sebi
Published on 11 July 2025
CitiCorp Investment Bank's Regulatory Violations: KYC and Fee Compliance Issues
CitiCorp Investment Bank Fined by SEBI Over Offshore Derivatives Violation: A Cautionary Tale in Compliance
In a regulatory move that underscores the importance of vigilance in cross-border financial dealings, the Securities and Exchange Board of India (SEBI) has settled enforcement proceedings against CitiCorp Investment Bank (Singapore) Ltd with a penalty of ₹36 lakh. The case centers around serious lapses in compliance involving the issuance of offshore derivative instruments (ODIs) to Symmetry Master Fund Ltd (SMFL), raising red flags over internal control mechanisms and regulatory discipline.
The Core Issue: ODIs Issued Without Prior KYC
At the heart of the matter was a fundamental breach: CitiCorp issued an ODI on December 19, 2023, without completing the mandatory Know Your Client (KYC) process for SMFL, the subscriber. Under Regulation 21(1)(c) of the SEBI (Foreign Portfolio Investors) Regulations, such action is prohibited.
SEBI’s Master Circular is equally unambiguous: no ODI should be issued unless KYC norms are fully complied with. In this case, KYC onboarding was only finalized weeks later, on January 10, 2024—an unacceptable delay by regulatory standards.
This wasn’t merely a procedural oversight; it signaled a clear breach of SEBI’s investor verification safeguards, which are designed to prevent misuse of Indian markets through opaque offshore vehicles.
Delayed Fee Payment: A Second Violation
CitiCorp’s compliance troubles didn’t end with the KYC lapse. SEBI also flagged a 69-day delay in paying the regulatory fee associated with the ODI. While the ODI was issued in December 2023, the $800 fee was only remitted on February 26, 2024, violating Regulation 21(4) and corresponding clauses under the II Schedule of the FPI norms.
In an ecosystem where timing, transparency, and transactional integrity are paramount, such delays can raise concerns about process lapses and operational laxity—especially from an institution of CitiCorp’s global stature.
Internal Controls Called Into Question
Perhaps the most serious aspect of the settlement was SEBI’s observation of systemic weakness within CitiCorp’s internal compliance framework. The issuance of the ODI prior to KYC completion was not a rogue event—it reflected inadequate internal systems, as acknowledged in the order.
Under Paragraph 3(iii) of Part D of the Master Circular, foreign portfolio investors and their custodians are expected to maintain robust mechanisms to ensure compliance with all regulations—including those related to investor verification and instrument issuance. The fact that this control broke down at CitiCorp raises uncomfortable questions about oversight and governance within the bank’s FPI operations.
Summary: SEBI’s Regulatory Findings at a Glance
| Area of Violation | Regulation Breached | Description | Date/Timeline |
|---|---|---|---|
| Premature ODI Issuance | Reg. 21(1)(c), Master Circular Part D, Para 2 | ODI issued without KYC for SMFL | ODI Issued: Dec 19, 2023 |
| Delayed KYC Completion | Same as above | KYC finalized after transaction | Completed: Jan 10, 2024 |
| Late Fee Remittance | Reg. 21(4), II Schedule, Part C, Clause 1 | $800 regulatory fee paid 69 days late | Paid: Feb 26, 2024 |
| Weak Internal Controls | Master Circular Part D, Para 3(iii) | Inadequate systems to prevent premature issuance | Identified in SEBI review |
Conclusion: Lessons in Compliance and Reputation Risk
CitiCorp’s settlement with SEBI serves as a stark reminder to financial institutions operating in India’s capital markets: even inadvertent lapses in compliance can result in monetary penalties and reputational scrutiny.
In an era where global capital flows are tightly monitored and trust in financial systems is paramount, strong internal controls are not optional—they are foundational. For CitiCorp, this may be a closed chapter. But for other FPI custodians and intermediaries, the message is clear: compliance isn't just a box-ticking exercise—it’s a strategic imperative.