CAS Password Format: CAMS, KFintech, NSDL and CDSL

A Consolidated Account Statement (CAS) is the single document that shows an investor's mutual fund holdings across AMCs under one PAN. Because it contains personal and financial data, it arrives as a password-protected PDF. The confusion is that the CAS password format depends on who sent the statement. This guide explains the typical format for each source, why a password fails, and how distributors should handle a client's CAS.

Formats can change. Treat everything below as the typical pattern and always check the covering email, which normally states the password rule.

Who sends a CAS, and when

There are two broad routes.

Depository CAS (NSDL or CDSL)

Investors who hold a demat account receive the consolidated CAS from their depository, either NSDL or CDSL. It combines demat holdings (shares, bonds, ETFs and MF units held in demat) with mutual fund folios held in statement form, mapped by PAN.

• Sent monthly for a month in which there was a transaction.
• Otherwise sent half-yearly.
• If the investor has accounts with both depositories, generally only one of them sends the consolidated statement.

RTA CAS (CAMS or KFintech)

Investors with mutual funds but no demat account receive the CAS from the registrars, CAMS or KFintech, on behalf of the AMCs. Investors can also request a CAS on demand from the CAMS or KFintech websites, or through MF Central, for any period they choose.

The typical CAS password format by source

NSDL and CDSL e-CAS

For an individual with PAN ABCDE1234F and date of birth 01-01-1990, the typical password is:

ABCDE1234F01011990

Note there are no separators and no spaces. For non-individual accounts such as companies, firms or trusts, the date of incorporation is typically used in place of date of birth. Again, the covering email from the depository usually confirms the exact rule.

On-demand CAS from CAMS, KFintech or MF Central

When an investor requests a statement online, the form asks them to set a password. The PDF is protected with that password, so there is no fixed format. If the investor has forgotten what they typed, there is no recovery route other than requesting the statement again with a new password. It takes a few minutes.

Detailed vs summary CAS

When requesting on demand, investors usually choose between:

• Detailed statement: every transaction in the chosen period, with dates, amounts, NAVs and units. Needed for tax work, XIRR and reconciliation.
• Summary statement: closing units and value per folio. Useful for a quick net-worth view, but not enough to rebuild transaction history.

The request can usually be made by registered email or by PAN. If by PAN, the statement is sent to the email registered against the folios, so it will not include folios linked to a different email unless the request covers them.

If you are calculating returns from a detailed CAS, see how to calculate XIRR for a SIP.

Why a CAS password fails

Most failures come down to a handful of causes:

1. Lowercase PAN. abcde1234f01011990 will not work if the format expects capitals.
2. Wrong date format. DDMMYYYY means 01011990, not 1/1/1990, 19900101 or 01-01-1990.
3. Wrong holder. For joint folios, the password is usually built from the first holder's PAN and date of birth, not a joint holder's.
4. Minor, HUF or company statements. The relevant PAN and date belong to the account holder (the minor, the HUF or the company), not the parent, karta or director opening the file. For non-individuals, check whether the date of incorporation is expected.
5. Date of birth mismatch. If the date of birth in the depository or KYC records is different from what the investor remembers, the password follows the records.
6. Wrong statement type. An on-demand statement uses the investor's chosen password, so the PAN-plus-DOB pattern will not open it.
7. Copy-paste errors. Hidden spaces when pasting into a PDF reader are common.

If none of these work, request a fresh statement rather than guessing repeatedly.

Security and consent for distributors

A CAS is sensitive. It shows PAN, holdings, values and sometimes bank details. Mutual fund distributors who help clients with statements should follow a few ground rules:

• Get the client's consent before requesting, opening or storing their CAS.
• Do not send the PDF and its password together in the same email or chat message.
• Avoid insecure channels for passwords, such as group chats or forwarded messages.
• Store statements securely and delete copies you no longer need.
• Never ask for login credentials to the client's email or depository account.

Distributors use a CAS to see holdings the client has placed elsewhere, which helps with consolidated reporting. Our guide to held-away assets and the full portfolio view covers that use in detail. Back-office platforms such as IntelliWealthPro can import a CAS PDF once the client has shared it with the password, so the data does not have to be retyped.

Quick checklist before you give up on a CAS

• Did the email come from NSDL, CDSL, CAMS, KFintech or MF Central? Match it to the table above.
• Is the PAN in capitals with no spaces?
• Is the date in DDMMYYYY with no separators?
• Is it the first holder's (or the entity's) PAN?
• Was it an on-demand request with a custom password?
• Does the covering email state a different rule?

If everything checks out and it still fails, request a new statement from the official website of the RTA or depository and verify the format stated in the fresh email.

Information only. Not investment advice. Mutual fund investments are subject to market risks; read all scheme-related documents carefully.