What Happened?
On September 7, 2026, the Reserve Bank of India (RBI) issued a critical compliance circular to all regulated entities—including commercial banks, payment banks, non-banking financial companies, and financial institutions. The circular mandates strict implementation of Section 51A of the Unlawful Activities (Prevention) (UAPA) Act, 1967 following the United Nations Security Council's (UNSC) updated sanctions list released on September 4, 2026.
The UNSC amended 2 key entries on the ISIL (Da'esh) and Al-Qaida Sanctions List—adding new aliases, passport details, and addresses for two individuals designated as terrorist suspects. All regulated entities must immediately cross-check their customer databases against this updated list and take appropriate action to prevent accounts linked to listed individuals and entities.
Background & Legal Context
What is Section 51A of UAPA Act?
Section 51A of the Unlawful Activities (Prevention) Act, 1967 is India's primary anti-terrorism financing law. It mandates that:
- No person or entity shall have any account or hold any property if they appear on the UNSC's sanctions lists
- Banks and regulated entities must proactively screen all customers against international terrorist designations
- Assets of designated persons must be frozen immediately
- Non-compliance attracts severe criminal penalties under UAPA
This section works in conjunction with the RBI's Know Your Customer (KYC) Directions, 2025, which require regulated entities to maintain updated customer information and screen against international sanctions lists periodically.
Legal Framework in Force
- UAPA Act, 1967 – Primary anti-terrorism law in India
- UAPA Order, 2021 (amended April 2024) – Procedural guidelines for compliance
- RBI KYC Directions, 2025 – Requirements for regulated entities under Chapter IX
- Income Tax Act, 2025 – While primarily focused on taxation, Section 265 and related sections empower income tax authorities to coordinate with law enforcement on proceeds of terrorism and unlawful activities
Why This Matters for Compliance
Failure to comply with Section 51A creates a dual liability for regulated entities:
- Criminal liability – Imprisonment up to 7 years under UAPA
- Civil liability – Asset seizure and regulatory penalties from RBI/MHA
- Regulatory action – License cancellation, monetary fines, or suspension of operations
What Does This Mean for You?
For Banks and Financial Institutions:
This September 2026 update is immediately effective. Your organization must:
- Immediately freeze accounts of any customer matching the updated UNSC sanctions list (including the 2 newly amended entries)
- Conduct fresh screening using all name variations and aliases provided (e.g., the individual listed as QDi.431 has 8 different known aliases—banks must search using all variations)
- Check enhanced due diligence (EDD) records for any beneficial owners or linked parties appearing on the sanctions list
- Block all transactions related to designated persons, including wire transfers, fund movements, or account access
- Report freezing action to the Ministry of Home Affairs (MHA) and RBI within the prescribed timeline
For Non-Banking Financial Companies (NBFCs):
NBFCs accepting deposits or offering investment products must implement the same screening protocols. Any NBFC that fails to identify a terrorist-linked customer faces:
- Action by RBI under the Master Directions for NBFC regulation
- Criminal prosecution under UAPA if it is proven that the NBFC knowingly facilitated terrorist financing
- Suspension or cancellation of Certificate of Registration (CoR)
For Asset Reconstruction Companies (ARCs):
ARCs purchasing stressed assets must screen sellers, borrowers, and beneficial owners against the updated list. Acquiring assets linked to designated entities could make the ARC liable for terrorist financing.
For Income Tax Assesses (Taxpayers):
While not directly regulated entities, individual and corporate taxpayers must understand that:
- Income derived from terrorist-linked activities is not deductible under Income Tax Act, 2025
- Any remittance to or from a listed entity is reportable to income tax authorities under Schedule FA (Foreign Assets)
- Failure to disclose terrorist funding links in ITR (Income Tax Return) for AY 2025-26 or AY 2026-27 invites prosecution under Section 276C of Income Tax Act, 2025
What Should You Do Now?
Immediate Actions (Within 48 Hours):
- Download the updated UNSC sanctions list and feed it into your Customer Information File (CIF) system
- Run automated screening tools across all active and dormant accounts using the 2 newly amended entries and all their known aliases
- Generate a compliance report listing any matches found (if any)
- Notify your Compliance Officer and Chief Risk Officer (CRO) immediately if a customer matches
If You Identify a Match:
- Freeze the account immediately – Do not allow any withdrawals or transactions
- Prepare a Suspicious Transaction Report (STR) and file it with the Financial Intelligence Unit (FIU-India)
- Inform MHA's Joint Secretary (Counter-Terrorism Coordination) about the account freezing action
- Document all actions with timestamps and approvals from senior management
- Do not tip off the customer – Alerting a designated person that their account has been frozen is itself a criminal offense
Ongoing Compliance (Quarterly/Annual):
- Update your screening software with UNSC list amendments as and when notified by RBI
- Conduct periodic re-screening of existing customers against updated sanctions lists
- Train your KYC and Compliance teams on the latest UAPA requirements and this September 2026 update
- Maintain de-listing procedures – If a customer wishes to be de-listed, forward the request to MHA through official channels
Key Takeaways
- Section 51A UAPA is absolute and non-negotiable – There is no discretion; if a customer matches the UNSC list, the account must be frozen immediately and permanently
- The September 2026 UNSC update adds 2 newly amended entries with multiple aliases and passport numbers—search for all variations in your database
- Failure to comply triggers criminal liability (up to 7 years imprisonment) and regulatory penalties (license cancellation, monetary fines)
- Income Tax assesses must disclose any terrorist financing links in their ITR for AY 2025-26 and AY 2026-27 to avoid prosecution
- RBI compliance is now tightened under the KYC Directions, 2025 – regulated entities face quarterly audits and surprise inspections to verify UAPA compliance
Bottom Line: This is not a discretionary update. Every regulated entity operating in India must have completed screening against the updated UNSC sanctions list by now. Do not delay. Any customer account linked to a designated terrorist entity must be frozen without exception. If you have already identified such accounts, report them immediately to FIU-India and MHA. Non-compliance is a criminal offense.
Need expert help with this? EaseValue CAs in Jaipur — WhatsApp 63677 44602
EaseValue