# RBI Digital Lending Rules Explained for Fintech Startups

India's digital lending boom attracted millions of borrowers — and an equal number of complaints about hidden charges, opaque recovery practices, and unregulated players. The Reserve Bank of India responded with the Digital Lending Guidelines (2022) and subsequently consolidated and tightened the framework through the Digital Lending Directions, 2025. If you're building or scaling a fintech lending product in India, these rules aren't optional reading. Here's what they actually say.

Why the RBI Stepped In

Between 2017 and 2022, lending apps proliferated faster than regulation could keep up. The RBI's Working Group on Digital Lending (2021) flagged three systemic problems: unauthorised lending apps operating outside any regulated entity, exorbitant interest rates hidden behind processing fees, and aggressive recovery agents harassing borrowers. The Directions that followed aim to make the regulated entity — a bank or NBFC — fully accountable for every loan disbursed on its behalf.

The Core Principle: Only Regulated Entities Can Lend

The RE-first rule

Under the Digital Lending Directions, only a Regulated Entity (RE) — a bank, NBFC, or other RBI-licensed institution — can extend credit. Fintechs cannot lend from their own balance sheet unless they hold an NBFC licence. Everything else a fintech does is service: origination, underwriting support, collections, or customer servicing, performed as an agent of the RE.

Direct disbursal mandate

Loans must be disbursed directly into the borrower's bank account — not through the fintech's wallet or a pass-through account. Repayments similarly flow without routing through the Lending Service Provider. This kills the commingling of funds that made earlier models risky.

Key Rules Every Startup Must Know

1. Default Loss Guarantee capped at 5%

The most consequential provision is the cap on Default Loss Guarantee (DLG), also called First Loss Default Guarantee (FLDG). An RE may enter DLG arrangements with a partner only if:

  • The guarantee covers no more than 5% of the underlying loan portfolio
  • It is backed by cash, fixed deposits, or bank guarantees held by the RE
  • The arrangement is arm's length and documented

Before this cap, some arrangements covered 20–30% of losses, effectively letting fintechs take balance-sheet risk without a licence. The 5% ceiling restores the RE's skin in the game.

2. Fee transparency and APR disclosure

Every digital loan must display an all-inclusive Annual Percentage Rate (APR) and total cost upfront. No compounding penalties, no auto-debits without explicit consent, and key fact statements must be shared before signing.

3. Data consent and minimal collection

Lenders can collect only data needed for the specific loan, with explicit prior borrower consent. Access to phone contacts, media files, and call logs is prohibited. Borrowers can revoke consent, and data must be deleted when the loan is repaid.

4. Recovery conduct

Recovery must be done by regulated entities or their authorised agents following a board-approved policy. Harassment, intimidation, and calling borrowers' contacts are explicitly banned.

What This Means for Your Business Model

If you're an originator

You operate as an LSP under contract with one or more REs. Your revenue comes from fees, not interest income. You need clear outsourcing agreements, and the RE remains responsible for your conduct — so expect serious due diligence before partnerships.

If you want to lend yourself

Either obtain an NBFC licence from the RBI (capital requirement of ₹10 crore for new registrations) or partner with existing NBFCs. Many startups choose the co-lending route, sharing loans with banks under the RBI's co-lending framework.

Compliance checklist

  • Written agreements defining roles between you and each RE
  • APR and KFS disclosures embedded in your app flow
  • Consent architecture for data collection
  • Grievance redressal officer and nodal RBI contact
  • DLG arrangements documented within the 5% cap

How Compliant Models Look in Practice

Regulation has pushed the industry toward genuinely useful products rather than payday-loan clones. B2B financing platforms illustrate this well: instead of consumer micro-loans, they finance real commercial transactions. For example, KredFlow lets businesses pay annual SaaS contracts monthly while the vendor receives payment upfront — credit anchored to a genuine invoice and GST-verified business identity, structured through RBI-compliant LSP partnerships. When credit demand maps to actual economic activity, compliance and product quality tend to reinforce each other.

The Bottom Line

The Digital Lending Directions 2025 draw a bright line: fintechs innovate, regulated entities lend, and the borrower sees one transparent price. Startups that internalise this division of labour early will find bank and NBFC partners far more willing to work with them — because in the RBI's eyes, the partner's reputation is on the line for everything you do.