RBI UAPA Compliance 2026 | Shahzad Bhatti Network Listing

What Happened?

The Reserve Bank of India (RBI) has directed all regulated entities (REs)—including banks, non-banking financial companies (NBFCs), and payment system operators—to strictly comply with United Nations (UN) and Unlawful Activities (Prevention) Act (UAPA) requirements following the formal listing of Shahzad Bhatti Network as a terrorist organisation. This directive is effective immediately and applies to all entities operating under RBI's regulatory umbrella as of September 2026.

This is not a minor administrative update. The RBI's instruction carries legal weight under the Banking Regulation Act, 1949, and the Reserve Bank of India Act, 1934. Non-compliance can attract penalties, suspension of licenses, and criminal prosecution for both institutions and their officials.

Background & Legal Context

To understand why this matters, let's trace the legal framework:

• UAPA (Unlawful Activities Prevention Act), 1967: This Central law empowers the Government of India to designate individuals, organizations, and networks as terrorist entities. Once listed, all financial transactions with these entities become illegal.
• Prevention of Money Laundering Act (PMLA), 2002: This works alongside UAPA. Section 4 of PMLA makes it an offense to directly or indirectly hold or transfer property relating to scheduled offences or terrorism-related activities.
• RBI Master Directions on Know Your Customer (KYC) and Anti-Money Laundering (AML): These require all regulated entities to maintain updated lists of terrorist organizations and individuals, screen customers and transactions, and report suspicious activities to the Financial Intelligence Unit (FIU).
• Banking Regulation Act, 1949 (Sections 35, 45, 47): The RBI can issue binding directions to banks and financial institutions on compliance matters. Violation is a criminal offense under Section 56.

While this is primarily an RBI/FEMA matter, it has indirect implications for tax compliance. Under Income Tax Act 2025, Section 139 requires disclosure of all financial accounts and assets. If a taxpayer unknowingly maintains an account used for transactions with designated terrorist entities, they face both civil and criminal liability under PMLA Section 4, and under Income Tax Act 2025, Section 276C (willful failure to furnish returns/disclose income).

What Does This Mean for You?

For Banks and NBFCs:

• You must immediately cross-check your customer database against the updated UAPA list containing Shahzad Bhatti Network. Any existing accounts linked to this entity must be frozen without delay.
• All transactions in the past 5-7 years involving this entity must be reported to FIU-India under the Suspicious Transaction Report (STR) regime within 7 days of discovery.
• Failure to file STRs is a criminal offense under PMLA Section 12, carrying imprisonment up to 10 years and fines up to ₹10 lakhs.
• Your staff handling compliance must undergo mandatory training on UAPA requirements. Ignorance is not a legal defense.

For Individual Taxpayers and Businesses:

• If you have any financial dealings (direct or indirect) with Shahzad Bhatti Network, you must immediately stop and report to the relevant authorities. Continued dealings constitute the offense of financing terrorism under UAPA Section 17.
• If you discover you unknowingly transacted with this entity, self-report to your bank and the relevant authority. Voluntary disclosure carries lighter consequences than discovery by enforcement agencies.
• During tax audits for AY 2025-26 and AY 2026-27, the Income Tax Department will cross-reference your financial statements with RBI's terrorist entity list. Any unexplained transactions will trigger detailed investigations.
• Under Income Tax Act 2025, Section 199 (notice for search and seizure), tax authorities have powers to investigate accounts linked to designated entities. Even indirect involvement can attract penalties under Section 271 (failure to furnish information).

For Chartered Accountants and Tax Professionals:

• You have a duty under the CA Act to ensure clients comply with UAPA. If you knowingly facilitate transactions with designated entities, you face debarment and criminal prosecution.
• When preparing financial statements or tax returns (ITR forms for AY 2026-27), disclose any accounts or transactions that were inadvertently connected to such entities.
• Update your AML and KYC policies immediately. Many clients may not be aware of their exposure; you must conduct due diligence.

What Should You Do Now?

Immediate Actions (Within 1 Week):

• For Financial Institutions: Obtain the latest UAPA list from RBI's website. Run a complete customer database scan using automated compliance tools. Flag all high-risk customers for manual review. Document the exercise with timestamps.
• For Individual & Business Taxpayers: Review your bank statements for the past 3 years. Search for any transactions involving names similar to Shahzad Bhatti Network entities. If found, contact your bank's compliance officer immediately.
• For Tax Professionals: Issue advisories to all clients requesting confirmation of no involvement with designated entities. Maintain written confirmations in your files.

Medium-Term Actions (1-3 Months):

• Update your Board resolutions and compliance procedures to reflect the latest UAPA requirements. File copies with RBI if you are a regulated entity.
• Conduct staff training on terrorism financing risks and UAPA compliance. Maintain attendance records.
• Review your supplier, vendor, and counterparty lists. Perform enhanced due diligence on high-risk jurisdictions.
• For tax purposes, if you need to explain any historical transactions that now appear suspicious, prepare detailed documentation showing business rationale and due diligence at that time.

Filing & Disclosure for AY 2026-27 ITR:

• In Schedule FA (Financial Assets) and Schedule A (Other Sources), disclose complete information about bank accounts. If any account was frozen or flagged due to UAPA compliance, mention it in the Notes to Accounts or in the ITR itself.
• If you received income from any account that is now under investigation, maintain separate records of that income's source and legitimacy.
• File Form 67 (TDS Certificate) carefully. If your employer or client's bank has flagged transactions as suspicious, discuss with your CA before filing ITR.

Key Takeaways

• Immediate Compliance Required: RBI's directive on Shahzad Bhatti Network listing is effective now. All regulated entities must update their UAPA lists and screening processes without delay.
• Criminal & Civil Penalties: Violation attracts prosecution under UAPA Section 17 (20 years imprisonment), PMLA Section 4 (10 years), and Banking Regulation Act Section 56. Tax penalties under Income Tax Act 2025 follow automatically.
• Due Diligence is Your Shield: Document that you performed proper KYC and AML checks at the time of transaction. This protects you during future audits or enforcement action by either RBI or Income Tax Department.
• Self-Disclosure Helps: If you discover involvement post-facto, voluntary reporting to FIU and your bank carries lower consequences than discovery during raids or audits.
• Cascading Audit Risk: Non-compliance with RBI directives triggers income tax investigations. Tax auditors will now cross-check client databases against UAPA lists. Ensure your tax returns for AY 2025-26 and AY 2026-27 are clean of any suspicious transactions.

Need expert help with this? EaseValue CAs in Jaipur — WhatsApp 63677 44602