Moving to contactless lending, in a contact-less world

-Kanakprabha Jethani (kanak@vinodkothari.com)

Background

With the COVID-19 disruption taking a toll on the world, almost two billion people – close to a third of the world’s population being  restricted to their homes, businesses being locked-down and work-from home becoming a need of the hour; “contactless” business is what the world is looking forward to. The new business jargon “contactless” means that the entire transaction is being done digitally, without requiring any of the parties to the transaction interact physically. While it is not possible to completely digitise all business sectors, however, complete digitisation of certain financial services is well achievable.

With continuous innovations being brought up, financial market has already witnessed a shift from transactions involving huge amount of paper-work to paperless transactions. The next steps are headed towards contactless transactions.

The following write-up intends to provide an introduction to how financial market got digitised, what were the by-products of digitisation, impact of digitisation on financial markets, specifically FinTech lending segment and the way forward.

Journey of digitisation

Digitisation is preparing financial market for the future, where every transaction will be contactless. Financial entities and service providers have already taken steps to facilitate the entire transaction without any physical intervention. Needless to say, the benefits of digitisation to the financial market are evident in the form of cost-efficiency, time-saving, expanded outreach and innovation to name a few.

Before delving into how financial entities are turning contactless, let us understand the past and present of the financial entities. The process of digitisation leads to conversion of anything and everything into information i.e. digital signals. The entire process has been a long journey, having its roots way back in 1995, when the Internet was first operated in India followed by the first use of the mobile phones in 2002 and then in 2009 the first smartphones came into being used. It is each of these stages that has evolved into this all-pervasive concept called digitisation.

Milestones in process of digitisation

The process of digitization has seen various phases. The financial market, specifically, the NBFCs have gone through various phases before completely guzzling down digitization. The journey of NBFCs from over the table executions to providing completely contactless services has been shown in the figure below:

From physical to paperless to contactless: the basic difference

Before analysing the impact of digitisation on the financial market, it is important to understand the concept of ‘paperless’ and ‘contactless’ transactions. In layman terms, paperless transactions are those which do not involve execution of any physical documents but physical interaction of the parties for purposes such as identity verification is required. The documents are executed online via electronic or digital signature or through by way of click wrap agreements.

In case of contactless transactions, the documents are executed online and identity verification is also carried out through processes such as video based identification and verification. There is no physical interaction between parties involved in the transaction.

The following table analyses the impact of digitisation on financial transactions by demarcating the steps in a lending process through physical, paperless and contactless modes:

 

Stages Physical process Paperless process Contactless process
Sourcing the customer The officer of NBFC interacts with prospective applicants The website, app or platform (‘Platform’) reaches out to the public to attract customers or the AI based system may target just the prospective customers Same as paperless process
Understanding needs of the customer The authorised representative speaks to the prospects to understand their financial needs The Platform provides the prospects with information relating to various products or the AI system may track and identify the needs Same as paperless process
Suggesting a financial product Based on the needs the officer suggests a suitable product Based on the analysis of customer data, the system suggests suitable product Same as paperless process
Customer on-boarding Customer on-boarding is done upon issue of sanction letter The basic details of customer are obtained for on-boarding on the Platform Same as paperless process
Customer identification The customer details and documents are identified by the officer during initial meetings Customer Identification is done by matching the details provided by customer with the physical copy of documents Digital processes such as Video KYC are used carry out customer identification
Customer due-diligence Background check of customer is done based on the available information and that obtained from the customer and credit information bureaus Information from Credit Information Agencies, social profiles of customer, tracking of communications and other AI methods etc. are used to carry out due diligence Same as paperless process
Customer acceptance On signing of formal agreement By clicking acceptance buttons such as ‘I agree’ on the Platform or execution through digital/electronic signature Same as paperless process
Extending the loan The loan amount is deposited in the customer’s bank account The loan amount is credited to the wallet, bank account or prepaid cards etc., as the case may be Same as paperless process
Servicing the loan The authorised representatives ensures that the loan is serviced Recovery efforts are made through nudges on Platform. Physical interaction is the last resort Same as paperless process. However, physical interaction for recovery may not be desirable.
Customer data maintenance After the relationship is ended, physical files are maintained Cloud-based information systems are the common practice Same as paperless process

The manifold repercussions

The outcome of digitisation of the financial markets in India, was a land of opportunities for those operating in financial market, it has also wiped off those who couldn’t keep pace with technological growth. Survival, in financial market, is driven by the ability to cope with rapid technological advancements. The impact of digitisation on financial market, specifically lending related services, can be analysed in the following phases:

Payments coming to online platforms

With mobile density in India reaching to 88.90% in 2019[1], the adoption of digital payments have accelerated in India, showing a rapid growth at a CAGR of 42% in value of digital payments. The value of digital payments to GDP rose to 862% in the FY 2018-19.

Simultaneously, of the total payments made up to Nov 2018, in India, the value of cash payments stood at a mere 19%. The shift from cash payments to digital payments has opened new avenues for financial service providers.

Need for service providers

With everything coming online, and the demand for digital money rising, the need for service providers has also taken birth. Services for transitioning to digital business models and then for operating them are a basic need for FinTech entities and thus, there is a need for various kinds of service providers at different stages.

Deliberate and automatic generation of demand

When payments system came online, financial service providers looked for newer ways of expanding their business. But the market was already operating in its own comfortable state. To disrupt this market and bring in something new, the FinTech service providers introduced the idea of easy credit to the market. When the market got attracted to this idea, digital lending products were introduced. With time, add-ons such as backing by guarantee, indemnity, FLDG etc. were also introduced to these products.

Consequent to digital commercialization, the need for payment service providers also generated automatically and thus, leading to the demand for digital payment products.

Opportunities for service providers

With digitization of non-banking financial activities, many players have found a place for themselves in financial markets and around. While the NBFCs went digital, the advent of digitization also became the entry gate to other service providers such as:

Platform service providers:

In order to enable NBFCs to provide financial services digitally, platform service providers floated digital platforms wherein all the functions relating to a financial transaction, ranging from sourcing of the customer, obtaining KYC information, collating credit information to servicing of the customer etc.

Software as a Service (SaaS) providers:

Such service providers operate on a business model that offers software solutions over the internet, charging their customers based on the usage of the software. Many of the FinTech based NBFCs have turned to such software providers for operating their business on digital platforms. Such service providers also provide specific software for credit score analysis, loan process automation and fraud detection etc.

Payment service providers:

For facilitating transactions in digital mode, it is important that the flow of money is also digitized. Due to this, the demand for payment services such as payments through cards, UPI, e-cash, wallets, digital cash etc. has risen. This demand has created a new segment of service providers in the financial sector.

NBFCs usually enter into partnerships with platform service providers or purchase software from SaaS providers to digitize their business.

Heads-up from the regulator

The recent years have witnessed unimaginable developments in the FinTech sector. Innovations introduced in the recent times have given birth to newer models of business in India. The ability to undertake paperless and contactless transactions has urged NBFCs to achieve Pan India presence. The government has been keen in bringing about a digital revolution in the country and has been coming up with incentives in forms of various schemes for those who shift their business to digital platforms. Regulators have constantly been involved in recognising digital terminology and concepts legally.

In Indian context, innovation has moved forward hand-in-hand with regulation[2]. The Reserve Bank of India, being the regulator of financial market, has been a key enabler of the digital revolution. The RBI, in its endeavor to support digital transactions has introduced many reforms, the key pillars amongst which are – e-KYC (Know Your Customer), e-Signature, Unified Payment Interface (UPI), Electronic NACH facility and Central KYC Registry.

The regulators have also introduced the concept of Regulatory Sandbox[3] to provide innovative business models an opportunity to operate in real market situations without complying with the regulatory norms in order to establish viability of their innovation.

While these initiatives and providing legal recognition to electronic documents did bring in an era of paperless[4] financial transactions, the banking and non-banking segment of the market still involved physical interaction of the parties to a transaction for the purpose of identity verification. Even the digital KYC process specified by the regulator was also a physical process in disguise[5].

In January 2020, the RBI gave recognition to video KYC, transforming the paperless transactions to complete contactless space[6].

Further, the RBI is also considering a separate regime for regulation of FinTech entities, which would be based on risk-based regulation, ranging from “Disclosure” to “Light-Touch Regulation & Supervision” to a “Tight Regulation and Full-Fledged Supervision”.[7]

Way forward

2019 has seen major revolutions in the FinTech space. Automation of lending process, Video KYC, voice based verification for payments, identity verification using biometrics, social profiling (as a factor of credit check) etc. have been innovations that has entirely transformed the way NBFCs work.

With technological developments becoming a regular thing, the FinTech space is yet to see the best of its innovations. A few innovations that may bring a roundabout change in the FinTech space are in-line and will soon be operable. Some of these are:

  • AI-Driven Predictive Financing, which has the ability to find target customers, keep track on their activities and identify the accurate time for offering the product to the customer.
  • Enabling recognition of Indian languages in the voice recognition feature of verification.
  • Introduction of blockchain based KYC, making KYC data available on a permission based-decentralised platform. This would be a more secure version of data repository with end-to-end encryption of KYC information.
  • Introduction of Chatbots and Robo-advisors for interacting with customers, advising suitable financial products, on-boarding, servicing etc. Robots with vernacular capabilities to deal with rural and semi-urban India would also be a reality soon.

Conclusion

Digital business models have received whole-hearted acceptance from the financial market. Digitisation has also opened gates for different service providers to aid the financial market entities. Technology companies are engaged in constantly developing better tools to support such businesses and at the same time the regulators are providing legal recognition to technology and making contactless transactions an all-round success. This is just the foundation and the financial market is yet to see oodles of innovation.

 

 

[1] https://www.rbi.org.in/Scripts/PublicationsView.aspx?id=19417

[2] https://www.bis.org/publ/bppdf/bispap106.htm

[3] Our write on Regulatory Sandboxes can be referred here- http://vinodkothari.com/2019/04/safe-in-sandbox-india-provides-cocoon-to-fintech-start-ups/

[4] Paperless here means paperless digital financial transactions

[5] Our write-up on digital KYC process may be read here- http://vinodkothari.com/2019/08/introduction-of-digital-kyc/

[6]Our write-up on amendments to KYC Directions may be read here: http://vinodkothari.com/2020/01/kyc-goes-live-rbi-promotes-seamless-real-time-secured-audiovisual-interaction-with-customers/

[7] https://rbidocs.rbi.org.in/rdocs/PublicationReport/Pdfs/WGFR68AA1890D7334D8F8F72CC2399A27F4A.PDF

 

Is capital relief allowed for on-balance sheet securitisations?

Timothy Lopes, Executive, Vinod Kothari Consultants

finserv@vinodkothari.com

Non-Banking Financial Companies (NBFCs) have been actively involved in the securitisation market, being one of its major participants at the originating as well as investing front. One of the key motivation of a securitisation transaction is its ability to take the loans off the books of the originator, thereby extending capital relief.

