Glossary

Legal provisions that protect whistleblowers or organizations from liability or retaliation when they report wrongdoing or comply with regulatory requirements in good faith. Safe harbor encourages transparency by reducing fear of legal consequences.

OC?39A introduces ?deemed approval??if a payer and merchant share the same bank, P2M payments auto-complete after a predefined timeout, speeding up settlements and reducing transaction delays.

UK legislation authorizing autonomous sanctions post-Brexit.

Sanctions compliance refers to the internal controls, policies, and procedures that organizations implement to ensure adherence to relevant sanctions laws and regulations. These programs typically include screening of customers, suppliers, and transactions to prevent dealings with sanctioned parties or restricted goods.

A Sanctions Compliance Officer is a professional responsible for ensuring that an organization follows all applicable sanctions laws and regulations. They develop compliance programs, conduct risk assessments, train staff, and monitor transactions to prevent violations and protect the organization from legal and financial penalties.

Formal program to oversee sanctions risk: policies, people, tech, governance.

Process for dealing with conflict between competing sanctions regimes or licenses.

Measurable indicators for program health (e.g., resolution time, FP rate).

Thresholds to initiate manual review (value, volume, frequency).

Written process & authorizations to allow otherwise restricted activity (exceptional).

Sanctions risk refers to the potential legal and financial consequences an organization faces if it violates economic or trade sanctions imposed by governments or international bodies. This risk includes penalties, fines, reputational damage, and restrictions on business activities. Effective sanctions compliance programs are essential to identify, monitor, and mitigate these risks.

Assessment of sanctions risk exposure by clients, geography, product, and transaction.

Mock cases to validate response to sophisticated evasion typologies.

Parties subject to regular manual review due to lack of clear risk.

Pre-approved parties exempted from blocking (typically on case-by-case review).

Wolfsberg Principles require a robust sanctions screening framework that continuously checks prospective and existing clients, as well as transactions, against live sanctions lists. Screening must include real-time automation complemented by human assessment to avoid false positives or missed matches.

Programs that screen customers and transactions against sanction lists.

Sandbagging is when a buyer knowingly proceeds with a merger or acquisition despite being aware of breaches or misrepresentations made by the seller. The buyer completes the deal but later seeks legal remedies or compensation for any damages caused by these issues, using this tactic strategically during post-deal disputes.

Sanitary and Phytosanitary Measures (SPS) are rules and procedures applied by countries to protect human, animal, and plant life or health from risks such as pests, diseases, or food contaminants. These measures must be based on scientific evidence and should not unjustifiably restrict international trade.

Scalability risk is the potential that an organization’s systems, infrastructure, or processes cannot efficiently grow to meet increasing demand. During digital transformation, if solutions are not scalable, it can lead to performance bottlenecks, higher costs, and missed business opportunities. Managing this risk requires flexible architecture, capacity planning, and regular performance assessments.

U.S. designation for individuals/entities related to terrorism.

OFAC list of individuals, entities, and ships under U.S. sanctions.

PMLA authorizes officials to conduct searches and seize properties or documents suspected to be connected with money laundering, enabling the collection of critical evidence during investigations.

The SEBI (Prohibition of Insider Trading) Regulations, 2015 aims to prevent insider trading in Indian securities markets. It restricts trading based on unpublished price sensitive information (UPSI) and mandates disclosures by insiders. Companies must enforce codes of conduct, trading windows, and blackout periods. Violations can lead to penalties, ensuring transparency and fairness in the trading environment.

SEBI (Prohibition of Fraudulent and Unfair Trade Practices) Regulations, 2003 aims to prevent deceptive and manipulative activities in the securities market. It prohibits practices like false trading, price rigging, and misleading disclosures to protect investors and maintain market integrity. The regulations empower SEBI to take action against offenders to ensure fair and transparent trading.

U.S. financial regulator compliance in securities markets.

SEC Form 4 is a document that must be filed with the U.S. Securities and Exchange Commission (SEC) whenever company insiders?such as officers, directors, or beneficial owners of more than 10%?buy or sell company securities. It discloses changes in their ownership and must be submitted within two business days of the transaction to promote transparency and prevent insider trading.

SEC v. Texas Gulf Sulphur Co. was a landmark 1969 legal case where the SEC charged company insiders with insider trading for buying shares based on undisclosed information about a major ore discovery. The case set important precedents on what constitutes material non-public information and established the duty to disclose or abstain from trading.

A secrecy jurisdiction offers services that allow individuals or entities to bypass or weaken laws and regulations of other countries through financial secrecy. These jurisdictions can be used not only to avoid taxes but also to facilitate illegal activities such as money laundering, sanction evasion, and financing of terrorism.

Banks must maintain minimum paid-up capital and reserves varying by location and size (e.g., ?5?lakhs in one state or ?15–20?lakhs for foreign banks). RBI may extend compliance deadlines or exempt in special cases. These capital norms protect depositors and ensure the bank’s financial health.

This section mandates that banks? paid-up capital equals at least half their authorized capital, consisting of equity or preference shares under RBI-approved structures. Shareholders are restricted to a maximum 10% voting power (up to 26% phased). CEOs must disclose shareholding changes to RBI, ensuring transparent governance.

Banks cannot pay dividends until preliminary expenses, losses, and organizational costs are fully written off. This rule ensures banks preserve reserves and maintain solvency, protecting depositors and preventing risky profit distributions that could impair the bank’s financial foundation.

Banks must allocate at least 20% of annual profits to a Reserve Fund before declaring dividends. RBI may permit exemptions based on capital adequacy. Any withdrawals from this fund must be promptly disclosed to RBI. This ensures capitalization and stability during lean years.

