The International Financial Services Centres Authority (IFSCA) has significantly updated its Anti-Money Laundering (AML), Counter-Terrorist Financing (CFT), and Know Your Customer (KYC) Guidelines. This comprehensive revision, effective as of August 04, 2026, impacts all regulated entities operating within IFSCs, clarifying applicability and refining critical definitions.
What Changed: The 30-Second Answer
The IFSCA, via its updated IFSCA (AML, CFT and KYC) Guidelines, 2022, revised as on August 03, 2026 (Ref: IFSCA/LEGAL/356, dated 04 August 2026), has issued a comprehensive update to its AML/CFT and KYC framework. This revision clarifies which entities are exempted from these guidelines and introduces new definitions, including for KYC Registration Agencies (KRAs) and extends record-keeping periods for Non-Profit Organisations (NPOs) to five years.
Understanding the Updated IFSCA Guideline 2026
The IFSCA (AML, CFT and KYC) Guidelines, 2022, as updated on August 03, 2026, represent the Authority’s latest effort to bolster the financial integrity of International Financial Services Centres (IFSCs). This document, which came into force from its publication in the official gazette, serves as the cornerstone for all Regulated Entities (REs) in their fight against financial crime. It meticulously details requirements across twelve chapters, covering everything from risk-based approaches and customer due diligence (CDD) to suspicious transaction reporting and internal compliance frameworks. The latest IFSCA Guideline 2026 specifically incorporates amendments made via circulars issued up to January 02, 2026, reflecting the Authority’s dynamic approach to regulatory oversight.
Who Does This IFSCA Guideline 2026 Apply To?
The provisions of these Guidelines generally apply to every Regulated Entity that is licensed, recognized, registered, or authorized by the IFSCA. This broad applicability ensures a consistent standard of AML/CFT compliance across the diverse financial ecosystem of IFSCs. Furthermore, the guidelines extend to a Financial Group of the Regulated Entity, to the extent specified in Chapter XII, ensuring a holistic approach to risk management within financial conglomerates.
However, the Authority has also carved out specific exemptions. Entities or activities explicitly exempted from these Guidelines include:
- ‘Global-in-House Centre’ registered under IFSCA (Global In-House Centres) Regulations, 2020.
- ‘International Branch Campus’ (“IBC”) or an ‘Offshore Educational Centre’ (“OEC”) of a Foreign University or a Foreign Educational Institution registered under IFSCA (Setting up and Operation of International Branch Campuses and Offshore Education Centres) Regulations, 2022.
- ‘Financial Crime Compliance Services Provider’ registered under IFSCA (Book-keeping, Accounting, Taxation and Financial Crime Compliance Services) Regulations, 2024.
- A Financial Institution providing services only to entities in its ‘Financial Group’ located in a country not identified by FATF as a ‘High-risk jurisdiction subject to call for action’.
Even with these exemptions, it’s crucial to note that exempted entities must still undertake and document Business Risk Assessment. Should any AML/CTF risks be identified, these entities are still obligated to comply with the Prevention of Money Laundering Act, 2002, and its Rules, as well as these Guidelines.
What Are the Key Definitional Changes and Clarifications?
The updated Guidelines introduce several critical definitions and amendments that practitioners must understand:
- Beneficial Owner (BO) Thresholds: For companies and partnership firms, the “controlling ownership interest” or ownership/entitlement to capital or profits has been revised to “more than ten per cent.” This is a significant reduction from previous thresholds of twenty-five and fifteen per cent, respectively, as per circulars dated May 23, 2023, and September 8, 2023. For trusts, beneficiaries with “ten per cent. or more interest” must be identified, also reduced from fifteen per cent.
- KYC Registration Agency (KRA): A new definition has been inserted, as of January 02, 2026, identifying a KRA as an entity granted a certificate of registration under the IFSCA (KYC Registration Agency) Regulations, 2025. This formalizes the role of KRAs within the IFSC AML/CFT framework, potentially streamlining KYC processes for Regulated Entities, similar to how AI is revolutionizing KYC onboarding times for global banks.
- Non-Profit Organisations (NPOs) Record Keeping: The Guidelines clarify that Banking Units, Financial Institutions, or Intermediaries must register NPO clients on the DARPAN Portal of NITI Aayog, if not already registered. Crucially, they must maintain such registration records for a period of “five years” after the business relationship ends or the account is closed, whichever is later. This specific retention period was inserted via a circular dated January 02, 2026. This extended record-keeping period emphasizes the heightened scrutiny on NPOs to prevent misuse for terror financing.
- Certified Copy: The definition now explicitly includes a list of authorized officials in FATF-compliant jurisdictions who can certify copies for non-resident individuals, including NRIs. This provides practical clarity for REs dealing with international clients.
- Officially Valid Document (OVD): The definition of OVD for simplified measures now includes “equivalent e-documents” for proof of address, recognizing the increasing digitalization of identity verification processes.
What Actions Must Regulated Entities Take?
Regulated Entities (REs) in IFSCs must immediately review their existing AML/CFT and KYC policies and procedures against these updated Guidelines. Key action items include:
- Update BO Identification Thresholds: Revise internal policies to reflect the new “ten per cent.” beneficial ownership threshold for companies, partnership firms, and trusts. This will require re-evaluating existing customer relationships and potentially conducting enhanced due diligence where ownership structures now fall under the new threshold.
