Opening an account, and what KYC actually is
The answer
KYC means Know Your Client. It is a legal requirement on the broker, not a favour you do for them. The broker must prove, to the regulator, that you are a real identified person, that the bank account being linked is yours, and that the money entering the account is plausibly yours.
Why this costs you money
The cost of getting KYC wrong is not a fee. It is time, and it arrives on the worst possible day.
Here is how it happens. Somebody opens an account with an old mobile number, a bank account in a joint name, or an address that no longer matches their identity document. Everything works. Trades go through for 2 years. Then a rule changes, or the account is flagged in a periodic review, and the account is frozen for trading until the record is fixed.
The freeze does not care what you hold. You cannot sell. You submit documents, you wait for a re-verification, and the market does whatever it does in the meantime. In India in 2024, a large number of investors discovered exactly this when validation rules for KYC records changed and records that had been accepted for years stopped being treated as validated.
There is a second cost, and it is quieter. Many people let an agent, a relative or a relationship manager complete the account opening for them. The email address and mobile number registered are then not theirs. Every alert, contract note, statement and pledge notification goes somewhere else. The most useful safety feature of a modern trading account is that it tells you what has happened in it. If the messages go to somebody else, that feature is switched off.
How it works
KYC answers 4 questions about you, and every document you submit maps to 1 of them.
| The question | What proves it in India | What proves it in the US |
|---|---|---|
| Who are you? | PAN, plus Aadhaar or another officially valid document | Name, date of birth, and a Social Security Number or taxpayer number |
| Where do you live? | Aadhaar, passport, driving licence, utility bill | Residential address, verified against records |
| Is this bank account yours? | Cancelled cheque, bank statement, or a penny-drop verification | A linked bank account verified by micro-deposits or an aggregator |
| Can you bear this risk? | Income proof, only if you want derivatives | A suitability questionnaire on income, net worth and experience |
The last row is the one people skip and it is the one with teeth. In both countries the broker must record your income, net worth and experience before letting you into leveraged products. Answering that questionnaire dishonestly to unlock a product removes the only mechanical brake between you and an instrument you have not learned yet.
In-person verification. Both countries require the broker to satisfy itself that the person opening the account is the person in the documents. In India this is usually a short video or an Aadhaar-based electronic authentication. In the United States it is an identity check against databases, with documents requested only if that check fails.
Periodic review. KYC is not done once. Both regimes require records to be refreshed on a risk-based cycle. That is why an account opened in 2019 can be asked for documents in 2026 without anybody having done anything wrong.
What it tells you, and what it does not
A completed KYC tells the regulator that a real, identified person owns the account. It tells you nothing about whether the broker is honest or solvent. Those are different checks, and article 1 covers them.
It also does not verify the source of the money in any deep sense. A bank account link proves the account belongs to you. It does not prove the money inside it is yours. This is exactly why the rules also prohibit you from trading on behalf of somebody else in your own account, and why lending your demat account to a friend who "just needs to hold some shares for a while" is a serious matter, not a favour.
The decision rule
Complete your own account opening yourself, on your own phone, with 3 things that must be yours and nobody else's.
- The mobile number that receives the one-time passwords.
- The email address that receives contract notes and statements.
- The bank account that money moves to and from.
If any of the 3 belongs to an agent, a relative or an advisor, the account is not fully yours, whatever the name on it says.
Try this now
Three minutes. You are going to check the 3 things that decide whether you find out when something happens in your account.
- Open your broker's app and go to Profile, My Account or Account details. Read the registered email address and the registered mobile number character by character. Not the ones you assume. The ones printed there.
- Check the bank account shown. Confirm the last 4 digits belong to an account you can log into today.
- In India, open a KYC Registration Agency website — CVL KRA, NDML, CAMS, Karvy or DotEx — and enter your PAN. It will return your KYC status. Note whether it says validated, registered, on hold or something else.
- In the United States, open your broker's profile page and check the same 3 items, plus your recorded investment objective and income band. Those are the answers on record for you.
- Search your email inbox for the phrase "contract note" or "trade confirmation". Check that the most recent one is actually there.
What you should see. For most readers everything matches and this takes 3 minutes. For a meaningful minority, 1 of 3 things is wrong: an old mobile number, an email address belonging to whoever helped open the account, or a KYC status that is not validated.
If step 5 returns nothing, that is the important finding. It means the statements are going somewhere you do not read, and you have been investing without the receipts.
Three real cases
1. The KYC validation change, India, from 1 April 2024 — a rule change can freeze a working account KYC Registration Agencies moved to a stricter validation standard. Records that had been created without certain officially valid documents stopped being treated as validated, and a large number of investors found themselves unable to start new investments until they redid their KYC. Nobody had done anything wrong. The standard moved, and the accounts that were closest to the old minimum were the ones that broke.
