Demat frozen for a KYC mismatch? Validate three fields and reactivate

Reviewed on: 2026-07-05.

Rajeshwari, a retired schoolteacher in Pune, opened her trading app on the last Friday of May 2026 to sell a block of shares she had held for years. A red banner read “Suspended for Debit and Credit - KYC non-compliant (Reason Code 27)“. She could see her holdings but could not sell, could not receive the dividend credited that morning, and could not even accept the rights issue closing the next week. She had changed nothing in years.

What had happened was not her fault and not a penalty. Her bank-arm Depository Participant had pushed an updated KYC record to the KRA in April 2026, and the name on that record read “R Sharma” while the Income Tax PAN database held “Rajeshwari Sharma”. In the monthly KRA validation cycle that closes on the 27th of each month, the KRA could not match the Name attribute, marked the record “On Hold”, and on 30 May 2026 CDSL applied a complete freeze under Reason Code 27. The freeze was system-driven, not a finding against her. She had a valid, PAN-Aadhaar-linked PAN, so this was never a PAN-Aadhaar problem. It was a single mismatched field, and the cure was to correct the name and push it back to the KRA.

This is the typical 2026 KYC-mismatch freeze. It is fixable by matching three records, not by fighting anyone. The path runs through your DP, the KRA, the depository, and only at the end SEBI. This guide walks through each step, what the law actually says, and where the Right to Information Act genuinely helps.

A demat account freeze for KYC non-compliance is a transaction block placed by a depository (CDSL or NSDL) on the instruction of the KYC Registration Agency that validates your identity record. It is not a SEBI penalty, not a court order, and not an allegation of fraud. It means the KRA could not confirm that the identity details on your demat account agree with official databases.

The governing framework is the SEBI KYC Registration Agencies Regulations, 2011, which created a centralised KYC system for the securities market, read with the Prevention of Money Laundering Act, 2002 and the Prevention of Money Laundering (Maintenance of Records) Rules, 2005, which impose the underlying client-due-diligence duty on every intermediary. SEBI operationalised this through a series of circulars, the most important being the Master Circular on KRA dated 12 October 2023 and the simplifying circular SEBI/HO/MIRSD/SECFATF/P/CIR/2024/41 dated 14 May 2024.

Two things are often confused, and getting them straight is the key to fixing the freeze:

1. Six attributes are CAPTURED when you open an account. Per CDSL Communiqué No. 152 dated 5 April 2021, issued in consultation with all Market Infrastructure Institutions and SEBI, every demat account must capture name, address, PAN, valid mobile number, valid email-id, and income range. New accounts had to capture all six from 1 June 2021; existing accounts had to be verified by 31 May 2021. Non-compliant accounts were made inactive, with no debits except to settle open positions.
2. Only THREE attributes are VALIDATED by the KRA for the “Validated Record” status that prevents the 2026 freeze. Per the May 2024 SEBI circular, KRAs verify only PAN, Name and Address within two days of receipt. Email is an optional attribute for existing clients as on 31 March 2024 (FAQ point 45). A missing or unvalidated mobile or email alone does not drive the 2026 freeze; it may affect capture compliance and OTP-based contact, but the freeze engine runs on PAN, Name and Address.

A record becomes a “Validated Record” (SEBI circular, para 100) when PAN, Name and Address are verified with official databases (the Income Tax PAN database; Aadhaar XML, DigiLocker or m-Aadhaar) and PAN-Aadhaar linkage is verified under Rule 114AAA of the Income Tax Rules, 1962. Validated records get KYC portability across intermediaries. As of 31 March 2024, the five KRAs together held 10.83 crore KYC records: about 73 per cent Validated, 15 per cent Registered, and 12 per cent On Hold, according to the joint KRA press release. The citizens who land in the “On Hold” 12 per cent are the ones whose accounts get frozen in the monthly cycle.

The freeze is triggered by a monthly validation cycle at the KRA, not by a human decision at your DP. Each month the KRA runs the PAN, Name and Address on every record against the Income Tax PAN database and Aadhaar-based address sources. Records that fail are flagged. The depository then applies a freeze on a fixed date.

