RBI Fines Shri Ram Finance Corporation ₹8.1 Lakh Over KYC and Governance Failures

The Reserve Bank of India has imposed a monetary penalty of ₹8.10 lakh on Shri Ram Finance Corporation Private Limited for deficiencies involving customer risk categorisation, Central KYC Records Registry reporting and governance controls.

According to RBI’s 21 August 2026 enforcement release, the underlying order was issued on 19 August. The penalty was imposed under section 58G(1)(b) read with section 58B(5)(aa) of the Reserve Bank of India Act, 1934, following a statutory inspection conducted with reference to the company’s financial position as of 31 March 2025.

Three compliance failures sustained

After reviewing the company’s written response, additional submissions and oral representations at a personal hearing, RBI said three charges were sustained.

First, the company appointed a director without obtaining prior written permission from RBI even though the appointment resulted in a change of more than 30% of its directors, excluding independent directors.

Second, the company failed to put in place a system to categorise customers into low-, medium- and high-risk categories. Customer risk classification is a core element of the RBI Know Your Customer framework because it affects the intensity of due diligence and ongoing monitoring applied to different relationships.

Third, the company failed to upload KYC records for certain customers to the Central KYC Records Registry within the prescribed timeline.

RBI said the action is based on deficiencies in regulatory compliance and is not intended to determine the validity of any transaction or agreement between the company and its customers. The penalty is also without prejudice to any other action RBI may initiate.

The enforcement action is a relatively small monetary penalty, but the underlying findings are operationally significant: RBI identified gaps at three separate control points — governance approval, initial customer risk classification and KYC-record submission. For NBFC compliance teams, the case is a reminder that KYC obligations extend beyond document collection at onboarding and depend on the supporting risk-governance process working as designed.