.
• Ensure that accounts are opened in the genuine names of customers.
• Identify beneficial owners of legal entities.
• Protect customers against unauthorised access and misuse of personal information.
• Establish enforceable contractual rights and obligations.
• Maintain the integrity and stability of the banking system.
• Facilitate lawful access to banking services.

The principal regulatory framework discussed in this paper includes Indian legislation and RBI directions, with international standards considered separately. The legal position should be checked against amendments and directions effective on the date of the relevant transaction. The RBI KYC framework has undergone amendments, including amendments issued in June 2025.

2. MEANING AND LEGAL NATURE OF A DEPOSIT ACCOUNT

A deposit account creates a contractual relationship between a bank and its customer. In the ordinary banker-customer relationship, money deposited with a bank generally becomes a debt owed by the bank to the depositor, subject to the applicable account terms and statutory requirements.

The bank is required to maintain accurate records, honour lawful withdrawal instructions, apply agreed terms and protect confidential customer information, subject to legally authorised disclosures.

The customer, in turn, must provide accurate information, comply with applicable identification requirements, operate the account lawfully and avoid using the banking system for prohibited activities.

The legal relationship ordinarily develops through the following stages:

1. Submission of an account-opening application.
2. Collection and verification of identification information.
3. Completion of applicable customer due diligence.
4. Acceptance of the application by the bank.
5. Completion of any additional requirements applicable to the account type.
6. Activation of the account and commencement of the banker-customer relationship.

An application does not necessarily create an unconditional right to have an account opened at a particular bank. However, the bank must act consistently with applicable law, binding regulatory directions, its disclosed policies and relevant principles of fairness.

3. INDIAN LEGAL FRAMEWORK GOVERNING DEPOSIT ACCOUNT OPENING

3.1 Banking Regulation Act, 1949

The Banking Regulation Act, 1949, is one of the principal statutes governing banking companies in India.

Section 5(b) defines banking by reference to the acceptance of deposits of money from the public for lending or investment, repayable on demand or otherwise and withdrawable by specified means.

Section 22 establishes the licensing framework for banking companies. Section 35A empowers the RBI to issue directions in the public interest, in the interest of banking policy, to prevent banking affairs from being conducted in a manner detrimental to depositors or prejudicial to the interests of banking institutions, and to secure proper management of banking companies.

These provisions provide an important statutory foundation for RBI regulation of banks and their deposit-taking activities.

The Act does not, by itself, provide a complete checklist of documents for every deposit account. The detailed operational requirements are principally contained in applicable RBI directions, other legislation and the bank's lawful policies.

3.2 Reserve Bank of India Act, 1934

The Reserve Bank of India Act, 1934, establishes the RBI and provides the statutory framework for its functions and regulatory powers.

The RBI supervises regulated financial institutions and issues directions within its statutory authority. These directions may govern customer identification, transaction monitoring, deposit-related practices and other aspects of banking operations.

Banks must comply with applicable RBI directions rather than treating them as optional administrative recommendations.

3.3 Prevention of Money-Laundering Act, 2002

The Prevention of Money-Laundering Act, 2002 (PMLA), is a central component of India's anti-money laundering framework.

The Act provides for measures relating to the prevention of money laundering, the attachment and confiscation of property connected with money laundering, and reporting and compliance obligations imposed on specified entities.

For account opening, its significance lies in requiring regulated institutions to comply with prescribed customer identification, record-keeping and reporting obligations.

Banks must take reasonable steps to ensure that the banking system is not used to conceal the proceeds of crime or facilitate prohibited financial activity.

3.4 Prevention of Money-Laundering (Maintenance of Records) Rules, 2005

The Prevention of Money-Laundering (Maintenance of Records) Rules, 2005, prescribe detailed obligations relating to customer identification, records and reporting.

Rule 9 is particularly relevant to customer due diligence and the identification of customers and beneficial owners.

Depending on the customer and transaction, the applicable requirements may include:

• Verification of identity.
• Verification of address and other prescribed particulars.
• Identification of beneficial owners.
• Maintenance and updating of prescribed records.
• Compliance with applicable reporting requirements.
• Application of enhanced scrutiny in higher-risk situations.

