Bank KYC Update (Re-KYC): Due Dates, Methods, Documents

Banks must periodically refresh your KYC (Know Your Customer) details, a process usually called re-KYC. As of October 2026, RBI requires this at least every 2 years for high-risk customers, 8 years for medium-risk and 10 years for low-risk customers. If nothing has changed, you can usually finish it in minutes with a self-declaration through net banking, the app, registered email or an ATM; if your address has changed, a self-declaration of the new address works too, and you can visit any branch rather than your home branch.

When is your re-KYC due?

Banks classify each customer by risk, based on factors such as occupation, transaction pattern and source of funds. Most salaried individuals and pensioners are treated as low risk, but only your bank can tell you your category.

RBI's 2025 amendments also require banks to send you advance intimations before the due date and reminders after it, including at least one by letter, so check your registered email, SMS and post.

Worked example: working out the due date

• Ramesh (medium risk): last KYC on 10 August 2018. Due date = 10 August 2018 + 8 years = 10 August 2026. As of October 2026, his update is overdue by about two months.
• Sunita (low risk): account opened with full KYC on 1 January 2015. Due date = 1 January 2015 + 10 years = 1 January 2025. RBI's June 2025 relief gave low-risk individuals time until one year after the due date or 30 June 2026, whichever was later. One year after her due date is 1 January 2026, which is earlier than 30 June 2026, so her extended deadline was 30 June 2026. That date has passed, so she should update now.
• Arjun (high risk, frequent cross-border transfers): last KYC on 5 December 2024. Due date = 5 December 2026, so he has about seven weeks left.

The relief for low-risk accounts was a time extension, not a waiver. No further general extension had been announced as of October 2026, so if your re-KYC was due before mid-2025 and is still pending, assume it is overdue.

Three situations, three methods

What you need to submit depends on what has changed since your last KYC.

Officially valid documents include Aadhaar (proof of possession), passport, driving licence, voter ID, NREGA job card and the National Population Register letter. Keep PAN handy because banks also check that your PAN is valid.

How to update KYC online: step by step

Exact menus differ by bank, but the flow is similar across SBI, HDFC Bank, ICICI Bank, Axis Bank, Kotak and others.

1. Log in to the official app or net banking. Never use a link from an SMS, WhatsApp message or email.
2. Find the KYC section. It is often under Profile, Service Requests or "Re-KYC / Update KYC". Many banks show a banner when re-KYC is due.
3. Choose your case. "No change", "Address change" or "Full KYC update".
4. Confirm details. Check name, date of birth, address, PAN, occupation and income range. Upload proof if asked.
5. Authenticate. Usually an OTP to your registered mobile. For full KYC, the bank may use Aadhaar OTP e-KYC or schedule a video KYC call with an official.
6. Save the reference number and wait for the confirmation SMS or email. Some banks take a few working days to process.

Doing it at a branch or through a business correspondent

Under RBI's June 2025 amendment, you can update KYC at any branch of your bank, not just the one where you opened the account. Business correspondent (BC) outlets can also accept a no-change or address-change self-declaration, which they authenticate and forward to the branch. Carry original ID and a photocopy, and ask for an acknowledgement.

What happens if you ignore the update

Banks treat overdue KYC as a compliance risk. In practice, customers report a range of restrictions:

• debits blocked while credits are allowed (sometimes called partial freeze);
• UPI, card, net banking or cheque facilities suspended;
• new fixed deposits, loans or lockers refused until KYC is current.

RBI guidance on freezing for overdue periodic updation has changed over the years and bank practice varies. If your account is restricted, ask the bank in writing which instruction it is relying on, complete the update, and ask for written confirmation when full access is restored. Delays can also block an FD renewal or premature withdrawal. If you plan to move idle savings into a deposit once your KYC is sorted, the FD calculator shows what the money would earn.

A long-unused account with overdue KYC can also become inoperative. Our guide on reactivating a dormant bank account covers that process.

Re-KYC scams: how they work and how to stay safe

"Your account will be blocked today, update KYC now" is one of the most common fraud messages in India. Typical tricks:

• an SMS or WhatsApp link to a fake bank page that collects your login, card number or OTP;
• a call from a "bank officer" asking you to install a screen-sharing or remote-access app;
• a request to "verify" by sending ₹1 through UPI, which actually authorises a collect request or mandate.

Banks do not ask for your PIN, password, CVV or OTP to update KYC. If you have shared any of these, call your bank immediately to block cards and net banking, report at cybercrime.gov.in or on the 1930 helpline, and check RBI's Sachet portal (sachet.rbi.org.in) for unregistered entities. Our UPI scams guide has the full recovery steps.

Keeping KYC current across all your accounts

• List every bank account, including old salary accounts and joint accounts, with the date of the last KYC.
• Keep one mobile number and email registered everywhere so you receive reminders.
• Close accounts you no longer use. Fewer accounts mean fewer re-KYC deadlines.
• Update immediately after a move rather than waiting for the due date. Address mismatches cause problems with cheque books, card delivery and loan applications.
• Update nominees at the same time. Since 1 November 2025, you can nominate up to four people for a deposit account.

Separately, KYC for mutual funds and demat accounts runs through KYC registration agencies under SEBI rules, and CKYC (Central KYC) holds a common record. A bank re-KYC does not automatically update every other financial account, so check each one.

Where to complain

If a bank refuses to accept a valid self-declaration, insists you visit only your home branch, or keeps your account frozen after you update KYC:

1. Write to the bank's grievance redressal officer or principal nodal officer, with your reference number.
2. If there is no reply within 30 days, or the reply is unsatisfactory, file a complaint with the RBI Integrated Ombudsman at cms.rbi.org.in.

Key takeaways

• As of October 2026, re-KYC is due at least every 2, 8 or 10 years for high, medium and low-risk customers.
• No change or address-only change? A self-declaration through net banking, app, registered email or ATM is usually enough.
• You can update KYC at any branch; Aadhaar OTP e-KYC and video KYC are also allowed.
• The low-risk extension to 30 June 2026 has passed, so pending updates are likely overdue now.
• Never update KYC through a link, call or screen-sharing app; banks do not ask for OTP, PIN or CVV.