NBFC Concentration and Exposure Norms Under Scale Based Regulation

Every NBFC-ML and NBFC-UL candidate in the CAIIB NBFC elective must be able to answer one question cold: how much can a single borrower or a single group of borrowers draw from one NBFC? The NBFC concentration and exposure norms under the Reserve Bank of India's Scale Based Regulation (SBR) framework answer exactly that, and examiners love this topic because it mixes numbers with layers. This article walks through the ceilings, how they shift across the base, middle and upper layers, the large exposure framework for upper-layer NBFCs, sensitive-sector sub-limits, the IPO-financing cap, group exposure, and what happens when an NBFC breaches a ceiling.

📊 Concentration Norms Across the Base, Middle and Upper Layers

The SBR framework, effective from October 2022, classifies every NBFC into a Base Layer (NBFC-BL), Middle Layer (NBFC-ML), Upper Layer (NBFC-UL) and a currently-empty Top Layer. Concentration of credit and investment norms do not apply uniformly across these layers, and that differential treatment is the examiner's favourite trap.

NBFC-BL entities are exempt from the regulatory concentration ceilings altogether, but the SBR framework still expects every base-layer NBFC to have a board-approved policy on exposure concentration — supervisory light-touch does not mean no governance. For NBFC-ML and NBFC-UL, the pre-existing concentration of credit and investment norms that applied earlier to systemically important NBFCs continue in force, with one structural change: the ceilings are now reckoned against Tier 1 capital instead of the older "owned fund" base. Tier 1 capital is a tighter, cleaner number than owned fund because it excludes revaluation reserves and other soft components, which effectively made exposure limits marginally more conservative for many NBFCs when the switch happened.

If you are still mapping which entities sit in which layer, revisit the NBFC types and roles chapter before attempting exposure-ceiling questions — the layer an NBFC sits in decides which rulebook applies to it.

🏦 Single Borrower and Group Ceilings Explained

For NBFC-ML and NBFC-UL, the concentration of credit/investment norms split lending and investment separately, then cap the combined exposure. On the lending side, exposure to a single borrower is capped at 15% of Tier 1 capital, and exposure to a single group of borrowers is capped at 25% of Tier 1 capital. On the investment side, the same 15%/25% structure applies to a single company and a single group of companies respectively. Where an NBFC both lends to and invests in the same counterparty, the combined lending-plus-investment exposure is capped at 25% of Tier 1 capital for a single party and 40% of Tier 1 capital for a single group.

These ceilings are prudential guardrails against the concentration risk that has triggered NBFC stress episodes in the past. An NBFC's board and risk committee must monitor exposure build-up against these limits continuously, not wait for an audit finding.

💡 Exam Tip: Remember the pattern as 15-25 for lending alone or investment alone, and 25-40 when lending and investment to the same counterparty are combined — all as a percentage of Tier 1 capital for NBFC-ML and NBFC-UL.

For the compliance mechanics behind monitoring these ceilings, the regulatory requirements and compliance chapter is directly relevant and worth a repeat read before your exam.

⚖️ Large Exposures Framework for Upper Layer NBFCs

NBFC-UL entities carry an extra layer of discipline that NBFC-ML does not: the Large Exposures Framework (LEF), modelled on the framework already applicable to commercial banks. The SBR circular extends this bank-style large exposure discipline to upper-layer NBFCs precisely because these entities are systemically significant enough that a single-counterparty shock could ripple through the financial system.

Under LEF, an NBFC-UL must track its exposure to a single counterparty and to a group of connected counterparties against ceilings expressed as a percentage of Tier 1 capital, tighter than the older concentration norms in spirit even where the headline numbers look similar. "Connected counterparties" is a wider net than "group of borrowers" — it pulls in entities linked by common control, economic interdependence, or a relationship where the financial distress of one is likely to cause distress in the other, so an NBFC-UL cannot simply rely on corporate group structures to determine what counts as connected.