The precise requirements must be read with the current version of the Rules and the RBI KYC Directions.

3.5 RBI Master Direction – Know Your Customer (KYC) Direction, 2016

The RBI Master Direction – Know Your Customer (KYC) Direction, 2016, is one of the most important regulatory instruments governing deposit-account opening in India.

It consolidates requirements concerning customer acceptance, customer identification, customer due diligence, beneficial ownership, ongoing monitoring, risk classification and record management.

The Direction requires regulated entities to maintain a customer acceptance policy and prohibits opening accounts in anonymous, fictitious or benami names. It also prohibits establishing an account-based relationship where the regulated entity cannot apply the required customer due diligence measures.

The bank must obtain the prescribed information, verify it through permitted methods and assess whether the proposed relationship complies with applicable law and the institution's risk-based procedures.

The Direction has been amended periodically. The applicable version must therefore be consulted rather than relying on an outdated summary.

3.6 Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016

The Aadhaar Act, 2016, establishes the legal framework governing Aadhaar and specified forms of authentication and use.

Aadhaar-based identification may be used for KYC where permitted by applicable law and the governing regulatory framework. However, Aadhaar should not be treated as an unconditional, universally mandatory document for every bank account-opening situation.

The legal effect of Aadhaar requirements must be understood in light of the Supreme Court's decision in Justice K.S. Puttaswamy (Retd.) v. Union of India (2018), subsequent legislative changes and the current PMLA Rules and RBI directions.

Banks must use legally permitted identification methods and observe the applicable requirements for consent, authentication and alternative procedures.

3.7 Foreign Exchange Management Act, 1999

The Foreign Exchange Management Act, 1999 (FEMA), is relevant where the applicant is a non-resident or seeks to open an account governed by foreign exchange regulations.

NRE, NRO and Foreign Currency Non-Resident (Bank) accounts are governed by the applicable FEMA provisions, RBI directions and deposit-specific rules.

A bank opening such accounts must examine the applicant's residential status, eligibility, permitted credits and debits, repatriation conditions and other applicable requirements.

Ordinary resident savings-account procedures cannot automatically be applied to every non-resident deposit account.

3.8 Indian Contract Act, 1872

The Indian Contract Act, 1872, supplies general principles governing contractual relationships, subject to the special statutory framework applicable to banking.

Sections 10 and 11 concern the requirements for valid contracts and the competence of parties to contract.

These provisions are relevant to account-opening forms, acceptance of account terms, authority to operate accounts and the legal capacity of customers.

Where a person lacks contractual capacity or acts through a legally authorised representative, the bank must apply the relevant legal requirements.

3.9 Information Technology Act, 2000, and Digital Personal Data Protection Act, 2023

The Information Technology Act, 2000, is relevant to electronic records, electronic transactions and specified forms of digital authentication.

The Digital Personal Data Protection Act, 2023, establishes a statutory framework for processing digital personal data, subject to its commencement provisions, applicable rules and any relevant exemptions.

Its application must be assessed according to the provisions in force at the relevant time. It should not be assumed that every provision of the Act and every implementing rule became operational simultaneously.

Banks should collect and process personal information only through legally permissible procedures, maintain appropriate safeguards and comply with applicable obligations relating to data processing and security.

4. ESSENTIAL RULES FOR OPENING A DEPOSIT ACCOUNT

4.1 Customer Acceptance Policy

Every regulated bank must maintain a customer acceptance policy consistent with the RBI KYC Directions.

The policy should establish the circumstances in which customers may be accepted, the identification procedures to be followed, the information to be obtained and the risk controls required before an account becomes operational.

The policy must be consistent with statutory requirements and should not impose conditions that contradict binding RBI directions.

4.2 Prohibition on Anonymous and Fictitious Accounts

Banks must not open accounts in anonymous or fictitious names or use arrangements that unlawfully conceal the actual customer or beneficial owner.

An applicant must be identified in accordance with the applicable rules. A false identity, fabricated document or deliberate concealment of ownership may justify refusal of the application and, where appropriate, further action under applicable law.

The prohibition is intended to prevent the banking system from being used for fraud, money laundering, tax evasion and other unlawful activities.

