IPV for Stock Brokers: SEBI Compliance Checklist & Best Practices for 2026

In-Person Verification (IPV) is not optional for stock brokers in India -- it is a hard regulatory requirement enforced by SEBI under the Prevention of Money Laundering (Maintenance of Records) Rules. Every individual who opens a demat or trading account must undergo IPV before they can place their first trade. Yet compliance failures around IPV remain one of the most common deficiencies flagged during exchange inspections. This guide provides a comprehensive, clause-by-clause breakdown of SEBI's IPV requirements for stock brokers based on the SEBI Master Circular SEBI/HO/MIRSD/SECFATF/P/CIR/2023/169, dated October 12, 2023, along with a practical compliance checklist and best practices for 2026.

1. Why IPV Is Mandatory for Stock Brokers

SEBI mandates In-Person Verification as the final layer of identity confirmation during the KYC process for all capital market intermediaries. While document verification and electronic checks (PAN validation, Aadhaar e-KYC) can confirm that a set of identity credentials exists and is valid, IPV adds the critical step of confirming that the person submitting those credentials is, in fact, the person they claim to be.

Under the SEBI Master Circular, the IPV requirement is established in Clause 54, which states:

"In-person verification of the client shall be done by the intermediary at the time of establishing the account-based relationship."

-- SEBI Master Circular SEBI/HO/MIRSD/SECFATF/P/CIR/2023/169, Clause 54

This is not a suggestion or a best practice -- it is a binding obligation. Stock brokers who onboard clients without completing IPV are in direct violation of SEBI regulations and expose themselves to penalties, trading restrictions, and potential license revocation. The IPV must occur at the time the account-based relationship is established, meaning it must be completed before the account is activated for trading.

The rationale is straightforward: India's capital markets have seen a surge in retail participation, with active demat accounts crossing 15 crore. This growth has been accompanied by an increase in identity fraud, fictitious account opening, and money laundering attempts through securities markets. IPV acts as the human-verified barrier against these threats -- ensuring a real person is matched to every account in the system. For stock brokers, getting IPV right is not just about avoiding penalties; it is about protecting the integrity of your client base.

2. Who Can Perform IPV for Stock Brokers

Not just anyone can conduct IPV on behalf of a stock broker. SEBI has defined specific categories of authorized persons in Clause 57 of the Master Circular. Understanding who is eligible -- and the conditions under which they can act -- is critical for compliance.

"IPV can be done by any person authorized by the intermediary, including the Authorized Person (AP) of the stock broker."

-- SEBI Master Circular, Clause 57

The following persons are authorized to conduct IPV for stock brokers:

Employees of the stock broker: Any designated employee who has been specifically authorized by the broker to perform IPV. The broker must maintain internal records documenting this authorization and ensure the employee is trained in IPV procedures.

Authorized Persons (APs) of the stock broker: Sub-brokers and authorized persons registered under the broker's membership can conduct IPV. However, the broker retains full responsibility for the quality and accuracy of the IPV conducted by their APs. This is a critical point -- delegating IPV to an AP does not delegate liability.

Employees of the stock exchange: Clause 57 also permits employees of a recognized stock exchange to conduct IPV. This provision is particularly useful for brokers operating in smaller cities where maintaining a dedicated IPV presence may not be economically viable.

Key compliance requirement: Regardless of who conducts the IPV, the stock broker must ensure that the identity of the person performing the verification is recorded and traceable. The IPV record must include the name, designation, and unique identifier of the verifying official. Failure to maintain this audit trail is one of the most commonly cited deficiencies in exchange inspections.

3. The Traditional IPV Process and Its Challenges

Traditional IPV requires the applicant to physically present themselves before an authorized person of the stock broker. During this in-person meeting, the verifier examines the applicant's original identity documents (PAN card, Aadhaar, address proof), compares the photograph on the document with the person present, and certifies that they have verified the applicant's identity by signing and stamping the KYC form.

While this process has served the industry for years, it comes with well-documented operational challenges:

Geographic limitations: Clients must travel to the broker's office or an authorized person's location. For discount brokers with no physical branches, this creates a fundamental conflict between their digital-first business model and the regulatory requirement for physical presence.

Inconsistent verification quality: The rigor of physical IPV varies widely depending on who conducts it. Some APs treat it as a formality -- barely glancing at documents before stamping the form. Others apply thorough scrutiny. This inconsistency creates compliance risk and makes it difficult for brokers to ensure uniform standards across their AP network.

Scalability bottleneck: During market rallies, new account openings can spike dramatically. Brokers who experienced the 2020-2021 retail investor boom found their IPV processes overwhelmed, with applicants waiting days or weeks for verification. This directly impacted conversion rates and revenue.

