# CKYCRR 2.0 Explained: Central KYC Changes | FastKYC > CKYCRR 2.0 is the upgraded Central KYC system with real-time APIs, OTP consent and mandatory Aadhaar masking. Source: https://www.fastkyc.com/blog/ckycrr-2-0-explained/ --- [Blog](/blog/)/[Banking](/blog/topics/banking/) # CKYCRR 2.0 Explained: What’s Changing in Central KYC CKYCRR 2.0 is the upgraded Central KYC system with real-time APIs, OTP consent and mandatory Aadhaar masking. Krithick T, Software Engineer22 October 2026·2 min read ## On this page 1. [1. What is CKYCRR?](#what-is-ckycrr) 2. [2. What is CKYCRR 2.0?](#what-is-ckycrr-20) 3. [3. Key Changes in CKYCRR 2.0](#key-changes-in-ckycrr-20) 4. [4. Why CKYCRR 2.0 Matters for Lenders and Fintechs](#why-ckycrr-20-matters-for-lenders-and-fintechs) 5. [5. How the Flow Typically Works](#how-the-flow-typically-works) 6. [6. Important Points for Reporting Entities](#important-points-for-reporting-entities) CKYCRR 2.0 is the upgraded version of India’s Central KYC Records Registry. It moves the system from batch uploads and static documents to real-time, API-based KYC record sharing. For banks, NBFCs, insurers and fintechs, this changes how customer KYC data is uploaded, searched, downloaded and updated. ## [What is CKYCRR?#](#what-is-ckycrr) CKYCRR stands for **Central KYC Records Registry**. It is operated by CERSAI and acts as a central database of customer KYC records across RBI, SEBI, IRDAI and PFRDA regulated entities. The idea is simple: a customer completes KYC once, the record is uploaded to the registry, and other regulated entities can later retrieve it instead of collecting the same documents again. ## [What is CKYCRR 2.0?#](#what-is-ckycrr-20) CKYCRR 2.0 is a major upgrade of the earlier CKYC system (often called CKYC 1.0). Key shifts include: - Move from batch file uploads to real-time APIs - Structured JSON/XML data instead of PDF-heavy submissions - Mandatory OTP-based customer consent before data is shared - Compulsory Aadhaar masking - Better de-duplication and data quality controls Pilot testing for CKYCRR 2.0 concluded in early October 2026. CKYCRR 1.0 services continue to operate until further instructions from CERSAI. ## [Key Changes in CKYCRR 2.0#](#key-changes-in-ckycrr-20) ### 1\. Real-time APIs instead of batch uploads Earlier, institutions uploaded records in bulk (often PDFs or spreadsheets). In 2.0, search, download, upload and update happen through structured APIs with faster validation. ### 2\. Explicit OTP consent Before a regulated entity can download or reuse an existing CKYC record, an OTP is sent to the customer’s registered mobile number. The customer must authenticate the OTP before data is released. ### 3\. Mandatory Aadhaar masking The first eight digits of the Aadhaar number must be masked before a record is submitted or shared. ### 4\. Better data quality and de-duplication The upgraded system places stronger emphasis on structured data, validation rules and reducing duplicate records. ## [Why CKYCRR 2.0 Matters for Lenders and Fintechs#](#why-ckycrr-20-matters-for-lenders-and-fintechs) - Faster reuse of existing KYC records - Stronger consent and audit trail - Alignment with DPDP Act principles - Reduced need to collect the same documents repeatedly - Cleaner onboarding journeys when the customer already has a KYC Identifier ## [How the Flow Typically Works#](#how-the-flow-typically-works) 1. Customer provides KYC Identifier or basic identifiers (PAN, mobile, etc.) 2. Regulated entity searches the registry 3. Customer receives an OTP for consent 4. After successful OTP authentication, the record can be downloaded 5. Institution uses the verified data for onboarding or updates ## [Important Points for Reporting Entities#](#important-points-for-reporting-entities) - Complete testbed and onboarding activities as directed by CERSAI - Update internal systems to support the new API and data formats - Build proper OTP consent capture and logging - Ensure Aadhaar masking is applied consistently - Continue using CKYCRR 1.0 for live transactions until official migration instructions are issued - CKYCRR 2.0 - CKYC - Central KYC - CERSAI - KYC Identifier Krithick T, Software Engineer Krithick develops verification solutions at FastKYC, helping businesses simplify identity, financial, GST, and document verification across digital onboarding, KYC, KYB, and compliance workflows. ## APIs related to this article - [CKYC Download via OTP APIDownload a customer's complete Central KYC record after OTP consent, including verified identity and address data, to onboard without re-collecting documents.](/apis/ckyc-download/) - [CKYC Generate OTP APISend an OTP to the customer's CKYC-registered mobile number to authorise download of their Central KYC record, the first step of a consented CKYC fetch.](/apis/ckyc-generate-otp/) - [CKYC Search APISearch the Central KYC registry with an identity document and retrieve the customer's existing CKYC record, so returning customers skip repeat KYC.](/apis/ckyc-search/) ## Frequently Asked Questions (FAQs) ## Ready to integrate? Talk to our team and we will map the checks your flow actually needs. - One API key for every check - Verified against official Indian records - Built for onboarding at scale [Book a Demo](/book-demo/)[Browse All APIs](/apis/)