South Africa: lending & credit regulation

Regulated

Consumer credit regulated by NCR under NCA; banks supervised by Prudential Authority

Also involved
Prudential Authority (banks only) · NFIU (AML) · POPIA (data)
Core law
National Credit Act 34 of 2005 (NCA)
Entry capital
No statutory minimum capital for NCR registration
Approval timeline
1-3 months for NCR registration
Customer assets
Segregated trust account required
Data protection
POPIA 2013 · Information Regulator
Sandbox
No

South Africa has a comprehensive consumer credit regime governed by the National Credit Act (NCA). The National Credit Regulator (NCR) oversees registration, compliance, and enforcement for all credit providers, including micro-lenders and BNPL operators. While the Prudential Authority (PA) of the SARB regulates banks' capital and risk models (as seen in recent D12-2025 and D14-2025 directives), these prudential rules apply primarily to deposit-taking institutions. Non-bank lenders must register with the NCR and adhere to strict affordability and conduct codes.

Which licence do you need?

Your activityRequirementCapitalTimelineAuthority
Consumer lendingLicenceCredit Provider Registration

Mandatory for all non-bank consumer lending

National Credit Regulator
SME / commercial lendingLicenceCredit Provider Registration

Required if SMEs are natural persons or small juristic persons

National Credit Regulator
MicrofinanceLicenceCredit Provider Registration

Subject to NCA affordability and cost caps

National Credit Regulator
Buy-now-pay-laterLicenceCredit Provider Registration

Treated as credit agreement under NCA

National Credit Regulator
P2P lending platformLicenceCredit Provider Registration

Platform acts as credit provider or intermediary

National Credit Regulator
Credit bureau / scoringLicenceCredit Bureau Registration

Must register as credit bureau under NCA

National Credit Regulator
Debt collectionLicenceCredit Provider Registration

Collection activities regulated under NCA

National Credit Regulator

New — what changed recently

  • 2025-10-31Directive D12-2025Prudential Authority mandates Basel III credit risk reforms for banks, impacting lending capital costs.[1]
  • 2025-12-04Directive D14 of 2025New large exposure limits for banks, tightening risk concentration controls.[2]
  • 2025-10-22Directive D11/2025Standardized definition of distressed restructured exposures for banks.[3]

Market-entry checklist

  1. 1Register with National Credit RegulatorSubmit application for credit provider registration, proving fit and proper status.
  2. 2Implement NCA Compliance FrameworkEstablish policies for affordability assessments, interest rate caps, and disclosure.
  3. 3Open Segregated Trust AccountHold customer funds in a separate trust account as required by the NCA.
  4. 4Register as Credit Bureau (if applicable)If collecting credit information, register separately as a credit bureau with the NCR.
  5. 5Ensure POPIA Data ComplianceAlign data processing practices with the Protection of Personal Information Act.
This guide is compiled automatically from 3 primary-source documents published by South Africa's regulators, reviewed by RegAlert, and refreshed monthly (last updated 2026-07-12). It is not legal advice — always confirm requirements with the regulator or local counsel before acting.