Posts

Representation on the draft Amendment Directions for exemption from registration to eligible NBFCs

Loader Loading…
EAD Logo Taking too long?

Reload Reload document
| Open Open in new tab

Download as PDF [240.72 KB]

Representation on the Draft Directions for ‘Advertising, Marketing and Sales of Financial Products and Services by Regulated Entities’

Loader Loading…
EAD Logo Taking too long?

Reload Reload document
| Open Open in new tab

Download as PDF [213.64 KB]

Factoring DLG into ECL: Relief, But Not A Free Pass

Vinod Kothari & Chirag Agarwal | finserv@vinodkothari.com

RBI had earlier directed NBFCs to compute expected credit loss (ECL) without considering the impact of any default loss guarantees (DLGs) obtained from its lending service provider (LSP). We had published a short note explaining why this position was debatable (See our article on the topic here) and had also made a formal representation to RBI on the issue. 

Back to the present, RBI has issued an amendment to the IRACP Directions, 2025 (dated February 13, 2026), permitting lenders to factor in DLG while determining provisions under the ECL framework across all stages.

Further, RBI has also specified that upon every event of invocation of DLG, the DLG cover reduces to the extent of invocation. Accordingly, REs shall recompute their ECL provisioning requirements across stages, after duly adjusting for the reduced DLG cover.

With these clarifications now in place, the next question that arises is: How should Regulated Entities (REs) appropriately factor DLG into their ECL computations? The article below discusses the above question at length.

How to factor in DLG in ECL computation?

Let us understand this in simple terms. Suppose a lender estimates that the expected loss on a loan pool is 3.8%. If the lender has received a guarantee of 5%, backed by fixed deposits that are lien-marked in its favour. The  guarantee is sufficient to cover the expected loss. In such a case, effectively, the lender does not expect to bear any loss. On the other hand, if the expected loss is 6.8% and the guarantee covers only 5%, then the lender’s net expected loss would be the balance 1.8%.

However, this adjustment assumes that the guarantee will actually be honoured when required. A guarantee does not, however, eliminate risk completely; it merely shifts the risk of default or loss from the borrower to the guarantor, up to the guaranteed amount.  

DLG & bankruptcy remoteness

The DLG guidelines specify the forms in which a DLG can be obtained. DLG can be accepted in any one of the following forms:

  • Cash deposited with the RE; 
  • Fixed Deposit maintained with a Scheduled Commercial Bank with a lien marked in favour of the RE; 
  • Bank Guarantee in favour of the RE

Accordingly, DLG can only be obtained in fully funded forms, thus eliminating any question of incurring credit loss on such a guarantee. Does that mean that even in case of insolvency of the DLG provider the lender will have the right to invoke the guarantee? The answer to this is negative. Because unlike in the case of bankruptcy-remote SPV, the guarantor is an operating entity, and is prone to the risk of insolvency.

In case of initiation of insolvency proceedings, all the assets of an insolvent entity form part of the insolvency administration/liquidation estate and are beyond the reach of the creditors. The proceeds from the realisation of assets are paid to the creditors in accordance with the waterfall mechanism as specified under section 53 of the IBC, 2016 . 

Accordingly, it becomes important to determine how each permitted form of DLG would be treated in the event of insolvency of the DLG provider.

  • Cash deposited with RE: The cash deposited with the lender is actually a liability held in the books till the same is invoked. As per Section 36 of IBC 2016, assets that may or may not be in possession of the corporate debtor including but not limited to encumbered assets form part of the liquidation estate. Accordingly, cash deposited by the DLG provider with RE would form part of the liquidation estate of the guarantor.
  • Lien marked FD: Similar to cash deposited with RE, the lien marked FD will also form part of the liquidation estate.
  • Bank Guarantee: In the case of a bank guarantee, the credit exposure effectively shifts from the original guarantor to the issuing bank. Given that scheduled commercial banks are subject to stringent regulation and supervision, the risk of insolvency in banks is generally remote. Accordingly, the probability of default in such a structure is unlikely to be impacted.

So, even if the DLG is structured as a funded guarantee, the actual invocation can become complicated if the DLG provider goes into insolvency before such invocation. In such a situation, the lender may not be able to simply invoke the guarantee and take the money. Instead, it may have to submit its claim and wait for distribution under the insolvency process, where payments are made in the statutory priority order. 

Under the waterfall mechanism, secured creditors rank alongside workmen’s dues. Now, in most DLG structures, the guarantor is a fintech entity or a co-lender. These entities typically do not have significant workmen-related liabilities. This may mean that the lender’s priority position is relatively stronger. 

Further, the actual invocation process of the DLG should also be considered. For instance, cash held with the lender can be easily invoked and adjusted as compared to a lien-marked FD or bank guarantee, where there could be procedural delays. 

Illustration: Consider a loan pool of ₹100 crore where the gross ECL rate is estimated at 6.8% (for the static pool covered by the guarantee), resulting in a gross ECL of ₹6.8 crore. The lender has a DLG cover of 5% of the pool (₹5 crore), structured as a lien-marked fixed deposit provided by a fintech sourcing partner. While the DLG is funded, there remains a risk that the guarantor may become insolvent. The first relevant question here is whether we will take a probability of default (PD) as per Stage 1 (12 months PD), or Stage 2/3 (lifelong PD). While the guarantor in question is not in default at all, however, given that the 6.8% ECL is a combination of Stage 1 as well as Stage 2/3 loans, in our view, the PD for the guarantor, to remain conservative, should be the lifelong PD over the tenure of the loans. Let us assume a 20% Probability of Default (PD) for the guarantor. Next question is assessment of Loss Given Default (LGD). As discussed above, the lender has the benefit of full security in form of lien on the fixed deposit, however, there may be depletion of the same on account of first priority in the waterfall, that is, costs of insolvency and bankruptcy process. On a conservative basis, we may, therefore, assume a 10% LGD. Thus, the expected loss on the DLG cover would therefore be 20% × 10% = 2%. 

As a result, the ECL computation may now be:

= 5%*2% + 1.8% = 1.9%

Based on the aforesaid discussion, in our view, while the guarantee is funded the lender may have to adjust the probability of default to factor in the risk of insolvency, particularly where the guarantee is funded in the form of a cash deposit or a lien marked FD. 

Which funded form of DLG is most suited?

As per the analysis, the various options of funded DLG can be ranked basis the maximum consideration allowable for ECL computation:

  1. Bank guarantee:  Being bankruptcy remote and easiest to invoke
  2. Cash deposit: May have to consider the risk of guarantor’s bankruptcy but the invocation would be easier
  3. Lien marked Fixed Deposit: May have to consider the risk of guarantor’s bankruptcy and invocation may involve procedural delays

However, given that there will not be a sizable or material difference in the quantum of counter guarantee risk, the selection of the options for ECL computation may not be significant. 

Can we help this situation?

One of the ways to mitigate the risk of insolvency is by structuring the guarantee in such a way that the guarantee may be invoked upon the occurrence of an adverse material change in the financial condition of the guarantor. In other words, other than the occurrence of losses in the pool, if there are events of default such as adverse material change, insolvency of the guarantor etc., the lender may invoke the guarantee.

Early invocation upon identifiable stress on the part of the guarantor could help the lender realise the guarantee amount before the commencement of insolvency proceedings.

However, such clauses must be appropriately incorporated and drafted in the DLG agreement to ensure the following:

  • A clear definition of “adverse material change”
  • Identifiable trigger events
  • Clarity on invocation mechanism

Impact of DLG invocation on ECL computation 

RBI has also provided a clarification that upon every event of invocation of DLG, the DLG cover reduces to the extent of invocation. Accordingly, REs would be required to recompute their ECL provisioning requirements across stages, after duly adjusting for the reduced DLG cover.

Pool-based guarantees presuppose that the pool is static. This is purely intuitive because if the pool is dynamic, new loans will continue to enter the pool, and therefore, the guarantor’s exposure will keep spreading over a continuing flow of new loans. 

Where the pool is static, the loans gradually get repaid (amortised) over time. As borrowers repay their instalments, the outstanding amount of the loan pool keeps reducing. Since the exposure is shrinking, the ECL on that pool will also typically reduce over time, assuming normal performance. Therefore, whether the utilisation of the DLG on account of pool defaults may cause the ECL computation to increase? This may be so for 2 reasons: one, usual terms of DLG invocation will be the full amount of the defaulted loan will be recovered (due to escalation of the entire principal outstanding). Thus, while the performing loans amortise over time, the non-performing loans are fully recovered once they reach “default”, causing the utilisation of the DLG to run faster than the amortization of the performing loans. Second reason is that once the pool actually starts defaulting, there may be a reason to provide higher estimates of probability of default as well.