- Review Exemption Status: Entities previously exempted or those that believe they qualify for exemption must ensure they meet the precise criteria outlined in clause 1.2.3. Even if exempted, the mandate to undertake and document Business Risk Assessment remains, and compliance with the PMLA, 2002, is non-negotiable if AML/CTF risks are identified.
- Enhance NPO Due Diligence and Record Keeping: Banking Units, Financial Institutions, and Intermediaries dealing with NPOs must ensure registration on the DARPAN Portal and implement systems to retain these records for a minimum of five years post-relationship termination or account closure. This is a clear directive from the IFSCA and cannot be overlooked.
- Integrate KRA Framework: With the formal definition of KRAs, REs should assess how they can leverage KRA services for customer identification and verification, potentially improving efficiency and compliance, aligning with broader trends in RegTech adoption for compliance automation.
- Refine CDD Procedures: Annexure I provides guidance on CDD procedures, and Annexure 2 details CDD requirements for Indian nationals. REs should ensure their CDD processes align with these annexures, incorporating the expanded list of acceptable certifiers for non-resident individuals and the recognition of equivalent e-documents for OVDs where applicable.
- Internal Policy Review: Chapters VIII, IX, and X cover Internal Policies, Compliance, Audit, Training, Record Keeping, and Suspicious Transaction Reporting. REs must update their internal frameworks to reflect all definitional changes and clarified responsibilities, ensuring their staff are adequately trained on the latest requirements.
What This Circular Does NOT Cover
While comprehensive, these updated Guidelines do not introduce entirely new regulatory categories or specify immediate penalties for non-compliance. The circular primarily updates existing provisions, clarifies applicability, and refines definitions within the framework of the IFSCA (AML, CFT and KYC) Guidelines, 2022. It does not provide new deadlines for implementing changes beyond the “come into force from the date of its publication” for the original 2022 Guidelines, implying an expectation of continuous compliance with the updated provisions. Specific operational instructions for implementing the DARPAN portal registration or KRA integration are not detailed within this text; REs will need to refer to relevant underlying regulations or subsequent guidance for such operational specifics.
The Algoy Perspective
The IFSCA’s continuous refinement of its AML/CFT and KYC Guidelines underscores a clear message: compliance is not a static exercise in the IFSC. The reduction in beneficial ownership thresholds to ten percent is particularly consequential. This change significantly broadens the scope of individuals requiring identification and verification, demanding that Regulated Entities revisit their entire customer base, especially for complex corporate structures and trusts. Many firms will find their existing systems, built around higher thresholds, inadequate for this granular level of scrutiny. This necessitates not just a policy update, but often a re-engineering of data collection, analysis, and ultimate beneficial owner (UBO) identification processes. Expect a surge in requests for updated ownership information from clients. Firms that haven’t invested in robust RegTech solutions for UBO analysis will face substantial manual overhead and increased risk of non-compliance. It’s a clear signal that the IFSCA expects proactive, technology-driven compliance, aligning with global shifts towards more rigorous transparency in financial ecosystems. This is where AI-native surveillance models become indispensable, moving beyond reactive, rules-based compliance.
Frequently Asked Questions
What is the new beneficial ownership threshold for companies and partnership firms?
As per the updated IFSCA Guideline 2026, the controlling ownership interest or entitlement to shares, capital, or profits for companies and partnership firms, for the purpose of identifying a beneficial owner, is now “more than ten per cent.” This threshold was previously twenty-five per cent for companies and fifteen per cent for partnership firms.
Are all entities registered with IFSCA subject to these Guidelines?
No, while generally applicable to every Regulated Entity licensed, recognized, registered, or authorized by the Authority, specific entities such as Global-in-House Centres, International Branch Campuses, Offshore Educational Centres, Financial Crime Compliance Services Providers, and certain financial institutions serving only their financial group are explicitly exempted under clause 1.2.3. However, exempted entities must still undertake Business Risk Assessment and comply with PMLA, 2002, if AML/CTF risks are identified.
What are the new record-keeping requirements for Non-Profit Organisations?
Regulated Entities classified as Banking Units, Financial Institutions, or Intermediaries must register their NPO clients on the DARPAN Portal of NITI Aayog, if not already registered. Furthermore, they are required to maintain these registration records for a period of “five years” after the business relationship with the NPO has ended or the account has been closed, whichever occurs later.
Can non-resident individuals get their documents certified outside India?
Yes, for non-resident individuals including Non-Resident Indians (NRIs), the certification of officially valid documents may be carried out by authorized officials of a bank in a FATF-compliant jurisdiction, Notary Public (outside India), Court Magistrate (outside India), Judge (outside India), Certified public or professional accountant (outside India), Lawyer (outside India), or the Embassy/Consulate General of the individual’s country of citizenship.
Sources and Further Reading
- IFSCA (AML, CFT and KYC) Guidelines, 2022 – updated as on August 03,2026
- International Financial Services Centres Authority (IFSCA)
- Search and track this circular on RegChat, Algoy’s regulatory chatbot
Track every new RBI, SEBI and IFSCA circular and ask questions in plain English on RegChat — Algoy’s free regulatory chatbot.
