SECP Issues Consolidated Framework for Investor Onboarding: Circular 6 of 2023 Repealed & 24/7 Digital Account Opening Mandated
In a decisive regulatory consolidation aimed at eliminating fragmented account opening protocols, standardizing customer due diligence (CDD), and accelerating 24/7 digital financial inclusion, the Securities and Exchange Commission of Pakistan (SECP) has formally notified the Consolidated Regulatory Framework for Investor Onboarding.
Through this milestone regulatory instrument, the SECP has officially repealed Circular No. 6 of 2023 (dated April 19, 2023). The new unified architecture harmonizes identity verification, account limits, risk categorization, and data-sharing mechanisms across all Securities Regulated Intermediaries (SRIs), the Centralized Gateway Portal (CGP), the Centralized KYC Organization (CKO), and Asaan Connect.
For retail investors, brokerage houses, asset management companies (AMCs), insurance providers, and fintech platforms, this consolidated directive establishes clear statutory standards for straight-through digital onboarding without physical paperwork or human intervention.
Core Pillars of the SECP Consolidated Onboarding Framework
The new framework eliminates overlapping interpretational ambiguities that previously hindered capital market intermediaries from scaling digital onboarding. The core regulatory mandates include:
| Onboarding Parameter | Regulatory Provision | Operational Mandate |
|---|---|---|
| Statutory Status | Replaces and repeals Circular No. 6 of 2023 | Single unified rulebook governing all capital market customer onboarding |
| 24/7 Straight-Through Processing (STP) | Mandatory API connectivity between CMIIs, CKO, and SRIs | Instant issuance of UINs and CDC sub-accounts round the clock |
| Elimination of Paper Signatures | Full digital signature / biometric validation | Zero requirement for signatures on white paper or physical forms |
| Identity Verification Architecture | Integrated NADRA verification | Validation via NADRA Verisys, Multi Biometric Verification System (MBVS), or digital facial matching |
| Sahulat Sarmayakari Account Limit | Simplified Due Diligence (SDD) | PKR 3,000,000 total investment ceiling at any point in time; PKR 1,000,000 single transaction limit |
| Regular Sarmayakari Account | Standard Customer Due Diligence (CDD) | Available to CNIC, SNIC, NICOP, POC, and Form-B holders with documented source of funds |
| Insurance Product Integration | Standardized digital onboarding | Covers life and general insurance products under calibrated transaction and premium ceilings |
Technical Integration: How Straight-Through Processing (STP) Operates
Under the consolidated regime, regulated entities are strictly required to establish automated API data pipes, enabling straight-through account generation across capital market infrastructure institutions:
+----------------------------------------------------------------------------------+
| STEP 1: CUSTOMER DIGITAL ENTRY (Website, Mobile App, Digital Bank, or EMI) |
| (Customer inputs CNIC, active SIM mobile number, and email address) |
+----------------------------------------+-----------------------------------------+
|
v
+----------------------------------------------------------------------------------+
| STEP 2: REAL-TIME VERIFICATION VIA NADRA & CENTRALIZED KYC ORGANIZATION (CKO) |
| (Live facial liveness check or biometric match; CKO repository checked via API) |
+----------------------------------------+-----------------------------------------+
|
v
+----------------------------------------------------------------------------------+
| STEP 3: AUTOMATED UNIQUE IDENTIFICATION NUMBER (UIN) GENERATION (NCCPL) |
| (National Clearing Company instantly maps investor to national tax and identity) |
+----------------------------------------+-----------------------------------------+
|
v
+----------------------------------------------------------------------------------+
| STEP 4: INSTANT CENTRAL DEPOSITORY COMPANY (CDC) SUB-ACCOUNT ISSUANCE |
| (Account ready for stock trading, mutual fund units, or VPS allocation in 24/7) |
+----------------------------------------------------------------------------------+
Detailed Comparison: Sahulat Sarmayakari vs. Regular Sarmayakari Accounts
To facilitate everyday savers while maintaining strict anti-money laundering (AML/CFT) safeguards, the SECP has standardized two primary digital account tiers:
1. Sahulat Sarmayakari Account (Simplified Due Diligence)
- Target Audience: Freelancers, students, housewives, small savers, and first-time retail investors seeking frictionless entry.
- Documentation: Valid CNIC/SNIC and live OTP verification. Formal salary slips or extensive tax returns are exempted.
- Portfolio Cap: Maximum of PKR 3,000,000 aggregate investment across all eligible schemes.
- Transaction Cap: Maximum of PKR 1,000,000 per individual transaction.
- Eligible Investment Schemes: Money market funds, low-risk sovereign income funds, Exchange Traded Funds (ETFs), and money market / debt sub-funds of Voluntary Pension Schemes (VPS).
2. Regular Sarmayakari Account (Standard Due Diligence)
- Target Audience: Salaried executives, business owners, corporate directors, and high-net-worth individuals.
- Documentation: Valid CNIC, NICOP, POC, or Form-B (for minors) accompanied by verified proof of source of income / wealth.
- Portfolio Cap: Unlimited.
- Eligible Assets: Full spectrum of equities, futures, leveraged debt instruments, real estate investment trusts (REITs), and equity mutual funds.
Enhanced Due Diligence (EDD) & Customer Risk Profiling (CRP)
While onboarding has been digitized, the SECP has emphasized that financial crime screening remains mandatory:
- Customer Risk Profiling (CRP): Every SRI must implement an automated risk engine evaluating geographic location, nature of profession, transaction frequency, and political exposure (PEPs).
- Enhanced Due Diligence (EDD): High-risk accounts continue to require additional documentary substantiation and senior management approval prior to transaction clearance.
- Data Security & Privacy: Regulated entities holding investor data are legally obligated to deploy robust encryption, ensuring compliance with Pakistani personal data protection standards and SECP cybersecurity directives.
Commercial Impact on Fintechs, Brokerages & Asset Managers
The repeal of Circular 6 of 2023 in favor of this consolidated framework delivers transformative operational efficiencies:
- Zero Drop-off from Manual Paperwork: Previously, requiring physical signatures on white paper resulted in significant user drop-offs during digital signups. Full digital verification eliminates this friction entirely.
- Cross-Selling via Centralized Gateway Portal (CGP): An investor verified once through an Electronic Money Institution (such as Nayapay or Sadapay) or a commercial bank can consent to share their KYC data instantly with mutual fund managers, brokerage houses, or micro-insurers.
Corporate Compliance Services by SECP Portal
Whether you are establishing a fintech startup, registering a corporate brokerage or NBFC, or seeking to understand the regulatory compliance duties of company directors under the Companies Act, 2017:
- Verify company registration records instantly with our SECP Company Name Search Tool.
- Validate filer credentials and tax statuses through our FBR NTN Verification Portal.
- Calculate income and withholding tax liabilities accurately with our Tax Calculator.
- Contact our senior corporate secretarial consultants for end-to-end statutory and regulatory advisory.