The 2026 freeze mechanics that you must know:

1. NSDL Circular NSDL/POLICY/2026/0010 dated 21 January 2026: demat accounts of clients whose KYC records were not validated by KRAs, including those with invalid PANs, are suspended. Accounts with PANs updated in KRAs during 1 to 31 December 2025 and found non-compliant were frozen “Suspended for Debit and Credit” on 31 January 2026 (data cutoff 30 January 2026). This followed NSDL/POLICY/2025/0167 dated 19 December 2025, under which November-2025 non-compliant accounts were frozen on 27 December 2025.
2. CDSL Circular CDSL/OPS/DP/POLCY/2026/325 dated 14 May 2026: a complete freeze (debit and credit) on demat accounts with non-validated KYC records, under Reason Code 27 “Account holder related KYC non-compliant”, freeze date 30 May 2026, data cutoff 27 May 2026. It covers PANs invalid for any reason and PANs updated in the KRA database during 1 to 30 April 2026 that failed validation. This continues an earlier CDSL circular dated 16 April 2026.

Because the freeze is now debit and credit, you can neither sell nor receive credits (bonus shares, rights entitlement, dividends credited straight to the demat) until it is cured. You can still view holdings and statements.

The unfreeze procedure the DP must follow:

1. For NSDL accounts: the procedure under points 5 and 6 of Circular NSDL/POLICY/2023/0109 dated 18 August 2023.
2. For CDSL accounts: Communiqué CDSL/OPS/DP/SYSTM/2023/525 dated 5 September 2023.

In practice, once the KRA shows “Validated”, you ask the DP in writing to follow the applicable unfreeze circular and lift the Reason Code 27 freeze. The lift usually follows within a few working days.

The single most important change is the move from a debit-only freeze to a debit-and-credit freeze under Reason Code 27, formalised by the CDSL circular of 14 May 2026 (freeze date 30 May 2026) and the NSDL circular of 21 January 2026 (freeze date 31 January 2026). Older articles and older DP messages still say “suspended for debit”, which is now wrong. If your account is frozen in 2026, expect both legs to be blocked.

The second change is the simplification of KRA validation to three attributes by the SEBI circular of 14 May 2024, replacing the earlier 12 October 2023 Master Circular that required KRAs to verify PAN, Name, Address, mobile and email within two days. Under the new rule, email is optional for existing clients as on 31 March 2024, and only PAN, Name and Address drive the Validated status. This means an unvalidated email alone should not freeze your account in the 2026 cycle, and you should not let a DP tell you otherwise.

The third is a clarification on PAN-Aadhaar linking: per SEBI FAQ point 12 (May 2024), PAN-Aadhaar linkage is not mandatory to transact with your existing intermediary. A client with a valid but unlinked PAN can still transact with the existing DP; only KYC portability is lost. What does trigger the freeze is an invalid PAN (a PAN made inoperative under the Income Tax Act because it was not linked with Aadhaar by 30 June 2023, or a PAN not found in the KRA validation cycle). So: an inoperative PAN freezes the account; a merely-unlinked-but-valid PAN does not.

Step 1 - Check your KRA status by PAN. Go to any SEBI-registered KRA website and check your KYC status using your PAN. The five operational KRAs (plus one new entrant) are: CVL KRA (cvlkra.com, IN/KRA/001/2011, run by CDSL Ventures Limited), NDML KRA (kra.ndml.in, IN/KRA/002/2012, run by NSDL Database Management Ltd), DotEx KRA / NSE KRA (nsekra.com, IN/KRA/003/2012, run by NSE Data and Analytics), CAMS KRA (camskra.com, IN/KRA/004/2012), Karvy KRA (karvykra.com, IN/KRA/005/2012, now operated under KFin Technologies after the client-securities misuse ban on the sister entity Karvy Stock Broking Ltd was separated from the KRA/RTA business), and KFIN KRA (IN/KRA/007/2015, launched 30 April 2025). The status will read Validated, Registered, On Hold or Rejected, and usually names the failing field. The DotEx KRA is often missed by citizens who only check CVL, NDML, CAMS or Karvy, so check the KRA your DP actually uses.

Step 2 - Check whether your PAN is valid and linked. On the Income Tax e-filing portal (eportal.incometax.gov.in), confirm your PAN is operative and linked with Aadhaar. If your PAN is inoperative (unlinked after 30 June 2023), pay the Rs 1,000 late fee through e-Pay Tax and intimate your Aadhaar; the PAN becomes operative again within 30 days. This alone cures the freeze if an invalid PAN was the cause. If your PAN is valid and linked, move on; the problem is name or address.

Step 3 - Identify the exact mismatch. Compare the name and address on three records: your PAN card, your DP's demat account record, and the KRA record shown on the KRA site. A maiden name, an initial-only spelling (“R Sharma” against “Rajeshwari Sharma”), an expanded initial, an old address, or a transliteration difference are the usual culprits. The name must be identical to the PAN; address must be supported by an Aadhaar or a valid proof.