Non-scheduled banks must maintain at least 3% of net demand and time liabilities in cash reserves with RBI or approved entities. RBI periodically notifies scheduled banks? CRR. This liquidity ensures banks remain solvent and can meet withdrawal demands in stress situations.

Banks may only form subsidiaries for permissible banking functions, overseas banking (with RBI and govt. permission), or activities deemed useful for banking spread. They cannot hold more than 30% equity in a company, and cannot invest in firms where their own directors have a stake.

This section penalizes individuals who fraudulently conceal or remove property to prevent its lawful seizure, such as in execution of a decree. Offenders can face imprisonment up to two years, a fine, or both.

This section addresses cases where individuals fraudulently claim property to prevent its lawful seizure. Such actions are punishable by imprisonment up to two years, a fine, or both, aiming to deter false claims intended to obstruct justice.

Under Section?21, RBI can dictate all lending policies?such as lending purposes, margins, maximum loan amounts, interest rates, and borrower limits?for individual banks or across the industry. These directives are binding to control credit exposure, manage systemic risk, and protect depositors? interests.

Section?22 mandates that no company may operate a bank in India without a valid RBI license. The Reserve Bank evaluates applications based on capital adequacy, governance, public interest, and depositor security. RBI can approve, refuse, or cancel a license, ensuring only qualified and compliant entities conduct banking business.

Banks require prior written permission from RBI before opening, relocating, or closing branches (especially outside the same locality). This oversight ensures branch expansions align with broader financial stability, regulatory coverage, and avoidance of over-concentration in certain areas.

Banks must obtain RBI’s prior written permission before opening a new branch, shifting an existing one, or altering premises outside the same town/village. This rule ensures controlled branch expansion, aligned with regulatory oversight and financial stability objectives.

Section?29 requires every banking company operating in India to compile an annual balance sheet and profit-and-loss account at the end of its financial year, adhering to forms specified in the Third Schedule. The documents must be signed by the manager or principal officer and at least three directors, ensuring accountability and standard reporting for transparency and statutory compliance.

Under Section?30, banks must have their annual accounts audited by a qualified auditor. The Reserve Bank’s permission is mandatory before appointing, re-appointing, or removing them. If RBI suspects discrepancies or malpractices, it can order a special audit at the bank’s expense. This measure reinforces financial governance and depositor protection.

Section?31 mandates banking companies to submit periodic financial and operational reports to the RBI in the prescribed format. These include returns on deposits, advances, liquid assets, and more. Timely compliance aids the RBI’s supervisory function, helps track banking sector health, and ensures data-driven monetary and regulatory policy decisions.

Section?311 authorizes FinCEN to designate foreign financial institutions, jurisdictions, or transaction types as "primary money-laundering concerns." This enables enforcement of special measures?such as requiring U.S. banks to reject or report specific transactions?to protect the U.S. financial system from illicit flows.

Section?312 requires U.S. financial institutions to implement risk-based due diligence and, where necessary, enhanced due diligence (EDD) for correspondent accounts with foreign financial institutions and private banking accounts for non?U.S. individuals, particularly senior foreign political figures. The guidance targets the identification of beneficial owners and suspicious transactions through structured policies and controls.

Section?313 prohibits U.S. banks from opening, maintaining, or servicing correspondent accounts for foreign shell banks?institutions without a physical presence. Banks must also avoid indirectly servicing them via affiliates, significantly reducing loopholes used for money laundering and illicit fund movements.

Under Section?313, U.S. banks and brokers are strictly forbidden from maintaining correspondent accounts for "shell banks" ? foreign financial institutions that lack physical presence. They must also take reasonable steps to avoid indirectly servicing shell banks via affiliates. This curbs clandestine channels that could enable money laundering or terrorism financing.

Under Section?314(a), FinCEN may invite banks, broker?dealers, and others to search internal records for individuals, entities, or organizations suspected of terrorist or money-laundering activities. Institutions must respond within a set period. This tool bridges law enforcement and financial institutions for targeted, timely investigations.

Section?314(a) permits FinCEN to request U.S. financial institutions to search internal records for individuals or entities under investigation for terrorism or money laundering. Institutions are required to respond within 14 days, facilitating rapid, cooperative investigations between public agencies and financial firms.

Section?314(b) allows financial institutions to voluntarily share information about suspected money-laundering or terrorist-financing activities with peer institutions, after notifying FinCEN. Shared information is covered by a liability “safe harbor.” This encourages cooperative detection efforts, enabling institutions to pool insights and file Suspicious Activity Reports more effectively.

Section?319(a) empowers authorities to forfeit funds in U.S.-based interbank correspondent accounts when linked to foreign illicit deposits?even if originating abroad. It prevents the U.S. banking system from serving as sanctuary for money connected to overseas criminal activity, enabling domestic enforcement without tracing offshore sources.

Section?319(b) mandates that U.S. banks maintaining correspondent accounts for foreign banks collect beneficial owner details and appoint a U.S.-based agent for legal service. They must respond to law enforcement within 120?hours to subpoenas. Non-compliance may require termination of the correspondent account, reinforcing transparency and legal accountability in cross-border banking.

This provision requires U.S. financial institutions to maintain detailed records of foreign banks? owners and U.S. agents responsible for service of legal process. If a foreign bank fails to comply with subpoenas related to its U.S. correspondent account, institutions must terminate the account. This ensures traceability and legal accountability.

According to Section?32, every bank must file certified copies of its audited balance sheet and P&L account with the Registrar of Companies or Registrar of Firms?within 30 days. This ensures transparency, public disclosure, and legal accountability under both RBI and company law frameworks.

Section?325 allows U.S. regulators to impose civil penalties on financial institutions violating AML or CIP requirements, up to $50,000 per violation or twice the amount of the transaction. It ensures strict enforcement and financial deterrence against non-compliance with AML obligations.