4.3 Customer Identification and Verification

The bank must conduct customer identification in accordance with the applicable KYC framework.

For an individual customer, the process generally includes establishing the customer's identity and obtaining the prescribed information and documents.

Depending on the circumstances, accepted procedures may include:

• Verification using an officially valid document as defined by the applicable rules.
• Permitted Aadhaar-based identification or authentication.
• Verification through a valid electronic KYC procedure.
• Video-based customer identification, where the applicable requirements are satisfied.
• Other identification methods expressly permitted under the governing framework.

The bank must apply the method appropriate to the customer and the relevant account-opening circumstances.

A document should not be rejected merely because it is not the bank's preferred document if the applicable law recognises it as an acceptable means of establishing the required information.

4.4 Officially Valid Documents

The applicable KYC framework identifies categories of documents that may be accepted as officially valid documents.

The exact list and its qualifications must be checked against the current PML Rules and RBI KYC Directions. Commonly relevant documents include passports, driving licences, proof of possession of Aadhaar numbers where legally permissible, voter identity documents and other documents recognised by the applicable rules.

The requirements concerning proof of possession, address, updating and authentication may differ by document and customer category.

A bank must not assume that every identity document automatically satisfies every address-verification requirement.

4.5 Permanent Account Number or Form 60

PAN or Form 60 requirements must be applied in accordance with the applicable income-tax and KYC framework.

A customer who is legally required to furnish PAN must comply with the relevant requirements. Where Form 60 is permitted, it may be used in the circumstances recognised by law.

PAN is principally a tax identification mechanism and should not be confused with a document that independently establishes every element of customer identity or address.

4.6 Address Verification

The bank must comply with the applicable address-verification requirements.

Depending on the circumstances, the bank may be permitted to accept a document that establishes identity while using a separate permitted procedure for the current address.

A change of address does not invariably require the customer to produce an entirely new set of identity documents. The applicable rules may permit self-declaration or other verification methods for particular situations.

4.7 Customer Due Diligence

Customer due diligence (CDD) extends beyond collecting a copy of an identity document.

The bank must establish the required identity particulars and obtain information necessary to understand the proposed banking relationship.

Depending on the risk and customer category, CDD may involve:

1. Identifying the customer.
2. Verifying the customer's identity through reliable and independent sources.
3. Identifying the beneficial owner, where applicable.
4. Understanding the purpose and intended nature of the account.
5. Applying risk-based checks.
6. Establishing any additional information required under applicable law.

The degree of scrutiny should be proportionate to the relevant risks and the legal requirements.

4.8 Beneficial Ownership

Where an account is opened for a company, partnership, trust or other legal arrangement, the bank must apply the relevant identification and beneficial ownership rules.

The person submitting the application may not be the person who ultimately owns or controls the entity.

The bank may therefore need to verify:

• The legal existence of the entity.
• Its registration particulars.
• Its registered address.
• The authority of the persons acting on its behalf.
• The identity of the beneficial owner or owners under the applicable rules.
• The ownership and control structure.

The exact thresholds and identification requirements depend on the entity type and the applicable legal framework.

4.9 Risk Classification

Banks must adopt a risk-based approach to customer due diligence and ongoing monitoring.

Relevant factors may include the customer's profile, the nature of the business, the expected transaction pattern, geographic exposure, the ownership structure and other indicators prescribed by the regulatory framework.

Higher-risk relationships may require enhanced due diligence and closer monitoring. Lower-risk customers may qualify for simplified procedures only where those procedures are legally permitted.

Risk classification must not be used as an excuse to disregard mandatory customer identification rules.

4.10 Introduction by an Existing Customer

An introduction from an existing bank customer is not generally a universal legal prerequisite for opening an account where the applicant satisfies the applicable documentary identification requirements.

The RBI has previously clarified that banks should not insist on an existing-customer introduction when it is not required by the governing KYC framework.

An introduction cannot replace mandatory customer due diligence.

4.11 Minimum Balance and Initial Deposit

Banks may prescribe minimum balances, initial deposits or other product-specific conditions, subject to applicable regulatory requirements and the terms disclosed to customers.

However, an ordinary savings account should not automatically be treated as requiring a particular minimum balance in every situation.