Step 4 - Submit a KYC modification request to your DP. File a written re-KYC or KYC modification with your DP, attaching the PAN card as name proof and an address proof. Ask the DP in writing to push the corrected record to the KRA so the KRA can re-run validation. Keep the DP's receiving. Do not submit fresh documents blindly; fix only the failing field.

Step 5 - Confirm the KRA shows “Validated”. Re-check the KRA site by PAN after a few working days. Once it reads Validated, the validation engine is satisfied and the freeze has no legal basis.

Step 6 - Ask the DP to lift the freeze. Write to the DP citing the applicable unfreeze circular - NSDL/POLICY/2023/0109 (18 August 2023) for NSDL accounts, or CDSL/OPS/DP/SYSTM/2023/525 (5 September 2023) for CDSL accounts - and ask that the Reason Code 27 freeze be lifted now that the KRA record is Validated. Ask for a written confirmation and the expected reactivation date.

Step 7 - Escalate if the DP delays. If the freeze is not lifted within a reasonable window (say, a week past “Validated”), escalate to the depository's investor grievance portal (CDSL at cdslindia.com or NSDL at nsdl.co.in), then to SEBI SCORES at scores.sebi.gov.in against the DP. Under SCORES 2.0 (SEBI Circular SEBI/HO/OIAE/IGRD/CIR/P/2023/156 dated 20 September 2023, effective 4 December 2023), the regulated entity must file an Action Taken Report within 21 calendar days (down from the earlier 30), with auto-escalation if no ATR is filed. For a complaint against a DP, the Depository is the Designated Body that monitors the ATR.

Sample questions to put to your DP in writing:

1. “Which KYC attribute failed validation at the KRA - PAN, Name or Address - and on what date was the record marked On Hold?”
2. “Under which depository circular and Reason Code was the freeze applied, and on what date?”
3. “What documents must I submit to correct the failing field, and by when will the DP push the corrected record to the KRA?”
4. “Once the KRA shows Validated, by what date will the DP lift the freeze under NSDL/POLICY/2023/0109 or CDSL/OPS/DP/SYSTM/2023/525?”
5. “If the freeze is not lifted within that period, what is the DP's written escalation path to the depository?”

1. PAN card (as name proof - the single most important document, since the name on the demat must match the PAN exactly).
2. Aadhaar card or Aadhaar XML / DigiLocker / m-Aadhaar (as address proof and PAN-Aadhaar linkage evidence).
3. A recent address proof if the address has changed (utility bill, bank statement, passport).
4. The KRA status screenshot showing “On Hold” and the failing field.
5. The DP's freeze message showing Reason Code 27 and the freeze date.
6. Proof of PAN-Aadhaar linking from the income tax portal, if an invalid PAN was the cause.
7. Your KYC modification acknowledgement from the DP, kept as proof for escalation.

1. Treating the freeze as a debit-only block. The 2026 CDSL and NSDL freezes are debit and credit. Assuming you can still receive a dividend or rights issue into the demat will cost you a corporate action. Cite CDSL/OPS/DP/POLCY/2026/325 and NSDL/POLICY/2026/0010.
2. Submitting fresh KYC blindly without finding the failing field. Six attributes must be captured, but only PAN, Name and Address drive the 2026 validation freeze (SEBI circular of 14 May 2024). Fix the one field the KRA flagged, not all six.
3. Believing an unvalidated email or mobile alone froze the account. Under the May 2024 framework, email is optional for existing clients as on 31 March 2024. A mobile must still be captured and OTP-validated by the DP, but a missing contact is not the 2026 freeze trigger.
4. Assuming a valid-but-unlinked PAN froze the account. Per SEBI FAQ point 12, PAN-Aadhaar linkage is required only for KYC portability; a valid unlinked PAN lets you transact with the existing DP. Only an inoperative PAN (unlinked past 30 June 2023) is invalid and freezes the account.
5. Filing RTI to the depository or KRA to force reactivation. CDSL and NSDL are not public authorities (CIC, *Nayan Bhagwat Prasad Raval vs CDSL*, CIC/MP/C/2015/000177-BJ, 20 February 2017). KRAs and DPs are private intermediaries. RTI to them is not maintainable.
6. Waiting for a long weekend to start. Each handoff between DP, KRA and depository adds a day or two. Begin the same day you see “On Hold”, especially if a corporate action is pending.
7. Paying an “agent” who promises to get the freeze lifted. This is a common scam layered on top of a freeze. The cure is a KYC modification, which you can file yourself.

Use this only if you have filed a SCORES complaint against your DP and want to know whether SEBI has taken supervisory action. Do not address it to CDSL, NSDL, the KRA or the DP - they are not public authorities.

