# PMLA: Prevention of Money-laundering Act, 2002 and PML Rules

> India’s anti-money laundering law: reporting entities must verify clients, maintain records and report to FIU-IND.

URL: https://securei3.com/standards/india-pmla/
Category: India regulations: Law or regulation
Provider: Secure iQube (independent consultancy; ISO certificates are issued by accredited certification bodies; SOC and ISAE reports by licensed CPA and audit firms, which Secure iQube can arrange through partner firms)


The Prevention of Money-laundering Act, 2002 and the PML (Maintenance of Records) Rules oblige reporting entities (banks, financial institutions, intermediaries and designated businesses and professions) to verify client identity and beneficial ownership, maintain records, appoint a principal officer and designated director, and file reports such as cash transaction and suspicious transaction reports with the Financial Intelligence Unit – India (FIU-IND).

We build AML/CFT programmes for reporting entities, including risk assessment, policies, onboarding and monitoring procedures, FIU-IND reporting workflows and training.

## Who it is for

- Banks, NBFCs and payment system operators
- Securities and insurance intermediaries
- Virtual digital asset service providers and other reporting entities

## Benefits

- An AML programme that withstands inspection
- Efficient STR and CTR reporting
- Trained, confident front-line teams

## How Secure iQube helps

1. **Applicability and scoping**: Confirm whether and how the law applies to you, entities, data, systems, roles and territories.
2. **Data and process mapping**: Build a record of processing or control inventory so obligations can be tied to real systems and owners.
3. **Gap assessment**: Measure current practice against each obligation and rank the gaps by legal and business risk.
4. **Remediation roadmap**: Policies, notices, contracts, technical controls and governance, sequenced so the highest risks close first.
5. **Evidence and ongoing monitoring**: A compliance calendar, metrics and periodic reviews so you can demonstrate compliance to a regulator or customer at any time.

## Frequently asked questions

### Are crypto and virtual digital asset providers covered?

Yes. Virtual digital asset service providers were brought within the PMLA as reporting entities in 2023 and must register with FIU-IND and meet AML obligations.

Related: https://securei3.com/standards/rbi-kyc-master-direction/, https://securei3.com/standards/aml-cft-programme/, https://securei3.com/standards/fatf-recommendations/

Contact: https://securei3.com/contact/: info@securei3.com