RegAlertSouth Africa: lending & credit regulation — 2026-09
RegulatedConsumer credit regulated by NCR under NCA; banks supervised by Prudential Authority
Frozen snapshot — the guide as it stood at the end of 2026-09. See the live guide for the current state.
South Africa has a comprehensive consumer credit regime governed by the National Credit Act (NCA). The National Credit Regulator (NCR) oversees registration, compliance, and enforcement for all credit providers, including micro-lenders and BNPL operators. While the Prudential Authority (PA) of the SARB regulates banks' capital and risk models (as seen in recent D12-2025 and D14-2025 directives), these prudential rules apply primarily to deposit-taking institutions. Non-bank lenders must register with the NCR and adhere to strict affordability and conduct codes.
Which licence do you need?
| Your activity | Requirement | Capital | Timeline | Authority |
|---|---|---|---|---|
| Consumer lending | LicenceCredit Provider Registration Mandatory for all non-bank consumer lending | — | — | National Credit Regulator |
| SME / commercial lending | LicenceCredit Provider Registration Required if SMEs are natural persons or small juristic persons | — | — | National Credit Regulator |
| Microfinance | LicenceCredit Provider Registration Subject to NCA affordability and cost caps | — | — | National Credit Regulator |
| Buy-now-pay-later | LicenceCredit Provider Registration Treated as credit agreement under NCA | — | — | National Credit Regulator |
| P2P lending platform | LicenceCredit Provider Registration Platform acts as credit provider or intermediary | — | — | National Credit Regulator |
| Credit bureau / scoring | LicenceCredit Bureau Registration Must register as credit bureau under NCA | — | — | National Credit Regulator |
| Debt collection | LicenceCredit Provider Registration Collection activities regulated under NCA | — | — | National Credit Regulator |
New — what changed recently
- 2025-10-31Directive D12-2025 — Prudential Authority mandates Basel III credit risk reforms for banks, impacting lending capital costs.[1]
- 2025-12-04Directive D14 of 2025 — New large exposure limits for banks, tightening risk concentration controls.[2]
- 2025-10-22Directive D11/2025 — Standardized definition of distressed restructured exposures for banks.[3]
Market-entry checklist
- 1Register with National Credit RegulatorSubmit application for credit provider registration, proving fit and proper status.
- 2Implement NCA Compliance FrameworkEstablish policies for affordability assessments, interest rate caps, and disclosure.
- 3Open Segregated Trust AccountHold customer funds in a separate trust account as required by the NCA.
- 4Register as Credit Bureau (if applicable)If collecting credit information, register separately as a credit bureau with the NCR.
- 5Ensure POPIA Data ComplianceAlign data processing practices with the Protection of Personal Information Act.
Sources
- D12-2025 - Credit Risk Roadmap · 2025-10-31
- D14 of 2025 – Large Exposure Requirements · 2025-12-04
- Prudential Treatment of Distressed Restructured Credit Exposures · 2025-10-22