To: The Central Public Information Officer,
Securities and Exchange Board of India,
SEBI Bhavan, Plot No. C4-A, G Block, Bandra Kurla Complex,
Bandra (East), Mumbai 400 051.

Subject: Application under Section 6(1) of the RTI Act, 2005.

Sir/Madam,

I filed a complaint on SEBI SCORES (complaint no. [number], dated [date])
against my Depository Participant [DP name], DP ID [number], concerning a
demat account freeze under Reason Code 27 "KYC non-compliant" applied on
[date] under CDSL/OPS/DP/POLCY/2026/325 (or NSDL/POLICY/2026/0010). The KRA
record has since been validated on [date], but the DP has not lifted the
freeze.

Under Section 6(1) of the RTI Act, 2005, please furnish:

1. The status and disposal of my SCORES complaint, including the Action
   Taken Report filed by the DP/Depository and the date of filing.
2. Whether SEBI has initiated any supervisory or enforcement action
   against the DP for failure to lift the freeze after KRA validation,
   and the stage of that action as on the date of this application.
3. The designated First Appellate Authority for this CPIO, in case I
   need to file a first appeal under Section 19(1).

I state that the information sought is not falling under the exemptions
in Section 8 of the Act insofar as it concerns the supervisory action
taken on a registered complaint. I am an Indian citizen. The
application fee of Rs 10 is tendered herewith.

Date: [date]                                       [Name, address, PAN]
Place: [place]                                     [Signature]

If SEBI does not reply within 30 days (plus 5 days if filed through a CAPIO), or replies unsatisfactorily, file a first appeal under Section 19(1) of the RTI Act with the First Appellate Authority at SEBI. As of the date of this guide, the CPIO at SEBI is the Chief General Manager and the First Appellate Authority is an Executive Director; confirm the current names on the SEBI RTI page (sebi.gov.in/rti-act-2005.html) before addressing your letter. For the mechanics of filing online, see the AI RTI draft tool at https://righttoinformation.wiki/tools/ai-rti-draft-app.html and the PIO reply checker at https://righttoinformation.wiki/tools/pio-reply-checker-app.html . You can also use the timeline calculator at https://righttoinformation.wiki/tools/timeline-calculator-app.html to check whether SEBI's 30-day clock has run.

The freeze is system-driven, not a penalty. Each month the KRA validates the PAN, Name and Address on your record against official databases. If a field has drifted - because your DP pushed an update with a slightly different spelling, or your PAN record was amended, or your PAN became inoperative - the KRA marks the record “On Hold” and the depository applies a debit-and-credit freeze on the next freeze date (for example, 30 May 2026 under the CDSL May 2026 circular). You changed nothing, but a field on a downstream record did.

Only PAN, Name and Address must be validated by the KRA under the SEBI circular of 14 May 2024. The name must be identical to the PAN; the address must be supported by Aadhaar or another valid proof. Six attributes (name, address, PAN, mobile, email, income range) must be captured on the account, but only the three drive the 2026 validation freeze.

Very likely. A PAN made inoperative because it was not linked with Aadhaar by 30 June 2023 is treated as invalid, and an invalid PAN triggers the freeze. Pay the Rs 1,000 late fee on the income tax portal, intimate your Aadhaar, and the PAN becomes operative within 30 days. Then ask your DP to push the record to the KRA again. Note: a valid but unlinked PAN does not freeze the account - it only costs you KYC portability (SEBI FAQ point 12).

No. The 2026 freeze is debit and credit. You can view holdings and statements, but you cannot sell, transfer, or receive credits such as bonus shares, rights entitlement, or dividends credited to the demat, until the freeze is lifted. This is the key change from the older “suspended for debit” framing.

Once you correct the failing field and the DP pushes the record to the KRA, validation usually completes within two working days. After the KRA shows “Validated”, the DP lifts the freeze under the applicable unfreeze circular (NSDL/POLICY/2023/0109 or CDSL/OPS/DP/SYSTM/2023/525) within a few more working days. Get the DP to confirm the date in writing and escalate to the depository if it overruns.

No. CDSL and NSDL are companies under the Companies Act and are not public authorities under the RTI Act (CIC, *Nayan Bhagwat Prasad Raval vs CDSL*, 20 February 2017). KRAs and DPs are private intermediaries. RTI cannot reach them to force reactivation. The only public authority in this chain is SEBI, and an RTI to SEBI can only ask whether it has acted on a SCORES complaint, subject to exemptions.

