UAPA Section 51A: Terrorist Sanctions List Update August 2026

What Happened?

On August 18, 2026, the Reserve Bank of India (RBI) issued a critical circular (RBI/2026-27/235) directing all regulated financial entities—including commercial banks, small finance banks, payment banks, cooperative banks, NBFCs, and ARCs—to immediately implement updates to the United Nations Security Council (UNSC) sanctions list. The UNSC added or amended 4 entries (3 individuals and 1 entity) to its consolidated list of individuals and entities suspected of having terrorist links. These amendments were approved by UNSC Press Release SC/16433 dated August 14, 2026.

The updated list includes three individuals (Amin Muhammad Ul Haq Saam Khan from Afghanistan, Abubakar Swalleh from Uganda, and Hamida Nabaggala from Uganda) and one entity (Islamic State in Iraq and the Levant - Khorasan, or ISIL-K). All financial institutions must ensure they do not maintain any accounts in the names of these individuals or entities and must strictly comply with the assets freeze, travel ban, and arms embargo provisions.

Background & Legal Context

Section 51A of the Unlawful Activities (Prevention) Act, 1967 is the primary legal framework that mandates compliance with international sanctions. This section requires all regulated entities to refrain from dealing with individuals or entities listed by the United Nations Security Council as suspected terrorists or terrorist-linked entities.

The RBI circular references Chapter IX of the RBI Know Your Customer (KYC) Directions 2025 (amended December 29, 2025), which establishes the procedural framework for regulated entities. The KYC directions require banks and financial institutions to:

• Maintain updated lists of sanctioned individuals and entities
• Cross-check all new and existing customers against these lists
• Freeze accounts immediately upon identification of a match
• Report any findings to the appropriate authorities
• Follow the UAPA Order dated February 2, 2021 (amended April 22, 2024) for strict compliance procedures

While the Income Tax Act 2025 does not directly address terrorist sanctions, compliance with Section 51A of UAPA is mandatory under anti-money laundering (AML) regulations. Any bank or financial entity that violates these provisions faces serious penalties under the UAPA, including:

• Criminal prosecution
• Substantial fines and penalties
• Suspension of banking licenses
• Civil liability for unauthorized transactions

For AY 2026-27, regulated entities must ensure their internal compliance systems are updated to reflect these new sanctions entries immediately.

What Does This Mean for You?

For Banks and Financial Institutions: You must immediately implement a three-step compliance process. First, access the updated UNSC sanctions list and compare it against your entire customer database—both individuals and entities. Second, if any match is found (even a partial name match that requires verification), you must freeze the account immediately without advance notice to the account holder. Third, you must report the match to your compliance officer and the relevant authorities as per the prescribed procedure.

The August 2026 update adds specific entries that should be flagged in your systems. Amin Muhammad Ul Haq is listed with multiple aliases and date-of-birth variations, which means your matching algorithms must account for variations in name spelling and dates. Abubakar Swalleh has specific identification numbers (Uganda passport A00195974 and national ID CM920231090NZA) that should be added to your screening database. Hamida Nabaggala, a female individual from Uganda, is involved in ISIL financing in Central Africa and should be flagged for any transactions involving Democratic Republic of Congo connections. ISIL-K is an entity with multiple aliases, and any account or transaction involving these entities must be blocked.

For Non-Financial Businesses: If you operate in sectors that interact with financial institutions—such as import-export, jewelry, real estate, or cash-intensive businesses—you must be aware that your business partners or customers may be subject to these sanctions. If a bank suddenly freezes a customer's account or blocks a transaction, it may be due to this sanctions compliance. Do not attempt to circumvent sanctions by using third-party accounts or shell entities.

For Individuals and MSMEs: If your account is frozen due to a name match with the sanctions list, understand that this is a temporary compliance measure. You have the right to request delisting through the UN Ombudsperson office if you believe you have been incorrectly identified. The process is independent and impartial, and you can submit your delisting request through the official UN Ombudsperson portal.

Tax Compliance Connection: Under the Income Tax Act 2025, if you receive income from or conduct transactions with sanctioned entities without proper compliance checks, you may face scrutiny during income tax assessments. The tax authorities increasingly cross-reference AML/sanctions compliance records during assessments for AY 2026-27. Non-compliance can lead to penalties under Section 271(1)(c) of the Income Tax Act 2025 for concealment of income or tax evasion.

What Should You Do Now?

Immediate Actions (Within 7 Days of This Circular):

• Update Your Screening Software: If your institution uses automated customer screening tools, immediately request your software provider to update the sanctions list database with the 4 new entries (3 individuals and 1 entity) as of August 14, 2026.
• Manual Database Review: Conduct a manual review of all existing customer accounts (both retail and corporate) to identify any matches with the updated list. Pay special attention to variations in spelling, aliases, and date-of-birth ranges.
• Freeze Accounts if Matched: If any account is identified as matching a sanctions entry, initiate the account freeze procedure immediately without notifying the account holder in advance. Document the match and the freeze decision with date and time stamps.
• Escalate to Compliance Officer: Report all matches and freezes to your Chief Compliance Officer and the bank's UAPA nodal officer on the same day.

Short-Term Actions (Within 30 Days):

• Notify the Ministry of Home Affairs (MHA) Joint Secretary (CTCR) if any matched accounts are found, as per the prescribed procedure in the UAPA Order dated February 2, 2021.
• If any customer claims mistaken identity, create a file documenting the customer's assertion, supporting documents (passport, ID, address proof), and your verification process.
• Train your KYC and compliance teams on the new sanctions entries and ensure they understand the matching criteria and escalation procedures.
• Review your AML policy to ensure it explicitly covers UNSC sanctions compliance and update it if necessary.

Ongoing Actions:

• Monitor the RBI and UN websites weekly for any further updates to the sanctions list (the UNSC frequently amends the list).
• Implement a monthly review process to ensure all screening software is up-to-date with the latest sanctions entries.
• For AY 2026-27 income tax purposes, maintain detailed records of all sanctions screening activities, matches, and freeze decisions to demonstrate compliance to tax authorities during any assessment.

Key Takeaways

• Section 51A UAPA Compliance is Non-Negotiable: All regulated financial entities must immediately implement the August 2026 UNSC sanctions list updates. Non-compliance can result in criminal prosecution and suspension of banking licenses.
• 4 New Sanctions Entries Added: The list now includes 3 individuals (primarily from Afghanistan and Uganda) and 1 entity (ISIL-K). Institutions must screen all customers against these entries within 7 days.
• Account Freeze Procedure is Mandatory: Any account matching a sanctions entry must be frozen immediately without prior notice. Delays or advance notification can breach UAPA Section 51A and invite regulatory action.
• Tax Compliance Link: Non-compliance with sanctions can trigger income tax assessment penalties under Section 271(1)(c) of the Income Tax Act 2025 for AY 2026-27. Maintain detailed compliance documentation.
• Delisting Rights Are Available: If customers believe they are incorrectly identified, they can submit independent delisting requests to the UN Ombudsperson. Banks should inform such customers of this right while maintaining the freeze pending delisting approval.

Need expert help with this? EaseValue CAs in Jaipur — WhatsApp 63677 44602