Integral part of the contractual terms: Is DLG required to form part of the loan agreement? 

Para 36A of the IRAC Directions read with the principles under Ind AS 109 provides that credit enhancements may be considered while computing ECL only where such enhancements are “integral to the contractual terms.”  The expression “integral to the contractual terms” is taken from the definition of “credit loss” in Ind AS 109. Credit losses are measured after considering the expected cashflows from an asset. Those cashflows will factor in the recovery of any collateral, or credit enhancements, as long as the said credit enhancement is integral to the contractual terms.

What exactly is the meaning of “integral to the contractual terms”? Are we expecting the guarantee (DLG in the present case) to be a part of the terms of the loan contract? That would never be the case, as the so-called guarantee (which may legally be regarded as an indemnity contract) is a bilateral contract between the lender and the DLG provider. Neither is the borrower aware of the guarantee, nor is it desirable to have the borrower know of the guarantee, for obvious reasons. 

IFRS 9 uses the same language. US ASC has more elaborate discussion on this. Para 326-20-30-12 says:

The estimate of expected credit losses shall reflect how credit enhancements (other than those that are freestanding contracts) mitigate expected credit losses on financial assets, including consideration of the financial condition of the guarantor, the willingness of the guarantor to pay, and/or whether any subordinated interests are expected to be capable of absorbing credit losses on any underlying financial assets. However, when estimating expected credit losses, an entity shall not combine a financial asset with a separate freestanding contract that serves to mitigate credit loss. As a result, the estimate of expected credit losses on a financial asset (or group of financial assets) shall not be offset by a freestanding contract (for example, a purchased credit-default swap) that may mitigate expected credit losses on the financial asset (or group of financial assets)

There has been a significant discussion on whether the benefit of a guarantee or credit enhancement which is not a part of the contractual terms of the loan can be factored in ECL computation. From discussions before the IASB, as back as in 2018, two conditions for recognising the benefit of credit enhancements were discussed:

  1. part of the contractual terms; and
  2. not recognised separately by the entity.

The second condition is easy to understand. For example, if the risk of default is hedged by a credit default swap, the value of the same, amounting to a derivative, is separately recognised. Hence, the question of factoring the same while computing ECL does not arise. However, the first condition, relating to contractual terms of the asset, still remains vague.

One may try to get some clues in the US FASB discussions, where para 326-20-30-12 has been interpreted in technical interpretations. In addition, there is a definition of “freestanding contracts” under the Glossary of ASC 326:

A freestanding contract is entered into either:

a. Separate and apart from any of the entity’s other financial instruments or equity transactions

b. In conjunction with some other transaction and is legally detachable and separately exercisable.

The “forming integral part of the contractual terms” does not warrant the principal contract to provide for the guarantee or the credit enhancements. Insisting on the same will be counter-intuitive, except in case of trilateral contracts. However, the conditions indicate that the guarantee or credit enhancement integrates and becomes an inseparable part of the underlying loan or group of loans. For example, if the group of loans was to be transferred, is it such that the benefit of the guarantee may stay iwth the originator and loans may be transferred, or the guarantee travels along with the loans? If the latter is the case, there is no doubt that in reality, the guarantee has become an embedded part of the loan transaction.

Another factor may be the contractual association between the loan cashflows and the payout from the credit enhancements. Some relevant considerations:

  • Is the guarantee specific to the contractual cashflows from the loans?
  • Does the guarantor pay what the original loan asset would have paid, or pays independent of the contractual cashflows?
  • If the lender subsequently recovers the cashflows from the asset, is the payout from the guarantee restored back to the guarantor?

The presence of these factors will suggest the integration or embedding of the guarantee into the contractual cashflows from the loans.

Conclusion

While the recent amendment by the RBI brings welcome clarity by allowing DLG to be factored into ECL computation, lenders must approach this carefully and realistically. A DLG can reduce the expected loss, but it does not make the risk disappear, as the DLG provider itself faces the risk of insolvency. The form of the guarantee, its enforceability, and the possibility of invocation- all of these matter in assessing the true level of protection. REs should not treat DLG as a mechanical deduction from ECL, but as a risk mitigant that requires thoughtful evaluation, continuous monitoring, and recalibration as the pool amortises and the cover reduces.

See our other resources:

  1. Expected credit losses on loans: Guide for NBFCs;
  2. Expected to bleed: ECL framework to cause ₹60,000 Cr. hole to Bank Profits;
  3. Impact of restructuring on ECL computation.

RBI Proposes Uniform Recovery Norms Across All Lenders

Tejasvi Thakkar and Simrat Singh | Finserv@vinodkothari.com 

Introduction

Pursuant to the RBI’s stated intent in the Statement on Developmental and Regulatory Policies to harmonise the conduct of Regulated Entities in relation to loan recovery, comprehensive draft instructions have been proposed, to be effective from July 1, 2026, consolidating and rationalising the existing scattered provisions. The instructions are applicable to all NBFCs, excluding Mortgage Guarantee Companies, Core Investment Companies, NBFC-Account Aggregators, Standalone Primary Dealers, Non-Operating Financial Housing Companies, and NBFCs not having any customer interface. The key requirements of the proposed framework are summarised below:

Key highlights

Policy Requirement

REs shall formulate a separate policy on recovery of loan dues, engagement of recovery agents and taking possession of security. The policy shall, inter-alia, cover:

  • Eligibility and due diligence criteria for engagement of recovery agents.
  • Specified recovery activities permitted to be carried out.
  • Code of Conduct requirements.
  • Performance evaluation standards, inspection and control mechanism.
  • Procedures and penal actions in case of non-compliance by recovery agents.
  • Recovery procedures in case of demise of borrower.
  • Mechanism to identify borrowers facing repayment difficulties and provide guidance on recourse options
  • Incentive structures not inducing harsh recovery practices..
  • Enforcement and possession framework including legal action not to be adopted as the first resort.

Issue: Whether this can be combined with the policy on Code of Conduct for DSAs/DMAs?

Our view: Since the present requirement specifically deals with recovery conduct, possession and enforcement of security interest, and engagement of recovery agents, the same should ideally be maintained as a separate policy. The DSA/DMA CoC policy deals largely with sourcing-stage conduct such as mis-selling and consequent compensation-related aspects. However, where there are overlapping requirements, NBFCs may structure the same within a broader conduct framework, divided into separate sections. However, it should remain distinct from the outsourcing policy.

Due diligence (DD) requirements

  1. Frame and implement a due diligence framework in line with the RBI Outsourcing Directions, 2025.
  2. RE to ensure that recovery agencies shall undertake due diligence and verification of their employees/representatives at the time of engagement and on a periodic basis. Policy to specify such periodicity and scope of verification.

Training Requirements 

  1. Recovery agents shall mandatorily possess certification from the Indian Institute of Banking and Finance (IIBF) for debt recovery agents. (Aligned with the HFC Master Directions)
  2. Existing agents without certification shall obtain the same within one year from issuance of directions

Code of Conduct for recovery Agents

  1. REs shall put in place a CoC for recovery agents and employees engaged in recovery and obtain undertakings for adherence.
  2. The CoC shall include, inter alia:
    1. Fair and respectful treatment of borrowers.
    2. Sharing only limited borrower information necessary for recovery and preventing misuse.
    3. Mandatory documents to be carried (ID card, copy of recovery letter etc)
    4. Permissible hours of contact
    5. Place of contact rules
    6. Restriction on contacting third parties
    7. Detailed prohibition of harsh practices
    8. Borrower information confidentiality
    9. No recovery action where grievance is pending, unless found to be frivolous
    10. Recording of recovery calls with due borrower intimation.

Issue: Whether the CoC prescribed earlier under HFC Directions stands subsumed?

Our view: Yes. The earlier HFC provisions largely stand harmonised and subsumed within the present draft framework, except for certain differences which have been captured in the Annexure below.

Recovery agents shall be required to carry recovery notice, identity card and authorisation letter, and shall adhere to the following conduct requirements:

  • Interact only with the borrower / guarantor and not approach relatives or other contacts; maintain civil behavior;
  • Contact / visit borrowers only between 08:00 hours and 19:00 hours;
  • Honour borrower’s request to avoid calls / visits at particular times in normal circumstances;
  • Contact borrowers ordinarily at the place of their choice, failing which at residence, and thereafter at place of business / occupation.
  • Avoid calls / visits during inappropriate occasions such as bereavement, calamities, marriage functions, festivals, etc.
  • In case of microfinance loans, undertake recovery at a mutually decided designated place, with field visits permitted only upon repeated non-appearance.
  • Ensure only duly authorised representatives visit borrower’s premises for recovery activities.
  • Ensure any written communication to borrowers has RE’s approval.
  • Promptly issue proper acknowledgement / receipt for collections made.
  • Refrain from harsh practices, including use of abusive language, excessive or anonymous calls, intimidation or harassment, threats of violence, misleading representations, or intrusion into borrower’s privacy.

