| Cash Transaction Report to FIU-IND | CTR | Monthly. By the 15th of the month following the month of the transactions. | Monetary penalty on the reporting entity and its designated director under section 13 of the PMLA. | PML (Maintenance of Records) Rules, 2005 Rule 8 |
| Suspicious Transaction Report to FIU-IND | STR | On the trigger event. Within seven working days of arriving at a conclusion that a transaction is suspicious. | Penalty under section 13; and tipping off the customer is separately prohibited. | PML (Maintenance of Records) Rules, 2005 Rule 8 |
| Upload KYC records to the Central KYC Records Registry | CKYC template | On the trigger event. Within ten days of commencement of an account-based relationship. | Reporting failure under the PMLA rules and an RBI supervisory finding on KYC quality. | PML (Maintenance of Records) Rules, 2005 Rule 9(1A) |
| Periodic updation of KYC | — | On the trigger event. At least once every two years for high-risk customers, eight years for medium risk and ten years for low risk, from the date of last KYC. | Accounts have to be restricted or frozen, which produces both customer complaints and a supervisory finding. | RBI Master Direction — Know Your Customer |
| Report a cyber security incident to CERT-In | — | On the trigger event. Within six hours of noticing or being brought to notice of any incident in the specified list. | Punishable under section 70B(7) of the IT Act, 2000; and it is the first thing asked for in any RBI or FIU follow-up. | CERT-In Directions dated 28 April 2022 under section 70B(6), IT Act, 2000 |
| Foreign Liabilities and Assets return | FLA | Annual. By 15 July each year, for entities that have received FDI or made overseas investment in any previous year. | Treated as a contravention of FEMA, compoundable with a penalty. | FEMA, 1999; RBI FLA return directions |
| Report issue of shares to a non-resident | FC-GPR (on FIRMS) | On the trigger event. Within 30 days of allotment. | Late Submission Fee, and the round is not clean for the next diligence. | FEM (Non-debt Instruments) Rules, 2019; RBI Master Direction on Reporting |
| Report transfer of shares between a resident and a non-resident | FC-TRS (on FIRMS) | On the trigger event. Within 60 days of transfer of shares or receipt or remittance of consideration, whichever is earlier. | Late Submission Fee; unreported secondaries are a standard diligence exception. | FEM (Non-debt Instruments) Rules, 2019 |
| NBFC supervisory returns to the RBI (verify: Return names, periodicity and the filing window depend on the NBFC layer and have been migrating to the RBI's CIMS platform. Confirm the current return list for the client's layer.) | DNBS series on the RBI's reporting platform | Quarterly. Monthly, quarterly and annual returns depending on the NBFC's layer under scale-based regulation. | Supervisory action and monetary penalty under section 58B of the RBI Act for delayed or incorrect returns. | RBI Master Direction — Returns to be submitted by NBFCs |
| Statutory Auditor's Certificate on continued eligibility (verify: Confirm the current form and due date on the RBI reporting platform; this requirement has been re-stated across successive master directions.) | SAC | Annual. Submit online within one month of finalisation of the balance sheet and in any case by 31 December. | A supervisory red flag on registration eligibility, since the certificate is what evidences continued principal-business compliance. | RBI Master Direction — Returns to be submitted by NBFCs |
| Submit borrower data to all credit information companies (verify: The move to fortnightly reporting and the associated compensation framework changed the cycle. Confirm the current periodicity and cut-off dates.) | — | Monthly. On the periodicity fixed by the RBI, which was moved from monthly to fortnightly reporting. | Compensation payable to consumers for delayed correction of credit records, and penalties on the credit institution. | Credit Information Companies (Regulation) Act, 2005; RBI directions on credit information reporting |
| System audit report for a payment aggregator or PPI issuer (verify: The submission date is set in the entity's authorisation letter and the applicable circular. Replace this placeholder with the client's actual condition.) | System audit report by a CERT-In empanelled auditor | Annual. Annually, submitted to the RBI within the period stated in the authorisation conditions. | Authorisation conditions are breached, and the RBI has restricted onboarding of new merchants for exactly this. | RBI Guidelines on Regulation of Payment Aggregators and Payment Gateways |
| Net worth certification for a payment aggregator (verify: Confirm the certification date required by the client's authorisation; the net worth figures themselves are settled.) | Chartered accountant's net worth certificate | Annual. Rs 15 crore net worth at application and Rs 25 crore by the end of the third financial year of grant of authorisation, maintained thereafter. | Failure to maintain net worth is a ground to refuse or withdraw authorisation. | RBI Guidelines on Regulation of Payment Aggregators and Payment Gateways |
| Annual board review of the regulatory policy set | — | Annual. Fair Practices Code, interest rate model, KYC/AML policy, outsourcing policy, IT governance policy, grievance redressal policy and recovery agent policy reviewed and re-approved by the board. | The absence of a current board-approved policy is the finding that turns a customer complaint into a supervisory action. | RBI Master Directions (Scale Based Regulation, KYC, Outsourcing, IT Governance) |
| Section 13(2) demand notice before enforcement | Demand notice under section 13(2) | On the trigger event. After classification as a non-performing asset, give the borrower 60 days to discharge; reply to any section 13(3A) representation within 15 days. | Enforcement measures taken without a valid notice or without dealing with the representation are routinely set aside by the DRT. | SARFAESI Act, 2002 sections 13(2) and 13(3A) |
| Cheque dishonour — statutory steps | — | On the trigger event. Present within three months of the cheque's date; demand notice within 30 days of the dishonour memo; wait 15 days; file the complaint within one month of that period expiring. | Miss any step and the complaint is not maintainable, with only a limited power to condone the delay in filing. | Negotiable Instruments Act, 1881 sections 138 and 142 |