Section?326 compels U.S. financial institutions to establish and follow CIP protocols that verify the identity of account holders, maintain identity records, and cross-check customers against government-provided terrorist watchlists. These procedures promote transparency in the financial system and efforts to counter illicit account misuse.

Section?327 empowers federal regulators to prohibit or impose conditions on mergers between U.S. banks and foreign institutions if the foreign party has poor money-laundering controls. It prevents regulatory loopholes through corporate mergers that could compromise U.S. AML standards.

Section?33 requires foreign-incorporated banking companies operating in India to prominently display audited annual financial statements at each branch, ensuring depositors and customers have ready access to key financial information.

Section?35 empowers the RBI to inspect, audit, or examine the books, accounts, and affairs of any banking company?on its own or on government request. This oversight mechanism helps the RBI proactively assess financial health and enforce regulations, maintaining sector integrity and depositor security.

Section?352 mandates U.S. financial institutions establish anti-money laundering (AML) programs under the Bank Secrecy Act. Required components include written policies, designation of an AML compliance officer, ongoing employee training, and an independent audit function. This structured compliance framework aligns internal controls with regulatory standards to combat money laundering and terrorist financing.

Section?356 requires brokers and dealers registered with the SEC to file Suspicious Activity Reports (SARs) similar to banks under Section?5318(g) of the BSA. It expands AML scope beyond banks, ensuring all financial market participants report unusual transactions that may indicate money laundering or financial crime.

Section?359 strengthens international cooperation in money laundering and terrorism cases by facilitating mutual legal assistance, extradition treaties, and shared enforcement mechanisms. It enables streamlined evidence sharing and prosecution efforts across borders, enhancing effectiveness in tracking and prosecuting transnational financial crimes.

Section?35A authorises the RBI to issue binding directives to any banking company if operations conflict with public interest, sound banking practice, or depositor protection. Non-compliance can result in penalties or legal action. These directives bolster central accountability and allow corrective measures in systemic or institution-specific concerns.

RBI can issue directions to a bank’s ownership, operations, or management if deemed prejudicial to public interest or depositors? interest. This empowers RBI to enforce corrective actions, restrict management functions, and protect financial stability.

Section?362 authorizes FinCEN to identify “non-cooperative” jurisdictions, financial institutions, or classes of transactions of money-laundering concern and impose special measures?like additional recordkeeping, reporting requirements, or transaction bans?to shield the U.S. financial system from high-risk funds.

RBI has authority to remove or direct the removal of banking company’s chairman, directors, or management personnel if they are unsuitable or detrimental to sound banking operations. It ensures governance accountability and safeguards depositor interests.

Under Section?36AE, if a bank repeatedly ignores RBI directives or is managed detrimentally, the central government?after RBI consultation?may acquire it. Public interest, deposit protection, and credit distribution are cited justifications. On acquisition, its assets, liabilities, and operations vest in the government or its nominee.

Following acquisition, Section?36AF permits the central government?after RBI consultation?to create a reorganisation scheme for the acquired bank. The scheme can define successor entities, asset/liability transfers, employee continuity, compensation to shareholders, and other structural provisions. It ensures a structured transition safeguarding systemic stability.

This section addresses situations where an individual entrusted with property dishonestly misappropriates or converts it for personal use, violating the trust placed in them. Such an offense is punishable by imprisonment up to three years, a fine, or both.

This section punishes anyone entrusted with property who dishonestly misuses it. It includes embezzlement by employees, agents, or business partners. Punishment includes imprisonment up to three years, or fine, or both. Section 406 IPC is vital in addressing white-collar crimes and violations of fiduciary duty across business and financial relationships.

This section deals with cases where a public servant, banker, merchant, or agent commits a criminal breach of trust concerning property entrusted to them. Given their position of authority and trust, the law prescribes stringent punishment, including imprisonment up to ten years or life, and a fine.

Cheating involves deceiving someone fraudulently or dishonestly to induce them to deliver property or act in a way they wouldn't otherwise. Under Section 415 IPC, it’s punishable with imprisonment or fine. It addresses frauds in business, contracts, or false representation, protecting individuals and entities from intentional deceit and financial losses.

This section pertains to cheating by individuals aware that their deception is likely to cause wrongful loss to someone whose interests they are bound to protect. Offenders can face imprisonment up to three years, a fine, or both.

This section penalizes cheating by personation, where an individual deceives someone by pretending to be another person, leading to wrongful gain or loss. Offenders can face imprisonment up to three years, a fine, or both.

This section penalizes anyone who cheats and dishonestly induces another to deliver property or alter valuable security. Widely used in fraud and cybercrime cases, Section 420 IPC imposes up to seven years of imprisonment and a fine. It’s crucial for prosecuting financial scams involving fake promises, identity misuse, or property misrepresentation.

This section targets individuals who dishonestly or fraudulently conceal or remove property to prevent its distribution among creditors. Such actions, aimed at defrauding creditors, can lead to imprisonment up to two years, a fine, or both

This section addresses situations where an individual dishonestly or fraudulently executes a deed of transfer of property, falsely stating the consideration involved. Such actions, intended to deceive and cause wrongful loss or gain, are punishable by imprisonment up to two years, a fine, or both.

This section deals with dishonest or fraudulent concealment or removal of property or release of any claim or demand, intending to cause wrongful loss or gain. Offenders may be punished with imprisonment up to two years, a fine, or both.

This section allows affected parties to claim compensation (up to ?1?crore) if someone without permission accesses, downloads, damages, or disrupts computer systems or data. It treats such actions as civil wrongs, enabling recovery of losses caused by unauthorized interference, virus introduction, data manipulation, or denial-of-access.

