Digital Lending in India: RBI Rules, KFS & FLDG (2026)
Every JAIIB and CAIIB Digital Banking candidate eventually meets a question on digital lending — and most lose marks because they confuse the fintech app layer with the regulated entity that actually owns the loan. RBI's 2022 framework fixed exactly this ambiguity by drawing hard lines between Regulated Entities, Lending Service Providers and Digital Lending Apps. This guide breaks the framework down the way examiners test it, from the Key Fact Statement to the First Loan Default Guarantee cap.
📱 What Counts as Digital Lending — REs, LSPs and DLAs
Digital lending is any remote, paperless lending process that uses digital channels for borrower acquisition, credit appraisal, sanction, disbursal and recovery. RBI's Guidelines on Digital Lending (2022) split the ecosystem into three actors examiners love to test. A Regulated Entity (RE) is a bank, NBFC or co-operative bank supervised by RBI — the only party legally allowed to lend money. A Lending Service Provider (LSP) is an agent that carries out one or more of the RE's functions — sourcing, KYC, credit assessment, servicing — on the RE's behalf under an outsourcing contract, but an LSP cannot itself book a loan on its balance sheet. A Digital Lending App (DLA) is simply the mobile or web interface — it may belong to the RE directly or to its LSP partner.
This RE-LSP-DLA structure matters because it fixes accountability: whatever the app does, the RE stays fully responsible to the borrower and to RBI. Students preparing chapters like Overview of Digital Banking should treat this three-layer map as the backbone of every digital lending question, because nearly every other rule — disbursal, data, grievance redressal — is written in terms of who is the RE and who is merely the LSP.
📋 The Key Fact Statement and Borrower Protections
Before a digital loan is disbursed, the RE must furnish a standardised Key Fact Statement (KFS) in a borrower-understood language, disclosing the Annual Percentage Rate (APR), all fees, the recovery mechanism and the effective interest cost — not just the flat "headline" rate that apps used to advertise. The APR must include processing fees, insurance premiums bundled into the loan and any other charges, so two loans with the same nominal interest rate can carry very different APRs once the KFS is compared side by side.
RBI also mandates a cooling-off/look-up period during which a borrower can exit the digital loan by repaying the principal and the proportionate APR, without any pre-payment penalty. Loan disbursal and repayment must flow directly between the borrower's bank account and the RE's account — LSPs and DLAs are barred from operating a pass-through pooling account for these transactions, closing the loophole that let unregulated apps collect and hold borrower money. A designated Grievance Redressal Officer must be published on every DLA, and any automatic increase in a borrower's credit limit needs explicit, fresh consent — it cannot be a silent app-side toggle.

💰 FLDG, Co-Lending and the Credit Flow
Fintech-NBFC tie-ups commonly use a First Loss Default Guarantee (FLDG), where the LSP or a partner absorbs early defaults up to an agreed cap. RBI's FLDG framework permits such arrangements only between an RE and an eligible LSP or another RE, subject to the guarantee not exceeding 5% of the outstanding loan portfolio it covers — beyond that, the arrangement would effectively be unregulated deposit-taking or off-balance-sheet lending in disguise. This cap is a favourite one-mark question because students often confuse it with the co-lending exposure norms, which are governed separately under RBI's co-lending guidelines for banks and NBFCs.
To widen access to verified credit data, RBI has also pushed the Public Tech Platform for Frictionless Credit (PTPFC), an API layer that lets consenting REs pull digitised land records, GST, banking and other data instantly instead of relying on manual document collection. Combined with account-aggregator-consented financial data — a mechanism covered in detail in our companion piece on credit line on UPI — this is meant to cut loan turnaround time from days to minutes while keeping the underlying data flow consent-based and auditable, not scraped.
⚠️ Common Compliance Pitfalls Digital Lenders Must Avoid
Examiners frequently frame digital lending questions as "spot the violation." The most tested pitfalls: an LSP or DLA collecting loan proceeds into its own account instead of routing them RE-to-borrower directly; an app harvesting contacts, photos or call logs without functionally necessary, explicit, revocable consent; recovery agents using coercive or unauthorised contact methods instead of the RE's board-approved outsourcing policy; and an RE onboarding a DLA that is not listed on its own website's registry of approved apps — since only self-reported, RE-verified DLAs are considered compliant.
Self-regulation now backs up these rules — the Fintech Association for Consumer Empowerment (FACE) operates as an RBI-recognised Self-Regulatory Organisation for the digital lending sector, maintaining a code of conduct and grievance escalation matrix that member DLAs must follow. For related access-and-consent chapters, revisit Financial Inclusion and Mobile Banking, both of which lean on the same consent-first design principle that anchors digital lending.
| Compliance Requirement | Before RBI's 2022 Digital Lending Guidelines | After RBI's 2022 Digital Lending Guidelines |
|---|---|---|
| Loan disbursal route | Often via LSP/DLA pooling account ❌ | Direct RE-to-borrower bank account only ✅ |
| Cost disclosure | Flat/headline rate only ❌ | Mandatory KFS with full APR ✅ |
| Exit option post-disbursal | No standard exit window ❌ | Cooling-off period with proportionate repayment ✅ |
| Data collection | Broad device-permission scraping ❌ | Purpose-specific, revocable consent only ✅ |
| Default guarantee (FLDG) | Unregulated, uncapped arrangements ❌ | RE-LSP FLDG capped at 5% of portfolio ✅ |
| App legitimacy check | No public registry ❌ | RE must list DLA on its own website ✅ |
💡 Exam Tip: If a question describes money passing through the app's or agent's own account before reaching the borrower, that is a textbook FLDG/pass-through violation — flag it as non-compliant with the 2022 guidelines.
⚠️ Common Mistake: Students often mix up FLDG's 5% portfolio cap with co-lending exposure limits. FLDG caps first-loss guarantee size; co-lending norms govern how much of a loan each RE holds on its own books.
📌 Remember: An LSP can service a loan end-to-end, but it can never legally originate or hold the loan asset — only a Regulated Entity can lend.

