A client called me in July this year with an urgent query. He had read in a newspaper that "the PMLA has been amended again" and wanted to know what he had to change in his bank\'s AML programme by Monday. He was quoting a report that was actually about a Rules amendment, which had already been in force for a year. The confusion cost him a weekend of panic. It should not have cost him a minute.
The confusion is standard. Most Indian AML training treats "PMLA" as one monolith. It is not. The PMLA regime is a three-layer stack. Layer one is the parent Act, the Prevention of Money Laundering Act, 2002 [L2-C1]. Layer two is the Rules made under Section 73 of the Act, principally the PML (Maintenance of Records) Rules, 2005. Layer three is the stream of Ministry of Finance notifications under Section 2(1)(sa)(vi) [L2-C2], which bring new categories of persons within the Act without touching the Act itself. If you cannot tell these three apart, you will track the wrong document and miss the live obligations.
The Act has not been amended since 2019
The last substantive amendment to the PMLA Act itself was through the Finance Act, 2019. That is not a typo. The Act you must read today is the version consolidated after 2019. India Code carries the consolidated text. FIU-IND carries a mirror. If you are reading commentary that promises to walk you through "the 2023 PMLA amendments", you are almost certainly reading commentary on Rules amendments or MoF notifications, mislabelled.
What has the Act done since 2019? Nothing material. The Supreme Court\'s Vijay Madanlal Choudhary judgment of 27 July 2022 [L2-C3] upheld the twin bail test under Section 45, the ECIR non-sharing position, the Section 24 reverse burden on proceeds of crime, and the admissibility of Section 50 statements before ED officers. The review is pending on two narrow issues, ECIR supply and the Section 24 reverse burden, before a reconstituted bench. The November 2023 ruling in Pavana Dibbur sharpened the Section 120B IPC trigger, holding that a bare conspiracy without a scheduled offence does not activate PMLA. The Supreme Court has shaped the Act. Parliament has not touched it.
The Rules have been amended four times since 2023
The real action lives in the PML (Maintenance of Records) Rules, 2005. Since 2023 they have been amended four times. First Amendment Rules 2023 by Gazette on 7 March 2023 [L2-C4], which introduced beneficial-owner thresholds, tightened the PEP definition and added the first VDA SP record-keeping hooks. Second Amendment Rules 2023 on 4 September 2023, which tightened Rule 9 CDD and the Principal Officer and Designated Director communication obligations under Rule 7. Third Amendment Rules 2023 on 17 October 2023, which added Rule 9(1A) and Rule 9(1B) on company-and-trust look-through documentation. And GSR 419(E) dated 19 July 2024 [L2-C5], which added Rule 9(1C) requiring the CKYCR push-and-pull flow and closed the stale-KYC gap FATF had flagged.
Each of these can be made or amended by delegated legislation under Section 73 PMLA [L2-C6]. The Central Government does not need Parliament to tighten a Rule. It needs a Gazette notification. If you are tracking "PMLA amendments" and reading only Parliament bulletins, you are missing where ninety percent of the live change actually happens.
The notifications are the engine of the 2023 expansions
The third layer is the Section 2(1)(sa)(vi) notifications. Section 2(1)(sa) defines "person carrying on designated business or profession" with six sub-clauses. Sub-clauses (i) to (v) are specific: casinos, Inspector-General of Registration, real-estate agents, dealers in precious metals and stones, and cash and liquid-securities safekeepers. Sub-clause (vi) is open: "persons carrying on such other activities as the Central Government may notify."
Sub-clause (vi) is the engine. Three big 2023 moves rode on it. S.O. 1072(E) dated 7 March 2023 brought VDA Service Providers under PMLA. S.O. 1073(E) on the same date brought real-estate agents and developers in. S.O. 2036(E) dated 3 May 2023 brought Chartered Accountants, Company Secretaries and Cost Accountants in for five defined activities. The FIU-IND Multi-State Co-operative AML Guidelines effective 11 October 2024 extend the reach again. Each of these is a notification, not an Act or Rules amendment. Each creates binding Reporting Entity status for its target cohort from the date of the notification.
Why this distinction matters in your tracking
If you are the Principal Officer, you must track all three layers. Act amendments are rare and must be read with full Supreme Court context. Rules amendments change the operational obligations and happen on a timeline of two to twelve months. MoF notifications expand the Reporting Entity perimeter. Sectoral regulator master directions and master circulars (RBI, SEBI, IRDAI) sit on top of these and operationalise them further for your sector.
I keep a single tracker spreadsheet with five columns: date, instrument type (Act, Rules, Notification, MD, MC, FIU guideline, SC judgment), reference, affected provision in our internal AML policy, and action owner. One line per instrument. Reviewed monthly. The template is at the end of this lesson.
Five failure modes that cost you weekends
Reading newspaper headlines as if they stated the law. "PMLA has been amended" is almost always wrong. "The PML Rules have been amended by GSR X dated Y" is correct and should be your working mental model.
Relying on Udemy or classroom-era courseware that stops at 2019. If the material does not reference the First, Second and Third Amendment Rules 2023, GSR 419(E) of 19 July 2024 and the RBI KYC Second Amendment of 14 August 2025, discard it. For paid training the floor is the current year.
Reading the Supreme Court as if it had overruled the statute. Vijay Madanlal Choudhary upheld the Act. The review is on two narrow issues. The Act stands and is being enforced.
Treating "scheduled offence" and "money laundering" as the same thing. The scheduled offence is the predicate crime. Money laundering under Section 3 PMLA [L2-C7] is the act of concealing or using the proceeds of that crime. A reporting entity can be sanctioned for AML failures without any ML prosecution. Pavana Dibbur sharpened this.
Not reading MoF notifications. They are the fastest-moving layer. If you only read RBI circulars, you will miss the fact that your CA clients became Reporting Entities two years ago.
Your artifact from Lesson 2
Build the PMLA tracker spreadsheet with the five columns described above. Pre-populate it with the entries listed in this lesson: Finance Act 2019, Vijay Madanlal Choudhary 2022, First and Second and Third Amendment Rules 2023, GSR 419(E) of 19 July 2024, RBI KYC Second Amendment of 14 August 2025, and the three 2023 MoF notifications (S.O. 1072(E), S.O. 1073(E), S.O. 2036(E)). Save it as Artifact 2 in your capstone workbook.