Under Section?43A, companies that handle sensitive personal data must implement “reasonable security practices.” If negligence leads to wrongful loss or gain, they may face compensation liabilities up to ?5?crore. This provision ensures accountability for protecting digital privacy and financial data.

Once a winding-up order is issued against a banking company, any civil or criminal legal actions pending in other courts must be transferred to the High Court within three months. The liquidator reports total pending cases; the High Court may consolidate them, ensuring that all legal matters are centrally addressed during liquidation.

Depositors can nominate a person to receive funds on their behalf upon death. Banks must accept nominations in prescribed forms, maintain records, and ensure pay-out. This provision enhances depositor protection and clarity during account closure.

Violations of the Act’s provisions by banking companies or their officers (like unauthorised branches, non-compliance with RBI directions) can result in penalties for both the institution and individuals. The seriousness varies, and RBI holds statutory authority to impose fines or prosecute.

Forgery under IPC Section 463 involves creating or altering a document or electronic record with dishonest or fraudulent intent, intending it to be used as genuine. This includes fabricating signatures, seals, or content to deceive, mislead, or support false claims, especially in financial dealings or legal matters, causing potential harm or loss to others.

This section penalizes the act of forgery, where an individual makes a false document or electronic record with intent to cause damage or support any claim or title. Offenders can face imprisonment up to two years, a fine, or both.

This section addresses the forgery of valuable securities, wills, or other significant documents. It penalizes individuals who create or alter such documents with intent to defraud, leading to potential imprisonment for up to ten years and a fine. This ensures the protection of critical documents from fraudulent manipulations.

Section 468 deals with committing forgery specifically to cheat someone. If an individual forges a document intending to deceive and cause wrongful loss or gain, they can face imprisonment up to seven years and a fine. This provision targets fraudulent activities involving falsified documents used to mislead others.

This section penalizes individuals who fraudulently or dishonestly destroy, cancel, conceal, or alter documents like wills or valuable securities. Such offenses can lead to imprisonment up to seven years, a fine, or both, safeguarding the integrity of important legal documents.

This section deals with selling or exposing for sale goods or things with a counterfeit property mark. Individuals engaging in such activities, intending to deceive purchasers, can face imprisonment up to one year, a fine, or both.

Section 489A focuses on counterfeiting currency or banknotes. Individuals involved in producing or facilitating the creation of fake currency with intent to use as genuine can face life imprisonment or imprisonment up to ten years, along with a fine. This underscores the severity of crimes threatening economic stability.

Section 489A of IPC punishes the act of counterfeiting currency or banknotes. This includes producing or helping to produce fake money with intent to use it as genuine, harming economic security. The offense is serious and punishable with life imprisonment or up to 10 years in prison, plus a fine. Counterfeiting undermines national financial systems.

This section penalizes individuals who knowingly use forged or counterfeit currency or banknotes as genuine. Such offenses can lead to imprisonment for life or up to ten years, along with a fine.

Anyone found possessing counterfeit or forged currency notes or banknotes, with knowledge of their nature and intent to use them as genuine, commits an offense under Section 489C. This act threatens financial integrity and is punishable with up to 7 years of imprisonment, a fine, or both. It aims to curb currency-related financial crimes.

This section deals with individuals who possess forged or counterfeit currency or banknotes, knowing them to be counterfeit, with the intent to use them as genuine. Offenders can face imprisonment up to seven years, a fine, or both, addressing the circulation of fake currency.

Banking means accepting deposits from the public for lending or investment, withdrawable by cheque, draft, or order. This foundational definition scopes the Act’s applicability, ensuring entities accepting repayable deposits on demand or otherwise are regulated and monitored to protect public funds.

Amended in 1965, Section?56 expanded the Act’s reach to include state and multi-state cooperative banks, bringing them under RBI supervision. This uniform regulatory coverage ensures consistent licensing, governance, statutory requirements, and depositor protection across banking entities in India.

Section?6 outlines permissible banking activities: accepting deposits, giving loans, issuing guarantees, foreign exchange, and related services. It restricts non-banking trade or commerce. This provision clarifies core banking functions, ensuring regulatory oversight over deposit-taking and credit allocation, preventing excessive risk exposure through unrelated business ventures.

Section?65 punishes anyone who intentionally alters, destroys, or conceals computer source code required by law. Offenders can be imprisoned up to three years, fined up to ?2?lakhs, or both. It safeguards software integrity, especially in financial systems, by penalizing code manipulation.

Building on Section?43, Section?66 criminalizes hacking, unauthorized data alteration, or digital fraud done dishonestly. Punishments include imprisonment up to three years and/or fines up to ?5?lakhs. This section is central to prosecuting digital intrusions into financial, banking, or corporate systems.

Section?66B addresses receiving stolen or fraudulently obtained digital or communication devices (e.g., mobile apps, hacking tools). Offenders face up to three years in prison or a fine up to ?1?lakh. It deters use of illicit digital tools in financial fraud.

This section penalizes dishonest use of another's electronic signature, password, or ID to commit fraud. Offenders face imprisonment up to three years and fines up to ?1?lakh. It targets phishing or account takeover schemes in online banking or transactions.

Section?66D criminalizes cheating through digital impersonation. Offenders using fake emails, websites, or messages to deceive for financial gain may be imprisoned up to three years, fined ?1?lakh, or both. It addresses phishing and fraud in digital finance.

Section?66E penalizes intentionally capturing, publishing, or transmitting private images (of a person’s private areas) without consent, via any electronic device. Punishable with imprisonment up to three years, a fine up to ?200,000, or both. It safeguards personal privacy in digital contexts, crucial for financial and personal data confidentiality.

This major offense covers digital attacks influencing sovereignty, threatening infrastructure (including banking), or causing fear through cyber means. Punishment ranges from long-term imprisonment to life sentences. It addresses financially impactful cyberterrorism targeting critical assets.