Audit trail weakness: A stamped and signed KYC form provides limited evidentiary value compared to a recorded video session. If a dispute arises about whether IPV was genuinely conducted, the broker has only the verifier's signature as proof -- which is far less compelling than a timestamped video recording with geo-location data.

4. VIPV: The Digital Alternative Under SEBI

Recognizing the limitations of physical IPV, SEBI introduced Video-based In-Person Verification (VIPV) as a legitimate and fully compliant alternative. Clause 60 of the Master Circular lays down the framework for conducting IPV through a video interaction:

"The intermediary may carry out In-Person Verification through video interaction with the client... The video interaction shall be conducted by an official of the intermediary who has been authorized for this purpose."

-- SEBI Master Circular, Clause 60

VIPV is not a relaxation of IPV requirements -- it is an alternative method that must meet specific technical and procedural standards. Here is how the VIPV process works for stock brokers:

Step 1: Session Initiation

The applicant completes the online account opening form, uploads their identity and address documents, and schedules a VIPV session. The broker's system assigns an authorized official to conduct the verification.

Step 2: Video Interaction

A live, real-time video call is established between the authorized official and the applicant. The official visually verifies the applicant's identity by comparing their face against the photograph on their PAN card and Aadhaar. The applicant is asked to display their original documents to the camera. The official examines them for authenticity markers.

Step 3: Live Photograph Capture

A clear, high-resolution photograph of the applicant is captured from the video feed. This photograph becomes part of the KYC record and must match the document photographs. AI-based liveness detection runs throughout the session to ensure the applicant is physically present.

Step 4: Recording and Storage

The entire video interaction is recorded with timestamps and geo-location metadata. The recording is stored securely as part of the applicant's KYC audit trail. The authorized official's identity is logged alongside the session record.

For brokers who operate at scale, VIPV offers transformative advantages: no geographic constraints, standardized verification quality through platform-enforced workflows, complete audit trails with video evidence, and the ability to handle volume surges without physical infrastructure. Most leading discount brokers have already shifted to VIPV as their primary IPV method. For a detailed comparison of video-based verification approaches, see our guide on What is Video KYC.

5. SEBI Compliance Checklist for Stock Broker IPV

The following checklist maps every IPV-related requirement from the SEBI Master Circular to specific, actionable compliance steps. Use this as your internal audit reference:

For a broader overview of the SEBI digital KYC framework, including Aadhaar e-KYC and PAN verification requirements, refer to our detailed guide on the SEBI Digital KYC Framework.

6. Common Compliance Mistakes to Avoid

Based on exchange inspection findings and SEBI enforcement actions, the following are the most frequently cited IPV compliance failures among stock brokers. Avoiding these is essential:

Activating accounts before IPV completion: This is the single most common violation. Some brokers, under pressure to meet conversion targets, activate trading accounts while IPV is still "pending." SEBI's requirement under Cl. 54 is unambiguous -- the account-based relationship cannot be established until IPV is complete. Conditional or provisional activation is not compliant.

Missing verifier identification in records: The KYC record must identify who performed the IPV -- by name, employee/AP code, and designation. Many brokers record that IPV was "done" without capturing the verifier's identity, making it impossible to trace accountability if the verification is later questioned.

Using unauthorized persons for IPV: Only persons explicitly authorized by the broker (and, where applicable, registered with the exchange) can conduct IPV. Using office assistants, freelance agents, or other unauthorized individuals -- even if they physically verify the applicant -- does not constitute valid IPV.

Not recording VIPV sessions: For video-based IPV, the session recording is the primary evidence that IPV was conducted. Brokers who conduct VIPV but fail to record and store the video session are treating it as a phone call, not a compliant verification. The recording must be retained for the full regulatory retention period.

Neglecting liveness detection: A video call without liveness detection does not meet SEBI's VIPV standards. Some brokers use generic video conferencing tools (Zoom, Google Meet) for VIPV, which lack the liveness detection, geo-tagging, and encryption features mandated under Cl. 51-52. This is a compliance gap that will be flagged during inspections.

Failing to upload IPV status to KRA: After completing IPV, brokers must update the client's KYC record with the KYC Registration Agency (KRA) to reflect that IPV has been completed. Many brokers perform IPV correctly but fail to update the KRA record, creating a discrepancy between their internal records and the centralized KYC registry. For insights on how liveness detection technology works, see our article on Liveness Detection in Video KYC.