2. Karvy Stock Broking, 2019 (India) — why the registered email matters When SEBI examined Karvy Stock Broking, part of what made the misuse possible was that clients did not know what was happening in their own accounts. The depositories now send alerts directly to the account holder for debits and pledges. Those alerts only work if the contact details on the demat account are the investor's own. This is the practical reason step 1 above is worth 3 minutes.
3. Robinhood, 30 June 2021 (United States) — the suitability questionnaire is not a formality FINRA ordered Robinhood Financial to pay approximately $70 million in fines and restitution, the largest financial penalty it had ordered up to that point. One of the findings was that the firm had approved thousands of customers to trade options when the information those customers had supplied did not meet the firm's own eligibility criteria. The questionnaire that decides what you are allowed to trade is the last mechanical check before a product that can lose more than you deposited. It only works if the answers are true.
The question that resolves it
A novice opening an account asks: what documents do they want?
An expert asks: who receives the alerts from this account, and can I stop a transaction I did not authorise?
The documents are the price of entry and they are the same for everybody. The contact details are the control, and they are the part that is frequently wrong.
What would make this wrong
If KYC were simply bureaucratic friction, then removing it would cost nobody anything. The countries that have loosened identity verification for financial accounts have seen exactly what you would expect: accounts opened in other people's names, used to move money and to hold shares that belong to somebody else.
Two honest limits. KYC does not stop fraud against you. It stops your account being used as an anonymous vehicle. A fully KYC-compliant account can still be emptied by somebody who has your one-time password.
And the periodic re-verification burden falls hardest on the people least able to handle it: investors who have moved, changed name after marriage, or work abroad. That is a real cost of the system.
In India
You need 2 documents that most adults already have.
- PAN. The permanent account number issued by the income tax department. It is the identifier for the whole securities system. Nothing can be opened without it.
- An officially valid document for identity and address. Aadhaar is the usual one. A passport, driving licence or voter identity card also qualifies.
Then the account-specific items: a bank proof, a signature image, and income proof if you want the derivatives segment. The process is usually completed online with Aadhaar-based electronic signature and a short video for in-person verification.
Three features are specific to India.
KYC Registration Agencies. Your KYC record is stored centrally by a KRA, so opening a second account at a different broker does not mean repeating the whole process. There is also a Central KYC Records Registry, called CKYC.
Nomination. Since 1 September 2026, a person opening a new single-holder demat account or mutual fund folio must either name a nominee or file a declaration opting out. Existing accounts are not frozen for the absence of a nominee. Article 4 is entirely about this.
Segment activation. Equity delivery is available by default. The derivatives segment must be separately activated with income proof.
Account opening usually completes within 1 to 3 working days.
In the United States
The legal basis is different and the outcome is similar.
Under Section 326 of the USA PATRIOT Act, every broker must run a Customer Identification Program: name, date of birth, address, and an identification number, which for a US person is the Social Security Number. Separately, FINRA Rule 2090 requires the firm to use reasonable diligence to know the essential facts about every customer.
You will also be asked to certify your tax status. A US person signs a Form W-9. A non-US person signs a Form W-8BEN, which is also what an Indian resident investing in US shares signs, and which reduces the withholding tax on US dividends under the India-United States tax treaty.
Verification is usually instant and database-driven. Documents are requested only when the automated check fails. An account can often be opened and funded the same day.
Margin and options are separate applications with their own questionnaires and their own approval levels. A cash account is the default and it is the right starting point for almost everybody.
Where they differ, and what that tells you
The difference is where the verified record lives.
In India, your KYC record sits with a central agency and follows you between brokers. You can look it up yourself with your PAN, from a website that is not your broker's. That is unusual and it is genuinely useful.
In the United States, each broker runs its own identification program. There is no central consumer-facing register to check. You verify your details inside each broker's own profile page, one firm at a time.
That tells you which failure to watch for.
An Indian investor's risk is a central status changing underneath them — a record marked "on hold" because a standard moved, freezing an account that had worked for years. The defence is to check the KRA status directly, once a year.
An American investor's risk is fragmentation: 3 brokers holding 3 slightly different sets of details, so a change of address reaches 2 of them and not the third. The defence is a list of every brokerage account and an afternoon each year spent making the details identical.
In both countries the same sentence applies. The account is only yours if the messages it sends arrive at you.
Carry this
- KYC is a duty on the broker, and every field maps to a real failure.
- Your mobile number, your email address, your bank account. All 3 must be yours alone.
- Check your KYC status once a year, from outside the broker's app.