5.1 Overview of AML, CFT, and PF Principles and National Risk Assessment (NRA)

The Integrated AML/CFT/PF Triad

Contemporary financial regulation treats Anti-Money Laundering (AML), Combating the Financing of Terrorism (CFT), and Countering Proliferation Financing (CPF) as an integrated regulatory triad. While each dimension addresses distinct operational hazards, they share identical defensive compliance infrastructures: robust customer due diligence, rigorous transaction monitoring, beneficial ownership transparency, and rapid intelligence reporting to national security agencies.

+---------------------------------------------------------------------------------------------------+
|                                  THE INTEGRATED FINANCIAL DEFENSE TRIAD                           |
+-------------------+-----------------------------------+-------------------------------------------+
| Regulatory Pillar | Primary Operational Target        | Key Governing Statutes / Frameworks       |
+-------------------+-----------------------------------+-------------------------------------------+
| Anti-Money        | Preventing criminals from         | PMLA 2002; PML Rules 2005;                |
| Laundering (AML)  | disguising proceeds of crime      | SEBI AML Master Circular; FATF Rec. 1-23  |
+-------------------+-----------------------------------+-------------------------------------------+
| Combating Terror  | Cutting off financial lifelines   | UAPA 1967; PMLA 2002; UNSC Sanctions      |
| Financing (CFT)   | to terrorist cells and networks   | Resolutions 1267, 1373, 1988; FATF Rec. 5 |
+-------------------+-----------------------------------+-------------------------------------------+
| Countering        | Halting capital and logistics for | WMD Act 2005 (Amended 2022); UNSC Res.    |
| Proliferation (PF)| Weapons of Mass Destruction (WMD) | 1718 (DPRK), 2231 (Iran); FATF Rec. 7     |
+-------------------+-----------------------------------+-------------------------------------------+

India's National Risk Assessment (NRA)

FATF Recommendation 1 mandates that every member nation conduct a comprehensive National Risk Assessment (NRA) to identify, assess, and understand its domestic money laundering and terrorist financing threats:

• In India, the NRA is coordinated by the Department of Revenue, Ministry of Finance, synthesizing input from the Reserve Bank of India (RBI), SEBI, Insurance Regulatory and Development Authority of India (IRDAI), FIU-IND, Enforcement Directorate (ED), Central Bureau of Investigation (CBI), and National Investigation Agency (NIA).
• The NRA identifies banking, precious metals, real estate, and capital market securities trading as critical sectors requiring prioritized supervisory focus.
• In the 2024 FATF Mutual Evaluation of India, India achieved high ratings of effectiveness across legal frameworks, international cooperation, and financial intelligence dissemination, while underscoring continuous vigilance over digital virtual assets and cash-intensive sectors.
• Every registered securities intermediary must align its internal risk models with the findings of the National Risk Assessment.

5.2 The Risk-Based Approach (RBA) and Client Risk Profiling (Low, Medium, High Risk)

Conceptual Foundation of the Risk-Based Approach (RBA)

The Risk-Based Approach (RBA) is the central operational philosophy mandated by FATF and SEBI. Recognizing that financial intermediaries possess finite compliance resources, RBA dictates that:

• Compliance resources and supervisory controls must be allocated proportionally to the specific level of money laundering and terrorist financing risk identified.
• Higher-risk clients and transactions must undergo intensive, aggressive scrutiny (Enhanced Due Diligence - EDD).
• Lower-risk clients may be subjected to streamlined, simplified verification (Simplified Due Diligence - SDD), preventing unnecessary friction for ordinary retail investors.

Low-Risk Clients (Salaried retail, Gov entities)  ---> Standard / Simplified Due Diligence (SDD)
Medium-Risk Clients (HNIs, operating businesses) ---> Standard Periodic Due Diligence
High-Risk Clients (PEPs, non-residents, trusts)  ---> Mandatory ENHANCED DUE DILIGENCE (EDD)

Three-Tier Client Risk Categorization Architecture

Intermediaries must evaluate every client at onboarding and assign them into one of three risk tiers based on objective risk parameters:

