Reviewed on: 2026-07-05.
Your demat account is frozen because a KYC Registration Agency could not validate your PAN, name and address against official databases. The 2026 freeze blocks both debits and credits. File a KYC modification with your Depository Participant using a PAN card as name proof, push the corrected record to the KRA, then ask the DP to lift the freeze. If the DP delays, escalate to the depository and then to SEBI SCORES, which requires an Action Taken Report within 21 calendar days. RTI to SEBI costs Rs 10 and gets a reply in 30 days, but the depository itself is not a public authority.
Rajeshwari, a retired schoolteacher in Pune, opened her trading app on the last Friday of May 2026 to sell a block of shares she had held for years. A red banner read “Suspended for Debit and Credit - KYC non-compliant (Reason Code 27)“. She could see her holdings but could not sell, could not receive the dividend credited that morning, and could not even accept the rights issue closing the next week. She had changed nothing in years.
What had happened was not her fault and not a penalty. Her bank-arm Depository Participant had pushed an updated KYC record to the KRA in April 2026, and the name on that record read “R Sharma” while the Income Tax PAN database held “Rajeshwari Sharma”. In the monthly KRA validation cycle that closes on the 27th of each month, the KRA could not match the Name attribute, marked the record “On Hold”, and on 30 May 2026 CDSL applied a complete freeze under Reason Code 27. The freeze was system-driven, not a finding against her. She had a valid, PAN-Aadhaar-linked PAN, so this was never a PAN-Aadhaar problem. It was a single mismatched field, and the cure was to correct the name and push it back to the KRA.
This is the typical 2026 KYC-mismatch freeze. It is fixable by matching three records, not by fighting anyone. The path runs through your DP, the KRA, the depository, and only at the end SEBI. This guide walks through each step, what the law actually says, and where the Right to Information Act genuinely helps.
A demat account freeze for KYC non-compliance is a transaction block placed by a depository (CDSL or NSDL) on the instruction of the KYC Registration Agency that validates your identity record. It is not a SEBI penalty, not a court order, and not an allegation of fraud. It means the KRA could not confirm that the identity details on your demat account agree with official databases.
The governing framework is the SEBI KYC Registration Agencies Regulations, 2011, which created a centralised KYC system for the securities market, read with the Prevention of Money Laundering Act, 2002 and the Prevention of Money Laundering (Maintenance of Records) Rules, 2005, which impose the underlying client-due-diligence duty on every intermediary. SEBI operationalised this through a series of circulars, the most important being the Master Circular on KRA dated 12 October 2023 and the simplifying circular SEBI/HO/MIRSD/SECFATF/P/CIR/2024/41 dated 14 May 2024.
Two things are often confused, and getting them straight is the key to fixing the freeze:
A record becomes a “Validated Record” (SEBI circular, para 100) when PAN, Name and Address are verified with official databases (the Income Tax PAN database; Aadhaar XML, DigiLocker or m-Aadhaar) and PAN-Aadhaar linkage is verified under Rule 114AAA of the Income Tax Rules, 1962. Validated records get KYC portability across intermediaries. As of 31 March 2024, the five KRAs together held 10.83 crore KYC records: about 73 per cent Validated, 15 per cent Registered, and 12 per cent On Hold, according to the joint KRA press release. The citizens who land in the “On Hold” 12 per cent are the ones whose accounts get frozen in the monthly cycle.
Why this matters for your RTI. The freeze is the work of private intermediaries (your DP, the KRA, the depository) that are not public authorities under the RTI Act. RTI cannot reach them to force reactivation. The only public authority in this chain is SEBI, and an RTI to SEBI can only ask whether SEBI has acted on a complaint against a DP, subject to exemptions. So the fast route is the DP-KRA fix and SEBI SCORES, with RTI as a side lever to check on SEBI's supervisory action, not to thaw the account.
The freeze is triggered by a monthly validation cycle at the KRA, not by a human decision at your DP. Each month the KRA runs the PAN, Name and Address on every record against the Income Tax PAN database and Aadhaar-based address sources. Records that fail are flagged. The depository then applies a freeze on a fixed date.
The 2026 freeze mechanics that you must know:
Because the freeze is now debit and credit, you can neither sell nor receive credits (bonus shares, rights entitlement, dividends credited straight to the demat) until it is cured. You can still view holdings and statements.