Until the implementation of IFRS or Ind AS in the Indian financial sector, the de-recognition of financial assets from the books of financial institutions was pretty simple; however, with complex conditions for de-recognition under Ind AS 109, almost all securitisation transactions now fail to qualify for de-recognition.

This leads to the key question of whether capital relief will still be available, despite the transactions failing de-recognition test under Ind AS. Through this write-up we intend to explore and address this question.

Situation prior to Ind-AS

Prior to the implementation of Ind-AS, there was no accounting guidance with respect to de-recognition of the financial assets from the books of the financial institutions. However, it was a generally accepted accounting principle that if the transaction fulfilled the true sale condition, then the assets were eligible to go off the books.

The true sale condition came from the RBI Guidelines on Securitisation[1]. The off-balance sheet treatment of the assets led to capital relief for the financial institutions. However, the Guidelines requires knock off, to the extent of credit enhancement provided, from the capital (Tier 1 and Tier 2) of the financial institution.

Post Ind-AS scenario

One of the key highlights of the IFRS 9 or Ind AS 109 is the introduction of the de-recognition criteria for financial instruments. Under Ind AS, a financial asset can be put off the books, only when there is a transfer of substantially all risks and rewards arising out of the assets. This, however, is difficult to prove for the transactions that take place in India because most of the structures practiced in India have high level of first loss credit support from the originators, therefore, evidencing high level of risk retention in the hands of the originator.

As a result, the transactions fail to satisfy the de-recognition test and the financial assets do not go off the books of the financial institutions.

This raises another concern with respect to maintenance of regulatory capital, since the assets are not de-recognized as per accounting standards, although backed by a legal true sale opinion. The apprehension here is whether capital relief would still be available in case the assets are retained on the books as per accounting norms. Capital relief would mean not having to assign any risk weight to or maintain capital for these assets.

RBI guidance on implementation

In the absence of any clarity on the question of capital relief to be availed by NBFCs, the whole idea for securitization was getting frustrated. However, RBI has on March 13, 2020 issued guidance for NBFCs and Asset Reconstruction Companies for implementation of Ind-AS[2].

It has now been clarified by RBI that securitised assets not qualifying for de-recognition under Ind-AS due to credit enhancement given by the originating NBFC on such assets shall be risk weighted at zero percent. This implies that the originating NBFC will not be required to maintain any capital against the securitised portfolio of assets. However, the originator shall still be required to make 50% deduction from Tier 1 and 50% from Tier 2 capital.

The relevant extract of RBI notification states as follows-

vii) Securitised assets not qualifying for de-recognition under Ind AS due to credit enhancement given by the originating NBFC on such assets shall be risk weighted at zero percent. However, the NBFC shall reduce 50 per cent of the amount of credit enhancement given from Tier I capital and the balance from Tier II capital.

Accordingly, the fact that a transaction does not qualify for off-balance sheet treatment shall not be relevant for capital adequacy computation. As long as a securitisation transaction satisfies the conditions laid down in the relevant Securitsation Guidelines the fact that whether it has been de-recognised or not for accounting purposes will not make a difference.

Read our related write ups here –

Securitisation accounting under Ind-AS

Securitisation accounting: disconnects between RBI Guidelines and Ind-AS

Accounting for DA under Ind-AS

[1] https://www.rbi.org.in/scripts/NotificationUser.aspx?Id=2723

[2] https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=11818&Mode=0#AN1

Reckoning banks’ loans to NBFCs for on-lending to priority sectors for PSL targets

-Financial Services Division (finserv@vinodkothari.com)

 

The Master Direction – Priority Sector Lending – Targets and Classification[1] issued by the Reserve Bank of India (RBI) mandates Scheduled Commercial Banks (SCBs) to lend a specified percentage of their Adjusted Net Bank Credit (ANBC) to the specified ‘needy’ sectors called the Priority Sectors. Further, in order to assist the banks in meeting their Priority Sector Lending targets (PSL Targets) and to extend the reach of credit to these sectors, the RBI has allowed various modes of collaboration between banks and NBFCs. One such mode is lending by banks to NBFCs and HFCs for on-lending to priority sector.

Additionally, through a notification[2] issued in 2019 the RBI provided that the loans extended by the banks to NBFCs on or before March 31, 2020 and which are on-lent to priority sector, shall be eligible to be classified as priority sector lending by the bank. However, notification imposed a cap on the ticket size of the loans originated by NBFCs and they are:

Sector Maximum ticket size of loans
Agriculture ₹ 10 lakh per borrower
Micro & Small enterprises ₹ 20 lakh per borrower
Housing (for on-lending by HFCs) ₹ 20 lakh per borrower

The maximum PSL Target that can be fulfilled by a bank using this mode is 5% of banks’ total PSL. For this purpose, on-lending done by NBFC (except MFIs) and HFCs shall be reckoned.

Considering the credit demand by these sectors classified as ‘priority’ and the outreach of NBFCs, the RBI has issued another notification dated March 23, 2020[3], extending the above mentioned time limit to cover originations during FY 2020-21. Accordingly, the loans originated by banks on or before March 31, 2021 and extended to NBFCs for on-lending to Priority Sectors shall be eligible to be classified under Priority Sector Lending of such bank.

It is noteworthy that since lending to HFCs and NBFC-MFIs by banks for on-lending was already covered under the Master Directions on Priority Sector Lending and there was no time limit provided for such loans under the Master Directions, the provisions of the aforesaid notification relating to the time limit of eligibility shall not be applicable on such bank credit. The time limit applies only for on-lending to agriculture sector and micro & small enterprises.

 

[1] https://www.rbi.org.in/scripts/NotificationUser.aspx?Id=10497&Mode=0

[2] https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=11659&Mode=0

[3] https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=11828&Mode=0

 

Our related write-ups:

http://vinodkothari.com/2016/02/priority-sector-lending-certificates-permitting-trades-between-haves-and-have-nots

http://vinodkothari.com/wp-content/uploads/2019/09/Modes-of-Collaboration-between-Banks-NBFCs.pdf

RBI to regulate operation of payment intermediaries

Guidelines on regulation of Payment Aggregators and Payment Gateways issued

-Mridula Tripathi (finserv@vinodkothari.com)

Background

In this era of digitalisation, the role of intermediaries who facilitate the payments in an online transaction has become pivotal. These intermediaries are a connector between the merchants and customers, ensuring the collection and settlement of payment. In the absence of any direct guidelines and adequate governance practices regulating the operations of these intermediaries, there was a need to review the existing instructions issued in this regard by the RBI. Thus, the need of regulating these intermediaries has been considered cardinal by the regulator.

RBI had on September 17, 2019 issued a Discussion Paper on Guidelines for Payment Gateways and Payment Aggregators[1] covering the various facets of activities undertaken by Payment Gateways (PGs) and Payment Aggregators (PAs) (‘Discussion Paper’). The Discussion Paper further explored the avenues of regulating these intermediaries by proposing three options, that is, regulation with the extant instructions, limited regulation or full and direct regulation to supervise the intermediaries.

In this regard, the final guidelines have been issued by the RBI on March 17, 2020 which shall be effective from April 1, 2020[2], for regulating the activities of PAs and providing technology-related recommendations to PGs (‘Guidelines’).

In this article we shall discuss the concept of Payment Aggregator and Payment Gateway. Further, we intend to cover the applicability, eligibility norms, governance practices and reporting requirements provided in the aforesaid guidelines.

Concept of Payment Aggregators and Payment Gateways

In common parlance Payment Gateway can be understood as a software which enables online transactions. Whenever the e-interface is used to make online payments, the role of this software infrastructure comes into picture. Thinking of it as a gateway or channel that opens whenever an online transaction takes place, to traverse money from the payer’s credit cards/debit cards/ e-wallets etc to the intended receiver.

Further, the role of a Payment Aggregator can be understood as a service provider which includes all these Payment Gateways. The significance of the Payment Aggregators lies in the fact that Payment Gateway is a mere technological base which requires a back-end operator and this role is fulfilled by the Payment Aggregator.

A merchant (Seller) providing goods/services to its target customer would require a Merchant Account opened with the bank to accept e-payment. Payment Aggregator can provide the same services to several merchants through one escrow account without the need of opening multiple Merchant Accounts in the bank for each Merchant.

The concept of PA and PG as defined by the RBI is reproduced herein below:

PAYMENT AGGREGATORS (PAs) means the entities which enable e-commerce sites and merchants to meet their payment obligation by facilitating various payment options without creation of a separate payment integration system of their own. These PAs aggregate the funds received as payment from the customers and pass them to the merchants after a certain time period.

PAYMENT GATEWAYS (PGs) are entities that channelize and process an online payment transaction by providing the necessary infrastructure without actual handling of funds.

The Guidelines have also clearly distinguished Payment Gateways as providers of technological infrastructure and Payment Aggregators as the entities facilitating the payment. At present, the existing PAs and PGs have a variety of technological set-up and their infrastructure also keeps changing with time given the business objective for ensuring efficient processing and seamless customer experience. Some of the e-commerce market places have leveraged their market presence and started offering payment aggregation services as well. Though the primary business of an e-commerce marketplace does not come within the regulatory purview of RBI, however, with the introduction of regulatory provisions for PAs, the entities will end up being subjected to dual regulation. Hence, it is required to separate these two activities to enable regulatory supervision over the payment aggregation business.

The extant regulations[3] on opening and operation of accounts and settlement of payments for electronic payment transactions involving intermediarieswe were applicable to intermediaries who collect monies from customers for payment to merchants using any electronic / online payment mode. The Discussion Paper proposed a review of the said regulations and based on the feedback received from market participants, the Guidelines have been issued by RBI.

Coverage of Guidelines

RBI has made its intention clear to directly regulate PAs (Bank & Non-Bank) and it has only provided an indicative baseline technology related recommendation. The Guidelines explicitly exclude Cash on Delivery (CoD) e-commerce model from its purview. Surprisingly, the Discussion Paper issued by RBI in this context intended on regulating both the PAs & PGs, however, since PGs are merely technology providers or outsourcing partners they have been kept out of the regulatory requirements.

The Guidelines come into effect from April 1, 2020, except for requirements for which a specific deadline has been prescribed, such as registration and capital requirements.

Registration requirement

Payment Aggregators are required to fulfil the requirements as provided under the Guidelines within the prescribed timelines. The Guidelines require non-bank entities providing PA services to be incorporated as a company under the Companies Act, 1956/2013 being able of carrying out the activity of operating as a PA, as per its charter documents such as the MoA. Such entities are mandatorily required to register themselves with RBI under the Payment and Settlement Systems Act, 2007 (‘PSSA, 2007’) in Form-A. However, a deadline of June 30, 2021 has been provided for existing non-bank PAs.