This section targets the electronic transmission or publication of lascivious or “depraving and corrupting” content. First conviction: up to five years? imprisonment plus ?500,000 fine. Repeat offense: up to seven years? imprisonment and ?1,000,000 fine. It protects public morality and curbs misuse of digital media that could exploit financial systems.

Section?67A penalizes the electronic publishing or transmission of explicit sexual content. First conviction: up to five years imprisonment and ?1,000,000 fine; subsequent convictions: up to seven years and ?1,000,000 fine. It holds platforms and individuals accountable for distributing sexually explicit digital material.

Under Section?67B, transmitting or publishing child sexual imagery is a serious offense. First-time offenders face up to five years imprisonment and ?1,000,000 fine. Repeat offenses: up to seven years and ?1,000,000 fine. The provision fiercely protects minors online and reduces threats to their safety from digital exploitation.

Section?67C mandates intermediaries (e.g., ISPs, digital platforms) to preserve user data and records as specified by the government. Non-compliance attracts imprisonment up to three years and/or fine. It ensures auditability of digital activities, critical for tracing cyber financial crimes.

Under Section?68, refusal or failure to comply with lawful orders from the Controller of Certifying Authorities (e.g., cease operations) is punishable by up to two years? imprisonment, ?200,000 fine, or both. It enforces regulatory authority oversight in digital certification.

Section?69 criminalizes refusal to assist in interception, monitoring, decryption, or preservation of data based on lawful orders (e.g. national security). Offenders face up to seven years? imprisonment and/or fine. It enables lawful investigation of cyber financial crimes and terror financing.

This section deals with refusal to prevent public access to prohibited online content upon valid government direction. Punishable by up to seven years? prison and/or fine. It supports central control over harmful content distribution across digital financial platforms.

Section?69B penalizes non-compliance with lawful advisories empowering authorities to monitor or collect internet traffic data for cybersecurity or national security purposes. Offenders may face up to one year imprisonment or ?10,000,000 fine. Critical for financial crime prevention in real time.

Under Section?70, unauthorized access or attempts to access restricted computer systems (e.g. financial servers, banking platforms) is punishable by up to ten years? imprisonment and/or fine. It serves as a robust deterrent against hacking financial infrastructure.

Making false statements or suppressing material facts when applying for licenses or digital signature certificates from the Controller or Certifying Authority constitutes misrepresentation under Section?71. Offenders may be imprisoned up to two years, fined up to??100,000, or both. This section prevents fraudulent certification and ensures trust in digital authentication systems.

Section?72 penalizes disclosure of someone’s electronic data?such as records or private correspondence?by anyone who accessed it under lawful capacity but shared it without consent. Violation may result in up to two years imprisonment, a fine of up to??100,000, or both. It ensures privacy protection in digital environments.

Section?72 penalizes unauthorized disclosure of confidential electronic records by a person who has access to them under lawful powers. Penalties include imprisonment up to two years or fine (or both). It protects financial confidentiality and data security breaches.

Under Section?72A, any person who discloses personal information obtained under lawful contract without permission is liable. This breach can attract imprisonment up to three years, a fine, or both. It helps protect contractual confidentiality, especially of user financial or personal data handled by service providers.

This section penalizes disclosure of personal or financial data received under lawful contract without consent. Offenders face imprisonment up to three years and fines. It enforces data privacy, especially for financial information held by service providers.

Section?73 punishes anyone who publishes or distributes a digital signature certificate, knowing it to be counterfeit, revoked, or never issued by a Certifying Authority. This offense carries a penalty of up to two years' imprisonment, a fine up to ?100,000, or both. It upholds trustworthiness of certificate-based digital validation.

Using fake or fraudulent digital signature certificates is punishable under Section?74. Publishing or using such certificates to deceive or commit fraud attracts imprisonment up to two years, a fine up to ?100,000, or both?safeguarding against misuse of digital identities and fraudulent transactions.

Section?75 applies to offences under the IT Act committed by any individual outside India affecting computer systems or data within India. Offenders will face penalties as if the act had occurred domestically, ensuring extraterritorial reach for cybercrimes targeting Indian systems.

Under Section?76, the court can order confiscation of computer systems, resources, or data used in violating any provision of the IT Act. This includes hardware, software, and storage devices involved in a crime. Confiscation aids investigation and prevents continued misuse.

Section?77 clarifies that penalties, compensation, or confiscation under the IT Act do not override other penalties or legal remedies. Courts can impose multiple forms of punishment simultaneously?civil or criminal?ensuring comprehensive justice in cyber wrongdoing, including financial harm.

Section?78 grants authorized officers the power to investigate cyber offences under the IT Act, including entering premises, analyzing computer systems, and accessing digital records. This ensures timely and lawful investigations into cyber-enabled financial crimes.

Section?78 grants authorized officers the power to investigate cyber offences under the IT Act, including entering premises, analyzing computer systems, and accessing digital records. This ensures timely and lawful investigations into cyber-enabled financial crimes.

Under Section?9, banks are prohibited from holding immovable property?except for its own use?beyond seven years from acquisition. RBI may grant extensions up to five years in depositors? interests. This prevents banks from engaging in real estate non-banking activities, ensuring their focus remains on core banking operations.

Section?320 empowers U.S. courts to forfeit assets within their jurisdiction obtained through criminal conduct overseas, especially narcotics trafficking. It allows foreign governments to enforce their judgments in U.S. courts, ensuring that the U.S. does not serve as a safe haven for illicitly acquired assets.

Under Section?323, U.S. courts may enforce foreign court-ordered forfeitures via restraining orders if aligned with international treaties or bilateral agreements. This strengthens global asset recovery efforts by enabling the U.S. to act on international criminal judgments.

