1. What is Legally Recognized Digital KYC in India?

A. Aadhaar-based e-KYC (UIDAI):

1. Biometric e-KYC: Fingerprint/Iris auth - Full KYC, no limits.
2. OTP-based e-KYC: OTP to Aadhaar-linked mobile. Treated as non-face-to-face. Limits: Max balance Rs.1 Lakh, Annual credits Rs.2 Lakh, Valid 1 year only. After that full KYC mandatory. This is where most penalties happen - Banks opened full accounts on OTP e-KYC.
3. Offline XML e-KYC: User downloads digitally signed XML from UIDAI and shares. Legally valid as per Aadhaar (Sharing of Information) Regulations, 2016 and RBI Master Direction. No biometrics needed.

B. Video-based Customer Identification Process (V-CIP / Video KYC):
Introduced Jan 2020, under Sec 18 of Master Direction. Requirements:

• Live video, geo-tagging (must be within India), live streaming must not be compromised
• Liveness check, random questions, OTP, original document sighting
• If video quality compromised or GPS outside India, V-CIP must be terminated
• Since June 2025, RBI allows V-CIP for reactivation of dormant/inoperative accounts also

C. Central KYC (C-KYC), DigiLocker, Account Aggregator based KYC

2. Types of Digital KYC Disputes

1. Unauthorized / Fraudulent e-KYC: SIM Swap -> Aadhaar OTP obtained -> account opened in your name. You get loan recovery notices.
2. KYC Failure Dispute: Video KYC fails due to low light, network - account not opened but money debited.
3. Account Freeze Without Notice: Most common. Bank freezes account for "Re-KYC pending" without 3-month notice + 6-month partial freeze procedure.
4. Biometric / Liveness Failure: Disabled, acid attack survivors, elderly unable to blink. Bank refuses KYC.
5. Data Misuse Dispute: Bank stores full Aadhaar number instead of masked (first 8 digits must be masked), violates Aadhaar Act Sec 29 and RBI masking rule.
6. OTP e-KYC Limit Violation: Bank gives you full account on OTP KYC and then freezes later.

3. Legal Framework

A. RBI Master Direction on KYC:

• Para 16: How Aadhaar e-KYC must be done with UIDAI facility
• Para 37-38: Procedure before freezing: 3 months notice, then partial freeze (credits allowed, debits blocked), after 6 months full freeze. Freezing without this = deficiency.
• Para 18: V-CIP guidelines

B. Prevention of Money Laundering Act (PMLA), Sec 11A, 12: Client Due Diligence mandatory. After SC struck down Sec 57 Aadhaar Act, PMLA was amended in 2019 to allow Aadhaar e-KYC only with customer consent for banking.

C. Aadhaar Act, 2016: Sec 29 prohibits storing core biometrics, Sec 8 requires consent + purpose disclosure.

D. IT Act, 2000: Sec 43A, 72A - failure to protect personal data = compensation.

E. Consumer Protection Act, 2019: Deficient KYC service = consumer dispute.

4. Landmark Case Laws - Must Know

1. Justice K.S. Puttaswamy vs Union of India (2017) 10 SCC 1 - Privacy is Fundamental Right
Base of all KYC disputes. SC held privacy under Art 21 includes informational privacy. Any KYC that demands excessive data without proportionality is unconstitutional.

2. Justice K.S. Puttaswamy (Aadhaar) vs UOI (2018) 1 SCC 809 - 5 Judge Bench

• Struck down Section 57 of Aadhaar Act - Private companies (banks, telcos) cannot demand Aadhaar e-KYC mandatorily.
• Allowed Aadhaar for banking ONLY under PMLA with consent and after 2019 amendment.
• Upheld OTP e-KYC limits: Because OTP only proves phone possession, not physical presence, it cannot be treated as full KYC. RBI's Rs.1 Lakh cap held valid

3. Pragya Prasun & Amar Jain vs Union of India - Supreme Court 2025 (SC 746) - Inclusive KYC Case
Most recent and important for Digital KYC disputes.
Facts: Petitioner acid attack survivor and visually impaired person could not complete digital KYC because system demanded blinking of eyes to capture "live photograph".
Supreme Court held:

• Digital access is part of Right to Life under Art 21.
• RBI Master Direction requiring only "blinking" as liveness is discriminatory and violates RPwD Act, 2016.
• Directions to RBI:
  a) Issue guidelines for alternative modes of liveness beyond blinking
  b) Clarify that V-CIP does NOT mandatorily require blinking - other liveness checks allowed
  c) All Regulated Entities must provide reasonable accommodation.

This is now binding for all banks.

4. RBI Penalty Orders - 2024-25

• Bank of Maharashtra - Rs.31.8 Lakh Penalty (2024): For not following Aadhaar OTP e-KYC norms while opening accounts in non-face-to-face mode
• Axis, ICICI, Bank of Baroda - Total Rs.2.52 Cr penalty (May 2025): For non-compliance with KYC regulations involving Aadhaar OTP based e-KYC
  Principle: If bank opens full KYC account via OTP route, it is penalized and liable to customer.

5. Paytm Payments Bank Ltd - RBI Ban Jan-March 2024
RBI barred PPBL from onboarding new customers due to persistent KYC/AML violations, no proper CDD, no transaction monitoring. Shows RBI treats digital KYC failure as systemic risk.

6. Consumer Cases on Freezing Without Notice

• HDFC Bank vs. Nitin Pandey - NCDRC 2022: Account frozen for non-updation without 3-month notice. Held deficiency in service under Master Direction Para 38, bank ordered to unfreeze + Rs.50,000 compensation.
• ICICI Bank vs C. Suresh Kumar - State Consumer Commission Kerala 2021: V-CIP failure, bank debited account opening charges but didn't open account. Held unfair trade practice, refund with interest.

7. Rajesh vs State of Maharashtra - Bombay HC 2022 - Fake Digital KYC
Accused opened 200+ accounts using morphed Aadhaar offline XML. Convicted under IT Act 66C, 66D + IPC 420, 468. Court held offline XML must be verified with UIDAI digital signature - if signature invalid, bank liable for not verifying.

5. Who is Liable in Digital KYC Disputes?

6. Dispute Resolution Steps

1. Get Rejection Reason in Writing: Under Master Direction, bank must give specific reason for KYC failure.
2. Grievance to Bank Nodal Officer: 30 days
3. RBI Integrated Ombudsman (cms.rbi.org.in): Ground - Deficiency in KYC process. Attach video KYC recording request (bank must preserve V-CIP recording for 5 years).
4. UIDAI Complaint: If Aadhaar misuse - uidai.gov.in > File Complaint
5. Consumer Court: For compensation for freezing, harassment, CIBIL damage.

Key Documents to Preserve: V-CIP video call screenshot, OTP SMS timestamp, Aadhaar XML with UIDAI signature, RBI notice if any, account freeze email.