The unfreeze procedure the DP must follow:
In practice, once the KRA shows “Validated”, you ask the DP in writing to follow the applicable unfreeze circular and lift the Reason Code 27 freeze. The lift usually follows within a few working days.
The single most important change is the move from a debit-only freeze to a debit-and-credit freeze under Reason Code 27, formalised by the CDSL circular of 14 May 2026 (freeze date 30 May 2026) and the NSDL circular of 21 January 2026 (freeze date 31 January 2026). Older articles and older DP messages still say “suspended for debit”, which is now wrong. If your account is frozen in 2026, expect both legs to be blocked.
The second change is the simplification of KRA validation to three attributes by the SEBI circular of 14 May 2024, replacing the earlier 12 October 2023 Master Circular that required KRAs to verify PAN, Name, Address, mobile and email within two days. Under the new rule, email is optional for existing clients as on 31 March 2024, and only PAN, Name and Address drive the Validated status. This means an unvalidated email alone should not freeze your account in the 2026 cycle, and you should not let a DP tell you otherwise.
The third is a clarification on PAN-Aadhaar linking: per SEBI FAQ point 12 (May 2024), PAN-Aadhaar linkage is not mandatory to transact with your existing intermediary. A client with a valid but unlinked PAN can still transact with the existing DP; only KYC portability is lost. What does trigger the freeze is an invalid PAN (a PAN made inoperative under the Income Tax Act because it was not linked with Aadhaar by 30 June 2023, or a PAN not found in the KRA validation cycle). So: an inoperative PAN freezes the account; a merely-unlinked-but-valid PAN does not.
Step 1 - Check your KRA status by PAN. Go to any SEBI-registered KRA website and check your KYC status using your PAN. The five operational KRAs (plus one new entrant) are: CVL KRA (cvlkra.com, IN/KRA/001/2011, run by CDSL Ventures Limited), NDML KRA (kra.ndml.in, IN/KRA/002/2012, run by NSDL Database Management Ltd), DotEx KRA / NSE KRA (nsekra.com, IN/KRA/003/2012, run by NSE Data and Analytics), CAMS KRA (camskra.com, IN/KRA/004/2012), Karvy KRA (karvykra.com, IN/KRA/005/2012, now operated under KFin Technologies after the client-securities misuse ban on the sister entity Karvy Stock Broking Ltd was separated from the KRA/RTA business), and KFIN KRA (IN/KRA/007/2015, launched 30 April 2025). The status will read Validated, Registered, On Hold or Rejected, and usually names the failing field. The DotEx KRA is often missed by citizens who only check CVL, NDML, CAMS or Karvy, so check the KRA your DP actually uses.
Step 2 - Check whether your PAN is valid and linked. On the Income Tax e-filing portal (eportal.incometax.gov.in), confirm your PAN is operative and linked with Aadhaar. If your PAN is inoperative (unlinked after 30 June 2023), pay the Rs 1,000 late fee through e-Pay Tax and intimate your Aadhaar; the PAN becomes operative again within 30 days. This alone cures the freeze if an invalid PAN was the cause. If your PAN is valid and linked, move on; the problem is name or address.
Step 3 - Identify the exact mismatch. Compare the name and address on three records: your PAN card, your DP's demat account record, and the KRA record shown on the KRA site. A maiden name, an initial-only spelling (“R Sharma” against “Rajeshwari Sharma”), an expanded initial, an old address, or a transliteration difference are the usual culprits. The name must be identical to the PAN; address must be supported by an Aadhaar or a valid proof.
Step 4 - Submit a KYC modification request to your DP. File a written re-KYC or KYC modification with your DP, attaching the PAN card as name proof and an address proof. Ask the DP in writing to push the corrected record to the KRA so the KRA can re-run validation. Keep the DP's receiving. Do not submit fresh documents blindly; fix only the failing field.
Step 5 - Confirm the KRA shows “Validated”. Re-check the KRA site by PAN after a few working days. Once it reads Validated, the validation engine is satisfied and the freeze has no legal basis.
Step 6 - Ask the DP to lift the freeze. Write to the DP citing the applicable unfreeze circular - NSDL/POLICY/2023/0109 (18 August 2023) for NSDL accounts, or CDSL/OPS/DP/SYSTM/2023/525 (5 September 2023) for CDSL accounts - and ask that the Reason Code 27 freeze be lifted now that the KRA record is Validated. Ask for a written confirmation and the expected reactivation date.