Under Section?324 (commonly referred to as ?Section 325? regulations), the Treasury can issue rules governing large, pooled internal accounts ("concentration accounts") to require traceable documentation of beneficial ownership behind incoming and outgoing funds, preventing misuse of opaque fund aggregation in U.S. financial institutions.

Section?325 allows regulators to impose civil penalties on financial institutions for failing AML/CIP obligations. Penalties can range up to $50,000 per violation or double the transaction value?whichever is greater. This enforces strong compliance incentives via financial deterrents.

Section?371 addresses bulk cash smuggling, amending the Bank Secrecy Act to require reporting of large cash movements across borders. It targets illicit laundering by mandating seizures and penalties when individuals physically transport large amounts of currency internationally to evade detection.

Mapping products/services that generate exposure to sectoral sanctions.

Restrictions that target specific industries or portions of an economy.

The Sectoral Sanctions Identifications (SSI) List, managed by OFAC, targets entities operating in specific sectors of a country’s economy, restricting certain types of financial and business dealings. Unlike full blocking sanctions, SSI limits transactions like debt and equity financing, aiming to pressure targeted sectors without broad economic disruption.

Lists targeting specific sectors like energy, defense, and finance.

These rules implement provisions of the SCRA for stock exchange governance, contract approvals, member conduct, trade reporting, settlement systems, and enforcement procedures. They ensure that securities trading occurs within a fair, transparent, and regulated framework to safeguard investor interests and market integrity.

The Securities Exchange Act of 1934 (Section 10b-5) is a key U.S. regulation that prohibits fraud, manipulation, and deceit in the buying or selling of securities. It is widely used to prosecute insider trading by targeting the misuse of material non-public information. Violations can result in civil and criminal penalties, ensuring fair and honest markets.

Ban on issuance/trading of securities by sanctioned parties.

CICs must implement robust data security, confidentiality, and access control mechanisms to prevent unauthorized disclosure or breaches.

Fiduciaries must implement appropriate technical and organizational measures?including encryption, access controls, audit trails?to protect personal data from unauthorized access, breaches, and misuse.

Fiduciaries must implement reasonable technical and organizational security measures to prevent data breaches. In case of a personal data breach, they must notify both the Data Protection Board and the affected individual ?as soon as practicable??enhancing transparency and accountability.

This includes highly sensitive information such as racial or ethnic origin, political opinions, religious beliefs, genetic/biometric data, health, or sexual life. GDPR places strict safeguards on these categories?processing requires explicit consent or a very limited legal basis.

After accepting the application, the court issues a notice to the accused, requiring appearance within six weeks. The notice can be served directly, electronically, or through newspaper publication. Failure to appear may lead to the individual being declared a Fugitive Economic Offender.

Regulatory settlement between an institution and a regulator on sanctions breaches, often involving penalties and mitigation.

These regulations provide a framework for adjudicating and settling administrative and civil proceedings through settlement during investigation or enforcement. They specify settlement terms, penal consequences, timelines, and appeal rights. The system enables efficiency, legal certainty, and resource optimization while ensuring fair resolution of regulatory violations.

The organization (e.g., Indian Clearing Corporation) that settles trades executed on stock exchanges. It tracks obligations between buyers and sellers and coordinates with depositories for delivery and receipt of securities.

A severability clause is a provision in a contract stating that if any part of the agreement is found to be illegal, invalid, or unenforceable, the remaining parts will still remain effective and enforceable. This helps ensure that the entire contract doesn’t become void due to one problematic section.

Shadow banking refers to financial activities conducted by non-bank institutions that operate outside regular banking regulations. These entities, such as hedge funds or money market funds, provide credit and liquidity but lack the oversight and safeguards of traditional banks. While they support financial innovation, they also pose risks to financial stability due to limited transparency.

Corporations that exist only on paper with no physical presence or employees, often used to conceal the true ownership of assets and facilitate illicit activities.

NABARD supports the SHG?Bank Linkage model through refinance, capacity building, and technical support?linking 17.75 crore households to credit in the world’s largest microfinance initiative.

Shipment of cargo from one ship to another at sea to conceal origin/destination.

ST?ASM is triggered by short-term volatility or unusual trades. It involves temporary price bands (typically ?5–15%), higher margin norms, and sometimes trade-for-trade execution?alerting participants without completely halting trading.

A Significant Data Fiduciary (SDF) is designated by the Central Government based on data volume, sensitivity, or risk level. SDFs are subject to stricter obligations?such as appointing a Data Protection Officer, conducting audits and impact assessments, and following enhanced transparency and compliance requirements?to protect personal data effectively.

SIM swapping is a cyberattack where scammers trick mobile carriers into transferring a victim’s phone number to a new SIM card controlled by the attacker. This allows them to bypass two-factor authentication, access sensitive accounts like cryptocurrency wallets, and steal funds. It’s a growing threat to personal and financial security in the crypto world.

To reduce complexity, PFRDA amended regulations in July?2023 to simplify definitions (e.g., business day, compliance officer), separate sponsor and fund roles, allow sponsor share-change approvals only in key scenarios, and formalize a Nomination & Remuneration Committee for board-structure accountability.

A Single Point of Failure (SPOF) is a part of a system or supply chain that, if it fails, causes the entire system or process to stop functioning. Identifying and addressing SPOFs is critical to improving resilience and ensuring continuous operation despite disruptions.

A smart contract exploit occurs when attackers take advantage of vulnerabilities or bugs in blockchain-based smart contracts to steal funds or manipulate outcomes. These exploits can drain liquidity or disrupt decentralized applications. Because smart contracts are automated and immutable, flaws can lead to significant financial losses before fixes or patches can be implemented.