Capital requirement

RBI has further benchmarked the capital requirements to be adhered by existing and new PAs. According to which the new PAs at the time of making the application and existing PAs by March 31, 2021 must have a net worth of Rs 15 crore and Rs 25 crore by the end of third financial year i.e. March 31, 2023 and thereafter. Any non-compliance with the capital requirements shall lead to winding up of the business of PA.

As a matter of fact, the Discussion Paper issued by RBI, proposed a capital requirement of Rs 100 crore which seems to have been reduced considering the suggestion received from the market participants.

To supervise the implementation of these Guidelines, there is a certification to be obtained from the statutory auditor, to the effect certifying the compliance of the prescribed capital requirements.

Fit and proper criteria

The promoters of PAs are expected to fulfil fit and proper criteria prescribed by RBI and a declaration is also required to be submitted by the directors of the PAs. However, RBI shall also assess the ‘fit and proper’ status of the applicant entity and the management by obtaining inputs from various regulators.

Policy formulation

The Guidelines further require formulation and adoption of a board approved policy for the following:

  1. merchant on-boarding
  2. disposal of complaints, dispute resolution mechanism, timelines for processing refunds, etc., considering the RBI instructions on Turn Around Time (TAT)
  3. information security policy for the safety and security of the payment systems operated to implement security measures in accordance with this policy to mitigate identified risks
  4. IT policy(as per the Baseline Technology-related Recommendations)

Grievance redressal

The Guidelines have put in place mandatory appointment of a Nodal Officer to handle customer and regulator grievance whose details shall be prominently displayed on the website thus implying good governance in its very spirit. This is similar to the requirement for NBFCs who are required to appoint a Nodal Officer. Also, it is required that the dispute resolution mechanism must contain details on types of disputes, process of dealing with them, Turn Around Time (TAT) for each stage etc.

However, in this context, the Discussion Paper provided for a time period of 7 working days to promptly handle / dispose of complaints received by the customer and the merchant.

Merchant on boarding and KYC compliance

To avoid malicious intent of the merchants, PAs should undertake background and antecedent check of the merchants and are responsible to check Payment Card Industry-Data Security Standard (PCI-DSS) and Payment Application-Data Security Standard (PA-DSS) compliance of the infrastructure of the merchants on-boarded and carry a KYC of the merchants on boarded. It also provides for some mandatory clauses to be incorporated in the agreements to be executed with the merchants.

Risk Management

For the purposes of risk management, apart from adoption of an IS policy, the PAs shall also have a mechanism to monitor, handle and report cyber security incidents and breaches. They are also prohibited to allow online transactions with ATM pin and store customer card credentials on the servers accessed by the merchants and are required to comply with data storage requirements as applicable to Payment System Operators (PSOs).

Reporting Requirements

The Guidelines provide for monthly, quarterly and annual reporting requirement. The annual requirement comprises of certification from a CA and IS audit report and Cyber Security Audit report. The quarterly reporting again provides for certification requirement and the monthly requirement demand a transaction statistic. Also, there shall be reporting requirement in case of any change in management requiring intimation to RBI within 15 days along with ‘Declaration & Undertaking’ by the new directors. Apart from these mainstream reporting requirements there are non-periodic requirements as well.

Additionally, PAs are required to submit the System Audit Report, including cyber security audit conducted by CERTIn empanelled auditors, within two months of the close of their financial year to the respective Regional Office of DPSS, RBI

Escrow Account Mechanism

The Guidelines clearly state that the funds collected from the customers shall be kept in an escrow account opened with any Schedule Commercial Bank by the PAs. And to protect the funds collected from customers the Guidelines state that PA shall be deemed as a ‘Designated Payment System’[4] under section 23A of PSSA, 2007.

Shift from Nodal to Escrow

The Discussion Paper proposed registration, capital requirement, governance, risk management and such other regulations along with the maintenance of a nodal account to manage the funds of the merchants. Further, it acknowledged that in case of nodal accounts, there is no beneficial interest created on the part of the PAs; the fact that they do not form part of the PA’s balance sheet and no interest can be earned on the amount held in these account. The Guidelines are more specific about escrow accounts and do not provide for maintenance of nodal accounts, which seems to indicate a shift from nodal to escrow accounts with the same benefits as nodal accounts and additionally having an interest bearing ‘core portion’. These escrow account arrangements can be with or without a tripartite agreement, giving an option to the merchant to monitor the transactions occurring through the escrow. However, in practice it may not be possible to make each merchant a party to the escrow agreement.

Timelines for settlement to avoid unnecessary delay in payments to Merchants, various timelines have been provided as below:

  1. Amounts deducted from the customer’s account shall be remitted to the escrow account maintaining bank on Tp+0 / Tp+1 basis. (Tp is the date of debit to the customer’s account against good/services purchased)
  2. Final settlement with the merchant
  3. In cases where PA is responsible for delivery of goods / services, the payment to the merchant shall be made on Ts + 1 basis. (Ts is the date of intimation by merchant about shipment of goods)
  4. In cases where merchant is responsible for delivery, the payment to the merchant shall be on Td + 1 basis. (Td is the date of confirmation by the merchant about delivery of goods)
  5. In cases where the agreement with the merchant provides for keeping the amount by the PA till expiry of refund period, the payment to the merchant shall be on Tr + 1 basis. (Tr is the date of expiry of refund period)

Also, refund and reversed transactions must be routed back through the escrow account unless as per contract the refund is directly managed by the merchant and the customer has been made aware of the same. A minimum balance requirement equivalent to the amount already collected from customer as per ‘Tp’ or the amount due to the merchant at the end of the day is required to be maintained in the escrow account at any time of the day.

Permissible debits and credits

Similar to the extant regulations, the Guidelines provide a specific list of debits and credits permissible from the escrow account:

  • Credits that are permitted
  1. Payment from various customers towards purchase of goods / services.
  2. Pre-funding by merchants / PAs.
  3. Transfer representing refunds for failed / disputed / returned / cancelled transactions.
  4. Payment received for onward transfer to merchants under promotional activities, incentives, cashbacks etc.
  • Debits that are permitted
  1. Payment to various merchants / service providers.
  2. Payment to any other account on specific directions from the merchant.
  3. Transfer representing refunds for failed / disputed transactions.
  4. Payment of commission to the intermediaries. This amount shall be at pre-determined rates / frequency.
  5. Payment of amount received under promotional activities, incentives, cash-backs, etc.

The aforesaid list of permitted deposits and withdrawals into an account operated by an intermediary is wider than those allowed under the extant regulations. The facility to pay the amount held in escrow to any other account on the direction of the merchant would now enable cashflow trapping by third party lenders or financier. The merchant will have an option to provide instructions to the PA to directly transfer the funds to its creditors.

The Guidelines expressly state that the settlement of funds with merchants will in no case be co-mingled with other business of the PA, if any and no loans shall be available against such amounts.

No interest shall be payable by the bank on balances maintained in the escrow account, except in cases when the PA enters into an agreement with the bank with whom the escrow account is maintained, to transfer “core portion”[5] of the amount, in the escrow account, to a separate account on which interest is payable. Another certification requirement to be obtained from auditor(s) is for certifying that the PA has been maintaining balance in the escrow account.

Technology-related Recommendations

Several technology related recommendations have been separately provided in the Guidelines and are mandatory for PAs but recommendatory for PGs. These instructions provide for adherence to data security standards and timely reporting of security incidents in the course of operation of a PA. It proposes involvement of Board in formulating policy and a competent pool of staff for better operation along with other governance and security parameters.

Conclusion

With these Guidelines being enforced the online payment facilitated by intermediaries will be regulated and monitored by the RBI henceforth. The prescribed timeline of April 2020 may cause practical difficulties and act as a hurdle for the operations of existing PAs. However, the timelines provided for registration and capital requirements are considerably convenient for achieving the prescribed benchmarks. Since PAs are handling the funds, these Guidelines, which necessitate good governance, security and risk management norms on PAs, are expected to be favourable for the merchants and its customers.

 

[1] https://www.rbi.org.in/scripts/PublicationReportDetails.aspx?ID=943

[2] https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=11822&Mode=0

[3] https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=5379&Mode=0

[4] The Reserve Bank may designate a payment system if it considers that designating the system is in the public interest. The designation is to be by notice in writing published in the Gazette, as per Payment System Regulation Act, 1998

[5] This facility shall be permissible to entities who have been in business for 26 fortnights and whose accounts have been duly audited for the full accounting year. For this purpose, the period of 26 fortnights shall be calculated from the actual business operation in the account. ‘Core Portion’ shall be average of the lowest daily outstanding balance (LB) in the escrow account on a fortnightly (FN) basis, for fortnights from the preceding month 26.

 

 

Our other write ups on NBFCs to be referred here http://vinodkothari.com/nbfcs/

Our other similar articles:

http://vinodkothari.com/2017/04/overview-of-regulatory-framework-of-payment-and-settlement-systems-in-india-by-anita-baid/

Bridging the gap between Ind AS 109 and the regulatory framework for NBFCs

-Abhirup Ghosh

(abhirup@vinodkothari.com)

The Reserve Bank of India, on 13th March, 2020, issued a notification[1] providing guidance on implementation of Indian Accounting Standards by non-banking financial companies. This guidance comes after almost 2 years from the date of commencement of first phase of implementation of Ind AS for NBFCs.

The intention behind this Notification is to ensure consistency in certain areas like – asset classification, provisioning, regulatory capital treatment etc. The idea of the Notification is not to provide detailed guidelines on Ind AS implementation. For areas which the Notification has not dealt with, notified accounting standards, application guidance, educational material and other clarifications issued by the ICAI should be referred to.

The Notification is addressed to all non-banking financial companies and asset reconstruction companies. Since, housing finance companies are now governed by RBI and primarily a class of NBFCs, this Notification should also apply to them. But for the purpose of this write-up we wish to restrict our scope to NBFCs, which includes HFCs, only.

The Notification becomes applicable for preparation of financial statements from the financial year 2019-20 onwards, therefore, it seems the actions to be taken under the Notification will have to be undertaken before 31st March, 2020, so far as possible.

In this article we wish to discuss the outcome the Notification along with our comments on each issue. This article consists of the following segments:

  1. Things to be done by the Board of Directors (BOD)
  2. Expected Credit Losses (ECL) and prudential norms
  3. Dealing with defaults and significant increase in credit risk
  4. Things to be done by the Audit Committee of the Board (ACB)
  5. Computation of regulatory capital
  6. Securitisation accounting and prudential norms
  7. Matters which skipped attention

1.   Things to be done by the BOD

The Notification starts with a sweeping statement that the responsibility of preparing and ensuring fair presentation of the financial statements lies with the BOD of the company. In addition to this sweeping statement, the Notification also demands the BOD to lay down some crucial policies which will be essential for the implementation of Ind AS among NBFCs and they are: a) Policy for determining business model of the company; and b) Policy on Expected Credit Losses.

