DUE DILIGENCE IN BANKING TRANSACTIONS – DETAILED EXPLANATION WITH CASE LAWS

1. INTRODUCTION

Due diligence in banking transactions refers to the systematic process through which banks and financial institutions verify customers, examine financial transactions, assess legal and financial risks, and ensure compliance with applicable banking laws and regulatory requirements.

Due diligence is an essential component of responsible banking because banks handle public deposits, extend credit, process domestic and international payments, and facilitate financial transactions involving individuals, businesses, and government institutions.

The principal objective of banking due diligence is to prevent money laundering, terrorist financing, fraud, identity theft, unauthorized transactions, regulatory violations, and financial losses.

In India, banking due diligence is primarily governed by the Reserve Bank of India (RBI), the Prevention of Money Laundering Act, 2002, and related regulatory directions.

Internationally, due diligence obligations are influenced by the Financial Action Task Force (FATF), Basel Committee on Banking Supervision, and anti-money-laundering legislation.

Legal Principle: Banks must exercise reasonable care, professional judgment, and regulatory diligence when establishing customer relationships, processing transactions, and providing financial services.

2. MEANING AND SCOPE OF DUE DILIGENCE

Banking due diligence involves examining relevant information before entering into or continuing a financial relationship.

It includes verifying customer identities, understanding transaction purposes, assessing financial capacity, identifying beneficial ownership, and monitoring unusual financial activities.

A. Customer Due Diligence (CDD)

Customer due diligence involves verifying the identity of customers and assessing the nature of their banking relationships.

Important requirements include:

Verification of customer identity through reliable documentation.

Identification of beneficial owners.

Understanding the purpose of the banking relationship.

Assessment of customer risk profiles.

Continuous monitoring of transactions.

Updating customer information periodically.

Banks must follow applicable KYC requirements while ensuring that verification procedures are proportionate to regulatory risks.

B. Enhanced Due Diligence (EDD)

Enhanced due diligence applies where customers or transactions present higher risks.

Examples include:

Politically exposed persons.

Complex ownership structures.

Unusual cross-border transactions.

Customers connected with high-risk jurisdictions.

Transactions lacking a clear economic purpose.

Relationships involving elevated money-laundering risks.

Enhanced due diligence may involve additional documentation, senior management approval, closer transaction monitoring, and verification of sources of funds or wealth where required.

C. Transaction Due Diligence

Transaction due diligence involves examining financial activities to identify suspicious or unauthorized transactions.

Banks may examine transaction amounts, frequency, geographical destinations, customer profiles, and payment patterns.

A transaction inconsistent with a customer's established financial profile may require additional investigation.

D. Credit Due Diligence

Credit due diligence is conducted before granting loans or other credit facilities.

Banks generally examine:

Borrower's financial statements.

Credit history and repayment capacity.

Existing liabilities.

Security and collateral documentation.

Legal ownership of pledged assets.

Business viability and cash-flow projections.

Regulatory and sector-specific risks.

Inadequate credit due diligence can expose banks to loan defaults, fraud, regulatory action, and litigation.

3. LEGAL FRAMEWORK GOVERNING BANKING DUE DILIGENCE IN INDIA

3.1 Reserve Bank of India Act, 1934

The RBI Act establishes the Reserve Bank of India and provides the broader statutory framework for central banking and monetary regulation.

Banking due diligence obligations arise more directly under the Banking Regulation Act, applicable RBI directions, and anti-money-laundering legislation.

3.2 Banking Regulation Act, 1949

The Banking Regulation Act provides important powers for regulating and supervising banking institutions.

Section 35A empowers the RBI to issue directions to banking companies within its statutory scope.

Such directions support regulatory requirements concerning risk management, banking operations, internal controls, and customer protection.

Failure to comply with binding RBI directions may expose regulated entities to supervisory or statutory consequences.

3.3 Prevention of Money Laundering Act, 2002

The Prevention of Money Laundering Act (PMLA) establishes India's principal anti-money-laundering framework.