Grievance redressal mechanism

  • Establish a dedicated recovery-related grievance redressal mechanism.
  • Provide complete details of the Grievance Redressal Officer and the mechanism in all recovery communications and loan agreements.
  • Define criteria for identification and closure of frivolous complaints with appropriate internal oversight.

Responsibilities of REs

REs shall:

  • Prominently display an up-to-date list of empanelled recovery agents on all customer interface channels. Details to be provided
    • names of agents, 
    • details of individuals engaged and 
    • period of engagement.
  • Promptly intimate the termination of recovery agents to prevent unauthorised interaction.
  • Inform borrowers of the details of the recovery agent at the time of forwarding cases for recovery through written communication (letter, SMS or email), and immediately notify any change in the recovery agent during the recovery process.

Possession of mortgaged / hypothecated assets

Loan agreements shall contain a legally enforceable possession clause, clearly disclosed at the time of execution. The agreement shall, inter alia, specify:

  • Notice period and circumstances for waiver;
  • Procedure for taking possession of security;
  • Final opportunity to the borrower for repayment prior to sale/auction;
  • Procedure for restoration of possession;
  • Transparent process for sale or auction of the secured asset.

Periodic review, monitoring and control

REs shall put in place a management structure to monitor and control the activities of recovery agents and ensure that such agents refrain from actions that could harm the RE’s integrity and reputation. Accordingly, the RE should ensure:

  • Appropriate monitoring and conduct provisions shall be incorporated in agreements with recovery agents.
  • Remain fully responsible for the actions of recovery agents.
  • Undertake periodic review of recovery mechanisms to learn from experience and effect improvements.

For Housing Finance Companies:

Most of the proposed requirements are not entirely new in substance for HFCs, as they were already reflected in the Guidelines for Engaging Recovery Agents under paragraph 170 of the RBI HFC Directions, 2025. The proposal now is to delete those HFC-specific guidelines and require HFCs to comply with the proposed Directions.

However, while the underlying principles remain largely consistent, the proposed Directions significantly strengthen and formalise the recovery framework. The approach shifts from principle-based guidance to a more structured, prescriptive, and compliance-oriented regime. The key changes are as follows:

  1. Mandatory written recovery policy: Under the HFC Directions, compliance was required with paragraph 170, but there was no express requirement to frame a consolidated written policy governing recovery of loans, engagement of recovery agents, and repossession of security. The proposed Directions now mandate a formal, documented recovery policy. Such policy must specifically cover eligibility criteria for engagement of agents, due diligence standards, performance evaluation parameters, inspection and audit mechanisms, and penal actions for non-adherence. This marks a shift from guideline-based adherence to a structured governance framework.
  2. Borrower distress identification mechanism: The HFC Directions required utilisation of credit counsellors in cases where a borrower was considered to “deserve sympathetic consideration,” which was discretionary and reactive in nature. The proposed Directions introduce a mandatory mechanism to identify borrowers facing repayment difficulties, engage with them, and provide guidance on available recourse. The regulatory trigger is the existence of repayment difficulty itself, rather than a subjective assessment of sympathy, thereby institutionalising borrower engagement.
  3. Explicit data governance controls: While the HFC Directions required training of recovery agents on respecting customer privacy, the proposed Directions go further by mandating that only limited borrower information be shared with recovery agents and that adequate safeguards be put in place to prevent misuse or unauthorised transfer of customer data. This introduces clearer data governance and accountability obligations.
  4. Restriction on initiating legal action as first resort: The HFC Directions did not prescribe any sequencing rule regarding enforcement remedies. The proposed Directions now expressly provide that legal action for recovery or enforcement of security shall not be initiated as a first resort, thereby imposing a structured progression in recovery measures.

Conclusion

Recovery is as vital to lending as disbursement, if not more. Credit often begins with a courteous engagement by the lender, but too often, the standards of professionalism seen at the time of sanction weaken at the stage of enforcement. The right to recover is unquestionable; harassment is not. The proposed Directions seek to correct this imbalance by requiring lenders to uphold the same standards of fairness, transparency and discipline during recovery as at the time of origination.

See our other resources:

  1. Regulator’s February Bonanza: RBI’s  Sweet Surprises for NBFCs;
  2. From Consent to Compensation: RBI’s Draft Directions for REs on Sales Practices;
  3. Vehicle financiers must follow SARFAESI process for repossession: Patna High Court;
  4. A Guide to Accounting of Collateral and Repossessed Assets.

From Consent to Compensation: RBI’s Draft Directions for REs on Sales Practices


Highlights

  • Mis-selling, among others, will include selling an unsuitable financial product; consequences include compensation                                                                                                                               
  • Prohibition on Compulsory Bundling, eg., sale of insurance policy along with a loan
  • Explicit consent, wherever required, to be based on unambiguous affirmative action
  • Bank to do a due-diligence of a third party financial product that it markets, to avoid reputational risk
  • DSAs and DMAs of banks to come for tighter scrutiny; with undertaking for compliance with bank’s code and disciplinary action upon violation
  • Pricing difference, if any, between directly marketed bank products and indirectly (through agents) to be disclosed
  • Banks to take after-sale feedback from customers, and make necessary amendments in selling practices
  • Dark patterns not be used by regulated entities; periodic audit mandated
  • Controls over incentives favouring mis-selling

Read more

Significant Risk Transfer: Market, Structures, Economics and Risks

Vinod Kothari and Dayita Kanodia | Finserv@vinodkothari.com 

Introduction

Known by various alternative names as “synthetic risk transfers”, “credit risk transfers”, “on balance sheet securitisation” or “synthetic securitisation”, Significant Risk Transfers (SRT) have a history of over 25 years but have recently grown faster than other components of either traditional securitisation or credit derivatives.  The pool value of banks’ synthetic securitizations has surpassed $670 billion, and the global sales of SRTs are expected to expand 11% annually on average over the next two years. 

This article discusses SRT Transactions, the state of the market, different structures used, risks, capital benefits, and the regulatory permissibility of such transactions in different countries. Finally and quite significantly, this article makes a case as to why India, which is one of the very countries in the world presently prohibiting such structures, should rethink.

Market Overview

As per a report published by the International Association of Portfolio Managers, by the end of 2024, over € 700 bn of securitized loans were protected by $ 75 bn (9%) of SRT tranches, some 70% being issued by European banks. Further, the International Association of Credit Portfolio Managers reported that between 2016 and 2023, nearly 500 SRT transactions protected underlying portfolios adding to $ 1 trillion in loans, ranging from corporate loans to auto loans. 

Period 2016- 2024 portfolio under SRTs totaled Euro 1311 billion (or roughly USD 1500 billions). In 2024, Europe, excluding the UK, took Euro 152 billion out of the Euro 260 billion protected portfolio. 

Thus, nearly half of the SRT deals have originated from EU countries. The proportion was even larger historically, but US banks started aggressively getting into SRT Transactions in 2025. 

SRT transactions have existed even before the Global Financial Crisis. In 2021, EU regulators extended the benefit of lower regulatory capital consuming “simple transparent and standard” (STS) securitisation treatment to synthetic transactions too. This has proved to be the game changer.

Asset classes

While corporate loans still represent almost two-third of the underlying pool assets (63%) in 2024, composition of other asset classes were: SMEs (13%), auto loans (7%), residential mortgages (3%), and specialized lending (3%). As in the past, in 2024 some 80% of issued synthetic securitizations support commercial lending to Corporates and SMEs. 

Investors

Specialised credit funds, aka private credit funds,  and debt fund managers are the largest investors. The following graph shows the composition of SRT investors: 

Some Recent transactions

The following are examples of some of the recent SRT transactions:

Banco Santander IFC transaction (2024)

The International Finance Corporation (IFC), a member of the World Bank Group, announced that it will provide a credit guarantee of $93 million to Banco Santander Mexico so that it can allocate more resources to financing small and medium-sized businesses (SMEs) in the country.

Aareal Bank (2025)

Aareal Bank, a German Bank completed its first SRT transaction, synthetically referencing a portfolio of performing European commercial real estate loans. With this transaction, Aareal Bank offered investors an opportunity to take exposure to a €2 billion CRE portfolio, which is equivalent to approximately 6 per cent of Aareal Bank’s overall CRE portfolio. 