(A) Board approved policy on business models: The Company should have a Board approved policy, which should articulate and document the business models and portfolios of the Company. This is an extremely policy as the entire classification of financial assets, depends on the business model of the NBFC. Some key areas which, we think, the Policy should entail are:

There are primarily three business models that Ind AS recognises for subsequent measurement of financial assets:

(a) hold financial assets in order to collect contractual cash flows;

(b) hold financial assets in order to collect contractual cash flows and also to sell financial assets; and

(c) hold financial assets for the purpose of selling them.

The assessment of the business model should not be done at instrument-by-instrument level, but can be done at a higher level of aggregation. But at the same time, the aggregation should be not be done at an entity-level because there could be multiple business models in a company.

Further, with respect the first model, the Ind AS states that the business model of the company can still be to hold the financial assets in order to collect contractual cash flows even if some of the assets are sold are expected to be sold in future. For instance, the business model of the company shall remain unaffected due to the following transactions of sale:

(a) Sale of financial assets due to increase in credit risk, irrespective of the frequency or value of such sale;

(b) Sale of cash flows are made close to the maturity and where the proceeds from the sale approximate the collection of the remaining contractual cash flows; and

(c) Sale of financial assets due to other reasons, namely, to avoid credit concentration, if such sales are insignificant in value (individually or in aggregate) or infrequent.

For the third situation, what constitutes to insignificant or infrequent has not been discussed in the Ind AS. However, reference can be drawn from the Report of the Working Group of RBI on implementation of Ind AS by banks[2], which proposes that there could be a rebuttable presumption that where there are more than 5% of sale, by value, within a specified time period, of the total amortised cost of financial assets held in a particular business model, such a business model may be considered inconsistent with the objective to hold financial assets in order to collect contractual cash flow.

However, we are not inclined to take the same as prescriptive. Business model of an entity is still a question hinging on several relevant factors, primarily the profit recognition, internal reporting of profits, pursuit of securitization/direct assignment strategy, etc. Of course, the volume may be a persuasive factor.

The Notification also requires that the companies should also have a policy on sale of assets held under amortised cost method, and such policy should be disclosed in the financial statements.

(B) Board approved policy on ECL methodology: the Notification requires the companies to lay down Board approved sound methodologies for computation of Expected Credit Losses. For this purpose, the RBI has advised the companies to use the Guidance on Credit Risk and Accounting for Expected Credit Losses issued by Basel Committee on Banking Supervision (BCBS)[3] for reference.

The methodologies laid down should commensurate with the size, complexity and risks specific to the NBFC. The parameters and assumptions for risk assessment should be well documented along with sensitivity of various parameters and assumptions on the ECL output.

Therefore, as per our understanding, the policy on ECL should contain the following –

(a) The assumptions and parameters for risk assessment – which should basically talk about the probabilities of defaults in different situations. Here it is important to note that the assumptions could vary for the different products that the reporting entity offers to its customers. For instance, if a company offers LAP and auto loans at the same time, it cannot apply same set of assumptions for both these products.

Further, the policy should also lay down indicators of significant increase in credit risk, impairment etc. This would allow the reporting entity in determining classifying its assets into Stage 1, Stage 2 and Stage 3.

(b) Backtesting of assumptions – the second aspect of this policy should deal with backtesting of the assumptions. The policy should provide for mechanism of backtesting of assumption on historical data so as to examine the accuracy of the assumptions.

(c) Sensitivity analysis – Another important aspect of this policy is sensitivity analysis. The policy should provide for mechanism of sensitivity analysis, which would predict the outcome based on variations in the assumptions. This will help in identifying how dependant the output is on a particular input.

Further, the Notification states that any change in the ECL model must be well documented along with justifications, and should be approved by the Board. Here it is important to note that there could two types of variations – first, variation in inputs, and second, variation in the model. As per our understanding, only the latter should be placed before the BOD for its approval.

Further, any change in the assumptions or parameters or the ECL model for the purpose of profit smothering shall seriously be frowned upon by the RBI, as it has clearly expressed its opinion against such practices.

2.   Expected Credit Losses (ECL) and prudential norms

The RBI has clarified that whatever be the ECL output, the same should be subject to a regulatory floor which in this case would be the provisions required to be created as the IRAC norms. Let us understand the situation better:

The companies will have to compute two types of provisions or loss estimations going forward – first, the ECL as per Ind AS 109 and its internal ECL model and second, provisions as per the RBI regulations, which has to be computed in parallel, and at asset level.

The difference between the two will have to be dealt with in the following manner:

(A) Impairment Reserve: Where the ECL computed as per the ECL methodology is lower than the provisions computed as per the IRAC norms, then the difference between the two should be transferred to a separate “Impairment Reserve”. This transfer will not be a charge against profit, instead, the Notification states that the difference should be appropriated against the profit or loss after taxes.

Interestingly, no withdrawals against this Impairment Reserve is allowed without RBI’s approval. Ideally, any loss on a financial asset should be first adjusted from the provision created for that particular account.

Further, the continuity of this Impairment Reserve shall be reviewed by the RBI going forward.

A large number of NBFCs have already presented their first financial statements as per Ind AS for the year ended 31st March, 2019. There were two types of practices which were followed with respect to provisioning and loss estimations. First, where the NBFCs charged only the ECL output against its profits and disregarded the regulatory provisioning requirements. Second, where the NBFCs computed provisions as per regulatory requirements as well as ECL and charged the higher amount between the two against the profits.

The questions that arise here are:

(a) For the first situation, should the NBFCs appropriate a higher amount in the current year, so as to compensate for the amount not transferred in the previous year?

(b) For the second situation, should the NBFCs reverse the difference amount, if any, already charged against profit during the current year and appropriate the same against profit or loss?

The answer for both the questions is negative. The provisions of the Notification shall have to be implemented for the preparation of financial statements from the financial year 2019-20 onwards, hence, we don’t see the need for adjustments for what has already been done in the previous year’s financial statements.

(B) Disclosure: The difference between the two will have to be disclosed in the annual financial statements of the company, format of which has been provided in the Notification[4]. Going by the format, the loss allowances created on Stage 1, Stage 2 and Stage 3 cases will have to be shown separately, similarly, the provisions computed on those shall also have to be shown separately.

While Stage 1 and Stage 2 cases have been classified as standard assets in the format, Stage 3 cases cover sub-standard, doubtful and loss assets.

Loss estimations on loan commitments, guarantees etc. which are covered under Ind AS but does not require provisioning under the RBI Directions should also be presented.

3.     Dealing with defaults and significant increase in credit risk

Estimation of expected losses in financial assets as per Ind AS depends primarily on credit risk assessment and identifying situations for impairment. Considering the importance of issue, the RBI has voiced its opinion on identification of “defaults” and “significant increase in credit risk”.

(A)Defaults: The next issue which has been dealt with in the Notification is the meaning of defaults. Currently, there seems to be a departure between the Ind AS and the regulatory definition of “defaults”. While the former allows the company to declare an account as default based on its internal credit risk assessments, the latter requires that all cases with delay of more than 90 days should be treated as default. The RBI expects the accounting classification to be guided by the regulatory definition of “defaults”.

 If a company decides not to impair an account even after a 90 days delay, then the same should be approved by the Audit Committee.

This view is also in line with the definition of “default” proposed by the BASEL framework for IRB framework, which is:

“A default is considered to have occurred with regard to a particular obligor when one or more of the following events has taken place.

 (a) It is determined that the obligor is unlikely to pay its debt obligations (principal, interest, or fees) in full;

 (b) A credit loss event associated with any obligation of the obligor, such as a charge-off, specific provision, or distressed restructuring involving the forgiveness or postponement of principal, interest, or fees;

 (c) The obligor is past due more than 90 days on any credit obligation; or

 (d) The obligor has filed for bankruptcy or similar protection from creditors.”

Further, the number of cases of defaults and the total amount outstanding and overdue should be disclosed in the notes to the financial statements. As per the current regulatory framework, NBFCs have to present the details of sub-standard, doubtful and loss assets in its financial statements. Hence, this disclosure requirement is not new, only the sub-classification of NPAs have now been taken off.

(B) Dealing with significant increase in credit risk: Assessment of credit risk plays an important role in ECL computation under Ind AS 109. Just to recapitulate, credit risk assessments can be lead to three possible situations – first, where there is no significant increase in credit risk, second, where there is significant increase in credit risk, but no default, and third, where there is a default. These three outcomes are known as Stage 1, Stage 2 and Stage 3 cases respectively.

 In case an account is under Stage 1, the loss estimation has to be done based on probabilities of default during next 12 months after the reporting date. However, if an account is under Stage 2 or Stage 3, the loss estimation has to be done based on lifetime probabilities of default.

Technically, both Stage 1 and Stage 2 cases would fall under the definition of standard assets for the purpose of RBI Directions, however, from accounting purposes, these two stages would attract different loss estimation techniques. Hence, the RBI has also voiced its opinion on the methodology of credit risk assessment for Stage 2 cases.

The Notification acknowledges the presence of a rebuttable presumption of significant increase in credit risk of an account, should there be a delay of 30 days or more. However, this presumption is rebuttable if the reporting entity has reasonable and supportable information that demonstrates that the credit risk has not increased significantly since initial recognition, despite a delay of more than 30 days. In a reporting entity opts to rebut the presumption and assume there is no increase in credit risk, then the reasons for such should be properly documented and the same should be placed before the Audit Committee.

However, the Notification also states that under no circumstances the Stage 2 classification be deferred beyond 60 days overdue.

4.   Things to be done by the ACB

The Notification lays down responsibilities for the ACB and they are:

(A) Approval of any subsequent modification in the ECL model: In order to be doubly sure about that any subsequent change made to the ECL model is not frivolous, the same has to be placed before the Audit Committee for their approval. If approved, the rationale and basis of such approval should be properly documented by the company.

(B) Reviewing cases of delays and defaults: As may have been noted above, the following matters will have to be routed through the ACB:

(a) Where the reporting entity decides not to impair an account, even if there is delay in payment of more than 90 days.

(b) Where as per the risk assessment of the reporting entity, with respect to an account involving a delay of more than 30 days, it rebuts that there is no significant increase in credit risk.

In both the cases, if the ACB approves the assumptions made by the management, the approval along with the rationale and justification should be properly documented.

5.   Computation of Regulatory Capital

The Notification provides a bunch of clarifications with respect to calculation of “owned funds”, “net owned funds”, and “regulatory capital”, each of which has been discussed here onwards:

(A) Impact of unrealised gains or losses arising on fair valuation of financial instruments: The concept of fair valuation of financial instruments is one of the highlights of IFRS or Ind AS. Ind AS 109 requires fair valuation of all financial instruments. The obvious question that arises is how these gains or losses on fair valuation will be treated for the purpose of capital computation. RBI’s answer to this question is pretty straight and simple – none of these of gains will be considered for the purpose of regulatory capital computation, however, the losses, if any, should be considered. This view seems to be inspired from the principle of conservatism.