Section 12 imposes obligations on reporting entities concerning record maintenance, information reporting, and identity verification, subject to applicable rules.

Banks must comply with prescribed requirements relating to customer identification, beneficial ownership, transaction records, and suspicious transaction reporting.

Section 13 provides for regulatory inquiry and appropriate action concerning non-compliance with obligations under Chapter IV.

3.4 Prevention of Money Laundering (Maintenance of Records) Rules, 2005

These rules prescribe important requirements relating to customer due diligence, record maintenance, and reporting.

Rule 9 is particularly significant for client due diligence.

Banks must apply the applicable verification and monitoring requirements, including enhanced measures where legally prescribed.

3.5 RBI Master Direction – Know Your Customer (KYC) Direction, 2016

The RBI KYC Master Direction, as amended, establishes detailed requirements concerning customer identification, customer acceptance, risk management, and ongoing due diligence.

It addresses matters including:

Customer identification procedures.

Beneficial ownership.

Risk categorization.

Enhanced due diligence.

Periodic KYC updating.

Transaction monitoring.

Record maintenance.

Compliance with applicable sanctions requirements.

The precise obligations depend on the type of regulated entity, customer, transaction, and applicable amendments.

3.6 Information Technology Act, 2000

The Information Technology Act provides a legal framework relevant to electronic transactions, digital authentication, and certain cybersecurity obligations.

Section 43A addresses compensation for failure to protect sensitive personal data by covered bodies corporate, subject to the applicable statutory framework and its continuing legal operation.

Section 66C criminalizes specified identity-theft conduct.

Electronic banking due diligence also requires attention to applicable RBI cybersecurity directions and data-protection requirements.

3.7 Indian Contract Act, 1872

The Indian Contract Act governs contractual relationships between banks and customers.

Section 73 addresses compensation for loss or damage caused by breach of contract, subject to the statutory conditions.

Where a bank breaches a contractual obligation to exercise reasonable care, compensation may arise if the customer establishes the necessary legal elements.

3.8 Consumer Protection Act, 2019

Banking services may fall within the definition of services under consumer protection legislation.

Section 2(11) defines deficiency, including specified shortcomings in the quality, nature, or manner of performance of services.

Where deficient banking procedures cause legally recognizable harm, an eligible consumer may seek relief before the appropriate consumer commission.

However, not every unsuccessful transaction or financial loss automatically establishes deficiency of service.

4. IMPORTANT CASE LAWS RELATING TO DUE DILIGENCE IN BANKING TRANSACTIONS

The following four cases illustrate judicial principles concerning banking care, customer verification, regulatory compliance, and financial transaction responsibility.

CASE LAW 1: Canara Bank v. Canara Sales Corporation (1987) 2 SCC 666

Court: Supreme Court of India

Facts:

The dispute concerned withdrawals made through cheques bearing forged signatures.

The customer challenged the bank's authority to debit its account for payments made against those cheques.

Legal Issue:

Whether a bank can debit a customer's account when payment is made against a cheque containing a forged drawer's signature.

Judgment:

The Supreme Court held that a forged signature does not constitute a valid mandate from the customer.

A bank generally cannot debit a customer's account merely because it has paid a cheque containing a forged drawer's signature.

The Court also considered the circumstances in which a customer's conduct could affect the legal position.

Legal Principle:

A bank must act upon a legally valid customer mandate when making payments.

Relevance to Banking Due Diligence:

This decision demonstrates the importance of signature verification, authentication procedures, and careful examination of payment instructions.

Banks must maintain adequate safeguards against unauthorized withdrawals.

CASE LAW 2: Indian Overseas Bank v. Industrial Chain Concern (1990) 1 SCC 484

Court: Supreme Court of India

Facts:

The dispute involved the collection of cheques and the question of whether the collecting bank had acted with the necessary care.

The legal controversy concerned the protection available to a collecting banker under the Negotiable Instruments Act.

Legal Issue:

Whether the collecting bank had acted in good faith and without negligence so as to qualify for statutory protection.