Basic Structure of SRT 

Synthetic securitisation uses credit derivatives or similar devices to transfer the risk of a mezzanine tranche(s) of the credit risk of a pool of assets to capital markets by embedding such risk into credit-linked securities. The word “synthetic” is used in distinction to a traditional securitisation, which may be called “cash securitisation” or “true sale securitisation”. In every traditional or cash securitisation, there is a pooling of credit assets to constitute a reasonably diversified pool. The pool is then tranched into multiple tranches, such that, usually, the first loss tranche is retained by the originator, and mezzanine and senior tranches are moved to capital markets through a special purpose vehicle. The result is funding as well as risk transfer. The first loss piece, retained by the originator, neither leads to funding, nor risk transfer. However, for the mezzanine and senior tranches, there is a movement of money from the investors to the originator through the SPV, and risk transfer in the opposite direction. In synthetic securitisation, the purpose is not funding: the purpose is risk transfer. Therefore, the first loss piece still typically stays with the originator, but the risk in the mezzanine is moved to capital markets through the issue of credit-linked securities. The transfer of risk, without funding, may happen using credit default swaps, or guarantees

Structural Variations 

SPV versus non-SPV structures

Over three-quarters of the reported trades in 2024 are issued without SPV. The percentage of protected tranche notional issued directly by banks increased from some 25% in 2016 to 73% in 2024.

SPV Structure:

In the case of an SPV structure, an SPV is brought in as an intermediary between the investors and the originator. In case of cash or traditional securitisation arrangements, an SPV is brought in to hold the assets as a repository for the investors. In synthetic structures, there is no transfer of assets at all, an SPV is commonly used for the following reasons: 

  1. The funding raised by the investors is held and invested by the SPV. If there were no SPV, the funding would be held by the Originator, which would expose the originator to a counterparty risk as the originator would become the obligor for the securities. 
  2. Further, the rating of the securities would consequently be capped at the originator’s rating due to the counterparty risk in case of an SPV structure.
  3. If the SPV was not there, the originator would issue the securities, which may impose withholding tax requirements on the originator. Which is why, typically for a cross border issuance, the SPV is located in a tax haven jurisdiction that will avoid tax implications. 

The structure of SRT transactions has not changed from what it was before the GFC.  For example, n December 2001, DBS Bank Singapore introduced its first synthetic securitisation transaction involving a reference portfolio of approximately S$2.8 billion of corporate loans. The transaction used credit default swaps to transfer credit risk to an SPV, ALCO 1 Limited, without a true sale of assets. The SPV issued around S$224 million of multi-currency, multi-tranche notes (rated from AAA to BBB), while DBS retained the first-loss and super-senior exposures. The deal enabled regulatory capital relief and risk-weighted asset optimisation, and is widely regarded as one of Asia’s earliest synthetic CLO-style transactions outside Japan, marking a milestone in regional structured finance markets. Although this transaction was undertaken more than two decades ago, the structure used primarily remains the same. The following diagram illustrates a common SRT SPV structure:

Non – SPV Structure:

As explained above, typically an SPV is required in cash or traditional structures for holding the asset, isolating it from the originator, protecting the assets from bankruptcy risks of the originator. A rating arbitrage, that is, any of the securities of the SPV being rated higher than the originator, is not theoretically possible if any of the securities represent a claim against the originator. In synthetic structures, there are no actual assets, only synthetic; therefore there is no need to protect the assets (meaning assets of the investors). However, synthetic CDOs do have assets to the extent of funding contributed by the investors. If this funding were to be prepaid or invested in the originator the claims of the investors are backed up by the claim against the originator, and hence, are subject to the rating cap of the originator. 

It is understandable that the cash assets of a synthetic structure is only a fraction of the synthetic assets and hence the need for originator bankruptcy isolation is less prominent. A number of synthetic transactions have found it less necessary to involve a facade between the originator and the investors and have gone ahead with non- SPV structures. In this structure, the securities are issued by the originator himself and therefore represent a claim against the originator. 

There are various Non-SPV structures observed in the market, Unfunded bilateral guarantee/CDS with no SPV, Funded bilateral guarantee/CDS with no SPV, Funded Credit Linked Note issued by originator with no collateral. 

The table below shows the difference between SPV and Non-SPV structures:

SPV StructureNon-SPV Structure
Counterparty riskIn the case of an SPV structure, the entire money paid by the investors will be held by the SPV. This ensures that the investors are protected from the counterparty risk w.r.t the originator since any amount paid by them is held by a bankruptcy remote vehicle. In this case, the investor will be exposed to both the risk of default in the assets as well as counterparty risk of the originator, as opposed to the SPV structure, where the counterparty risk is eliminated. 
Rating CapThe SPV is a separate bankruptcy remote entity, and hence no cap on rating because of the counterparty risk of the originator. The rating of the securities will be capped at the rating of the originator due to counterparty risk.

Other structures

  1. Blind portfolio structures

In a blind reference pool SRT, the bank does not reveal borrower details to the investor or protection provider, and the investor only has access to high-level characteristics of the reference loan portfolio (such as industry distribution, credit ratings, or geographic exposure). Under this type of structure, investors face higher uncertainty as they must rely on the bank’s understanding of standards and risk management practices instead of conducting their own loan-level risk analysis. 

  1. Funded Structures

In case of funded structures, the originator and the investor enter into a bilateral credit protection contract which may be drafted as a guarantee or a credit derivative. The investor then places a collateral equivalent to the maximum payment obligation under the contract. The money from this collateral amount deposited is only paid to the originator when losses hit the protected tranche. The collateral amount remaining after absorbing the losses is returned to the investor. 

  1. Unfunded structures

Unfunded SRTs are transactions not secured by financial collateral. The investor (protection provider) does not make any upfront payments to cover potential losses and is only required to compensate the bank if a credit event occurs. The protection provider is considered to have a high enough credit quality to mitigate the counterparty risk and is subject to eligibility criteria in Europe. The protection providers are typically, in Europe, insurance companies, pension funds, or multilateral development banks. The bank originating the SRT is exposed to counterparty credit risk.

  1. SRT with replenishment period

SRTs with a replenishment period allow a bank to add new loans to the loan portfolio as old loans mature, subject to eligibility criteria. Typically, the loans will come from the same portfolio and share the original loan’s credit characteristics. The risk for the investor is potential asset quality deterioration of the reference pool, as the likelihood of credit losses could increase from lower asset quality loans being added, or from changes in the risk profile of the reference pool.

Economics of Risk Transfer

Consider a room with bombs placed in 5 different regions, as opposed to all the bombs placed in one place. The probability of a person stepping on the bomb will be far less in the first case than in the second one. The same is the case with assets. 

The economics of risk transfer in securitisation are rooted in the principles of integration and differentiation that underpin structured finance. A diversified set of underlying assets is first aggregated into a single pool, enabling risk to be spread across a broader portfolio rather than remaining concentrated at the individual loan level. This pooled risk is then differentiated through tranching, whereby cash flows and credit risk are allocated among distinct tranches with varying risk-return profiles. Such structuring facilitates more efficient risk allocation and diversification, making the protection buyer better off as compared to obtaining guarantees or credit protection on each loan on a standalone basis, where risk remains fragmented and less efficiently distributed. 

Thus, integration and differentiation ensure that correlation risk, or the risk that other assets also default on a default by one asset, is minimal. 

Risks of SRT

The following are some of the risks associated with SRT Transactions:

  1. System-wide leverage and risk migration
    SRTs transfer credit risk from banks to non-bank financial institutions (notably hedge funds and credit funds) that are typically less constrained by capital requirements and can employ higher leverage. This can increase aggregate leverage in the financial system, even if bank balance sheets appear safer. In many cases, banks also provide leverage to SRT investors, meaning part of the risk may remain indirectly within the banking system.
  2. Interconnectedness and contagion risk
    By redistributing bank-originated credit risk across banks, asset managers, hedge funds, insurers, and custodians, SRTs deepen inter-sector linkages. The private and opaque nature of many SRT deals makes it harder for supervisors to map exposures, raising the risk that stress in one segment (e.g., leveraged funds) propagates rapidly across the financial system.
  3. Investor concentration and rollover risk
    The SRT investor base is highly concentrated. Credit funds and asset managers account for a majority of demand, with a small group of large investors holding a dominant share of outstanding exposure. Further, since SRT maturities (typically 3–5 years) are often shorter than the underlying loan tenors, banks face rollover risk that is if investor appetite dries up, banks may experience a sudden increase in RWAs, capital pressure, and higher funding costs.
  4. Weaker underwriting incentives over time
    Strong demand for high-yield SRT tranches may attract more risk-tolerant investors, encouraging aggressive deal structuring or looser credit standards. Increased competition for SRT issuance can lead to sub-par due diligence, potentially worsening the quality of underlying loan pools and increasing vulnerability to credit shocks.