 Here it is important to note that the Notification talks about all unrealised gains arising out of fair valuation of financial assets. Unrealised gain could arise in two situations – first, when the assets are measured on fair value through other comprehensive income (FVOCI), and second, when the assets are measured on fair value through profit or loss (FVTPL).

In case of assets which are fair valued through profit or loss, the gains or losses once booked are taken to the statement of profit or loss. Once taken to the statement of profit or loss, these gains or losses lose their individuality. Further, these gains or losses are not shown separately in the Balance Sheet and are blended with accumulated profits or losses of the company. Monitoring the unrealised gains from individual assets would mean maintenance of parallel accounts, which could have several administrative implications.

Further, when these assets are finally sold and gain is realised, only the difference between the fair value and value of disposal is booked in the profit and loss account. It is to be noted here that the gain on sale of assets shown in the profit and loss account in the year of sale is not exactly the actual gain realised from the financial asset because a part of it has been already booked during previous financial years as unrealised gains. If we were to interpret that by “unrealised gains” RBI meant unrealised gains arising due to FVTPL as well, the apparent question that would arise here is – whether the part which was earlier disregarded for the purpose of regulatory capital will now be treated as a part of capital?

Needless to say, extending the scope of “unrealised gains” to mean unrealised gains from FVTPL can create several ambiguities. However, the Notification, as it stands, does not contain answers for these.

In addition to the above, the Notification states the following in this regard:

  • Even unrealised gains arising on transition to Ind AS will have to be disregarded.
  • For the purpose of computation of Tier I capital, for investments in NBFCs and group companies, the entities must reduce the lower of cost of acquisition or their fair value, since, unrealised gains are anyway deducted from owned funds.
  • For any other category of investments, unrealised gains may be reduced from the value of asset for the purpose of risk-weighting.
  • Netting off of gains and losses from one category of assets is allowed, however, netting off is not allowed among different classes of assets.
  • Fair value gains on revaluation of property, plant and equipment arising from fair valuation on the date of transition, shall be treated as a part of Tier II capital, subject to a discount of 55%.
  • Any unrealised gains or losses recognised in equity due to (a) own credit risk and (b) cash flow hedge reserve shall be derecognised while determining owned funds.

(B) Treatment of ECL: The Notification allows only Stage 1 ECL, that is, 12 months ECL, to be included as a part of Tier II capital as general provisions and loss reserves. Lifetime ECL shall not be reckoned as a part of Tier II capital.

6.   Securitisation accounting and prudential norms

All securitisation transactions undergo a strict test of de-recognition under Ind AS 109. The conditions for de-recognition are such that most of the structures, prevalent in India, fail to qualify for de-recognition due to credit enhancements. Consequently, the transaction does not go off the books.

The RBI has clarified that the cases of securitisation that does not go off the books, will be allowed capital relief from regulatory point of view. That is, the assets will be assigned 0% risk weight, provided the credit enhancement provided for the transaction is knocked off the Tier I (50%) and Tier II (remaining 50%).

There are structures where the level of credit enhancement required is as high as 20-25%, the question here is – should the entire credit support be knocked off from the capital? The answer to this lies in the RBI’s Securitisation Guidelines from 2006[5], which states that the knocking off of credit support should be capped at the amount of capital that the bank would have been required to hold for the full value of the assets, had they not been securitised, that is 15%.

For securitisation transactions which qualify for complete de-recognition, we are assuming the existing practice shall be followed.

But apart from the above two, there can also be cases, where partial de-recognition can be achieved – fate of such transactions is unclear. However, as per our understanding, to the extent of retained risk, by way of credit enhancement, there should be a knock off from the capital. For anything retained by the originator, risk weighting should be done.

Matters which skipped attention

There are however, certain areas, which we think RBI has missed considering and they are:

  1. Booking of gain in case of de-recognition of assets: As per the RBI Directions on Securitisation, any gain on sale of assets should be spread over a period of time, on the other hand, the Ind AS requires upfront recognition of gain on sale of assets. The gap between the two should been bridged through this Notification.
  2. Consideration of OCI as a part of Regulatory Capital: As per Basel III framework, other comprehensive income forms part of Common Equity Tier I [read our article here], however, this Notification states all unrealised gains should be disregarded. This, therefore, is an area of conflict between the Basel framework and the RBI’s stand on this issue.

 

Read our articles on the topic:

  1. NBFC classification under IFRS financial statements: http://vinodkothari.com/wp-content/uploads/2018/11/Article-template-VKCPL-3.pdf
  2. Ind AS vs Qualifying Criteria for NBFCs-Accounting requirements resulting in regulatory mismatch?: http://vinodkothari.com/2019/07/ind-as-vs-qualifying-criteria-for-nbfcs/
  3. Should OCI be included as a part of Tier I capital for financial institutions?: http://vinodkothari.com/2019/03/should-oci-be-included-as-a-part-of-tier-i-capital-for-financial-institutions/
  4. Servicing Asset and Servicing Liability: A new by-product of securitization under Ind AS 109: http://vinodkothari.com/2019/01/servicing-asset-and-servicing-liability/
  5. Classification and reclassification of financial instruments under Ind AS: http://vinodkothari.com/2019/01/classification-of-financial-asset-liabilities-under-ind-as/

 

[1] https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=11818&Mode=0#F2

[2] https://rbidocs.rbi.org.in/rdocs/Content/PDFs/FAS93F78EF58DB84295B9E11E21A91500B8.PDF

[3] https://www.bis.org/bcbs/publ/d350.pdf

[4] https://rbidocs.rbi.org.in/rdocs/content/pdfs/NOTI170APP130320.pdf

[5] https://www.rbi.org.in/scripts/NotificationUser.aspx?Id=2723

Cryptotrading’s tryst with destiny- Supreme Court revives cryptotrading, RBI’s circular struck down

-Megha Mittal

(mittal@vinodkothari.com

April 2018, the Reserve Bank of India (RBI) issued a “Statement on Developmental and Regulatory Policies” (‘Circular’) dated 06.04.2018, thereby prohibiting RBI regulated entities from dealing in/ providing any services w.r.t. virtual currencies, with a 3-month ultimatum to those already engaged in such services. Cut to 4th March, 2020- The Supreme Court of India strikes down RBI’s circular and upheld crypto-trading as valid under the Constitution of India.

Amidst apprehensions of crypto-trading being a highly-volatile and risk-concentric venture, the Apex Court, in its order dated 04.03.2020 observed that RBI, an otherwise staunch critic of cryptocurrencies, failed to present any empirical evidence substantiating cryptocurrency’s negative impact on the banking and credit sector in India; and on the basis of this singular fact, the Hon’ble SC stated RBI’s circular to have failed the test of proportionality.

In this article, the author has made a humble attempt to discuss this landmark judgment and its (dis)advantages to the Indian economy.

Read more

AT1 bonds: blessed with perpetuity or cursed with mortality?: Will Yes Bank write-off sensitise investors to risks of AT1 bonds?

-Financial Services Division

(finserv@vinodkothari.com)

Introduction

In the Yes Bank restructuring proposed by the RBI[1], equity shareholders will not lose all their money, depositors, hopefully, will be fully protected, and other creditors may also sail safe. However, the first casualty is the investors in AT1 bonds, as the same have been fully written off. The returns on AT1 bonds are much lower than those on equity, and only a shade higher than those on Tier 2 bonds; however, in terms of being under the guillotine, they have come even ahead of equity. Sometimes, the risks of investing in an instrument are not understood until there is a casualty. Will the market now become jittery in AT1 investing? Will the cost of AT1 investing go up significantly, so that banks will have to cough up higher servicing costs as they raise AT1 bonds, as compared to Tier 2 bonds, unsecured bonds or secured bonds?

The article discusses the basic features of AT1 bonds and then gets into the impact of the Yes Bank write off on the market for AT1 bonds in India.

Concept of AT1 Bonds

The concept of Additional Tier-1 (AT1) Bonds was introduced by Basel III post the 2008 financial crisis, to protect depositors of a bank on a going concern basis. These bonds are also commonly known as Contingent convertible capital instruments (CoCos)[2]. AT1 or perpetual bonds are quasi debt instruments, which do not have any fixed maturity period. It bears higher risk compared with normal bonds. They are perpetuals as they do not have a redemption date, and are callable at the initiative of the issuer after a minimum period of five years. However, regulators may permit the exercise of call options within the first five years if it can be established that the bank was not in a position to anticipate the event at issuance.

If an issuing bank incurs losses in a financial year, it cannot make coupon payment to its bond holders even if it has enough cash. Further, the essential element of this instrument is that they are hybrid capital securities that absorb losses in accordance with their contractual terms when the capital of the issuing bank falls below a certain level. That is to say, in case the Common Equity Tier-1 (CET 1) ratio falls below a threshold level, the holders of such bonds shall bear the losses without the bank being liquidated.

As per the Basel III requirement, the terms and conditions of AT1 bonds must have a provision that requires such instruments, at the option of the relevant authority, to either be written off or converted into common equity upon the occurrence of the trigger event. Paragraph 55 of Basel III norms provide comprehensive criterions for an instrument to be included in Additional Tier 1 Capital. The relevant extract is reproduced herein below:

Instruments issued by the bank that meet the Additional Tier 1 criteria

  1. The following box sets out the minimum set of criteria for an instrument issued by the bank to meet or exceed in order for it to be included in Additional Tier 1 capital.
Criteria for inclusion in Additional Tier 1 capital
1.        Issued and paid-in
2.        Subordinated to depositors, general creditors and subordinated debt of the bank
3.        Is neither secured nor covered by a guarantee of the issuer or related entity or other arrangement that legally or economically enhances the seniority of the claim vis-à-vis bank creditors
4.        Is perpetual, i.e. there is no maturity date and there are no step-ups or other incentives to redeem
5.        May be callable at the initiative of the issuer only after a minimum of five years:

a.      To exercise a call option a bank must receive prior supervisory approval; and

b.      A bank must not do anything which creates an expectation that the call will be exercised; and

c.      Banks must not exercise a call unless:

                          i.    They replace the called instrument with capital of the same or better quality and the replacement of this capital is done at conditions which are sustainable for the income capacity of the bank[3]; or

                        ii.    The bank demonstrates that its capital position is well above the minimum capital requirements after the call option is exercised.[4]

6.        Any repayment of principal (eg. through repurchase or redemption) must be with prior supervisory approval and banks should not assume or create market expectations that supervisory approval will be given
7.        Dividend/coupon discretion:

a.      the bank must have full discretion at all times to cancel distributions/payments[5]

b.      cancellation of discretionary payments must not be an event of default

c.      banks must have full access to cancelled payments to meet obligations as they fall due

d.      cancellation of distributions/payments must not impose restrictions on the bank except in relation to distributions to common stockholders.