+---------------------------------------------------------------------------------------------------+
|                                  CLIENT RISK PROFILING MATRIX                                     |
+-------------------+-----------------------------------+-------------------------------------------+
| Risk Category     | Illustrative Client Profiles      | Required Monitoring & Verification Regime |
+-------------------+-----------------------------------+-------------------------------------------+
| LOW RISK          | - Salaried individuals with clear | - Standard KYC verification (OVD / CKYC)  |
|                   |   verifiable sources of income    | - Standard periodic transaction monitoring|
|                   | - Government departments & PSUs   | - KYC re-verification every **8 to 10 yrs**|
|                   | - Regulated financial entities    |                                           |
+-------------------+-----------------------------------+-------------------------------------------+
| MEDIUM RISK       | - High Net Worth Individuals (HNIs| - Scrutiny of trading volumes vs. networth|
|                   | - Sole proprietorships, trading cos| - Verify source of initial investment funds|
|                   | - Clients with active intraday or | - KYC re-verification every **3 to 5 yrs** |
|                   |   futures/options volumes         |                                           |
+-------------------+-----------------------------------+-------------------------------------------+
| HIGH RISK         | - Politically Exposed Persons (PEP| - Mandatory Senior Management Approval    |
| (Special Category)| - Non-Residents & Offshore Trusts | - Detailed verification of Source of Wealth|
|                   | - Companies with complex offshore | - Continuous real-time transaction watch  |
|                   |   structures or nominee directors | - KYC re-verification every **2 years**   |
|                   | - Clients from FATF Grey/Blacklist|                                           |
|                   | - Non-Profit Organizations (NPOs) |                                           |
+-------------------+-----------------------------------+-------------------------------------------+

Four Multi-Dimensional Risk Parameters

When classifying a client, the intermediary's automated AML scoring engine evaluates four interconnected vectors:

1. Customer Risk: Occupation, legal form, reputation, public profile, and beneficial ownership transparency.
2. Geographic Risk: Residence in border zones, offshore tax havens, or jurisdictions identified by FATF as non-cooperative.
3. Product / Service Risk: Electronic order routing, algorithmic trading, high-leverage derivatives, and private placement notes.
4. Delivery Channel Risk: Non-face-to-face digital onboarding without biometric VIPV poses higher vulnerability than direct physical onboarding.

5.3 Counter-Proliferation Financing (PF), WMD Act 2005/2022, and UNSC Sanctions Screening

Understanding Proliferation Financing (PF)

Proliferation Financing involves the provision of funds, financial services, or logistical assets to state or non-state actors seeking to develop, manufacture, stockpile, acquire, or export Weapons of Mass Destruction (WMD)—encompassing nuclear, radiological, chemical, and biological armaments and their ballistic delivery systems. Unlike conventional money laundering, proliferation networks exploit legitimate international commerce, dual-use industrial goods, and front companies in major financial hubs.

The Indian Legal Mandate: The WMD Act, 2005 (Amended 2022)

India implements international counter-proliferation mandates through the Weapons of Mass Destruction and their Delivery Systems (Prohibition of Unlawful Activities) Act, 2005 (WMD Act).

In 2022, Parliament enacted the WMD (Amendment) Act, 2022, introducing Section 12A:

• Prohibition of Financing: Strictly prohibits any person from financing any activity related to WMDs or their delivery systems.
• Asset Freezing Powers: Empowers the Central Government to freeze, seize, or attach funds, financial assets, or economic resources owned or controlled by designated persons or entities suspected of proliferation activities.
• Prohibition on Making Funds Available: Prohibits any financial intermediary from making any funds, securities, or financial services available directly or indirectly to designated entities.

UNSC Resolution Adopted (Res 1718/2231) ---> Ministry of External Affairs Notifies Domestic Order
                                                              |
                                                              v
              SEBI / FIU-IND Circulates Updated Sanctioned Entities List to Market
                                                              |
                                                              v
     Intermediaries Screen Entire Client Demat & Bank Database in REAL TIME!
(Match Detected -> FREEZE ACCOUNT IMMEDIATELY & REPORT TO FIU-IND WITHIN 24 HOURS)

UNSC Sanctions Screening Protocols

Under SEBI guidelines, all registered securities market intermediaries must implement automated screening engines:

1. UNSC 1267 / 1989 / 2253 Committee Lists: Designates individuals and entities associated with Al-Qaeda, ISIL (Da'esh), and international terrorist organizations.
2. UNSC 1718 Sanctions Committee: Targets the Democratic People's Republic of Korea (DPRK / North Korea) nuclear and ballistic missile proliferation programs.
3. UNSC 2231 Framework: Governs non-proliferation measures regarding Iran.
4. Mandatory Freezing Protocol: If an intermediary discovers that a prospective or existing client matches a designated individual on a UNSC sanctions list, the intermediary must:
   • Immediately freeze all securities, demat holdings, and funds in the account without prior notice to the client.
   • Refuse any pending buy, sell, or transfer transactions.
   • Inform the Central Nodal Officer under the UAPA / WMD Act and file an immediate STR with FIU-IND within 24 hours.