Step 7 - Escalate if the DP delays. If the freeze is not lifted within a reasonable window (say, a week past “Validated”), escalate to the depository's investor grievance portal (CDSL at cdslindia.com or NSDL at nsdl.co.in), then to SEBI SCORES at scores.sebi.gov.in against the DP. Under SCORES 2.0 (SEBI Circular SEBI/HO/OIAE/IGRD/CIR/P/2023/156 dated 20 September 2023, effective 4 December 2023), the regulated entity must file an Action Taken Report within 21 calendar days (down from the earlier 30), with auto-escalation if no ATR is filed. For a complaint against a DP, the Depository is the Designated Body that monitors the ATR.
Sample questions to put to your DP in writing:
Rajeshwari S., Pune, May-June 2026 - cost Rs 0 to cure, one re-KYC filing.
Rajeshwari, 61, a retired schoolteacher, held shares worth about Rs 4.8 lakh in a single demat account through her bank-arm DP. On 30 May 2026 her trading app showed “Suspended for Debit and Credit - Reason Code 27 KYC non-compliant”. A dividend of Rs 1,840 credited that morning was visible but not withdrawable, and a rights issue closing 3 June was at risk.
She checked her KRA status on camskra.com by PAN: it read “On Hold - Name mismatch”. She checked her PAN on the income tax portal: it was operative and Aadhaar-linked, so this was not a PAN-Aadhaar problem. Comparing records, she found her DP's April 2026 KYC update had sent the name as “R Sharma” while the PAN held “Rajeshwari Sharma”. On 2 June 2026 she filed a KYC modification with her DP, attaching her PAN card as name proof, and asked the DP to push the corrected name to the KRA. On 6 June the KRA site showed “Validated”. She then wrote to the DP citing CDSL/OPS/DP/SYSTM/2023/525 and asking for the freeze to be lifted. The DP lifted the Reason Code 27 freeze on 9 June 2026. She applied for the rights issue on 10 June. Total cost: Rs 0. She kept the KRA screenshot, the modification acknowledgement and the DP's lift confirmation in case of a future dispute. She did not file RTI to CDSL, because CDSL is not a public authority.
Use this only if you have filed a SCORES complaint against your DP and want to know whether SEBI has taken supervisory action. Do not address it to CDSL, NSDL, the KRA or the DP - they are not public authorities.
To: The Central Public Information Officer, Securities and Exchange Board of India, SEBI Bhavan, Plot No. C4-A, G Block, Bandra Kurla Complex, Bandra (East), Mumbai 400 051. Subject: Application under Section 6(1) of the RTI Act, 2005. Sir/Madam, I filed a complaint on SEBI SCORES (complaint no. [number], dated [date]) against my Depository Participant [DP name], DP ID [number], concerning a demat account freeze under Reason Code 27 "KYC non-compliant" applied on [date] under CDSL/OPS/DP/POLCY/2026/325 (or NSDL/POLICY/2026/0010). The KRA record has since been validated on [date], but the DP has not lifted the freeze. Under Section 6(1) of the RTI Act, 2005, please furnish: 1. The status and disposal of my SCORES complaint, including the Action Taken Report filed by the DP/Depository and the date of filing. 2. Whether SEBI has initiated any supervisory or enforcement action against the DP for failure to lift the freeze after KRA validation, and the stage of that action as on the date of this application. 3. The designated First Appellate Authority for this CPIO, in case I need to file a first appeal under Section 19(1). I state that the information sought is not falling under the exemptions in Section 8 of the Act insofar as it concerns the supervisory action taken on a registered complaint. I am an Indian citizen. The application fee of Rs 10 is tendered herewith. Date: [date] [Name, address, PAN] Place: [place] [Signature]
If SEBI does not reply within 30 days (plus 5 days if filed through a CAPIO), or replies unsatisfactorily, file a first appeal under Section 19(1) of the RTI Act with the First Appellate Authority at SEBI. As of the date of this guide, the CPIO at SEBI is the Chief General Manager and the First Appellate Authority is an Executive Director; confirm the current names on the SEBI RTI page (sebi.gov.in/rti-act-2005.html) before addressing your letter. For the mechanics of filing online, see the AI RTI draft tool at https://righttoinformation.wiki/tools/ai-rti-draft-app.html and the PIO reply checker at https://righttoinformation.wiki/tools/pio-reply-checker-app.html . You can also use the timeline calculator at https://righttoinformation.wiki/tools/timeline-calculator-app.html to check whether SEBI's 30-day clock has run.