SEBI SCORES (scores.sebi.gov.in) is the online grievance redressal system. Under SCORES 2.0 (SEBI circular of 20 September 2023, effective 4 December 2023), the regulated entity must file an Action Taken Report within 21 calendar days, with auto-escalation if no ATR is filed. For a complaint against a DP, the Depository (CDSL or NSDL) is the Designated Body. If you are not satisfied with the ATR, request first-level review within 15 days; if still unsatisfied, seek second-level review by SEBI within 15 days. Complaints must be lodged within one year of the cause of action. The SCORES toll-free helpline is 1800 22 7575 / 1800 266 7575.

Escalate in this order: (1) the DP's compliance officer in writing; (2) the depository's investor grievance portal (CDSL or NSDL); (3) SEBI SCORES against the DP, which forces a 21-day ATR; (4) the Online Dispute Resolution platform at smartodr.in, which disposes of the SCORES complaint when you approach it; and (5) if you want to know whether SEBI has taken supervisory action, an RTI to SEBI under Section 6(1). Do not skip steps 1 and 2; SEBI and the depository look for evidence that you tried the simpler route first.

No. A KYC freeze is about your identity record at the KRA. A closure delay is about ending the account; a wrong pledge is about your shares being locked as collateral. Each has a different fix and a different escalation. See the related guides below.

The deadline was 30 June 2023 (extended from 31 March 2023 by the Ministry of Finance). PANs not linked by that date became inoperative from 1 July 2023. You can still link them by paying a Rs 1,000 late fee; the PAN becomes operative within 30 days of intimation. Some individuals are exempt: non-residents, non-citizens, those aged 80 and above, and residents of Meghalaya, Assam and Jammu and Kashmir.

1. SEBI RTI page (fee Rs 10, reply 30 days, CPIO and FAA details): https://www.sebi.gov.in/rti-act-2005.html
2. SEBI circular SEBI/HO/MIRSD/SECFATF/P/CIR/2024/41 dated 14 May 2024 on KRA validation of PAN, Name, Address (email optional for existing clients): https://www.sebi.gov.in/sebi_data/faqfiles/may-2024/1715694256793.pdf
3. NSDL circular NSDL/POLICY/2026/0010 dated 21 January 2026 on suspension of demat accounts for non-validated KYC: https://nsdl.co.in/downloadables/pdf/2026-0010-Policy-Suspension_of_demat_accounts_of_existing_clients_whose_KYC_records_are_not_found_to_be_valid_by_KRAs_after_the_validation_process.pdf
4. CDSL circular CDSL/OPS/DP/POLCY/2026/325 dated 14 May 2026 on complete freeze under Reason Code 27 (reported by Mondaq and indialaw.in): https://www.mondaq.com/india/financial-services/1792842/regulatory-compliance-understanding-cdsls-kyc-validation-circular-of-may-2026
5. SEBI SCORES 2.0 circular SEBI/HO/OIAE/IGRD/CIR/P/2023/156 dated 20 September 2023 (21-day ATR): https://investor.sebi.gov.in/sebi_scores.html
6. Joint KRA press release on KYC changes (10.83 crore records, 73 per cent Validated): https://www.cdslindia.com/Downloads/About/Media/CVL%20-%20Joint%20Press%20Release%20by%20all%20KYC%20Registration%20Agencies%20(KRAs)%20on%20the%20recent%20KYC%20changes.pdf
7. CIC decision, Nayan Bhagwat Prasad Raval vs CDSL, CIC/MP/C/2015/000177-BJ, 20 February 2017 (CDSL not a public authority): https://indiankanoon.org/doc/76510920/
8. Ministry of Finance / PIB announcement on PAN-Aadhaar deadline (30 June 2023, Rs 1,000 late fee): https://www.pib.gov.in/Pressreleaseshare.aspx?PRID=1911396
9. Income Tax PAN-Aadhaar linking portal: https://eportal.incometax.gov.in/iec/foservices/#/pre-login/bl-link-aadhaar
10. SEBI SCORES portal and toll-free helpline (1800 22 7575 / 1800 266 7575): https://scores.sebi.gov.in/
11. Online Dispute Resolution (smartodr.in): https://www.smartodr.in/

• Demat account closure delayed
• Demat shares missing or wrongly pledged
• Bonus, dividend or rights not reflected
• Broker ledger mismatch
• Multiple or surrendered PAN still active - tax and KYC fix
• PAN-Aadhaar linking failure for NRI or foreign resident
• Name mismatch across Aadhaar, PAN, passport, degree and bank - correction sequence
• Bank account KYC freeze after submitting documents - RBI complaint
• RTI for PAN card status
• All practical guides