Digital Lending Guidelines
The RBI's Digital Lending Guidelines (September 2022) regulate the practices of regulated entities and their lending service providers in digital loan origination, disbursement, and servicing, including capping First Loss Default Guarantees (FLDG) at 5 percent and mandating disclosure of all-in lending costs.
The digital lending guidelines were issued by the RBI in September 2022 following the report of a Working Group on Digital Lending that flagged concerns about predatory lending practices, data privacy violations, coercive recovery, and the opacity of the lending ecosystem involving banks, NBFCs, and fintech lending service providers (LSPs). The guidelines applied to all regulated entities (banks, NBFCs, and housing finance companies) and their outsourcing arrangements with digital lending platforms.
A central provision requires all loan disbursements and repayments to flow directly between the regulated lender and the borrower's bank account — Lending Service Providers are prohibited from pooling customer funds, addressing the practice where some fintech apps collected EMI repayments into their own accounts before remitting to lenders. This eliminated a layer of settlement risk and customer exposure to platform insolvencies.
The Key Fact Statement (KFS) was mandated for all digital loans, disclosing the Annual Percentage Rate (APR) — inclusive of all fees, interest, and charges — in a standardised format so borrowers could make informed comparisons. Lenders were also required to provide a three-day cooling-off period for loans above a specified threshold (later clarified for longer tenure loans), during which borrowers could return the loan without penalty.
The First Loss Default Guarantee (FLDG) cap of 5 percent addressed a structural grey area. Under FLDG arrangements, the fintech LSP guarantees to compensate the lender for first losses up to a certain percentage of the portfolio — effectively taking credit risk while facilitating loan origination without being a licensed lender. The 5 percent cap on implicit guarantees constrained the risk-taking by fintech platforms, though the industry argued the cap was restrictive compared to global norms.
Data privacy provisions restricted the type of customer data that LSPs could collect through their apps — prohibiting access to phone contacts, media files, and other data not required for credit assessment. Several predatory lending apps had used threat of data exposure as a recovery tool, an abuse the guidelines targeted.
The guidelines also addressed loan recovery, requiring that all recovery agents operate under the supervision of regulated lenders, and that recovery harassment complaints be escalable to the lender through a Nodal Grievance Officer. The RBI further directed that Annualised Percentage Rate disclosures include penal charges, insurance premiums bundled with loans, and processing fees — creating a comprehensive cost disclosure framework that significantly changed digital lending pricing practices.