Judgment:

The Supreme Court examined the legal standard governing negligence in cheque collection and the statutory protection available to collecting bankers.

The Court emphasized that negligence must be assessed in light of the circumstances rather than presumed merely because a transaction subsequently becomes disputed.

Legal Principle:

A collecting bank's entitlement to protection under Section 131 of the Negotiable Instruments Act depends on satisfying the statutory conditions, including acting in good faith and without negligence.

Relevance to Banking Due Diligence:

The case is important for understanding reasonable care in cheque collection, account operations, and the examination of suspicious circumstances.

It also establishes that banking negligence must be evaluated on the facts of each case.

CASE LAW 3: State Bank of India v. Shyama Devi (1978) 3 SCC 399

Court: Supreme Court of India

Facts:

A customer entrusted money to a bank employee in circumstances that raised questions about whether the employee had acted in the course of employment.

The dispute concerned the bank's responsibility for the employee's conduct.

Legal Issue:

Whether a bank is automatically liable for every financial act committed by its employee involving a customer.

Judgment:

The Supreme Court examined the principles governing an employer's vicarious liability for acts committed by employees.

The Court held that liability depends on whether the employee acted within the course of employment or within the scope of relevant authority.

Legal Principle:

A bank is not automatically liable for every unauthorized personal act of an employee merely because the employee works for the institution.

Relevance to Banking Due Diligence:

The case demonstrates the importance of defined employee authority, formal transaction channels, and verification of whether a transaction has been properly authorized.

It also illustrates that customer protection disputes require examination of the actual banking relationship and the employee's role.

CASE LAW 4: Internet and Mobile Association of India v. Reserve Bank of India (2020) 10 SCC 274

Court: Supreme Court of India

Facts:

The RBI issued a circular in 2018 restricting regulated entities from providing specified services connected with virtual currencies.

The restrictions were challenged before the Supreme Court.

Legal Issue:

Whether the RBI's restrictions were legally sustainable, particularly under the principle of proportionality.

Judgment:

The Supreme Court recognized the RBI's broad regulatory authority concerning the banking and payment systems.

However, it set aside the challenged circular on proportionality grounds in the circumstances examined.

Legal Principle:

Financial regulation must operate within statutory authority and satisfy applicable constitutional and administrative-law standards.

Relevance to Banking Due Diligence:

The judgment demonstrates the relationship between regulatory risk assessment, financial innovation, and proportionate compliance controls.

It does not remove banks' obligations to comply with applicable anti-money-laundering, customer identification, or transaction-monitoring requirements.

5. INTERNATIONAL REGULATIONS AND STANDARDS

5.1 Financial Action Task Force (FATF) Recommendations

The FATF Recommendations establish internationally recognized standards for combating money laundering, terrorist financing, and proliferation financing.

Recommendation 10 addresses customer due diligence.

It includes requirements concerning:

Customer identification and verification.

Beneficial ownership identification.

Understanding the purpose and intended nature of business relationships.

Ongoing scrutiny of transactions.

Risk-based application of due diligence measures.

Recommendation 12 addresses politically exposed persons.

Recommendation 16 addresses payment transparency.

Recommendation 20 addresses suspicious transaction reporting.

FATF Recommendations are international standards rather than directly enforceable domestic legislation unless implemented through applicable legal and regulatory measures.

5.2 Basel Committee on Banking Supervision

The Basel Committee promotes sound banking supervision and risk management.

Its guidance on sound management of risks related to money laundering and terrorist financing emphasizes effective customer acceptance procedures, monitoring, internal controls, and compliance governance.

Banks are expected to integrate financial crime risk management into their wider risk-management systems.

5.3 European Union Anti-Money-Laundering Framework

The European Union has developed comprehensive anti-money-laundering requirements applicable to financial institutions.

Relevant measures include Directive (EU) 2015/849, as amended, and the newer EU anti-money-laundering legislative package adopted in 2024.

The newer package includes Regulation (EU) 2024/1624, Directive (EU) 2024/1640, and Regulation (EU) 2024/1620 establishing the Anti-Money Laundering Authority.