Regulatory capital

In an SRT transaction, a bank buys protection for the mezzanine tranche by issuing CLNs to investors. Under securitization treatment, the senior tranche carries 20 percent RWA, and the first-loss tranche carries 1,250 percent RWA. The RWA for the mezzanine tranche becomes zero because the bank is no longer exposed to the losses from this tranche.

The following examples illustrates maintenance of capital in case of SRT vs non-SRT transactions:

Non-SRT (in USD million)SRT (in USD million)
Asset Pool100Asset Pool100
RWA ratio50%First Loss Tranche %0.50%
RWA50RWA ratio1250%
Tier 1 Capital10.50%RWA6.25
Tier 1 Capital Required5.3Mezzanine Tranche %4.50%
RWA ratio (as risk transferred, backed by cash)0%
RWA0
Senior Tranche95%
RWA ratio20%
RWA19
Total Capital Required2.7

Thus, the capital required to be maintained in case of SRT structures is significantly lower as compared to non-SRT structures thus allowing originators capital relief. This, however, is a function of the size of the junior tranche. In the same example as above, if the thickness of the junior tranche was 3%, the required capital would have gone up.

Regulatory Permissibility of SRT

In India, synthetic securitisation, which is defined as a structure where the credit risk of an underlying pool of exposures is transferred, in whole or in part, through the use of credit derivatives or credit guarantees that serve to hedge the credit risk of the portfolio, which remains on the balance sheet of the NBFC, is prohibited. [para 5(3) of the Reserve Bank of India (Non-Banking Financial Companies – Securitisation Transactions) Directions, 2025]. Accordingly, SRT transactions where there is only a transfer of the risk and rewards without the transfer of the asset are prohibited in India. 

The below table shows the regulatory permissibility of SRT in various jurisdictions:

CountriesRegulatory Permissibility of SRT
IndiaProhibited
AustraliaNot eligible for capital relief
UKPermissible
Hong KongPermissible
CanadaPermissible
IndonesiaProhibited
ChinaProhibited
JapanPermissible within regulatory limits
EUPermissible
KoreaProhibited
SingaporePermissible

Over the years, SRTs have become a very potent tool for regulatory capital and risk management. SRTs have also permitted private credit funds to acquire exposure on loan portfolios without organically creating them. The regulatory antipathy for synthetic securitisation was the multiple layers of risk transfers as seen during the GFC. This was, however, more in case of structured finance CDOs and arbitrage transactions. SRTs are currently mostly related to on-balance sheet assets – hence, the question of any unwarranted risk transfers or risk build up do not arise. Of course, any securitisation transaction creates an interconnection between the banking system and capital markets, but that is also a cushion against risk as it has a potential for risk of contagion. 

Bibliography

  1. 2026 Regulatory Reviews Mark Inflection for Securitisation SRT Market | FitchRatings
  2. Rated Securitisations: Using SRTs to Optimise Financial Balance Sheets | FitchRatings
  3. Global SRT Insurance Survey – Select Results | IACPM
  4. Recycling Risk: Synthetic Risk Transfers | IMF
  5. Unveiling the impact of STS on-balance-sheet securitisation on EU financial stability |European Systematic Risk Board
  6. 2025 wrapped: Structured finance year in review | Structured Credit Investor

Uneasy Ease: RBI Proposes Exemption in Approval Mode  for Type I NBFCs

The RBI’s proposed relief to exempt pure investment companies from exemption from regulation is not a cakewalk but a hurdle race.  It is not an exemption that comes in auto mode; you need to earn the right to be exempt. Some of the important pre-conditions that the RBI has proposed are:

  1. No automatic exemption: It is not that you qualify, and come out of registration. In fact, those proposing to come out have to make an application, based on the financials for the last 3 years. In these financial statements, there must be no direct or “indirect” access to “public funds” (including loans from loans from directors/shareholders), nor should there be any lending within the group or outside. This position shall be supported by auditors’ certificate. It is with these conditions that the RBI may, on being satisfied about the business model, grant exemption.
  2. Customer includes my own group: The meaning of ‘customer interface’ has been clarified to say it includes customer-oriented activity like lending or providing a guarantee, including to ‘entities in the Group’, its shareholders, its directors, or providing any other “product or service” to a customer. “Any other product or service” typically refers to customer-centric financial distribution services like mutual funds, bonds, etc.
  3. Money from director/shareholder will be “public” funds: For the purpose of determining public funds, any amount received from the directors and/or shareholders of the NBFC shall also be treated as public funds. 
  4. Timelimit for making application by existing NBFCs: Type I NBFC registered with RBI as on April 1, 2026, and fulfilling the prescribed criteria for exemption, may make an application to RBI, for deregistration within a period of six months, by September 30, 2026. There is no clarity on what will happen after this date. Also, it is not clear whether existing NBFCs may change their liabilities profiles to meet the exemption conditions, and apply for exemption in future. 
  5. Discretion of RBI: RBI shall consider the requests for deregistration if it is satisfied that NBFC is functioning with a conscious business model to operate without availing public funds and without having customer interface. Hence, the fate of deregistration is in the hands of the regulator.
  6. Exclusion from aggregation: The asset size of unregistered type I NBFCs shall not be consolidated with other entities in the group for determining the classification of such group NBFCs as base/middle layer entities. See details below.
  7. Overseas investment requires registration: Unregistered Type I NBFC, in case it intends to undertake overseas investment in the financial services sector, it shall require registration
  8. Continued Supervision from RBI: Exemption is only from registration requirement; however, they would continue to be subject to the provisions of Chapter IIIB of the RBI Act, 1934 (primarily, transfer to reserve funds). Further, the RBI has reserved the right to issue necessary instructions specifically to ‘Unregistered Type I NBFCs’ in case any concerns/ risks are observed.
  9. Conditions for new entities: New entities intending to claim the exemption must satisfy these conditions- No access to public funds, no customer interface, less than ₹1000 Cr asset size, passing of annual Board resolution to not access PF and CI, disclosure in financial statements. Further, in case of violation of conditions on public funds and/or customer interface, the statutory auditor shall submit an exception report to the RBI. 

Conditions for deregistration application

Analysis of options available to Type 1 NBFCs

Type of NBFCOptions Available
NBFCs holding Type I Registration as on April 1, 2026Option 1: Apply for deregistration

Option 2: Continue to remain as Type I NBFC
Entities that fulfil the conditions for Unregistered Type I NBFC, after April 1, 2026Option 1: Satisfy the conditions under 66A and remain unregistered [see box on Conditions Subsequent]

Option 2: Apply for registration as Type I NBFC
NBFCs not having a customer interface and public funds and having an asset size below ₹1000 crores, but not registered as Type IOption 1: Apply for deregistration

Option 2: Apply for registration as Type I NBFC to avail regulatory exemptionOption 3: Maintain status quo
NBFCs not having a customer interface and public funds and having asset size above ₹1000 crores, but not registered as Type IOption 1: Apply for registration as NBFC Type I

Option 2: Apply for registration as NBFC Type II, in case of changes in business model

What happens to NBFCs not availing public funds and having customer interface but not registered as Type 1?

Several NBFCs that have been registered with the RBI before the concept of Type 1 was introduced in 2016 may not have the CoR as a Type 1 NBFC in spite of the fact that as on date they don’t have access to public funds nor any customer interface. Such an NBFC with an asset size less than ₹1000 crores will still have an option to apply for deregistration, subject to the satisfaction of the conditions prescribed. However, such NBFCs in case they decide to maintain the status quo will not be eligible for the regulatory exemption available to Type 1 NBFCs. 

What about new entities that meet PBC criteria?

If an entity carries investment activity with owned funds, within a limit of ₹1000 crores, does it need RBI registration? The answer seems to be – no. Such a company obviously does not have to go through the rigour of seeking registration first, and then qualifying for an exemption.

The company in question still has to satisfy the exemption conditions; and the auditor will need to give an exception report. The meaning of exception report is that if there is a breach of any of the conditions of exemption, or there is any breach of any other provisions of the law, the auditor shall be required to make an exception report.

Notably, CARO Order also requires auditors to comment on adherence to RBI regulations, which, in future, will include these conditions too.

Whether assets of multiple group entities will be aggregated?

Is the requirement of asset size being within ₹1000 crores based on stand-alone financial statements, or will the assets of companies within the group be aggregated, as is done for the purpose of determination of the middle layer status of companies?

It seems that the aggregation requirement is not there for the Type 1 exemption.

The basis for this is FAQ 13, which states as follows:

Q13. As per regulations of the Reserve Bank, total assets of all the NBFCs in a Group are consolidated to determine the classification of NBFCs in the Middle 11 Layer. What shall be the treatment given to ‘Type I NBFCs’ and ‘Unregistered Type I companies’ in this regard? 

