India: lending & credit regulation

Regulated

India: RBI regulates NBFCs for lending; strict licensing for P2P and credit bureaus

Lead regulator
Reserve Bank of India (RBI)
Also involved
SEBI (securities-linked lending) · State RRBs (cooperative credit) · NHB (housing finance)
Core law
Reserve Bank of India Act, 1934; NBFC Directions
Entry capital
INR 200m (NBFC-MFI); INR 50m (P2P)
Approval timeline
6-12 months for NBFC registration; 3-6 months for P2P/CIC
Customer assets
Segregated escrow accounts required for P2P
Data protection
DPDP Act 2023 · MeitY
Sandbox
Yes - Regulatory Sandbox

Lending is strictly regulated by the RBI. Traditional banks and Non-Banking Financial Companies (NBFCs) require RBI registration. P2P lending platforms and Credit Information Companies (CICs) face specific, stringent licensing regimes. Microfinance institutions (MFIs) are regulated under the NBFC-MFI framework with strict interest rate caps and borrower protection norms.

Which licence do you need?

Your activityRequirementCapitalTimelineAuthority
Consumer lendingLicenceNBFC Registration

Requires NBFC-P2P or NBFC-MFI license depending on model

INR 200m6-12 monthsRBI
SME / commercial lendingLicenceNBFC Registration

Standard NBFC registration for commercial lending

INR 200m6-12 monthsRBI
MicrofinanceLicenceNBFC-MFI Registration

Subject to interest rate caps and borrower protection norms

INR 200m6-12 monthsRBI
Buy-now-pay-laterLicenceNBFC Registration

Regulated as NBFC; recent guidelines on digital lending apply

INR 200m6-12 monthsRBI
P2P lending platformLicenceP2P Lending License

Strict escrow and platform neutrality requirements

INR 50m3-6 monthsRBI
Credit bureau / scoringLicenceCIC Registration

Must be registered as Credit Information Company

INR 100m3-6 monthsRBI
Debt collectionLicenceNBFC Registration

Collection agencies must be tied to licensed NBFCs

INR 200m6-12 monthsRBI

New — what changed recently

  • 2023-11Digital Lending GuidelinesRBI issued comprehensive guidelines for digital lending by NBFCs and banks, mandating standardized agreements and direct benefit transfers.
  • 2023-06P2P Platform RegulationsEnhanced compliance requirements for P2P platforms, including stricter capital adequacy and borrower verification norms.
  • 2022-12Credit Information Company RulesRevised rules for Credit Information Companies to improve data privacy and accuracy in credit reporting.

Market-entry checklist

  1. 1Secure RBI NBFC RegistrationApply for NBFC registration with INR 200m paid-up capital and net owned funds.
  2. 2Establish Compliance FrameworkImplement AML/KYC policies and appoint a Chief Compliance Officer as per RBI norms.
  3. 3Set Up Escrow AccountsFor P2P or digital lending, establish RBI-approved escrow accounts for fund management.
  4. 4Register with Credit BureausEnsure data sharing with all four Credit Information Companies (CICs) for credit reporting.
  5. 5Adopt Digital Lending StandardsUse standardized loan agreements and ensure direct benefit transfers to borrower accounts.
  6. 6Implement Data Privacy MeasuresComply with DPDP Act 2023 for data protection and user consent management.
This guide is compiled automatically from 0 primary-source documents published by India's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.