7. IPV Portability: Relying on Another Intermediary's IPV

One of the most practically useful provisions in the SEBI Master Circular is IPV portability under Clause 56. This provision allows a stock broker to rely on the IPV conducted by another SEBI-registered intermediary, provided certain conditions are met:

"An intermediary may rely upon the IPV done by another SEBI registered intermediary."

-- SEBI Master Circular, Clause 56

In practice, this means that if a customer has already undergone IPV with one broker (say, Broker A) and their KYC record in the KRA or CKYCR reflects this, a second broker (Broker B) can open an account for the same customer without conducting a fresh IPV. The second broker relies on the IPV recorded in the centralized KYC system.

Conditions for IPV portability: The customer's KYC must be registered with a KRA and reflect a completed IPV status. The broker relying on another intermediary's IPV must verify this status from the KRA/CKYCR record. The original IPV must have been conducted by a SEBI-registered intermediary -- IPV by non-SEBI entities (such as banks or insurance companies) does not qualify for portability within the capital markets framework.

IPV portability significantly reduces friction for customers who are opening accounts with multiple brokers or switching from one broker to another. However, the relying broker must exercise due diligence -- simply accepting the KRA record without verifying the IPV status field constitutes a compliance gap. Automated KRA integration that checks and records the IPV status is the safest approach.

8. Technology Requirements for VIPV Compliance

SEBI's Master Circular specifies detailed technology requirements for any application or platform used to conduct VIPV. These are not guidelines -- they are mandatory specifications that must be met for the VIPV to be considered compliant. The requirements are spread across Clauses 49-53:

Photography and scanning capabilities (Cl. 50): The application must be capable of capturing high-resolution photographs of the applicant and scanning identity documents during the video session. It must also accept documents fetched directly from DigiLocker, treating them as equivalent to original documents.

Random action initiation (Cl. 51): The app must be capable of initiating a random action during the VIPV session to verify liveness. This could be asking the applicant to blink, turn their head, read a randomly generated number, or perform another action that cannot be pre-recorded. The action must be initiated by the system, not chosen by the applicant.

Timestamp and geo-location (Cl. 51): Every VIPV session must record the date, time (down to the second), and GPS coordinates of the applicant's device. The system must also verify that the applicant's IP address originates from within India. Sessions originating from foreign IP addresses must be flagged or rejected.

End-to-end encryption and liveness detection (Cl. 52): The entire video stream must be encrypted end-to-end. Additionally, the application must incorporate AI-based liveness detection to distinguish between a real person and a photograph, video replay, or deepfake attempt. Both the encryption and liveness detection must function throughout the session, not just at initiation.

Periodic security audits (Cl. 53): The VIPV application must undergo periodic security audits, including Vulnerability Assessment and Penetration Testing (VAPT). The intermediary must maintain records of these audits and their findings. Unaddressed vulnerabilities constitute a compliance deficiency. For more on the infrastructure requirements for building compliant video verification systems, refer to our guide on V-CIP Infrastructure Requirements.

9. How BASEKYC Automates Stock Broker IPV

BASEKYC is purpose-built to address every IPV compliance requirement in the SEBI Master Circular. Our platform eliminates manual compliance gaps by automating the end-to-end VIPV process for stock brokers:

Compliant VIPV sessions: Our video verification engine handles live video interaction, random action challenges, AI-powered liveness detection, and real-time photograph capture -- all within a single, seamless session. Every requirement under Cl. 49-53 and Cl. 60 is covered out of the box.

Automated audit trails: Every session generates a comprehensive audit record that includes the video recording, verifier identity, session timestamps, geo-location coordinates, liveness detection scores, and document verification results. This record is stored securely with tamper-evident packaging.

KRA and CKYCR integration: BASEKYC integrates directly with KYC Registration Agencies and the Central KYC Registry, automatically uploading completed KYC records (including IPV status) after successful verification. This eliminates the common compliance gap of performing IPV but forgetting to update the centralized registry.

IPV portability checks: When a customer's KYC already exists in the KRA/CKYCR with a completed IPV, BASEKYC automatically detects this and presents the broker with the option to rely on the existing IPV under Cl. 56 -- saving time and reducing unnecessary re-verification.

Agent management: Our platform includes a dedicated agent management module where brokers can register, authorize, and track all officials permitted to conduct VIPV. Every session is linked to a specific authorized agent, ensuring traceability and compliance with Cl. 57.

Whether you are a large full-service broker processing thousands of accounts daily or a growing discount broker scaling your operations, BASEKYC provides a turnkey VIPV solution that keeps you compliant while reducing onboarding time from days to minutes. Explore our Stock Broker Verification solution to see how it maps to your workflow.

10. Frequently Asked Questions