Published on 15 September 2026
Reserve Bank of India (RBI)
Draft KYC Amendment Directions, 2026 (Money Mule Accounts SOP)
Update: RBI released draft directions proposing a standardized Standard Operating Procedure (SOP) for commercial and cooperative banks to address cyber-fraud and money mule accounts.
The Bottom line: Under the proposed framework, banks can place a temporary debit hold (up to 60 days) on accounts or transactions exceeding ₹1,000 suspected of involvement in cyber fraud. Account holders will receive a 20-day window to justify or explain the nature of the transaction. This aims to curb digital financial fraud while establishing clear due process before account freezes.
Securities and Exchange Board of India (SEBI)
Ease of Compliance for FPIs Investing Exclusively in Government Securities
Update: Circular issued on September 7, 2026, relaxing operational guidelines for Foreign Portfolio Investors (FPIs).
The Bottom line: SEBI extended exemptions regarding investor-group grouping norms to all FPIs that restrict their investments exclusively to Government Securities (G-Secs). This simplifies regulatory reporting and documentation requirements for international institutional capital seeking debt market exposure in India.
Pension Fund Regulatory and Development Authority (PFRDA)
Directives on Central Recordkeeping Agency (CRA) Interoperability & Grade A Recruitment
Update: PFRDA published administrative and operational guidelines regarding CRA service selections and opened its annual recruitment drive.
The Bottom line: Recent communications emphasize seamless portability between CRAs for NPS Subscribers without additional KYC friction. Administratively, PFRDA released notification details for its 2026 Officer Grade A intake to expand regulatory oversight capabilities.
Insurance Regulatory and Development Authority of India (IRDAI)
Public Advisory on Unauthorized Digital Platforms & Bima Bharosa Spoofing
Update: IRDAI issued a warning regarding fraudulent websites mimicking the official Bima Bharosa portal.
The Bottom line: The regulator alerted policyholders against fraudulent domains collecting sensitive customer OTPs and bank credentials. In parallel, IRDAI directed regulated entities to strengthen domain verification and fraud monitoring systems for grievance redressal mechanisms.