Ans: For aggregation purposes, the asset size of ‘Type I NBFCs’ shall be considered but asset size of ‘Unregistered Type I NBFCs’ shall not be considered. It is emphasized that ‘Type I NBFCs’ shall always be classified in Base Layer regardless of such aggregation. 

What if I have accepted intra-group loans/granted intra-group loans, but resolve not to do so in future

Are the exemption conditions, that there is no access to public funds and no customer interface, merely a statement of intent, or must also be borne out by the conduct in any of the past 3 financial years? Looking at the definition in para 6 (14A), which reads “Not accepting public funds and not intending to accept public funds”, and likewise, “Not having customer interface and not intending to have customer interface”, it appears that the exemption conditions are both a statement of fact as well as intent. If one is negated by the fact, a mere statement of intent may not help.

However, assume there are isolated instances of intra-group loans taken or intra-group loans given. The transactions are not indicating a “business model”, at least the ones on the asset side. Are we saying that the breach of the conditions of  “no public funds” and “no customer interface”, at any time during the last 3 years, will disentitle the exemption?

We do NOT think so. There are two reasons to say this:

  • First, no one can cleanse the past. There is no reason to deny the exemption if the Company has cleaned up the asset side and liability side by 31st March, 2026, and resolves not to make neither of the “two sins” ever in future. Taking any other view will be unreasonable and not keep up to the intent of the regulator.
  • Secondly, the language itself is clear: Para 38A (2) (iii) talks about the status of public funds and customer interface in the last 3 years. Para 38A (2) (iv) and (v) refer to auditors’ certificate and the board resolution, both referring to the position as on date, and not the past. Therefore, if the past has been undone by 31st March, 2026, we see a strong reason to qualify the exemption, except if the level of activity is indicative of “conscious business model”

Three financial years: which years?

In our view, since the deregistration application has to be made within September 30, 2026, the audited financials for FY 25-26 must have been prepared. Hence, the last three financial years that would be considered are FY 23-24, 24-25 and 25-26.

VKC comments:

It is usually hard to get a relief from a regulator, as relief is seen as a prize that you earn. If the idea was based on the premise that what does not matter for the financial system, and is still being regulated, is a burden both for the regulator and for the regulated, there would have been a more welcoming approach to exemption. Specifically:

  • The extension of the definition of “public funds” to include borrowings from shareholders and directors is quite unreasonable. For private companies, deposits from shareholders and directors are exempt by law; in the case of public companies too, loans from directors are exempt. Even if we don’t lean on the law, what is taken from directors and shareholders cannot partake the character of “public”. There cannot be an element of public interest in intra-group transactions, and as a financial regulator, RBI could not have been concerned with intra-group financial accommodations.
  • The definition of “customer” service to include loans to group entities is equally unexplainable. The tested definition of “customer” in case of banks/financial entities is someone who customarily avails the services of such an entity. The only intent of the regulator could have been the conduct of business concerns, primarily customer service. A group entity borrowing from another group entity is not expecting customer service standards.
  • Both the definitions have been related to the historical balance sheets, with no apparent continuing exemption route. This, hopefully, will be made a continuing exemption, so that entities may carry financial and business restructuring to qualify for exemption.

The NBFC that doesn’t have to be: CICs and Principal Business paradox

– Dayita Kanodia, Assistant Manager | finserv@vinodkothari.com

Holding Companies whose primary intent is to invest in their group companies have lately faced a paradox with respect to the requirement of registration as a  Core Investment Company (CIC). 

CICs are entities whose principal activity is the acquisition and holding of investments in group companies, rather than engaging in external investments or lending exposure outside the group. Para 3 of the Reserve Bank of India (Core Investment Companies) Directions, 2025 (‘CIC Directions’) prescribes the quantitative thresholds for classification of an NBFC as a CIC. In terms thereof, an NBFC that holds not less than 90% of its net assets in the form of investments in group companies, of which at least 60% is in equity instruments, is classified as a CIC and is required to obtain registration from the RBI, unless exempted.

Conceptually, a CIC is a sub-category of a Non-Banking Financial Company (NBFC) (para 3 of the CIC Directions), just like Housing Finance Companies, Micro Finance Institutions, etc. The threshold criteria that NBFCs are required to satisfy is the principal business criteria (PBC), pursuant to which at least 50% of the total assets of the entity must consist of financial assets and at least 50% of its total income must be derived from such financial assets. 

The PBC has historically served as the foundational threshold for determining whether an entity is an NBFC. Once the entity satisfies this principal requirement of carrying out financial activity, the sub-category is to be determined based on its line of business, which, lately, has seen quite a varietty – fron tradtional variants such as investment and lending activities (ICC), to housing finance (HFC), to financing of receivables (Factoring companies), the more recent inclusions are account aggregators (AA), mortgage guarantee companies (MGCs), infrastructure finance compaies (IFC), etc.  Each of these NBFCs first, and then they fall in their respective class. For instance, HFCs are a type of NBFCs that primarily focus on extending housing loans and hence, must have a minimum housing loan portfolio of 60% and an individual housing loan of 50%. 

Accordingly, all categories of NBFCs must first be ascertained to be carrying out financial activities as their primary business, and thereafter, the specific product helps to determine the category. Consequently, holding companies or CICs should ideally also adhere to the 50-50 criteria first and thereafter meet the 90-60 criteria for CIC classification. 

However, there is a common perception among the market participants that CICs, irrespective of meeting such PBC, in case they reach the 90-60 criteria, will be required to obtain registration as a CIC. Several news reports also note this perception. 

This perception among the market participants that CICs are not required to adhere to the PBC criteria stems from para 17(3) of the CIC Directions, which explicitly provides that:

CICs need not meet the principal business criteria for NBFCs as specified under paragraph 38 of the Reserve Bank of India (Non-Banking Financial Companies – Registration, Exemptions and Framework for Scale Based Regulation) Directions.”

It may be noted that the above-quoted provision, which has recently been made a part of the CIC Directions pursuant to the November 28 consolidation exercise, was earlier included in the FAQs released by RBI on CICs.  FAQs are RBI staff views; whereas Directions or Regulations are a part of subordinate law; however, in the consolidation exercise, a whole lot of FAQs and circulars became a part of the Directions.

Going by the intent of the NBFC classification and categorisation, the above-quoted provisions seem more relevant for registered CICs, implying that CICs once registered need not meet the PBC on an ongoing basis. CICs predominantly hold investments in group companies and therefore satisfy the 90–60 thresholds, but often do not derive any financial income from such investments. Group investments, being strategic in nature, are rarely disposed of, and the dividend income from such investments depends on the dividend/payout ratio, which may be quite low. In several cases, such entities continue to earn income, say, by way of royalty for a group brand name. Even the slightest of non-financial income will seem to breach the PBC criteria, which may challenge the continuation of registration of the CIC as an NBFC. In order to redress this,  the provision under para 17(3) of the CIC Directions provides that CICs need not meet the PBC criteria on an ongoing basis. 

What is the basis of this argument? The definition of a CIC comes from para 3, which says as follows: “These directions shall be applicable to every Core Investment Company (hereinafter collectively referred to as ‘CICs’ and individually as a ‘CIC’), that is to say, a non-banking financial company carrying on the business of acquisition of shares and securities, and which satisfies the following conditions.” Para 17 (3) is a note to Para 17, which apparently deals with conditions of continued registration. 

Given that CIC is a category of NBFC, it would be counter-intuitive to say that the regulatory requirement requires holding companies to go for registration as a CIC even if they do not meet the PBC for an NBFC. In fact, if an entity is not an NBFC because it fails the principality of its business, it would not even come under the statutory ambit of the RBI by virtue of section 45-IC.

Accordingly, without going by just the text of the regulations, in our view, considering the regulatory intent, the following could be inferred:

  1. If there are group holding companies which have intra group investments, but also have operating income from one or more sources, such that the operating income is more than finanical income, these companies are not NBFCs at all. If they are not NBFCs, they cannot be CICs irrespctive of the extent of investment/loans as a part of their asset base. As we say this, we emphaise that the operating income shoudl be substantive and should be indicating a strategic business intent, rather than a pure one-off or passive income.
  2. CICs are a type of NBFC.
  3. Holding companies will be classified as a CIC in case they first meet the 50-50 criteria for NBFC and thereafter the 90-60 criteria as well. The registration requirement may then be ascertained based on the asset size and access to public funds by the CIC.
  4. A CIC (registered or unregistered) need not meet the PBC criteria on an ongoing basis. 

