Dual Custody Gold Loan Vault: Why Two Staff May Be Required to Open It

Where lender policy uses a dual custody gold loan vault, two authorised custodians participate and neither can open it alone. Divided control can make collateral movements easier to trace without implying that RBI prescribes one design for every lender. This blog explains the regulatory baseline, an illustrative opening procedure, maker-checker controls, absence protocols and borrower safeguards.

What Is the Dual-Custody Rule?

Dual custody is an internal-control arrangement under which two authorised employees jointly control a sensitive asset or process. In a dual key vault gold pledge setup, each custodian holds a different key, credential or approval component; both are needed to gain access. A branch manager may be one custodian and another designated officer the second, but titles and access design vary by lender.

Also called joint custody or dual control, the arrangement divides authority. Mechanical keys are one design; electronic locks may instead require two credentials or approvals. The applicable SOP determines who may act, which events require joint presence and how exceptions are documented.

Why the Two-Person Rule Exists: Regulatory Basis

The Reserve Bank of India (Lending Against Gold and Silver Collateral) Directions, 2025 set the regulatory baseline. Paragraphs 29–34 require appropriate branch security, employee-only handling, storage at employee-manned branches with suitable safe deposit vaults, periodic reviews, staff training, internal audit and recorded surprise verification. The Directions apply no later than 1 April 2026.

They do not, however, expressly say that two employees must open every gold-loan vault or prescribe a universal two-key design. A two person rule gold vault arrangement is therefore better described as a lender-policy control that can help meet the wider custody and audit obligations—not as a standalone RBI mandate.

The practical logic resembles maker-checker: shared authority reduces dependence on one individual and leaves clearer evidence for later review. The distinction matters because an internal procedure may be stricter or more detailed than the regulatory minimum without becoming a universal rule for every lender.

Step-by-Step: How a Dual-Custody Vault Opening May Work

The following procedure is illustrative. Each branch must follow its lender’s approved SOP, lock design and exception controls.

1. Authorisation check. Both designated custodians confirm that the proposed access is permitted and identify its purpose, such as storage, verification or release.
2. Joint attendance. The custodians arrive at the controlled access point together. One person does not begin an informal or unrecorded opening.
3. Separate credentials. Each custodian presents the key, biometric, PIN or electronic approval assigned to that role. Credentials remain separately controlled and must not be shared.
4. Access recording. The applicable register or system captures the date, time, purpose and staff identities. Electronic systems may add credential events or alerts.
5. Controlled packet movement. Only authorised collateral packets are taken in or out. Packet or loan references are checked against the movement instruction and custody record while both custodians remain present if the SOP requires it.
6. Movement confirmation. The vault-in or vault-out entry is signed, countersigned or authenticated through separate user IDs. Barcode or packet-tag scanning may supplement the physical check.
7. Joint closure. The vault is closed, both locking components are secured and each custodian retains control of the assigned key or credential.
8. Reconciliation and exceptions. Relevant movements are reconciled with system records. Any mismatch, failed credential, override or damaged seal is escalated and recorded under policy.

Technology strengthens traceability, but barcodes and access logs do not replace reconciliation, surprise verification or internal audit.

Maker-Checker in Gold Loan Operations: Physical and Digital Controls

A maker checker gold loan control separates initiation from approval. A maker records or initiates an activity; a checker reviews the underlying information and authorises, rejects or returns it. RBI does not expressly mandate maker-checker at every gold-loan stage, so its scope depends on the lender’s policy and system configuration.

The two layers address different risks. Dual custody limits unilateral physical access; maker-checker limits unilateral system action. Together, they can link vault movement to the people, account and approval behind it. Their effectiveness still depends on accurate records, restricted privileges, reconciliation and independent audit.

What Happens If One Custodian Is Absent?

If the approved SOP requires two custodians, absence of one does not authorise the other to act alone. Routine access should wait, or a formally designated backup custodian should be activated through the documented process. The substitute’s authority, credential handover or key custody, reason for access and time should be recorded.

A lost key or failed credential should not lead to an improvised bypass. The branch should use its documented escalation and exception procedure, and any exceptional access should remain reviewable. RBI requires storage procedures to be audited and strictly followed; it does not prescribe the backup custodian’s title or one universal contingency sequence.

What the Dual-Custody Rule Means for Gold Loan Borrowers

For borrowers, dual custody can make unilateral access to pledged jewellery more difficult and add a second witness or approval point. It cannot eliminate loss, substitution or error; identification, logs, reconciliation, surprise verification and audit remain important.

The assay certificate or e-certificate required by RBI must record the collateral image, purity, gross and net content weights, deductions, visible defects and assessed value. At return, the collateral must be verified against it to the borrower’s satisfaction. IIFL’s published material describes dual-key access as a possible safeguard while noting that RBI does not prescribe identical technology for every lender.

Conclusion

A dual custody gold loan vault divides physical access, while maker-checker separates digital initiation from approval. This blog has traced the process from the RBI storage baseline through an illustrative eight-step opening workflow, access records, absence procedures and borrower checks. The central distinction is straightforward: RBI prescribes secure storage, employee-only handling, review, training, audit and surprise verification; the lender’s approved policy determines the exact two-person design.

Disclaimer : The information in this blog is for general purposes only and may change without notice. It does not constitute legal, tax, or financial advice. Readers should seek professional guidance and make decisions at their own discretion. IIFL Finance is not liable for any reliance on this content. Read more