eKYC Setu – Aadhaar eKYC Made Simple
Fast, secure, and compliant Aadhaar-based eKYC with OTP and Face Authentication. Powered by NPCI’s eKYC Setu. Delivered by Viyona Fintech, an NPCI-Certified TSP.
What is eKYC Setu?
eKYC Setu is NPCI’s single-window system for Aadhaar-based electronic KYC. It allows regulated entities like banks, NBFCs, and fintechs to perform KYC securely and quickly through OTP or Face Authentication. The system ensures compliance by returning only demographic details with a masked Aadhaar, reducing risk and simplifying digital onboarding.
Who this is for
Regulated entities (banks/NBFCs/fintechs, etc.) that need Aadhaar-based online e-KYC under the Aadhaar Act and PMLA, with minimal integration effort and strong compliance.
Why Choose Viyona Fintech?
- NPCI-Certified TSP – trusted partner for certification and integration.
- Faster go-live – with SDK/web playbooks, sandbox setup, and certification support.
- Compliance-first – consent flows, masked data handling, and audit logs built-in.
- Enterprise support – full lifecycle: UAT, certification, production, and SLA monitoring.
Key Features
- Integration options: Web Redirect (OTP) or SDK (OTP & Face Auth)
- Authentication modes: Aadhaar OTP and UIDAI Face Authentication
- Input accepted: UID or VID
- Output: Demographic KYC with masked Aadhaar
- User consent: Mandatory and logged
- Compliance simplified: NPCI acts as aggregator – no ASA license required
Web Redirect (OTP Flow):
- User provides consent on NPCI page
- Inputs Aadhaar/VID
- Submits OTP
- RE receives masked demographic KYC
How it Works
SDK Flow (OTP + Face Auth):
- In-app consent capture
- Aadhaar/VID input in secure module
- Authentication via OTP or Face Auth
- RE receives masked demographic KYC
Frequently Asked question
Notified regulated entities (REs) such as banks, NBFCs, and payment companies under PMLA Section 11A.
- OTP authentication (Web or SDK)
- Face Authentication (via UIDAI’s Face RD service)
Only demographic eKYC details with a masked Aadhaar (last 4 digits).
No. NPCI acts as the aggregator, so REs don’t need a direct ASA license.
Typically 2–4 weeks, depending on integration type and certification timelines.
Frequently Asked question
- eKYC Setu System FAQ
- Cflow FAQ
- Onboarding Process FAQs
Aadhaar OTP
Face Auth in SDK Functionality in due course .
No, only membership fee to be paid at the time of onboarding. 1st Certification would be free.
No, NPCI will be initiating the single invoice inclusive of UIDAI & NPCI Fee.
SSL Certificate
Signer Certificate
Encryption Certificate
All these certificates are required for testing and production purpose. Entity can you the same certificate for UAT & Production and can opt for separate certificates for UAT & Production
No, only RBI Regulated entities are eligible for onboarding under eKYC
Setu System.
Post NDA, cost can be shared with the entity.
Entity can close the documentations and testing with NPCI in one month.
Moreover, go live is dependent on how quicky entity can close the Audit with
UIDAI.
Bank Team / Business Relationship Team / Bank Onboarding (for Certification) team needs to raise a request for banks user with all required details to CFLOW team (cflow.team@npci.org.in). The tool administrator will grant access to the bank user. An auto mailer will be sent to users with login credentials.
User Full name, User Mobile Number and User Mail ID along with bank name is required.
Users can check the current status of cflow requests by accessing the new Dashboard. More details are available in the document. "New_Cflow Dashboard Walkthrough_Banks".
By using this link, the User can verify the GSTIN number:
Kindly follow the below steps to check:
• Check the certification status in respective certification workflow whether it is in progress or Terminated (EMV or Certification Process).
• Request from production port stage will only move post certification sign off.
• Check the certification status in respective certification workflow whether it is in progress or Terminated (EMV or Certification Process).