Basic Savings Bank Deposit Accounts and other specially regulated accounts may be subject to different conditions.

A bank must explain the applicable product terms, charges and conditions in accordance with the relevant customer-service and disclosure requirements.

4.12 Nomination

Nomination is governed by the applicable banking legislation and rules, including the relevant provisions of the Banking Regulation Act, 1949.

A nominee's role is legally distinct from that of a joint account holder or beneficial owner. Nomination generally facilitates the bank's discharge of its obligations following the death of the depositor, subject to the governing law.

The bank should explain the nomination facility and follow the applicable requirements for recording, changing or cancelling a nomination.

4.13 Joint Accounts

For joint accounts, the bank must identify and complete the applicable KYC procedure for each joint holder.

The application should clearly specify the mode of operation, such as:

• Either or survivor.
• Jointly.
• Former or survivor.
• Anyone or survivor, where permitted.
• Other recognised operating instructions.

The exact legal effect of each mandate depends on the account terms, applicable law and circumstances such as the death or incapacity of a holder.

4.14 Accounts of Minors

A minor may be permitted to maintain a deposit account subject to the applicable banking rules and the bank's lawful policy.

The account may be operated by a natural or legally recognised guardian, or by the minor independently where the bank permits this under the applicable framework.

The bank must verify the minor's identity and age, the guardian's identity and authority, and any additional requirements applicable to the particular account.

The minor's contractual capacity and the rules governing the guardian's authority must be considered when determining who may operate the account.

4.15 Accounts of Companies, Partnerships, Trusts and Associations

For a legal entity, the bank must establish both the existence of the entity and the authority of the persons acting for it.

Documents may include, as applicable:

• Certificate of incorporation or registration.
• Constitutional documents.
• Partnership deed or trust deed.
• Permanent Account Number details.
• Registered office or business address.
• Board resolution or other authorisation.
• Identification documents of authorised signatories.
• Beneficial ownership information.

The applicable documents depend on the legal form of the applicant. No single checklist is suitable for every type of organisation.

4.16 Online Account Opening and Video KYC

Electronic account opening may be permitted where the bank follows the applicable RBI requirements and relevant electronic transaction laws.

The bank must ensure that the chosen process provides the prescribed identity verification, authentication, record keeping and security safeguards.

Where video-based customer identification is used, the institution must follow the applicable procedural requirements, including those relating to consent, verification, recording and secure retention of records.

The fact that an application is submitted online does not eliminate the bank's KYC obligations.

4.17 Small Accounts and Financial Inclusion

The applicable KYC framework permits specified simplified procedures for certain eligible customers.

Small accounts may be available to eligible individuals who cannot immediately provide the full set of documents required for ordinary accounts, subject to prescribed conditions, limits and monitoring.

The current PML Rules and RBI directions must be consulted for the exact limits, duration and operating restrictions.

Financial inclusion does not mean that banks can disregard customer identification requirements. Instead, the law provides controlled alternatives for eligible customers.

4.18 Refusal to Open an Account

A bank may refuse an application where a lawful ground exists, including an inability to complete mandatory CDD, unreliable information, suspected fraudulent documentation or a prohibition imposed by applicable law.

However, refusal should be distinguished from a demand for documents that the law does not require.

Where the bank cannot complete the mandatory CDD process, it must act in accordance with the KYC framework, including any applicable requirements concerning suspicious transaction reporting.

A customer who believes that the bank has acted contrary to applicable rules may seek clarification, use the bank's grievance mechanism and, where the statutory conditions are satisfied, approach the RBI's applicable complaint-resolution mechanism.

The existence and scope of a legal remedy depend on the facts and the governing procedure.

5. IMPORTANT RBI REQUIREMENTS AFTER ACCOUNT OPENING

Opening an account does not end the bank's compliance obligations.

5.1 Ongoing Due Diligence

Banks must monitor customer relationships and transactions as required by the applicable KYC framework.

The purpose is to determine whether transactions remain consistent with the customer's known profile, business and expected activity.

Unusual transactions may require further examination, but an unusual transaction does not automatically establish criminal conduct.

5.2 Periodic KYC Updation

Customers may be required to update their KYC information at prescribed intervals or when relevant changes occur.