The freeze is system-driven, not a penalty. Each month the KRA validates the PAN, Name and Address on your record against official databases. If a field has drifted - because your DP pushed an update with a slightly different spelling, or your PAN record was amended, or your PAN became inoperative - the KRA marks the record “On Hold” and the depository applies a debit-and-credit freeze on the next freeze date (for example, 30 May 2026 under the CDSL May 2026 circular). You changed nothing, but a field on a downstream record did.
Only PAN, Name and Address must be validated by the KRA under the SEBI circular of 14 May 2024. The name must be identical to the PAN; the address must be supported by Aadhaar or another valid proof. Six attributes (name, address, PAN, mobile, email, income range) must be captured on the account, but only the three drive the 2026 validation freeze.
Very likely. A PAN made inoperative because it was not linked with Aadhaar by 30 June 2023 is treated as invalid, and an invalid PAN triggers the freeze. Pay the Rs 1,000 late fee on the income tax portal, intimate your Aadhaar, and the PAN becomes operative within 30 days. Then ask your DP to push the record to the KRA again. Note: a valid but unlinked PAN does not freeze the account - it only costs you KYC portability (SEBI FAQ point 12).
No. The 2026 freeze is debit and credit. You can view holdings and statements, but you cannot sell, transfer, or receive credits such as bonus shares, rights entitlement, or dividends credited to the demat, until the freeze is lifted. This is the key change from the older “suspended for debit” framing.
Once you correct the failing field and the DP pushes the record to the KRA, validation usually completes within two working days. After the KRA shows “Validated”, the DP lifts the freeze under the applicable unfreeze circular (NSDL/POLICY/2023/0109 or CDSL/OPS/DP/SYSTM/2023/525) within a few more working days. Get the DP to confirm the date in writing and escalate to the depository if it overruns.
No. CDSL and NSDL are companies under the Companies Act and are not public authorities under the RTI Act (CIC, *Nayan Bhagwat Prasad Raval vs CDSL*, 20 February 2017). KRAs and DPs are private intermediaries. RTI cannot reach them to force reactivation. The only public authority in this chain is SEBI, and an RTI to SEBI can only ask whether it has acted on a SCORES complaint, subject to exemptions.
SEBI SCORES (scores.sebi.gov.in) is the online grievance redressal system. Under SCORES 2.0 (SEBI circular of 20 September 2023, effective 4 December 2023), the regulated entity must file an Action Taken Report within 21 calendar days, with auto-escalation if no ATR is filed. For a complaint against a DP, the Depository (CDSL or NSDL) is the Designated Body. If you are not satisfied with the ATR, request first-level review within 15 days; if still unsatisfied, seek second-level review by SEBI within 15 days. Complaints must be lodged within one year of the cause of action. The SCORES toll-free helpline is 1800 22 7575 / 1800 266 7575.
Escalate in this order: (1) the DP's compliance officer in writing; (2) the depository's investor grievance portal (CDSL or NSDL); (3) SEBI SCORES against the DP, which forces a 21-day ATR; (4) the Online Dispute Resolution platform at smartodr.in, which disposes of the SCORES complaint when you approach it; and (5) if you want to know whether SEBI has taken supervisory action, an RTI to SEBI under Section 6(1). Do not skip steps 1 and 2; SEBI and the depository look for evidence that you tried the simpler route first.
No. A KYC freeze is about your identity record at the KRA. A closure delay is about ending the account; a wrong pledge is about your shares being locked as collateral. Each has a different fix and a different escalation. See the related guides below.
The deadline was 30 June 2023 (extended from 31 March 2023 by the Ministry of Finance). PANs not linked by that date became inoperative from 1 July 2023. You can still link them by paying a Rs 1,000 late fee; the PAN becomes operative within 30 days of intimation. Some individuals are exempt: non-residents, non-citizens, those aged 80 and above, and residents of Meghalaya, Assam and Jammu and Kashmir.