• You can directly login through Cflow URL https://ap.cflowapps.com/npcicflow/npcien try
• If you are already logged into Cflow, you will be directed immediately to your Cflow home page. Otherwise, you’ll be prompted to log in.
If you want to change your existing password, then follow the below steps to change your password:
1. Login to Cflow and click on your Username
2. Select Change Password from the dropdown menu
User don’t have an option to update the email address. Please send an email to cflow.team@npci.org.in for any changes such as Name, email address, phone number, enable/disable user ID, password reset, role change.
1.Click on Initiate on a workflow to create a new request.
2. Fill out all the required data in the form.
3. You can attach documents if needed and add comments.
4. If you are not ready to submit the form yet,
you may save the form by clicking the Save Draft icon (below the Submit icon). You can access this saved request from the stage inbox. Saved requests can be identified with
the ‘D’ prefix.
Click on Submit to move the request to the next stage for approval.
If you want to clone the requests of a workflow, then turn on Enable Clone in the workflow properties of the workflow. You can see the clone icon in the stage inbox. Click on the clone icon to create an identical copy of the request. The cloned request is saved as a draft and identified with the ‘D’ prefix. You can make the necessary changes in the cloned request and submit to move the request to the next stage for approval.
With the help of drafted request button that is already seen in user dashboard. You can reopen the record from where you left and must submit the same.
Note: Only saved records would appear in this section, if you forgot to save the record as draft it won’t get save automatically!
Get real time insights and competitive analyses to identify items that require immediate action from the Cflow Dashboard.
User can access the record from the dashboard if they are pending with them.
Yes, File Encryption is in place.
The Certification Sign-off will be valid for 50 working days from the date of issue.
The Bank needs to go Live within this time, else the Signoff will be invalid, and the bank will have to recertify.
The Formats of Documents to be submitted are made available to the Banks prior to them submitting any request on Cflow. The Users can take any amount of time to fill-in the details and documents before they submit the same on cflow. Once the Bank user submits the request, the On-boarding team screens the details and Documents within 1 working Day and shares observations, if any. The bank user then needs to update the document based on observations shared and resubmit the document within 1 working day. In case the Bank user fails to re-submit within 1 working day, the request will be rejected and terminated.
IF file is your Product Information Form, bank can get the same from their RM or directly from On-Boarding Team
It means that the bank for the respective switch vendor in given scenario is live with NPCI, that is transactions is taking place.
No, you have the "Cloning" option for the same. Kindly go to terminated request id, and on right side you will have clone option - please select it, it will automatically create a new C-flow id with same details/documents as in earlier terminated C-flow ID. You can now find this new cloned request in Draft stage.
To avoid this, before submitting the request, you need to select “Resolved” and the submit your request in C-flow.
1)Please select Pending from Dashboard page, for taking action on the request.
i.e., To upload the documents/ change value in the fields.
2) The request which needs to be acted will be listed out here, directly click the CERTIFY2PRODUCTION STATUS and open the request.
If many unique ID requests are there, you can use the search with unique ID.
3) On hold notification mailer will be sent to bank & asp mail mentioned in Cflow request. Read the comment and do the changes.
4) Fields will be editable, for documents upload sign will be there. Click upload and attach the required documents and submit the request.
It will move to NPCI Team
• Level 1 - AePS / IMPS - Ms. Rabunia
Rajan - rabunia.rajan@npci.org.in –
7639568290
• Level 2 - Jenifer Sagayee -
jenifer.sagayee@npci.org.in –
9176766219
• The bank needs to raise all the requests again for the respective product and subproduct combinations in which they were already live - as this is a major change in systems.
No, bank need to raise a new request with a new C-flow id - while selecting the same Product and Scope (may use Cloning option)
No, as the given IP is already whitelisted it cannot be changed.
Yes, for Legal it is 6 months if the agreement is executed in Gujarat and Maharashtra Stamp paper; For Risk, is 90 days.
Within 90 days the bank needs to complete production activity after key generation