8.        Dividends/coupons must be paid out of distributable items
9.        The instrument cannot have a credit sensitive dividend feature, that is a dividend/coupon that is reset periodically based in whole or in part on the banking organisation’s credit standing.
10.     The instrument cannot contribute to liabilities exceeding assets if such a balance sheet test forms part of national insolvency law.
11.     Instruments classified as liabilities for accounting purposes must have principal loss absorption through either

(i)                conversion to common shares at an objective pre-specified trigger point or

(ii)              a write-down mechanism which allocates losses to the instrument at a pre-specified trigger point. The write-down will have the following effects:

a.    Reduce the claim of the instrument in liquidation;

b.    Reduce the amount re-paid when a call is exercised; and

c.    Partially or fully reduce coupon/dividend payments on the instrument.

12.     Neither the bank nor a related party over which the bank exercises control or significant influence can have purchased the instrument, nor can the bank directly or indirectly have funded the purchase of the instrument
13.     The instrument cannot have any features that hinder recapitalisation, such as provisions that require the issuer to compensate investors if a new instrument is issued at a lower price during a specified time frame
14.     If the instrument is not issued out of an operating entity or the holding company in the consolidated group (eg a special purpose vehicle – “SPV”), proceeds must be immediately available without limitation to an operating entity18 or the holding company in the consolidated group in a form which meets or exceeds all of the other criteria for inclusion in Additional Tier 1 capital

Incentive to issue AT1 Bonds

The foremost reasons for issuing AT1 Bonds is the fact that they satisfy the regulatory capital requirements. Most of the investors are private banks, mutual funds and retail investors, having a high risk appetite, while institutional investors are mostly restrained. Since the risk is higher, higher is the yield from these bonds. The rate of return is higher than those of higher-ranked debt instruments of the same issuer. It is dependent on their two factors – the trigger level and the loss absorption mechanism.

Priority order

The claims of the investors in AT1 Bonds and any interest accrued thereon is superior to the claims of investors in equity shares and perpetual non-cumulative preference shares, if any and any other securities that are subordinated to AT 1 Capital in terms of the Basel III Regulations.

However, the claims are subordinated to the claims of depositors, general creditors and any other securities of the issuer that are senior to AT 1 Capital of the Bank in terms of Basel III Regulations. Further, the stand pari passu without preference amongst themselves and other subordinated debt classified as AT1 Capital in terms of Basel III Regulations.

These bonds are neither secured nor covered by any guarantee of the issuer or any of its related entities or any other arrangement that legally or economically enhances the seniority of such claim as compared to the other creditors.

Rating of AT1 Bonds

AT1 Bonds issued by banks are usually rated by rating agencies as plain bonds even if the rating agency uses a tag ‘hybrid’.  However, they are assigned ratings as applicable for bonds. Earlier, the absence of a complete set of credit ratings for AT1 Bonds was a hurdle on its growth path. According to the S&P rating methodology, an AT1 Bond rating should be at least two to three notches below the issuer’s credit rating and cannot exceed BBB+[6]. Further downward notching is applied to instruments with triggers near or at the point of non-viability and to those that have a discretionary trigger. On average, given the higher risk, the rating for these bonds is one to four notches lower than the secured bond series of the same bank. For example, while SBI’s tier II bonds are rated AAA by CRISIL, its tier I long-term bonds are rated AA+.

Pricing and Yield

Though the risk is much more than a plain or any other structured bond, however, usually NBFCs and banks offer about 200-300 basis points higher than similar maturity debentures.

Since these bonds have no maturity date they can continue to pay the coupon forever. The issuer has the option to call back the bonds or repay the principal after a period of five years. While AAA rated tier II bond of a public sector bank may have an interest rate of around 7- 7.5% per annum, its AT1 Bond can carry a rate of around 9- 10% per annum. The attraction for investors is higher yield than secured bonds issued by the same entity. But along with the high yield there are certain risks as well; the option with issuer to skip coupon payment and maintaining a CET1 ratio of 5.125%, failing which the bonds can get written down or get converted into equity.

The pricing of AT1 Bonds is consistent with their position in banks’ capital structures. The main determinants of yields are the mechanical trigger level, the loss absorption mechanism, and the existence of a discretionary trigger.

Classification as AT1 Bonds

In some jurisdictions, the respective domestic law does not allow direct issuance of perpetual debt. There can be the following possible circumstances that may be eligible for recognition as AT 1 capital:

  • Dated instrument having terms and conditions that include an automatic roll-over feature,
  • Instruments with mandatory conversions into common shares on a pre-defined date,
  • Subordinated loans

Dated instruments that include automatic roll-over features are designed to appear as perpetual to the regulator and, simultaneously to appear as having a maturity to the tax authorities and/or legal system. This creates a risk that the automatic roll over could be subject to legal challenge and repayment at the maturity date could be enforced. As such, instruments with maturity dates and automatic roll-over features are not treated as perpetual.

An instrument may be treated as perpetual if it will mandatorily convert to common shares at a pre-defined date and has no original maturity date prior to conversion. However, if the mandatory conversion feature is combined with a call option (i.e. the mandatory conversion date and the call are simultaneous or near simultaneous), such that the bank can call the instrument to avoid conversion, the instrument will be treated as having an incentive to redeem and will not be permitted to be included in AT1 Capital.

Subordinated loans meeting all the criteria required for Additional Tier 1 or Tier 2 capital, can be included in the regulatory capital.

Write down and write-off

AT1 Bonds accounted for as liabilities are required to meet both the requirements for the point of non-viability and the principal loss absorbency requirements. To meet the point of non-viability trigger requirements, the instrument needs to be capable of being permanently written-off or converted to common shares at the trigger event. The trigger event is the earlier of[7]:

  • a decision that a write-off, without which the firm would become non-viable, is necessary, as determined by the relevant authority; and
  • the decision to make a public sector injection of capital, or equivalent support, without which the firm would have become non-viable, as determined by the relevant authority.

Source: CoCos: a primer

The write-down or conversion requirements for Additional Tier 1 instruments accounted for as liabilities, a temporary write-down mechanism is only permitted if it meets the following conditions:

  • The trigger level for write-down/conversion must be at least 5.125% Common Equity Tier 1 (CET1).
  • The write-down/conversion must generate CET1 under the relevant accounting standards and the instrument will only receive recognition in Additional Tier 1 up to the minimum level of CET1 generated by a full write-down/conversion of the instrument.
  • The aggregate amount to be written-down/converted for all such instruments on breaching the trigger level must be at least the amount needed to immediately return the bank’s CET1 ratio to the trigger level or, if this is not possible, the full principal value of the instruments.

Global scenario

AT1 bonds come with the basic feature of protecting the issuer from capital losses. When the issuer is in stress, these bonds extend a helping hand by absorbing the losses. For absorbing the losses, the issuer can either write-off, write-down or convert the AT1 bonds into equity. In fact, the terms of issue of AT1 bonds specifically provide for the method of absorbing losses. Following are a few examples of the methods of absorbing losses provided in the terms of issue of AT1 bonds:

  • Deutsche Bank intends of issue AT1 bonds in 2020[8], which would be subject to write-down provisions if its common equity tier 1 capital ratio will fall below 5.13%. as against 13.6% as of December 31, 2019. The securities are also subject to other loss-absorption features pursuant to the applicable capital rules.
  • Kookmin Bank issued CoCo Bonds in 2019[9] which can be written off in times of stress — with an interest rate of 4.35 per cent.

Companies have, in many instances, written-off or written-down AT1 bonds. Such as:

  • Erste has written-off billions of euros in AT1 bonds in 2014[10].
  • Bank of Jinzhou, in 2019[11], stopped paying coupon on its CoCo Bonds to protect its financial health.

Impact on Market for AT1 Bonds

Among the investors, mostly mutual funds and several individual investors, mostly high net worth individuals (HNIs), are exposed to Yes Bank issued AT 1 Bonds which are designed to absorb losses when the capital of the bank falls below certain levels. As of January 31, 2020, 11 mutual funds had exposure worth Rs 2,819 crore to bonds of the bank. Two schemes of Bank of Baroda Mutual Fund–Baroda Treasury Advantage Fund and Baroda Credit Risk Fund had investments worth Rs 53.69 crore in Tier 1 perpetual bonds of Yes Bank. UTI Mutual Fund holds investments worth nearly Rs 50 crore worth of holding in 9.5% perpetual bonds. Indiabulls Housing Finance had invested Rs 662 crore via AT1 Bonds. Several institutional investors are planning to come together to oppose the central bank’s proposal to write down Yes Bank’s perpetual bonds. Their main contention is that tier-I bonds are senior to equity, and cannot be written down without reducing equity.

Based on the information circulating in the market, the Information Memorandum (IM) of AT1 Bonds has provisions that in case there is a reconstitution or amalgamation of the bank under Sec 45 of Banking Regulation Act 1949, the bank will be deemed as non-viable and trigger for written-down / conversion of the AT1 Bonds will be activated. However, the IM sates it cannot be written down unless equity is also reduced.

AT1 bond holders are treated like equity holders. Hence repayment is not likely for these types of bonds. The Yes Bank scheme shall be an eye opener for the investors and is expected to adversely affect the market for AT1 Bonds. This is the first time ever in India that AT1 Bond investor got a hit on their investments. It is likely that the yield on such similar bonds would increase by around 200 basis points from existing levels.

 

 

[1] https://www.rbi.org.in/Scripts/BS_PressReleaseDisplay.aspx?prid=49479

[2] https://www.bis.org/publ/qtrpdf/r_qt1309f.pdf

[3] Replacement issues can be concurrent with but not after the instrument is called.

[4] Minimum refers to the regulator’s prescribed minimum requirement, which may be higher than the Basel III

Pillar 1 minimum requirement.

[5] A consequence of full discretion at all times to cancel distributions/payments is that “dividend pushers” are prohibited. An instrument with a dividend pusher obliges the issuing bank to make a dividend/coupon payment on the instrument if it has made a payment on another (typically more junior) capital instrument or share. This obligation is inconsistent with the requirement for full discretion at all times. Furthermore, the term “cancel distributions/payments” means extinguish these payments. It does not permit features that require the bank to make distributions/payments in kind.

[6] Standard & Poor’s (2011)

[7] https://www.bis.org/press/p110113.pdf

[8] https://finance.yahoo.com/news/deutsche-db-plans-offer-additional-131801196.html

[9] https://www.ft.com/content/523a5e62-9802-11e9-9573-ee5cbb98ed36

[10]https://www.washingtonpost.com/business/a-coco-bond-at-3375percent-the-markets-still-crazy/2020/01/23/7a9435ae-3db6-11ea-afe2-090eb37b60b1_story.html

[11] https://www.wsj.com/articles/ailing-chinese-bank-stops-paying-coupons-on-coco-bonds-11567424965

Securitisation of performing assets: meaning of “homogenous pools”

Timothy Lopes, Executive, Vinod Kothari Consultants

finserv@vinodkothari.com

Standard asset securitisation in India is governed by the RBI securitisation guidelines of 2006[1] and 2012[2]. As one of the essential pre-requisites of a securitisation transaction, the underlying assets should represent the debt obligations of a ‘homogeneous pool’ of obligors. Subject to this condition of homogeneity, all on-balance sheet standard assets (except certain assets prescribed under the guidelines) are eligible for securitisation.

