SEBI (securities-linked lending) · State RRBs (cooperative credit) · NHB (housing finance)
Core law
Reserve Bank of India Act, 1934; NBFC Directions
Entry capital
INR 200m (NBFC-MFI); INR 50m (P2P)
Approval timeline
6-12 months for NBFC registration; 3-6 months for P2P/CIC
Customer assets
Segregated escrow accounts required for P2P
Data protection
DPDP Act 2023 · MeitY
Sandbox
Yes - Regulatory Sandbox
Lending is strictly regulated by the RBI. Traditional banks and Non-Banking Financial Companies (NBFCs) require RBI registration. P2P lending platforms and Credit Information Companies (CICs) face specific, stringent licensing regimes. Microfinance institutions (MFIs) are regulated under the NBFC-MFI framework with strict interest rate caps and borrower protection norms.
Which licence do you need?
Your activity
Requirement
Capital
Timeline
Authority
Consumer lending
LicenceNBFC Registration
Requires NBFC-P2P or NBFC-MFI license depending on model
2023-11Digital Lending Guidelines — RBI issued comprehensive guidelines for digital lending by NBFCs and banks, mandating standardized agreements and direct benefit transfers.
2023-06P2P Platform Regulations — Enhanced compliance requirements for P2P platforms, including stricter capital adequacy and borrower verification norms.
2022-12Credit Information Company Rules — Revised rules for Credit Information Companies to improve data privacy and accuracy in credit reporting.
Market-entry checklist
1Secure RBI NBFC RegistrationApply for NBFC registration with INR 200m paid-up capital and net owned funds.
2Establish Compliance FrameworkImplement AML/KYC policies and appoint a Chief Compliance Officer as per RBI norms.
3Set Up Escrow AccountsFor P2P or digital lending, establish RBI-approved escrow accounts for fund management.
4Register with Credit BureausEnsure data sharing with all four Credit Information Companies (CICs) for credit reporting.
5Adopt Digital Lending StandardsUse standardized loan agreements and ensure direct benefit transfers to borrower accounts.
6Implement Data Privacy MeasuresComply with DPDP Act 2023 for data protection and user consent management.
This guide is compiled automatically from 0 primary-source documents published by India's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.