🎯 Where Digital Lending Fits in the Digital Banking Syllabus
Digital lending threads through several Digital Banking chapters rather than sitting in one isolated topic. It builds on the retail delivery channels covered in Retail Banking - Digital Banking Class 12, extends into the appraisal and disbursal mechanics touched in Retail Banking - Digital Banking Class 11, and connects to the underwriting-data ecosystem that also powers instruments discussed in our guides to card tokenisation and prepaid payment instruments. Because loan pricing decisions are ultimately shaped by the broader interest-rate environment, candidates studying macro drivers alongside Digital Banking should also revise types of inflation in India from the Indian Economy and Indian Financial System paper, since RBI's repo stance filters through to digital loan APRs within days.

🧠 Practice MCQs: Digital Lending
Q1. Under RBI's Digital Lending Guidelines, who is legally permitted to disburse and hold a digital loan on its balance sheet? (a) Any Digital Lending App (b) The Lending Service Provider (c) The Regulated Entity (d) A third-party payment aggregator
Answer: (c) — Only a Regulated Entity (bank/NBFC/co-operative bank) can lend and hold the loan asset; LSPs merely service the process.
Q2. The Key Fact Statement (KFS) issued before digital loan disbursal must primarily disclose: (a) The lender's office address (b) The Annual Percentage Rate and all-in cost (c) The borrower's credit score alone (d) The app's privacy policy only
Answer: (b) — KFS discloses the APR and complete cost breakup so borrowers can compare the true cost of the loan.
Q3. Loan disbursal in digital lending must flow: (a) Through the LSP's pooling account (b) Through the DLA's escrow wallet (c) Directly between the RE and the borrower's bank account (d) Through a third-party payment gateway account
Answer: (c) — Pass-through accounts held by LSPs/DLAs are prohibited; funds must move directly between the RE and the borrower.
Q4. As per RBI's FLDG framework, a First Loss Default Guarantee between an RE and an eligible LSP cannot exceed: (a) 1% of the loan portfolio (b) 5% of the loan portfolio (c) 10% of the loan portfolio (d) There is no cap
Answer: (b) — FLDG cover is capped at 5% of the outstanding loan portfolio the arrangement covers.
Q5. Which body is recognised by RBI as a Self-Regulatory Organisation overseeing digital lending conduct? (a) NPCI (b) FACE (Fintech Association for Consumer Empowerment) (c) IBBI (d) SEBI
Answer: (b) — FACE operates as the RBI-recognised SRO for the digital lending sector, enforcing a member code of conduct.
Want chapter-wise mock tests with 100+ MCQs? Start practising free →
❓ Digital Lending FAQs
Is every lending app in India automatically an RBI-Regulated Entity?
No. Many apps are Digital Lending Apps operated by a Lending Service Provider on behalf of a bank or NBFC; only the underlying RE is directly regulated and accountable for the loan.
What happens if a borrower exits during the cooling-off period?
The borrower can repay the principal plus the proportionate APR for the days the loan was outstanding, without incurring any pre-payment penalty.
Can a digital lender increase my credit limit without asking?
No. RBI guidelines require explicit borrower consent for any increase in a sanctioned credit limit; it cannot be an automatic, silent adjustment by the app.
Why does FLDG matter for exam purposes?
FLDG defines how much default risk an LSP or partner can contractually absorb, capped at 5% of the covered portfolio — a frequently tested numeric limit in Digital Banking papers.
Digital lending is where regulation, technology and exam scoring intersect most tightly in the Digital Banking paper — get the RE/LSP/DLA map and the KFS/FLDG numbers locked in, and most questions on this topic become straightforward recall. Browse more Digital Banking articles for exam-ready guides on every RBI framework, reinforce it with full-length chapter-wise mock tests, or continue your prep through the CAIIB course for the complete Digital Banking elective coverage.
Quick quiz on this topic
5 exam-style questions from our free test bank — check yourself before you move on.
Practice this topic
Take a free mock test, download chapter PDFs, or watch a video class — all included on iibf.store.