Other Resources:

  1. New regulatory framework for Core Investment Companies: RBI means to exempt: will there be any takers?
  2. Can CICs invest in AIFs? A Regulatory Paradox
  3. RBI introduces stringent norms for Core Investment Companies

IT Outsourcing Under the RBI’s 2025 Directions: What Has Changed?

By Archisman Bhattacharjee & Avikal Kothari | Finserv@vinodkothari.com  

Introduction

On November 28, 2025, the Reserve Bank of India (“RBI”) issued the Reserve Bank of India (Non-Banking Financial Companies – Managing Risks in Outsourcing) Directions, 2025 (“Outsourcing Directions”), thereby repealing the erstwhile directions governing IT outsourcing and financial services outsourcing. For the purposes of this article, our discussion is confined to Chapter IV of the Outsourcing Directions, which specifically deals with outsourcing of information technology (“IT”) services. While the Outsourcing Directions largely represent a consolidation of the existing regulatory framework as also clarified by the RBI in its Consolidation of Regulations – Withdrawal of Circulars dated November 28, 2025, they also provide enhanced clarity and structure to the regulatory expectations applicable to IT outsourcing arrangements of NBFCs. This article seeks to examine whether, and to what extent, any additional or expanded obligations have been introduced by the RBI under the consolidated framework.

Applicability

Chapter IV of the Outsourcing Directions, dealing with IT services outsourcing is applicable on NBFC-ML and above, which was also the case for the Erstwhile IT Outsourcing Directions

Transitional Timeline for Compliance of Existing IT Outsourcing Arrangements

The erstwhile IT Outsourcing Directions had become applicable with effect from October 1, 2023. Under the Outsourcing Directions, the RBI has now prescribed a specific transition mechanism for existing IT outsourcing arrangements. In this regard, para 2 of the Outsourcing Directions provides that:

“These Directions shall come into force with immediate effect

Provided that for Non-Banking Financial Companies covered under the scope of these Directions, as mentioned in paragraph 3, their existing Information Technology (IT) outsourcing agreements, regardless of whether they are due for renewal on or after the effective date of these Directions, shall comply with the provisions of these Directions either at the time of renewal or by April 10, 2026, whichever is earlier.”

Given that the Outsourcing Directions are primarily in the nature of a consolidation exercise and do not introduce materially new obligations, the timeline up to April 10, 2026 appears to be intended to provide NBFCs with a reasonable window to align their existing IT outsourcing agreements with the consolidated framework. Accordingly, NBFCs should utilise this transition period to review, amend, and, where necessary, renegotiate their existing IT outsourcing contracts to ensure full compliance with the Outsourcing Directions within the prescribed timeline.

Against this backdrop, it becomes important to examine the substantive requirements laid down under Chapter IV of the Outsourcing Directions in relation to outsourcing of IT services to third-party vendors. The following section discusses the key regulatory expectations and compliance obligations applicable to NBFCs when engaging third-party service providers for IT outsourcing.

  1. Expanded scope of Service Provider Definition

The definition of “service provider” as defined under paragraph 58(3) of the Outsourcing Directions is expansive and extends beyond the primary contracting entity to include sub-contractors, third-party vendors, and entities forming part of the service delivery chain. Further the Outsourcing Directions under paragraph 58(4)have also now defined the term “sub-contractor” to mean:

“… those providing material / significant IT services to the service provider and is specific to the material / significant IT services arrangement that the NBFC has entered into with the service provider”

Accordingly, a sub-contractor that provides material or significant IT services to a service provider, where such services are critical to the delivery of the outsourced arrangement to the NBFC, would also fall within the ambit of the Outsourcing Directions. For instance, where an NBFC avails a SaaS solution from a third-party service provider, any entity that supplies core software or technology to such SaaS provider, without which the service cannot be effectively rendered, may be regarded as a material service provider for the purposes of the Outsourcing Directions. 

While the erstwhile IT Outsourcing Directions did prescribe certain obligations in respect of sub-contractors (and the obligations of NBFCs vis-à-vis their primary service providers largely remain unchanged under the Outsourcing Directions), the current framework introduces greater clarity on who qualifies as a “sub-contractor.”

Actionables for NBFCs:
NBFCs should reassess their existing IT outsourcing landscape to identify all arrangements that fall within the expanded scope, including indirect or layered service delivery models. Vendor inventories should be updated to capture not only primary service providers but also material sub-contractors and supply-chain entities involved in the provision of IT services.  Furthermore, NBFCs are advised suitably amend its existing policies to clearly specify the framework and criteria for identification of sub-contractors. This may, inter alia, include requiring service providers to furnish a list of their appointed sub-contractors along with details of the functions performed by each, and undertaking an assessment, in consultation with the relevant service provider, to determine whether such sub-contractors are material or non-material.

  1. Audit and Due Diligence 

The Outsourcing Directions require NBFCs to conduct risk-based due diligence of IT service providers, this includes tracking system performance, uptime, service availability, Service Level Agreement,  compliance and incident response on an ongoing basis. Regular risk-based audits of service providers, including sub-contractors, have been formalised, with an option to rely on pooled audits or recognised third-party certifications, though this does not dilute the NBFC’s responsibility for data security and system availability. NBFCs must also periodically review the financial and operational strength of service providers to identify any deterioration in performance, security or resilience. Access rights have been strengthened, requiring service providers to provide unrestricted access to relevant data and premises for NBFCs, auditors and regulators. 

Actionables for NBFCs:

NBFCs should strengthen vendor due diligence processes and establish mechanisms for periodic review of service providers. Oversight frameworks should extend to subcontractors and material supply-chain entities, with clear accountability resting on the primary service provider. Overall, the changes make due diligence an ongoing obligation rather than a one-time exercise, requiring NBFCs to strengthen internal monitoring structures, audit planning and vendor risk management practices. 

Further, considering that the RBI has mandated compliance of the agreements with the Outsourcing Directions by April 10, 2026, it is advisable for NBFCs to undertake a comprehensive review of the service level agreements and other contractual arrangements executed with all its material IT vendors to ensure alignment with the requirements set out under paragraphs 33, 34, 73 and 74 of the Outsourcing Directions.

Additionally, prior to April 10, 2026, NBFCs are suggested to conduct audits of its material service providers to verify:

  1. compliance with the contractual obligations agreed between the NBFC and the respective vendor; and
  2. adherence by such vendors to the applicable requirements prescribed under the IT outsourcing framework.

Alternatively, the Company may also rely on globally recognised third-party certifications made available by the service provider in lieu of conducting independent audits.

Where, based on such review or audit, the NBFC forms the view that a vendor is not in compliance with the contractual terms or applicable regulatory requirements, the NBFC should require the vendor to implement corrective action within defined timelines and, where necessary, amend or renegotiate the existing agreements to ensure alignment with the Outsourcing Directions. 

Further, the NBFC should appropriately document such reviews, audits, and remediation measures and place the same before the senior management, in accordance with the requirements of paragraph 78 of the Outsourcing Directions, and/or before such a committee as may be identified under the NBFC’s IT Outsourcing Policy. Any material or adverse developments should also be escalated to the Board in alignment with the requirements of paragraph 78 of the Outsourcing Directions.

In cases where remediation or contractual modification is not feasible, the Company should maintain an exit plan/exit strategy, including identification of alternate service providers and/or arrangements for bringing the outsourced services in-house, so as to ensure continuity of critical operations and minimal disruption to customers.

Conclusion

The Outsourcing Directions mark a significant step by the RBI towards consolidating and strengthening the regulatory framework governing IT outsourcing by NBFCs. While the underlying obligations remain broadly consistent with the erstwhile regime, the transition period up to April 10, 2026 provides NBFCs with a critical opportunity to holistically reassess their IT outsourcing arrangements, rationalise vendor ecosystems, and embed robust contractual, operational, and governance safeguards. NBFCs that proactively undertake structured reviews, strengthen vendor risk management, and institutionalise ongoing monitoring mechanisms will be better positioned not only to achieve regulatory compliance but also to enhance operational resilience and customer trust.

Ultimately, IT outsourcing under the Outsourcing Directions is no longer a purely contractual or procurement function—it is a core governance and risk management responsibility. Treating it as such will be essential for NBFCs navigating an increasingly digital and interconnected financial services ecosystem.

See our other resources:

  1. RBI regulates outsourcing of IT Services by financial entities
  2. IT Governance: Upgrade needed by April 01, 2024
  3. https://vinodkothari.com/2023/11/it-governance-risk-control-and-assurances-practices-directions-2023/

RBI Issues Draft Directions on Relief Measures in Areas Affected by Natural Calamities for Regulated Entities

Simrat Singh | finserv@vinodkothari.com 

When nature unsettles the ordinary course of life, the regulatory hand should neither be withdrawn nor clenched; it should extend a humane touch, easing distress and guiding the return of order. In this spirit, the RBI has released draft directions on Relief Measures in Areas Affected by Natural Calamities, setting out a framework under which banks, NBFCs and other Regulated Entities (REs) may provide relief to borrowers impacted by natural calamities or similar external events. The framework enables REs to extend resolution plans to eligible borrowers, while permitting retention of standard asset classification and lower provisioning, benefits that would otherwise not be available if such restructuring were undertaken under the normal IRACP framework.