The question, then, arises as to what is the criteria for determining whether a pool of assets is homogeneous? In this write up we analyse the homogeneity criteria in the context of a securitisation transaction based on global understanding.

How is homogeneity assessed?

Basel III norms on Simple Transparent and Comparable (‘STC’) Securitisation transactions[3] lays down factors to be kept in mind while determining homogeneity as follows –

  • In simple, transparent and comparable securitisations, the assets underlying the securitisation should be credit claims or receivables that are homogeneous.
  • In assessing homogeneity, consideration should be given to –
    • Asset type,
    • Jurisdiction,
    • Legal system; and
    • Currency.
  • The nature of assets should be such that investors would not need to analyse and assess materially different legal and/or credit risk factors and risk profiles when carrying out risk analysis and due diligence checks.
  • Homogeneity should be assessed on the basis of common risk drivers, including similar risk factors and risk profiles.
  • Credit claims or receivables included in the securitisation should have standard obligations, in terms of rights to payments and/or income from assets and that result in a periodic and well-defined stream of payments to investors. Credit card facilities should be deemed to result in a periodic and well-defined stream of payments to investors for the purposes of this criterion.
  • Repayment of note-holders should mainly rely on the principal and interest proceeds from the securitised assets. Partial reliance on refinancing or re-sale of the asset securing the exposure may occur provided that re-financing is sufficiently distributed within the pool and the residual values on which the transaction relies are sufficiently low and that the reliance on refinancing is thus not substantial.

The basic intent behind a securitisation transaction is the tranching of risk. In order to tranche the risk, there must be similarity in terms of the risk attributes of the pool. If the risk is not homogeneous across different attributes of the pool the tranching of risk becomes difficult and defeats the intent of the transaction.

Further, the nature of assets in the pool must be homogenous. This means that the assets in the pool should be covered by similar legal risks or credit risks so that the investors need not analyse and assess materially different assets in a pool.

The EU Simple, Transparent and Standardised (‘STS’) securitisation Regulations[4] states the following–

“To ensure that investors perform robust due diligence and to facilitate the assessment of underlying risks, it is important that securitisation transactions are backed by pools of exposures that are homogenous in asset type, such as pools of residential loans, or pools of corporate loans, business property loans, leases and credit facilities to undertakings of the same category, or pools of auto loans and leases, or pools of credit facilities to individuals for personal, family or household consumption purposes.”

“The securitisation shall be backed by a pool of underlying exposures that are homogeneous in terms of asset type, taking into account the specific characteristics relating to the cash flows of the asset type including their contractual, credit-risk and prepayment characteristics. A pool of underlying exposures shall comprise only one asset type. The underlying exposures shall contain obligations that are contractually binding and enforceable, with full recourse to debtors and, where applicable, guarantors.”

Illustrations of a homogeneous pool

Whether a pool of comprising of commercial vehicles, trucks and tractors can be called homogeneous?

Prima facie the pool might appear to be homogeneous, however it is not so. The assets in this pool are different in terms of legal and credit risks. For instance, the credit risk arising out of a commercial vehicle loan and a tractor loan is far from similar, given the nature of the asset, value of assets and repayment power of the borrower of the asset, type of usage to which the asset.

Whether a pool of personal loans, business loans and loans against property can be called homogeneous?

The pool of loans would have to each be analysed individually given the material differences in their nature. Further the nature of collateral in each of these loans may be different leading to different risk attributes. Further it would have to be seen whether these loans have well defined stream of payments as well. Ultimately it is unlikely that this pool can be called homogeneous.

Conclusion

Homogeneity should be assessed from the viewpoint of risk attributes. There must be similarity in the nature of assets as well as collateral to ascertain homogeneity in terms of credit risks. Legal risks must also be analysed and should be homogeneous. These factors ultimately help investors in the due diligence process (while also making the transaction simple, transparent and comparable compliant) as well as make tranching of risks easier.

Read our related write ups on the subject of securitisation –

Basel III requirements for Simple Transparent and Comparable (STC) Securitisation –

http://vinodkothari.com/2020/01/basel-iii-requirements-for-simple-transparent-and-comparable-stc-securitisation/

 

[1] https://www.rbi.org.in/scripts/NotificationUser.aspx?Id=2723

[2] https://rbidocs.rbi.org.in/rdocs/notification/PDFs/C170RG21082012.pdf

[3] https://www.bis.org/bcbs/publ/d374.pdf

[4] https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=CELEX:32017R2402&from=en

An all-embracing guide to identity verification through CKYCR

-Kanakprabha Jethani | Executive

(kanak@vinodkothari.com)

Updated as on January 19, 2022

Introduction

Central KYC Registry (CKYCR) is the central repository of KYC information of customers. This registry is a one stop collection of the information of customers whose KYC verification is done once. The Master Direction – Know Your Customer (KYC) Direction, 2016 (KYC Directions)[1] defines CKYCR as “an entity defined under Rule 2(1) of the Rules, to receive, store, safeguard and retrieve the KYC records in digital form of a customer.”

The KYC information of customers obtained by Reporting Entities (REs) (including banks) is uploaded on the registry. The information uploaded by an RE is used by another RE to verify the identity of such customer. Uncertainty as to validity of such verification prevails in the market. The following write-up intends to provide a basic understanding of CKYCR and gathers bits and pieces around identity verification through CKYCR.

Identity verification through CKYCR is done using the KYC identifier of the customer. To carry out such verification, an entity first needs to be registered with the CKYCR. Let us first understand the process of registration with the CKYCR.

Registration on CKYCR

The application for registration shall be made on CKYCR portal. Presently, Central Registry of Securitisation Asset Reconstruction and Security Interest (CERSAI) has been authorized by the Government of India to carry out the functions of CKYCR. Following are the steps to register on CERSAI:

  1. A board resolution should be passed for appointment of the authorised representative. The registering entity shall be required to identify nodal officer, admin and user.
  2. Thereafter, under the new entity registration tab in the live environment of CKYCR, details of the entity, nodal officers, admin and users shall be entered.
  3. Upon submission of the details, the system will generate a temporary reference number and mail will be sent to nodal officer informing the same along with test-bed registration link.
  4. Once registered on the live environment, the entity will have to register itself on the testbed and test the application. It shall have to test all the functionalities as per the checklist provided at https://www.ckycindia.in/ckyc/downloads.html. On completion of the testing, the duly signed checklist at helpdesk@ckycindia.in shall be e-mailed to the CERSAI.
  5. The duly signed registration form along with the supporting documents shall be sent to CERSAI at – 2nd Floor, Rear Block, Jeevan Vihar Building, 3, Parliament Street, New Delhi -110001.
  6. CERSAI will verify the entered details with physical form received. Correct details would mean the CERSAI will authorize and approve the registration application. In case of discrepancies, CERSAI will put the request on hold and the system will send email to the institution nodal officer (email ID provided in Fl registration form). To update the case hyperlink would be provided in the email.
  7. After completion of the testing and verification of documents by CERSAI, the admin and co-admin/user login and password details would be communicated by it.

Obligations in relation to CKYCR

The establishment of CKYCR came with added obligations on banks and REs.  The KYC Directions require banks and REs to upload KYC information of their customers on the CKYCR portal. As per the KYC Directions – “REs shall capture the KYC information for sharing with the CKYCR in the manner mentioned in the Rules, as required by the revised KYC templates prepared for ‘individuals’ and ‘Legal Entities’ as the case may be. Government of India has authorised the Central Registry of Securitisation Asset Reconstruction and Security Interest of India (CERSAI), to act as, and to perform the functions of the CKYCR vide Gazette Notification No. S.O. 3183(E) dated November 26, 2015.

…Accordingly, REs shall take the following steps:

  • Scheduled Commercial Banks (SCBs) shall invariably upload the KYC data pertaining to all new individual accounts opened on or after January 1, 2017 with CERSAI in terms of the provisions of the Prevention of Money Laundering (Maintenance of Records) Rules, 2005.
  • REs other than SCBs shall upload the KYC data pertaining to all new individual accounts opened on or after from April 1, 2017 with CERSAI in terms of the provisions of the Prevention of Money Laundering (Maintenance of Records) Rules, 2005.”

Further, para III and IV of the Operating Guidelines of CKYCR require reporting entities (including banks) to fulfill certain obligations. Accordingly, the reporting entities shall:

  • Register themselves with CKYCR
  • Carry out due diligence and verification KYC information of customer submitting the same.
  • Upload KYC information of customers, in the KYC template provided on CKYCR portal along with scanned copy of Proof of Address (PoA) and Proof of Identity (PoI) after successful verification.
  • Communicate KYC identifier obtained from CKYCR portal to respective customer.
  • Download KYC information of customers from CKYCR, in case KYC identifier is submitted by the customer.
  • Refrain from using information downloaded from CKYCR for purposes other than identity verification.
  • In case of any change in the information, update the same on the CKYCR portal.

In and around verification

Registered entities may download the information from CKYCR portal and use the same for verification. Information can be retrieved using the KYC identifier of the customer. Before we delve into the process of verification and its validity, let us first understand what a KYC identifier is and how would a customer obtain it.

KYC identifier

A KYC Identifier is a 14 digit unique number generated when KYC verification of a customer is done for the first time and the information is uploaded on CKYCR portal. The RE uploading such KYC information on the CKYCR portal shall communicate such KYC Identifier to the customer after uploading his/her KYC information.

Obtaining KYC identifier

When a customer intends to enter into an account-based relationship with a financial institution for the very first time, such financial institution shall obtain KYC information including the Proof of Identity (PoI) and Proof of Address (PoA) of such customer and carry out verification process as provided in the KYC Master Directions. Upon completion of verification process, the financial institution will upload the KYC information required as per the common KYC template provided on the CKYCR portal, along with scanned PoI and PoA, signature and photograph of such customer within 3 days of completing the verification. Different templates are to be made available for individuals, and on the CKYCR portal. Presently, only template for individuals[2] has been made available.

Upon successful uploading of KYC information of the customer on the CKYCR portal, a unique 14 digit number, which is the KYC identifier of the customer, is generated by the portal and communicated to the financial institution uploading the customer information. The financial institution is required to communicate the KYC identifier to respective customer so that the same maybe used by the customer for KYC verification with some other financial institution.

Verification through CKYCR

When a customer submits KYC identifier, the RE, registered with CKYCR portal, enters the same on the CKYCR portal. The KYC documents and other information of the customer available on the CKYCR portal are downloaded. The RE matches the photograph and other details of customer as mentioned in the application form by the customer with that of the CKYCR portal. If both sets of information match, the verification is said to be successful.

Identity Verification through CKYCR- is it valid?

