A mid-size private bank verifies the same customer more times than anyone there would care to count. She opened a savings account in 2021 — full KYC. She took a personal loan in 2023 — full KYC again. In 2025 her risk category flagged her for periodic re-KYC. This year, a fintech she signed up with re-verified the same PAN, the same address, the same face. Four ceremonies, one unchanged identity — and almost none of it produced information anyone didn't already have.
Multiply that by every customer, every product and every re-KYC cycle, and repetitive identity verification becomes one of the largest recurring operating costs in Indian retail finance. The strange part is how little of it is about verifying anything.
The cost hides in three places, not one
Most cost conversations stop at "onboarding is expensive." The expensive part is what comes after.
- Onboarding drop-off. Every extra minute of KYC friction at account opening bleeds conversions — and in a market where a competitor is one app away, the abandoned application is a real, if invisible, line item.
- Re-KYC queues. The RBI's KYC Master Direction requires periodic updation — every two years for high-risk customers, eight for medium, ten for low. That is a permanent back-office workload re-verifying people whose details have not changed, funded by the institution, on repeat, forever.
- Data liability. Under the DPDP Act, 2023, holding raw Aadhaar and PAN copies you no longer need is no longer just storage cost — it is a data-minimisation and storage-limitation exposure. Every warehoused document is now a liability the law expects you to have shed.
"But CKYC already solves this" — partly, and it's worth being precise
India did build the reuse layer. CKYC — the Central KYC Records Registry, run by CERSAI — lets a customer be verified once and recognised across banks, mutual funds and insurers. And it is improving: CKYCRR 2.0, announced in the Union Budget 2025, replaces static PDF records with real-time JSON/XML APIs, moving the system toward perpetual KYC; a June 2025 circular even requires institutions to download the existing record, compare, and modify only on an actual change — no blind overwrites, updates within seven days.
So reuse is not hypothetical. It works, at national scale, at roughly ₹1 per transaction. But CKYC closes one gap and leaves three open:
- It is individual-centric. It was never built to carry a verified business identity — the entity, its beneficial owners, its authorised signatory.
- Its records are institution-submitted attestations, not holder-controlled credentials. The customer cannot choose what a given lender sees.
- Reuse is record-level and all-or-nothing. There is no selective disclosure — no way to share a verified name and address without surrendering the full document set.
What consent-backed reusable identity actually changes
The real shift, then, isn't "reuse versus no reuse" — CKYC already settles that. It is the move to a holder-controlled, selectively-disclosable, evidence-tiered credential that works for entities as well as individuals:
- Verified once at source, then re-presented by the holder on consent — the institution receives a cryptographic assertion, not a raw document it now has a duty to minimise.
- Selective disclosure — Full, Lite or Custom — so a lender receives exactly the fields its use case needs and nothing it must then protect.
- Entity and signatory — DigiKYB and DigiKYC — so the same reuse that saves an individual re-verification also spares a business the weeks of document scrutiny every new lender repeats.
- Callable in milliseconds by an institution's systems — or, increasingly, by its AI agent — so the check stops being a queue and becomes an API call.
One honest boundary: this reuse is lender-scoped today. A single verified identity flowing freely across banking, securities, insurance and telecom is a larger prize, but a regulation-gated one — it needs harmonisation across regulators, not just better technology. The near-term win is narrower and entirely real: stop paying, over and over, to re-learn what you already know.
The bottom line
The cost of traditional KYC was never the first check. It is the fourth — and the raw documents you are still holding to run it. Consent-backed reusable identity cuts onboarding friction, retires the recurring re-verification of things that never changed, and lets a bank hold an assertion instead of a liability.
See how source-verified, reusable identity works, or read why reusable KYB matters for business lending.