Their provisions have different application and implementation dates.

Banks operating in EU jurisdictions must comply with the requirements applicable at the relevant time.

5.4 United States Bank Secrecy Act

The Bank Secrecy Act and its implementing regulations establish recordkeeping, reporting, and anti-money-laundering compliance obligations for covered financial institutions.

The US framework includes customer identification, beneficial ownership requirements, and suspicious activity reporting obligations.

The USA PATRIOT Act introduced additional measures relevant to customer verification and financial crime prevention.

5.5 Wolfsberg Group Principles

The Wolfsberg Group publishes industry guidance concerning financial crime compliance, correspondent banking, customer due diligence, and payment transparency.

These principles support risk-based due diligence and the identification of potentially suspicious financial activities.

They are industry standards and do not independently replace binding national laws.

6. DUE DILIGENCE IN DIFFERENT BANKING TRANSACTIONS

A. Loan Transactions

Before granting loans, banks should assess borrowers' repayment capacity, financial statements, existing debt obligations, and collateral.

For secured lending, banks must examine relevant title documents and the enforceability of security interests.

Failure to perform adequate verification may result in credit losses or disputes concerning collateral validity.

B. International Remittances

Cross-border transfers require appropriate examination of customer identity, payment purpose, sanctions restrictions, and applicable foreign-exchange requirements.

Indian banks must comply with the Foreign Exchange Management Act, 1999, relevant RBI directions, and applicable anti-money-laundering obligations.

C. Trade Finance Transactions

Trade finance transactions may involve letters of credit, bank guarantees, documentary collections, and export financing.

Banks should evaluate transaction documentation, counterparties, sanctions risks, and indicators of trade-based money laundering.

For documentary credits, examination obligations are also influenced by the applicable credit terms and internationally accepted rules such as UCP 600 when incorporated.

D. Digital Banking Transactions

Digital banking due diligence includes customer authentication, fraud monitoring, cybersecurity controls, and examination of suspicious transaction patterns.

Banks must implement applicable regulatory safeguards concerning unauthorized electronic transactions and customer protection.

E. Correspondent Banking

Correspondent banking arrangements may expose institutions to heightened cross-border financial crime risks.

Due diligence should consider the respondent bank's regulatory status, ownership, supervision, business activities, and anti-money-laundering controls.

Additional measures may be required for higher-risk relationships.

7. LIABILITY ARISING FROM FAILURE TO EXERCISE DUE DILIGENCE

A bank's failure to perform legally required due diligence may result in several forms of liability.

1. Regulatory Liability

The RBI or another competent authority may impose applicable supervisory measures or statutory penalties for violations of binding regulatory requirements.

2. Civil Liability

Customers or other affected parties may claim compensation where a recognized legal duty is breached and the requirements for liability are established.

3. Consumer Protection Liability

Deficient banking services may result in consumer complaints and appropriate remedies under the Consumer Protection Act, 2019.

4. Anti-Money-Laundering Consequences

Non-compliance with prescribed PMLA obligations may result in action under the relevant statutory provisions.

5. Contractual Liability

A bank may face contractual claims where it fails to perform agreed obligations concerning payment processing, custody, or other banking services.

6. Reputational and Operational Consequences

Weak due diligence may increase fraud exposure, supervisory scrutiny, operational losses, and reputational harm.

However, the existence of a financial loss alone does not automatically establish legal liability. The applicable duty, breach, causation, statutory requirements, and available defenses must be examined.

8. DEFENSES AVAILABLE TO BANKS

Banks facing allegations of inadequate due diligence may rely on legally relevant defenses.

A. Compliance With Regulatory Requirements

A bank may demonstrate that it followed the applicable RBI directions, KYC requirements, and prescribed internal procedures.

Compliance evidence can be important, although regulatory compliance does not necessarily defeat every independent contractual or civil claim.

B. Exercise of Reasonable Care

A bank may establish that its officers acted with the level of care expected from a reasonably competent banking institution.