The process of CKYCR is not a complete process in itself and is merely a means to obtain documents from the central registry. In the very essence, the registry acts as a storehouse of the documents to facilitate the verification process without having the customer to produce the KYC documents every time he interacts with a regulated entity. Para 56(j) provides that Regulated entities are not required to ask the customer to submit KYC documents, if he/she has submitted KYC Identifier, unless:

(i) there is a change in the information of the customer as existing in the records of CKYCR;
(ii) the current address of the customer is required to be verified;
(iii) the RE considers it necessary in order to verify the identity or address of the customer, or to perform enhanced due diligence or to build an appropriate risk profile of the client.

The above specification is for obtaining the documents from the customer and not for verification of the same. Verification can be done only through physical, digital or V-CIP modes of CDD.

Furthermore, V-CIP as a manner of CDD was introduced through an amendment to KYC Directions introduced on 9th January, 2019[5]. Para 18(b) of the KYC Directions prescribes that documents for V-CIP procedure may be obtained from the CKYCR portal. Logically, if the CKYCR procedure was to be complete in itself, the same would not have been indicated in conjunction with the V-CIP mode of due diligence.

Benefits from CKYCR

While imposing various obligations on REs, the CKYCR portal also benefits REs by providing them with an easy way out for KYC verification of their customers. By carrying out verification through KYC Identifier, the requirement of physical interface with the borrower (as required under KYC Master Directions)[4] may be done away with. This might serve as a measure of huge cost savings for lenders, especially in the digital lending era.

Further, CKYCR portals also have de-duplication facility under which KYC information uploaded will go through de-duplication process on the basis of the demographics (i.e. customer name, maiden name, gender, date of birth, mother’s name, father/spouse name, addresses, mobile number, email id etc.) and identity details submitted. The de-dupe process uses normaliser algorithm and custom Indian language phonetics.

  • Where an exact match exists for the KYC data uploaded, the RE will be provided with the KYC identifier for downloading the KYC record.
  • Where a probable match exists for the KYC data uploaded, the record will be flagged for reconciliation by the RE.

Conclusion

Identity verification using the KYC identifier is a cost-effective way of verification and also results into huge cost saving. This method does away with the requirement of physical interface with the customer. Logic being- when the customer would have made the application for entering into account-based relationship, the entity would have obtained the KYC documents and carried out a valid verification process as per the provisions of KYC Master Directions. So, the information based on valid verification is bound to be reliable.

However, despite these benefits, only a handful of entities are principally using this method of verification presently. Lenders, especially FinTech based, should use this method to achieve pace in their flow of transactions.

[1] https://www.rbi.org.in/Scripts/BS_ViewMasDirections.aspx?id=11566

[2] https://rbidocs.rbi.org.in/rdocs/content/pdfs/KYCIND261115_A1.pdf

[3] https://testbed.ckycindia.in/ckyc/assets/doc/Operating-Guidelines-version-1.1.pdf

[4] Our detailed write-up on the same can also be referred-  http://vinodkothari.com/wp-content/uploads/2020/01/KYC-goes-live-1.pdf

[5] https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=11783&Mode=0

Our FAQs on CKYCR may also be referred here- http://vinodkothari.com/2016/09/ckyc-registry-uploading-of-kyc-data/

Our other write-ups on KYC:

NBFC Account Aggregator – Consent Gateways

Timothy Lopes, Executive, Vinod Kothari Consultants Pvt. Ltd.

finserv@vinodkothari.com

The NBFC Account Aggregator (NBFC-AA) Framework was introduced back in 2016 by RBI[1]. However the concept of Account Aggregators did exist prior to 2016 as well. Prior to NBFC-AA framework several Account Aggregators (such as Perfios and Yodlee) undertook similar business of consolidating financial data and providing analysis on the same for the customer or a financial institution.

To give a basic understanding, an Account Aggregator is an entity that can pull and consolidate all of an individual’s financial data and present the same in a manner that allows the reader to easily understand and analyse the different financial holdings of a person. At present our financial holdings are scattered across various financial instruments, with various financial intermediaries, which come under the purview of various financial regulators.

For example, an individual may have investments in fixed deposits with ABC Bank which comes under the purview of RBI, mutual fund investments with XYZ AMC which comes under the purview of SEBI and life insurance cover with DEF Insurance Corporation (which comes under the purview of IRDAI.

Gathering all the scattered data from each of these investments and consolidating the same for submission to a financial institution while applying for a loan, may prove to be a time-consuming and rather confusing job for an individual.

The NBFC-AA framework was introduced with the intent to help individuals get a consolidated view of their financial holdings spread across the purview of different financial sector regulators.

Recently we have seen a sharp increase in the interest of obtaining an NBFC-AA license. Ever since the Framework was introduced in 2016, around 8 entities have applied for the Account Aggregator License out of which one has been granted the Certificate of Registration while the others have been granted in-principle[2].

Apart from the above, we have seen interest from the new age digital lending/ app based NBFCs.

In this article we wish to discuss the concerns revolving around data sharing, the reason behind going after an Account Aggregator (AA) license and the envisaged business models.

Going after AA License – The reason

New age lending mainly consists of a partnership model between an NBFC which acts as a funding partner and a fintech company that acts as a sourcing partner. Most of the fintech entities want to obtain the credit scores of the borrower when he/she applies for a loan. However, the credit scores are only accessible by the NBFC partner, since they are mandatorily required to be registered as members with all four Credit Information Companies (CICs).

This is where most NBFCs are facing an issue since the restriction on sharing of credit scores acts as a hurdle to smooth flow of operations in the credit approval process. We have elaborately covered this issue in a separate write up on our website[3].

What makes it different in the Account Aggregator route?

Companies registered as an NBFC-AA with RBI, can pull all the financial data of a single customer from any financial regulator and organise the data to show a consolidated view of all the financial asset holdings of the customer at one place. This data can also be shared with a Financial Information User (FIU) who must be an entity registered with and regulated by any financial sector regulator such as RBI, SEBI, IRDAI, etc. The AA could also perform certain data analytics and present meaningful information to the customer or the FIU.

All of the above is possible only and only with the consent of the customer, for which the NBFC-AA must put in place a well-defined ‘Consent Architecture’.

This data would be a gold mine for NBFCs, who would act as FIUs and obtain the customer’s financial data from the NBFC-AA.

Say a customer applies for a loan through a digital lending app. The NBFC would then require the customer’s financial data in order to do a credit evaluation of the potential borrower and make a decision on whether to sanction the loan or not. Instead of going through the process of requesting the customer to submit all his financial asset holdings data, the customer could provide his consent to the NBFC-AA (which could be set up by the NBFC itself), which would then pull all the financial data of the customer in a matter of seconds. This would not only speed up the credit approval and sanction process but also take care of the information sharing hurdle, as sharing of information is clearly possible through the NBFC-AA route if customer consent is obtained.

The above model can be explained with the following illustration –

What about the Fintech Entity?

Currently the partnership is between the fintech company (sourcing partner) and the NBFC (funding partner). With the introduction of an Account Aggregator as a new company in the group, what would be the role of the fintech entity? Can the information be shared with the fintech company as well as the NBFC?

The answer to the former would be that firstly the fintech company could itself apply for the NBFC-AA license, considering that the business of an NBFC-AA is required to be completely IT driven. However, the fintech company would require to maintain a Net Owned Fund (NOF) of Rs. 2 crores as one of the pre-requisites of registration.

Alternatively the digital lending group could incorporate a new company in the group, who would apply for the NBFC-AA license to solely carry out the business of an NBFC-AA. This would leave the fintech entity with the role of maintaining the app through which digital lending takes place.

The above structures could be better understood with the illustrations below –

To answer the latter question as to whether the information can be shared by the NBFC-AA with the fintech entity as well? The answer is quite clearly spelt out in the Master Directions.

As per the Master Directions, the NBFC-AA can share the customers’ information with a FIU, of course, with the consent of the customer. A FIU means an entity registered with and regulated by any financial sector regulator. Regulated entities are other banks, NBFCs, etc. However, fintech companies are not FIUs as they are not registered with and regulated by any financial sector regulator. An NBFC-AA cannot therefore, share the information with the fintech company.

How to register as an NBFC-AA?

Only a company having NOF of Rs. 2 crores can apply to the RBI for an AA license. However there is an exemption to AAs regulated by other financial sector regulators from obtaining this license from RBI, if they are aggregating only those accounts relating to the financial information pertaining to customers of that particular sector.

Further the following procedure is required to be followed for obtaining the NBFC-AA license –

Consent Architecture

Consent is the most important factor in the business of an NBFC-AA. Without the explicit consent of the customer, the NBFC-AA cannot retrieve, share or transfer any financial data of the customer.

The function of obtaining, submitting and managing the customer’s consent by the NBFC-AA should be in accordance with the Master Directions. As per the Master Directions, the consent of the customer obtained by the NBFC-AA should be a standardized consent artefact containing the following details, namely:-

  1. Identity of the customer and optional contact information;
  2. The nature of the financial information requested;
  • Purpose of collecting such information;
  1. The identity of the recipients of the information, if any;
  2. URL or other address to which notification needs to be sent every time the consent artefact is used to access information
  3. Consent creation date, expiry date, identity and signature/ digital signature of the Account Aggregator; and
  • Any other attribute as may be prescribed by the RBI.

This consent artefact can also be obtained in electronic form which should be capable of being logged, audited and verified.

Further, the customer also has every right to revoke the consent given to obtain information that is rendered accessible by a consent artefact, including the ability to revoke consent to obtain parts of such information. Upon revocation a fresh consent artefact shall be shared with the FIP.

The requirement of consent is essential to the business of the NBFC-AA and the manner of obtaining consent is also carefully required to be structured. Account Aggregators can be said to be consent gateways for FIPs and FIUs, since they ultimately benefit from the information provided.

Conclusion

There are several reasons for the new age digital lending NBFCs to go for the NBFC-AA license, as this would amount to a ‘value added’ to their services since every step in the loan process could be done without the customer ever having to leave the app.

However the question as to whether this model fits into the current digital lending model of the NBFC and Fintech Platform should be given due consideration. The revenue model should be structured in a way that the NBFC-AA reaps benefits out of its services provided to the NBFC.

The ultimate benefit would be a speedy and easier credit approval and sanction process for the digital lending business. Data coupled with consent of the customer would prove more efficient for the new age digital lending model if all the necessary checks and systems are in place.

Links to related write ups –

Account Aggregator: A class of NBFCs without any financial assets – http://vinodkothari.com/2016/09/account-aggregator-a-class-of-nbfc-without-any-financial-assets/

Financial Asset Aggregators: RBI issues draft regulatory directions – http://vinodkothari.com/wp-content/uploads/2017/03/Financial_asset_aggregators_RBI-1.pdf

[1] https://www.rbi.org.in/Scripts/BS_ViewMasDirections.aspx?id=10598

[2] Source: Sahamati FAQs (Sahamati is a collective of the Account Aggregator System)

[3] http://vinodkothari.com/2019/09/sharing-of-credit-information-to-fintech-companies-implications-of-rbi-bar/