Social capital refers to the networks, relationships, and trust within a community or organization that enable people to work together effectively. High social capital fosters cooperation and shared norms, which can reduce crime and unethical behavior by promoting accountability and support among members.

Social control theory asserts that strong social bonds and connections to family, friends, and institutions discourage individuals from engaging in criminal behavior. When these bonds weaken or break, people are more likely to commit crimes because they feel less restrained by societal norms and expectations.

Social disorganization theory suggests that a community’s crime rates are linked to its structural and social characteristics. It argues that neighborhoods with weak social institutions, high poverty, residential mobility, and ethnic diversity struggle to maintain social order, leading to higher levels of crime. The theory emphasizes the importance of community cohesion and informal social control in preventing criminal behavior.

Social engineering is a manipulation technique used by cybercriminals to trick individuals into revealing confidential information or performing actions that compromise security. Rather than exploiting technical vulnerabilities, social engineering targets human psychology?often through deception, urgency, or impersonation?to gain access to systems, data, or physical locations.

Social learning theory explains that individuals learn criminal behavior through interactions with others. People adopt values, attitudes, and techniques for committing crimes by observing and imitating others, especially within close social groups. Reinforcement, whether positive or negative, plays a key role in maintaining these behaviors. The theory highlights the importance of environment and peer influence in shaping actions.

Social strain refers to the stress or pressure individuals feel when they cannot achieve culturally approved goals through legitimate means. This strain can lead to frustration and may push some people toward criminal or deviant behavior as alternative ways to reach those goals.

Partially or state-owned companies, most of which involve more corruption risk.

Software vulnerability risk refers to the potential threats arising from weaknesses or flaws in software that can be exploited by attackers to gain unauthorized access, disrupt operations, or steal data. Managing this risk involves regular patching, code reviews, and vulnerability assessments to protect digital systems during transformation.

Source-based taxation implies taxing income in the country where it is earned, regardless of the taxpayer's residence. It complements residence-based taxation under Indian law. Under black money laws, understanding this principle is crucial for determining whether offshore earnings are subject to Indian tax if the income source is abroad.

U.S. law to shield investors from deceptive and misleading corporate financial disclosures.

A Special Court under PMLA is designated by the central government in consultation with the Chief Justice of the High Court. It handles prosecution of money laundering offences and also scheduled offences, ensuring speedy and focused trial proceedings.

Cases under the Fugitive Economic Offenders Act are tried in Special Courts established under the Prevention of Money Laundering Act (PMLA). These courts are empowered to issue notices, declare individuals as FEOs, and order confiscation of properties related to economic offenses.

SEZs are designated zones where businesses enjoy relaxed economic regulations, including FEMA exemptions. Units in SEZs can hold foreign currency accounts and conduct international transactions more freely. FEMA ensures these benefits align with national forex policies, balancing investor incentives with compliance. Transactions from SEZs must still be reported and monitored to prevent misuse or laundering.

UNCAC Article 50 calls on States to authorize, within legal limits, controlled deliveries, electronic surveillance, undercover operations, and similar covert actions. These tools strengthen enforcement against corruption

The SDN List, maintained by OFAC, includes individuals, groups, and entities such as terrorists, traffickers, and sanctioned officials. Their assets under U.S. jurisdiction are blocked, and U.S. persons are generally prohibited from dealing with them. The list is a key tool used by the U.S. government to enforce economic sanctions and protect national security interests.

Single permission for a prohibited act under sanctions.

Specific performance is a legal remedy that requires a party to fulfill their obligations under a contract rather than paying monetary damages. It is typically used when the subject of the contract is unique, such as real estate or rare items, and monetary compensation would not be adequate.

This term includes U.S. citizens, residents, domestic entities, trusts, or estates. FATCA requires foreign financial institutions to treat any account held by a Specified U.S. Person as reportable to the IRS. Exemptions apply (e.g., publicly traded entities, government bodies).

A specified user is a financial institution, bank, or legally authorized entity permitted to access credit data from CICs. These users rely on such information to make informed lending decisions and manage exposure.

RBI’s 2021 amendment expanded the definition of specified user beyond traditional credit institutions, enabling certain non-financial entities to access credit data

A spin-off is when a company creates a new, independent entity by separating part of its business or assets. This new company operates on its own, allowing the parent company to focus on its core activities while giving shareholders ownership in both companies. Spin-offs can unlock value and improve operational focus.

Spyware is a type of malware that secretly installs itself on a computer or mobile device to gather sensitive information such as passwords, PINs, and payment details. This data is then transmitted to advertisers, data brokers, or malicious third parties, often for financial gain.

Structured Query Language (SQL) Injection is a code injection technique that allows attackers to manipulate or access data in an SQL database. By inserting malicious SQL statements into input fields, an attacker can retrieve, alter, or delete sensitive information, potentially compromising the entire database.

Risk that sanctioned funds are moved using fiat-pegged tokens.

After the initial delayed status check (90 seconds), subsequent retries must be staggered and capped?no batch processing allowed?enabling system efficiency and avoiding denial-of-service triggers.

Staking is the process of locking up cryptocurrency in a blockchain network to support its operations, such as validating transactions and securing the network. In return, participants earn rewards, often in the form of additional tokens. It’s a key component of proof-of-stake (PoS) systems and helps incentivize honest behavior in decentralized ecosystems.

Transfers of securities in electronic form via depositories are exempt from stamp duty. This makes the demat system more cost-effective and efficient.

SCCs are pre-approved model clauses under GDPR used to legally govern personal data transfers outside the EU when no adequacy decision exists. They provide contractual safeguards ensuring third-country recipients comply with EU-level data protection standards.