It may be noted that earlier RBI had issued guidelines for banks in connection with matters relating to relief measures to be provided in areas affected by natural calamities consolidated under ‘Master Direction – Reserve Bank of India (Relief Measures by Banks in Areas affected by Natural Calamities) Directions 2018 – SCBs’ dated October 17, 2018. In 2016, these guidelines were made applicable, mutatis mutandis, to all NBFCs as well, in areas affected by natural calamities as identified for implementation of suitable relief measures by the institutional framework viz., District Consultative Committee (DCCs)/ State Level Bankers’ Committee (SLBCs). However, given that the provisions were drafted considering the banking operations, the implementation by NBFCs was ambiguous and the provisions were often overlooked.

While the proposed framework applies to both banks (Commercial, RRB, Local area banks etc) and NBFCs, there are separate draft Directions issued for each RE. In case of banks the provisions carry additional system-level and public service responsibilities, reflecting their role within SLBCs and DCCs.

Fig 1:  Actionables for NBFCs under the draft directions

Applicability and process flow

The draft directions are proposed to come into effect from 1 April 2026, after the final directions are notified. The framework is triggered upon formal notification of a natural calamity by the Central Government or the concerned State Government.

Where a calamity affects a substantial part of a State, it is proposed that a special meeting of the SLBC  shall be convened within 15 days of such declaration. If the impact is confined to one or more districts, the corresponding DCC(s) are required to meet within the same timeframe. These committees assess the severity of the impact on economic activity, determine objective criteria for identifying impacted borrowers and indicate the nature and extent of relief such as moratoriums that may be extended by regulated entities operating in the affected areas. The decisions taken in these meetings are communicated to regulated entities and are required to be given adequate publicity, primarily by banks, through field outreach and public communication. The relief framework becomes operational in line with such Government notifications and the decisions of the SLBC or DCC, as applicable.

Amendments in the Credit Policy

The draft directions propose that the REs update their credit policies to incorporate a structured and pre-defined framework for dealing with borrower stress arising from natural calamities. The credit policy is expected to provide for resolution in line with the provisions and to set out objective principles governing the terms of relief across different borrower segments and loan categories.

While the precise parameters may vary depending on the nature and severity of the calamity, the decisions of the SLBC/DCC/Governments, the credit policy is expected to lay down a consistent framework to be applied by the REs when extending relief. This includes identifying potential relief measures, specifying verifiable parameters for determining eligibility of borrowers and extent of relief and defining the delegation matrix for approval and implementation. The emphasis is on ensuring timely decision-making, particularly in relation to restructuring of existing exposures and sanction of additional finance.

Eligible Borrowers and Coverage

Relief under the draft Directions is proposed to be available only to borrowers who meet the prescribed eligibility conditions as on the date of occurrence of the natural calamity. To qualify, the borrower’s account must be classified as ‘Standard’ and must not be in default for more than 30 days with the concerned RE in respect of any facility. Other additional conditions may be laid down in the credit policy.

Borrowers who do not meet these conditions fall outside the scope of the calamity relief framework and may instead be considered for resolution under the applicable Resolution of Stressed Assets Directions. In such cases, however, the RE does not receive the benefit of standard asset classification or lower provisioning (see discussion below). The framework extends its shelter only to those borrowers who, till the moment the calamity struck, had kept their financial obligations substantially intact. The protection is not meant to rescue infirm credit, but to steady sound accounts momentarily shaken by forces beyond human control.

Resolution Plan and Permissible Relief Measures

Where a RE decides to extend relief, the resolution plan is to be structured based on an assessment of the borrower’s post-calamity viability. The draft Directions propose a range of relief measures, including rescheduling of repayments, grant of moratorium, and conversion of accrued or future interest into another credit facility. Regulated entities may also consider sanctioning additional or fresh finance to address temporary financial stress, subject to appropriate assessment of viability and credit risk.

Notably, the framework is enabling rather than mandatory. It does not require automatic restructuring of all eligible accounts, thereby allowing REs to exercise credit judgement while operating within the prescribed regulatory parameters.

Timelines for Invocation and Implementation

It is proposed that resolution under the framework must be invoked within 45 days from the date of declaration of the natural calamity, unless an extension is granted by the Regional Director or Officer-in-Charge of the Reserve Bank. This would mean that the aggrieved borrower must approach the lender and the terms of restructuring must be agreed between both of them within the said timeframe. Once invoked, the resolution plan must be implemented within 90 days from the date of invocation.

In practice, this means that following the Government notification and the SLBC or DCC meeting, typically held within the first 15 days from the notification, REs have a limited 30-day window to complete borrower identification, viability assessment, documentation and approval. Failure to adhere to these timelines results in loss of the regulatory benefits available under the framework.

Asset classification treatment

The most significant regulatory benefit under the proposed framework relates to asset classification. Where a resolution plan is implemented in compliance with the Directions, borrower accounts classified as ‘Standard’ may be retained as such upon implementation instead of facing any downgrade. Further, accounts that may have slipped into NPA status between the date of occurrence of the calamity and the implementation of the resolution plan are permitted to be upgraded to ‘Standard’ upon implementation. However, as per the ECL Policy of the RE, generally any restructuring would automatically be treated as a SICR and therefore, the staging may change and a higher ECL would be required to be provided on such restructuring which may nullify the benefit. 

After implementation, subsequent asset classification is governed by the applicable IRACP norms. The proposed framework also addresses cases of repeated restructuring. Where a borrower account is restructured again under these Directions before the reversal of additional provisions (see below), it may continue to be classified as ‘Standard’, subject to recognition of interest on a cash basis from the second restructuring onwards and maintenance of an additional specific provision of five per cent of the outstanding debt for each restructuring, subject to an overall ceiling of 100 per cent.

Income Recognition and Provisioning

For restructured accounts, it is proposed that interest income may be recognised on an accrual basis. At the same time, REs are required to maintain an additional specific provision of 5% of the outstanding debt, over and above the applicable provisioning under IRACP norms. Reversal of this additional provision can happen only where the borrower repays at least 20% of the outstanding debt, the account does not slip into NPA status after implementation of the restructuring and no further restructuring is undertaken during the relevant period. Specifically for banks, if the outstanding debt post-restructuring is only in the form of non-fund-based facilities or facilities in the nature of cash credit / overdraft, the additional provisions can be reversed after one year, post implementation of the restructuring, provided the borrower was not in default at any point of time during the period concerned.

Ancillary relief measures and government support

It is proposed that the REs be required to extend interest subvention or prompt repayment incentive benefits notified by the Government to all eligible borrowers. They must also ensure that any relief already provided, or being provided, by the Central or State Governments is duly factored into the resolution process.

For agricultural loans secured by land, the draft Directions propose acceptance of certificates issued by Revenue Department officials where original title documents have been lost due to the calamity. In areas governed by community ownership arrangements, certificates issued by competent community authorities may also be accepted. REs may also, at their discretion, provide additional relief such as waiver or reduction of fees and charges for borrowers in affected areas, for a period not exceeding one year. Expected proceeds from insurance policies may also be kept while deciding the relief. Additionally for banks it is proposed that they shall open small accounts for displaced borrowers and take immediate action to restore ATM services in the impacted areas. They may operate their natural calamity affected branches from temporary premises under advice to the RBI. For continuing the temporary premise beyond 30 days, banks may obtain specific approval from the concerned Regional Office of RBI. A bank shall also make arrangements to render banking services in the affected areas by setting up satellite offices, extension counters or mobile banking facilities etc. under intimation to the RBI.

Reporting Requirements

It is proposed that the REs shall upload data on relief measures extended under the framework in the prescribed format on a half-yearly basis. The data points include ‘Outstanding eligible for restructuring as on the date of notification of natural calamity’, ‘Credit facilities restructured/rescheduled during the half year’, ‘Additional/fresh loans provided to affected borrowers during the half year’ etc.  The data must be submitted within 30 days from the end of each half-year, i.e., as of 30 September and 31 March, through the CIMS portal. Where no relief measures are extended during a reporting period, a NIL statement is required to be submitted.

See our other resources:

  1. COVID- 19 AND THE SHUT DOWN: THE IMPACT OF FORCE MAJEURE
  2. RBI Trade Relief Directions: How is your company impacted?