The applicable periodicity and procedure depend on the customer's risk category and the current RBI directions.

Amendments issued by the RBI in June 2025 included transitional and procedural provisions concerning certain low-risk individual customers and KYC updation. Such temporary measures should not be treated as permanently applicable without checking the current framework.

5.3 Record Retention

Banks must preserve customer identification and transaction records for the periods prescribed by applicable law and regulations.

These requirements facilitate supervision, investigation and compliance with reporting obligations.

5.4 Suspicious Transaction Reporting

Where the legal reporting conditions are met, the bank must make the required reports to the Financial Intelligence Unit–India or another competent authority in accordance with the governing framework.

The bank must comply with applicable confidentiality and non-disclosure requirements relating to suspicious transaction reporting.

5.5 Confidentiality of Customer Information

Information collected during account opening must be handled in accordance with applicable banking confidentiality obligations, data protection requirements and statutory disclosure rules.

Customer information should not be used for unrelated purposes in disregard of the governing legal requirements.

6. SEVEN IMPORTANT JUDICIAL DECISIONS

The following seven decisions are relevant to the legal principles underlying deposit-account opening, customer identification, banking negligence, privacy and the relationship between banks and customers.

Some of these decisions concern broader banking or constitutional principles rather than the account-opening process alone. They should therefore be cited for their actual holdings, not as if every case established a separate, comprehensive account-opening rule.

CASE 1: INDIAN OVERSEAS BANK v. INDUSTRIAL CHAIN CONCERN

Citation: (1990) 1 SCC 484.

Court: Supreme Court of India.

Legal issue: The standard of care expected of a bank when opening an account and dealing with instruments deposited into it.

Principle and relevance:

The Supreme Court discussed the banker-customer relationship and the standard of care applicable to a bank when opening an account. The judgment recognises the importance of proper preliminary inquiries, particularly where the circumstances involve potential negligence in collecting cheques or other instruments.

A bank must exercise appropriate care when establishing an account relationship and dealing with transactions that may affect the rights of third parties.

The case is relevant because account opening may create opportunities for fraud if the bank fails to observe the applicable identification and verification procedures.

Practical significance:

Banks should maintain adequate procedures for identifying customers and should exercise appropriate care when circumstances indicate a heightened risk of fraud. However, the case should not be interpreted as imposing a universal requirement for an existing-customer introduction where RBI rules do not require one.

CASE 2: JUSTICE K.S. PUTTASWAMY (RETD.) v. UNION OF INDIA

Citation: (2017) 10 SCC 1.

Court: Supreme Court of India, nine-judge Constitution Bench.

Decision date: 24 August 2017.

Legal issue: Whether the right to privacy is protected as a fundamental right under the Constitution of India.

Principle and relevance:

The Supreme Court recognised privacy as a constitutionally protected fundamental right, grounded in the guarantees of Part III of the Constitution, including Article 21 and the broader constitutional framework.

The decision has important implications for banking because account-opening procedures involve collecting, verifying, storing and processing personal and financial information.

Although the judgment did not establish a complete operational code for bank accounts, its constitutional principles are relevant to the proportionality and legality of measures involving personal information.

Practical significance:

Banks should collect customer information for lawful and specified purposes, protect that information and comply with applicable safeguards. Privacy does not exempt customers from lawful KYC obligations, but KYC measures must operate within the governing legal framework.

CASE 3: JUSTICE K.S. PUTTASWAMY (RETD.) v. UNION OF INDIA — AADHAAR JUDGMENT

Citation: (2019) 1 SCC 1.

Court: Supreme Court of India, Constitution Bench.

Decision date: 26 September 2018.

Legal issue: The constitutional validity of the Aadhaar framework and the legality of specified forms of mandatory Aadhaar linkage, including linkage with bank accounts.

Principle and relevance:

The Supreme Court examined the Aadhaar framework and the relationship between identification, privacy and proportionality.

The judgment invalidated the then-existing requirement under Rule 9 of the Prevention of Money-Laundering (Maintenance of Records) Rules, 2005, insofar as it made Aadhaar linkage with bank accounts compulsory in the form challenged before the Court.

The decision must be read together with subsequent legislative amendments and the current PML Rules and RBI directions.