Statute of Frauds is a legal requirement that certain types of contracts must be in writing to be enforceable. This typically includes agreements involving real estate, contracts lasting longer than one year, and large financial transactions. The purpose is to prevent fraud and misunderstandings by ensuring clear evidence of the contract’s terms.

The STOCK Act (Stop Trading on Congressional Knowledge Act) is a U.S. law enacted in 2012 that prohibits members of Congress, federal employees, and other government officials from using non-public information gained through their positions for personal financial benefit. It aims to prevent insider trading and increase transparency through timely disclosure of financial transactions by public officials.

These regulations oversee stock broker registration, capital adequacy, conduct norms, client handling, and compliance systems. They set broker-client agreements, risk management, transaction reporting, and grievance procedures. Aimed at preventing market abuse and investor harm, SEBI enforces sanctions for non-compliance through inspections, penalties, and debarment to uphold fair trading practices.

A stock purchase is a transaction where a buyer acquires ownership by buying shares of a company’s stock. This gives the buyer control over the company and its assets, including all liabilities. It is a common method used in mergers and acquisitions to transfer ownership.

Fiduciaries must erase personal data once its purpose is met unless retention is required by law?such as for banking compliance. Retention deletion policies must balance legal obligations and data minimisation principles.

Strain theory proposes that crime occurs when individuals experience pressure or strain due to the gap between culturally approved goals and the limited legitimate means to achieve them. When people cannot attain success through lawful methods, they may turn to criminal behavior as an alternative. This theory highlights how social inequality and blocked opportunities contribute to deviance.

A straw man is a person who acts as a front or figurehead to conceal the identity of the actual beneficial owner in business or legal transactions. This practice is commonly used to hide illicit activities such as money laundering, fraud, or tax evasion, by obscuring who really controls assets or companies.

A test in law whereby intent is irrelevant?breach occurs whether it was so or not.

Structuring, also known as smurfing, is the practice of breaking large financial transactions into smaller amounts to avoid regulatory reporting requirements and detection by authorities. Often used in money laundering schemes, structuring helps criminals disguise the origin of illicit funds by making transactions appear less suspicious.

Broke down large transactions into smaller amounts to evade detection.

Subcultural theory suggests that certain groups within society develop their own norms and values that may conflict with mainstream cultural expectations. These subcultures, often formed in response to social exclusion or inequality, can promote behaviors considered deviant or criminal by the larger society. Crime, in this context, is seen as a way to gain status or acceptance within the group.

A subpoena duces tecum is a legal order requiring an individual to produce documents, records, or tangible evidence for a trial or deposition. It compels the recipient to bring specified materials pertinent to the legal proceedings.

Subrogation is the process by which an insurance company, after paying a claim to the insured, seeks to recover the amount from a third party responsible for causing the loss. This helps the insurer recoup its costs and prevents the responsible party from avoiding liability.

A substantial U.S. owner holds more than 10% ownership in a foreign entity, making them reportable under FATCA. Passive NFFEs must disclose substantial U.S. owners? details to withholding agents to avoid 30% withholding and maintain FATCA compliance.

Summary judgment is a court ruling made without a full trial when there is no dispute over key facts. It decides the case or certain issues based on the law and evidence presented in motions. This process speeds up resolution by eliminating unnecessary trials when one party clearly wins.

Supplier risk assessment is the process of evaluating potential risks associated with suppliers that could impact an organization’s operations. It involves analyzing factors like financial stability, compliance, reliability, and geopolitical exposure. The goal is to identify vulnerabilities, ensure supplier performance, and reduce the chances of disruptions, delays, or quality issues within the supply chain.

Supply Chain Threat refers to the risk that an adversary could intentionally compromise a system or item by sabotaging, altering, or disrupting its design, production, or operation. The goal may be to surveil, deny, or degrade functionality at any point in the supply chain.

Supply Chain Risk Management (SCRM) is a structured process of identifying and assessing risks?such as vulnerabilities, threats, or disruptions?across the entire supply chain. This includes suppliers, products, subcomponents, and logistics. The goal is to develop and implement strategies that mitigate or prevent these risks to ensure continuity, reliability, and resilience in supply chain operations.

If an FIU breaches Egmont’s confidentiality or independence rules, the Membership, Support &?Compliance Working Group launches an ESCP review. The FIU gets a remediation plan; failure leads to suspension, as happened with Afghanistan?(2022) and Russia’s Rosfinmonitoring?(2022–23). Re?admission requires demonstrating restored autonomy and secure systems.

Regulatory technology employed by regulators to enhance monitoring and supervision of compliance.

Before dematerialisation, investors must submit physical share certificates to the issuer through a depository participant. The issuer cancels these certificates and informs the depository, which then credits the electronic securities to the investor's demat account.

Financial institutions should establish criteria and alerts for suspicious behaviors and theft. Clear governance and escalation protocols?including reporting to Financial Intelligence Units (FIUs) or regulators?ensure suspicious transactions are thoroughly investigated.

Under Section 356, banks and broker-dealers must file SARs for transactions that might indicate money laundering or fraud. It enhances transparency and helps authorities track illicit financial flows. Institutions must report irregular activity even if it doesn't involve large sums.

Suspension or limitation of a nation's access to SWIFT messaging.

Sanctions screening information in standardized payment message formats.

A Sybil attack happens when a single actor creates many fake identities or nodes in a blockchain or network to gain influence or disrupt consensus. It undermines decentralized systems by manipulating voting, reputation scores, or resource control, and poses a serious threat to the integrity of peer-to-peer networks.

Synergies occur when the combined value and performance of two companies after a merger or acquisition are greater than the sum of their separate parts. They result from cost savings, increased revenues, or improved efficiencies, helping the merged company achieve better financial results and competitive advantages than the individual companies could alone.

Target regime officials and sectors associated with repression and conflict.