Revised Guidelines on Digital Lending by Banks and NBFCs

Summary

The Reserve Bank of India has issued revised guidelines governing digital lending activities conducted by commercial banks, non-banking financial companies (NBFCs), and their lending service providers (LSPs). These updated guidelines strengthen the regulatory framework established in September 2022 and address emerging concerns around transparency, borrower protection, and responsible lending practices in the rapidly growing digital lending ecosystem.

The revised circular mandates that all regulated entities engaged in digital lending must provide borrowers with a standardized Key Fact Statement (KFS) disclosing the all-inclusive cost of the loan, including processing fees, insurance charges, and any other costs recovered from the borrower. The KFS must be provided in a machine-readable format and the borrower must explicitly acknowledge receipt before loan disbursement can proceed.

A significant addition to the framework is the mandatory cooling-off period of at least three days during which borrowers can exit the loan without penalty. The circular also restricts automatic disbursement of loan amounts, requiring explicit borrower consent at each stage of the lending process. Lending service providers are prohibited from accessing borrower mobile phone resources such as contacts, photos, or media files.

The guidelines further require that all digital lending platforms display the name of the regulated entity on whose behalf they are extending credit. Grievance redressal mechanisms must be prominently displayed, and complaints must be resolved within 30 days.

Key Highlights

  • Mandatory Key Fact Statement (KFS) disclosing all-inclusive loan cost in machine-readable format
  • Minimum 3-day cooling-off period allowing borrowers to exit loans without penalty
  • Prohibition on automatic loan disbursement without explicit borrower consent at each stage
  • Restriction on LSP access to borrower mobile phone resources (contacts, photos, media)
  • Mandatory display of regulated entity name on all digital lending platforms
  • 30-day resolution timeline for borrower grievances with escalation mechanism
  • Data collection limited to information strictly necessary for credit assessment

Impact on Fintech Companies

These revised guidelines have far-reaching implications for fintech lending companies operating in India. Digital lending platforms must overhaul their loan origination workflows to incorporate the mandatory KFS disclosure and explicit consent mechanisms at each stage. Companies that relied on streamlined one-click disbursement processes will need to redesign their user interfaces.

The cooling-off period requirement fundamentally changes the economics of short-tenure loans. Fintech lenders offering instant personal loans with tenures of 7 to 30 days must now account for potential exits within the first three days, affecting their revenue projections and collection strategies.

For lending service providers and digital lending apps, the restrictions on mobile phone resource access require significant technical changes. Many fintech apps previously used contact list access and SMS reading for alternative credit scoring. These companies must now develop alternative data sources for credit assessment.

View original RBI circular on rbi.org.in