📜
Important Licenses for Digital Lending
Every license, registration, and regulatory approval a digital lending platform needs to operate legally in India — from NBFC registration to PA license.
RBINBFC LicensePA LicenseAA LicenseCompliance
Why Licenses Matter in Digital Lending
Digital lending in India is one of the most regulated fintech activities. Multiple licenses and registrations are required depending on what services a platform offers — lending, payment collection, data aggregation, or insurance distribution. Operating without required licenses attracts criminal liability under the RBI Act and PMLA.
The 2022 RBI Digital Lending Guidelines clarified the regulatory perimeter: only RBI-regulated entities can lend. Technology platforms (LSPs) can provide services but must partner with a licensed lender.
Primary License — NBFC Registration (RBI)
NBFC-ICC (Investment & Credit Company)
The core license for any company that wants to lend its own funds. Required to apply to RBI via the COSMOS portal. Key requirements:
💰
Minimum NOF
₹10 crore Net Owned Funds — must be in India, in a scheduled bank. Higher for specialised categories.
👥
Directors
At least one director with 10 years of finance/banking experience. Background check on all directors.
📊
Business Plan
Detailed 5-year business plan, projected financials, funding sources, and borrower target segment.
⏳
Timeline
12–18 months typically. In-principle approval → RBI inspection → Certificate of Registration.
📋
Ongoing Compliance
Annual DNBS returns to RBI, audited financials, RBI inspection every 2–3 years, Fair Practices Code publication.
🚫
Restrictions
Cannot accept demand deposits, cannot issue cheques. Must maintain minimum Capital Adequacy Ratio (CRAR) of 15%.
NBFC-MFI License
For microfinance lenders serving low-income borrowers. Minimum NOF ₹5 crore. At least 85% of net assets must be qualifying microfinance assets (loans ≤₹3 lakh to households with annual income ≤₹3 lakh rural / ₹3.5 lakh urban).
HFC — Housing Finance Company License
From NHB (National Housing Bank), now transferred to RBI oversight. Minimum NOF ₹25 crore. At least 60% of total assets must be in housing finance. 50% of total loans must be for individual housing (not commercial construction).
Payment Aggregator (PA) License — RBI
If a digital lending platform collects loan repayments from borrowers on behalf of lenders, it may need a Payment Aggregator (PA) license. Required under RBI's Payment and Settlement Systems (PSS) Act.
💳
Who Needs It
Any platform that collects payments from customers and settles to merchants/lenders. EMI collection platforms, loan repayment apps.
💰
Net Worth
₹25 crore at application, ₹100 crore by end of 3rd financial year of operations.
🔒
Escrow Account
Mandatory nodal/escrow account at a scheduled commercial bank. Funds held for max 3 business days before settlement.
📋
Compliance
PCI-DSS compliance for card data. Annual security audit. Reporting to RBI's DPSS.
💡Many digital lenders use existing PA-licensed payment gateways (Razorpay, PayU, Cashfree) for collection instead of obtaining their own PA license — reducing compliance burden significantly.
Account Aggregator (AA) License — RBI NBFC-AA
If a platform wants to facilitate consent-based financial data sharing between institutions (for credit assessment, wealth management), it needs an NBFC-AA registration.
💰
Minimum NOF
₹2 crore Net Owned Funds.
🚫
Restrictions
Cannot engage in any other financial activity. Cannot lend, invest, or use shared data commercially.
🔐
Data Security
ISO 27001 certification required. End-to-end encryption mandatory. Data minimisation principles.
🌐
TSP Certification
Technology Service Provider must be certified by RBI's technical committee (Sahamati framework).
Other Important Registrations
🌐
GSTIN
GST registration mandatory for any service with annual turnover >₹20 lakh. Processing fees, servicing income are taxable services.
🔍
FIU-IND Registration
Financial Intelligence Unit registration under PMLA mandatory for all NBFCs. Must report Suspicious Transaction Reports (STRs) and Currency Transaction Reports (CTRs).
📊
Credit Bureau Membership
Membership with TransUnion CIBIL, Experian, Equifax, or CRIF required for pulling credit reports. Also enables reporting borrower data to bureaus.
🛡️
IRDAI License (if offering insurance)
Corporate Agent or Insurance Broking license from IRDAI required to distribute any insurance products bundled with loans.
🔐
RBI Digital Lending Registration
Digital Lending Apps must be registered on RBI's Whitelist. Unregistered loan apps face takedown and criminal liability.
📱
LSP Agreement
No separate license for Lending Service Providers, but must operate under a formal agreement with a licensed NBFC/bank. Agreement must be approved by the lender's board.
Frequently Asked Questions
Q: Can I start a digital lending app without an NBFC license?
A: Yes — as a Lending Service Provider (LSP). You provide technology, customer acquisition, and servicing for a licensed NBFC. The NBFC lends; you earn fees. However, the NBFC must have a board-approved agreement with you and you must comply with RBI's LSP guidelines.
Q: How long does NBFC registration take?
A: Typically 12–18 months from application. In-principle approval takes 6–9 months, followed by physical inspection and certificate of registration. Complex cases with additional RBI queries can take longer.
Q: Is a separate license needed for each state in India?
A: No. RBI-issued NBFC Certificate of Registration is valid pan-India. You can operate across all states. However, some state-specific registrations (like money lender's license in certain states) may be required depending on business model.
Q: What is the RBI DLA whitelist?
A: RBI requires all Digital Lending Applications (DLAs) — both of regulated entities and their LSPs — to be listed on the regulated entity's website and RBI's approved list. This helps borrowers verify legitimacy and enables RBI to take action against fraudulent apps.