RBI fines Paytm Payments Bank Rs. 5.39 crore for breaking the KYC rules

The Reserve Bank of India (RBI) fines Paytm Payments Bank Rs 5.39 crore for violating KYC norms. The central bank said that the action was taken by the regulator for non-compliance with certain provisions of the ‘Reserve Bank of India (Know Your Customer (KYC)) Directions, 2016’, ‘RBI Guidelines for Licensing of Payments Banks’ read with ‘Enhancement of maximum balance at end of the day’, ‘Cyber security framework in banks’ read with ‘Guidelines on reporting of unusual cyber security incidents’ and ‘Securing mobile banking applications including UPI ecosystem’. 

“This penalty has been imposed in exercise of powers vested in RBI conferred under the provisions of Section 47A(1)(c) read with Section 46(4)(i) of the Banking Regulation Act, 1949," the RBI said in its statement. 

RBI added that this action is based on deficiencies in regulatory compliance and is not intended to pronounce upon the validity of any transaction or agreement entered into by the bank with its customers. 

In a press release issued by RBI added that special scrutiny from the KYC/AML perspective of the bank was conducted by RBI and a comprehensive system audit of the bank was conducted by auditors identified by RBI. 

The examination of the special scrutiny report, comprehensive system audit report and related correspondence pertaining to the same revealed, inter alia, non-compliance with the aforesaid directions by the bank to the extent (i) it failed to identify the beneficial owner in respect of entities onboarded by it for providing payout services, (ii) it did not monitor payout transactions and carry out risk profiling of entities availing payout services, (iii) it breached the regulatory ceiling of end of the day balance in certain customer advance accounts availing payout services, (iv) it reported a cyber security incident with delay, (v) it failed to implement device binding control measure related to ‘SMS delivery receipt check’, and (vi) its V-CIP infrastructure failed to prevent connections from IP addresses outside India.