RBI fines Canara Bank ₹41.80 lakh for KYC and inoperative account violations
Synopsis
The RBI has penalised Canara Bank ₹41.80 lakh for two specific failures: missing CKYCR upload deadlines for KYC records and wrongly tagging accounts as inoperative. The action, backed by a full show-cause process under the Banking Regulation Act, signals the regulator's continued focus on customer data compliance and account-management accuracy across public sector banks.
Key Takeaways
The RBI imposed a penalty of ₹41.80 lakh on Canara Bank on 5 June 2025 .
Canara Bank failed to upload KYC records to the Central KYC Records Registry (CKYCR) within prescribed timelines.
The bank also wrongly classified certain accounts as inoperative despite the last customer-induced transaction being less than one year old.
The penalty is based on the ISE 2025 inspection, referencing the bank's financial position as on 31 March 2025 .
Action was taken under Section 47A(1)(c) of the Banking Regulation Act, 1949 ; further action by the RBI remains possible.
The Reserve Bank of India (RBI) on Friday, 5 June imposed a monetary penalty of ₹41.80 lakh on Canara Bank for failing to comply with the central bank's directions on Know Your Customer (KYC) norms and the rules governing unclaimed deposits and inoperative accounts. The action follows a statutory inspection that found specific, sustained lapses in regulatory compliance at the public sector lender.
What the Inspection Found
The Statutory Inspection for Supervisory Evaluation (ISE 2025), conducted by the RBI with reference to Canara Bank's financial position as on 31 March 2025, identified two distinct violations. First, the bank failed to upload KYC records of certain customers to the Central KYC Records Registry (CKYCR) within the prescribed timeline. Second, the bank incorrectly classified certain accounts as inoperative, even though the last customer-induced transaction in those accounts was less than one year old — in direct contravention of RBI guidelines.
The Show-Cause Process
Following the supervisory findings, the RBI issued a show-cause notice to Canara Bank, asking it to explain why a penalty should not be levied for the non-compliance. The bank submitted a written reply, made additional submissions, and was also given an opportunity for a personal oral hearing. After considering all of these, the RBI concluded that the charges were sustained and that a monetary penalty was warranted.
Legal Basis for the Penalty
The penalty has been imposed under Section 47A(1)(c) read with Sections 46(4)(i) and 51(1) of the Banking Regulation Act, 1949. The RBI clarified that the action is based solely on deficiencies in regulatory compliance and does not cast doubt on the validity of any transaction or agreement the bank has entered into with its customers. The central bank also noted that this penalty is without prejudice to any further action it may initiate against Canara Bank.
What This Means for Customers and the Bank
While ₹41.80 lakh is modest relative to Canara Bank's balance sheet, the penalty signals that the RBI is actively scrutinising compliance with KYC timelines and the correct treatment of dormant accounts — areas that directly affect customer data integrity and access to funds. Incorrect classification of accounts as inoperative can restrict customers from accessing their own money, making such lapses a consumer-protection concern as much as a regulatory one. This is part of a broader pattern of RBI enforcement actions against banks for KYC and account-management deficiencies in recent years. The central bank is expected to continue its supervisory cycle across other lenders as part of ISE 2025 reviews.
Point of View
But that misses the point. The RBI's enforcement here is about signalling, not scale — specifically, that KYC upload timelines and inoperative-account classifications are non-negotiable compliance floors, not administrative afterthoughts. The wrongful inoperative-account tagging is the more consequential finding: it can lock customers out of their own funds and distort a bank's dormant-deposit reporting. As ISE 2025 reviews roll across the sector, other public sector banks with legacy compliance gaps should treat this as a preview of their own exposure.
NationPress
13 Aug 2026
Frequently Asked Questions
Why did the RBI fine Canara Bank?
The RBI fined Canara Bank ₹41.80 lakh for two compliance failures: not uploading KYC records to the Central KYC Records Registry within the required timeframe, and incorrectly classifying certain accounts as inoperative when the last customer-induced transaction was less than one year old. Both violations were identified during the ISE 2025 statutory inspection.
What is the Central KYC Records Registry (CKYCR)?
The CKYCR is a centralised repository where banks and financial institutions are required to upload verified KYC records of their customers. It enables a 'know your customer once' framework, reducing duplication across the financial system. Failure to upload records within prescribed timelines is a regulatory violation.
What does 'inoperative account' mean and why does misclassification matter?
An account is typically classified as inoperative if there has been no customer-induced transaction for two years. Misclassifying an account as inoperative prematurely can restrict a customer's access to their funds and skew a bank's reporting on unclaimed deposits. The RBI found Canara Bank had tagged accounts inactive despite transactions occurring within the past year.
Does this penalty affect Canara Bank's customers or their transactions?
No. The RBI explicitly stated that the penalty is based on regulatory compliance deficiencies and does not affect the validity of any transaction or agreement between Canara Bank and its customers. It is a supervisory action, not a finding against customer accounts.
Can the RBI take further action against Canara Bank over these findings?
Yes. The RBI clarified that the monetary penalty is without prejudice to any other action it may initiate. This means additional supervisory or enforcement measures remain possible, though none have been announced as of the date of this penalty order.