C. Valid Customer Authorization

Where the transaction was properly authorized, a bank may rely on the validity of the customer's mandate, subject to applicable law.

D. Absence of Causation

A bank may argue that the alleged procedural failure did not legally cause the claimed loss.

E. Customer Conduct

Customer negligence, misrepresentation, or breach of relevant contractual duties may be legally significant depending on the governing rules.

However, a bank cannot automatically avoid responsibility merely by alleging that the customer was careless.

9. PRACTICAL MEASURES FOR EFFECTIVE BANKING DUE DILIGENCE

Banks should maintain a structured compliance framework that includes:

Risk-based customer onboarding procedures.

Reliable customer identity verification.

Beneficial ownership identification.

Periodic review of customer information.

Monitoring of unusual financial transactions.

Screening against applicable sanctions restrictions.

Verification of loan and collateral documentation.

Employee training and compliance awareness.

Independent compliance testing and internal audits.

Secure maintenance of records.

Timely suspicious transaction reporting where required.

Escalation procedures for high-risk transactions.

Effective cybersecurity and fraud-prevention controls.

Board and senior-management oversight of material compliance risks.

These measures should be proportionate to the institution's size, operations, customer profile, and applicable regulatory requirements.

10. CONCLUSION

Due diligence in banking transactions is a fundamental legal, regulatory, and operational responsibility of financial institutions.

It protects customers, supports financial stability, reduces fraud, and helps prevent the misuse of banking channels for unlawful financial activities.

Indian banking due diligence is governed by a combination of the Banking Regulation Act, 1949, the Prevention of Money Laundering Act, 2002, the RBI KYC Master Direction, and other applicable statutory and regulatory requirements.

The judicial principles established in Canara Bank v. Canara Sales Corporation, Indian Overseas Bank v. Industrial Chain Concern, State Bank of India v. Shyama Devi, and Internet and Mobile Association of India v. RBI demonstrate the importance of valid customer authorization, reasonable banking care, defined employee authority, and lawful regulatory oversight.

International frameworks developed by the FATF, Basel Committee, European Union, and United States further reinforce the significance of risk-based customer identification and transaction monitoring.

Final Legal Position: A bank must perform the due diligence required by applicable law and exercise reasonable professional care in relevant banking operations. Liability for a failure depends on the specific duty involved, the bank's conduct, the applicable legal framework, and the facts of the transaction.

11. REFERENCES

Indian Legislation and Regulatory Materials

Reserve Bank of India Act, 1934.

Banking Regulation Act, 1949.

Prevention of Money Laundering Act, 2002.

Prevention of Money Laundering (Maintenance of Records) Rules, 2005.

Reserve Bank of India, Master Direction – Know Your Customer (KYC) Direction, 2016, as amended.

Indian Contract Act, 1872.

Negotiable Instruments Act, 1881.

Information Technology Act, 2000.

Consumer Protection Act, 2019.

Foreign Exchange Management Act, 1999.

Judicial Decisions

Canara Bank v. Canara Sales Corporation, (1987) 2 SCC 666.

Indian Overseas Bank v. Industrial Chain Concern, (1990) 1 SCC 484.

State Bank of India v. Shyama Devi, (1978) 3 SCC 399.

Internet and Mobile Association of India v. Reserve Bank of India, (2020) 10 SCC 274.

International Standards

Financial Action Task Force – FATF Recommendations.

Basel Committee on Banking Supervision – Sound Management of Risks Related to Money Laundering and Financing of Terrorism.

European Union – Directive (EU) 2015/849, as amended.

European Union – Regulation (EU) 2024/1624.

European Union – Directive (EU) 2024/1640.

European Union – Regulation (EU) 2024/1620.

United States – Bank Secrecy Act.

United States – USA PATRIOT Act.

Wolfsberg Group – Financial Crime Compliance Principles and Guidance.

Note: The cited judgments address related banking duties and regulatory principles; they do not all concern statutory KYC violations directly. The applicability of regulatory provisions should be checked against the amendments and directions in force on the relevant transaction date.