Candidates preparing this section should also revisit recent RBI initiatives for NBFCs, since LEF for NBFC-UL was one of the headline supervisory tightenings introduced alongside SBR. The Reserve Bank's own framework document remains the authoritative source for the exact large-exposure percentages in force for a given reporting date — always cross-check the current RBI Master Directions before quoting a number in a professional setting.

🏗️ Capital Market and Real Estate Sub-Limits

Beyond the general concentration ceilings, RBI treats capital market exposure and commercial real estate exposure as sensitive-sector categories that deserve their own internal discipline. Every NBFC above the base layer is expected to fix board-approved sub-limits for aggregate exposure to the capital market and to commercial real estate as a proportion of its total exposure or capital funds, and to review these sub-limits periodically rather than treating them as a one-time policy exercise.

Within capital market exposure, lending against shares carries its own long-standing guardrail: NBFCs financing the purchase of shares must maintain a minimum margin, commonly applied as a 50% loan-to-value ceiling, so that the borrower always retains meaningful skin in the game. IPO financing is even tighter — an NBFC cannot extend more than a fixed rupee ceiling, capped at ₹1 crore per borrower, for subscribing to an initial public offer, a rule aimed squarely at curbing speculative, leveraged IPO applications. Read the dedicated piece on NBFC lending against shares for the full LTV and margin mechanics.

⚠️ Common Mistake: Candidates often assume the capital market sub-limit is an RBI-fixed percentage. It is a board-approved internal ceiling set within the NBFC's own risk appetite, not a single number prescribed uniformly for every NBFC.

Commercial real estate exposure works the same way — the NBFC's board fixes the sub-limit, and internal audit tests actual exposure against it every reporting cycle.

🔗 Group Exposure, Connected Companies and Breach Reporting

Exposure to group and connected companies deserves special scrutiny because related-party lending is where concentration risk most often hides in plain sight. An NBFC's exposure to its own promoter group, subsidiaries and associates is captured within the same single-group ceilings discussed above, and large-exposure reporting for NBFC-UL specifically requires disclosure of exposures to connected counterparties, not just to unrelated large borrowers.

Where a group exposure is partly secured by a bank guarantee or counter-guarantee between group entities, the underlying guarantee obligation is governed by the general law on contract of indemnity and guarantee for bankers, which candidates preparing both the NBFC elective and BRBL should keep linked in their revision notes.

On monitoring and reporting: NBFCs are required to report exposures against these ceilings to the Reserve Bank through periodic returns, and the board or risk management committee must review exposure levels regularly rather than only when a limit is breached. If an NBFC does breach a concentration or large-exposure ceiling, it must report the breach to the RBI along with the reasons and the timeline for restoring compliance; persistent or unremedied breaches invite supervisory action ranging from directions and restrictions on fresh business to, in serious cases, action under the PCA-style supervisory framework applicable to the NBFC's layer. For a refresher on how NBFCs structure customer and account-level exposure data feeding into these returns, see the customer relationship chapter.

📌 Remember: A breach is not just a number problem — it triggers a reporting obligation to RBI and a board-level corrective action plan, and repeated breaches can escalate into formal supervisory restrictions.

Conclusion: Master the Layered Exposure Rulebook

Concentration and exposure norms are one of the most number-dense parts of the NBFC syllabus, but the logic is consistent once you anchor it: NBFC-BL is policy-driven and exemption-based, NBFC-ML and NBFC-UL both follow the 15/25/25/40 Tier 1 capital ceilings, and NBFC-UL alone carries the additional Large Exposures Framework plus tighter supervisory reporting. Layer this with the sensitive-sector sub-limits, the IPO financing cap, and the group-exposure and breach-reporting rules, and you have the full picture examiners test. Related concepts such as core investment companies in India and NBFC Investment and Credit Company classifications also affect how exposure norms apply, so keep them in your revision loop. Browse more coverage on the NBFC tag hub, then lock in the numbers with practice questions on iibf.store/tests.

🧠 Practice MCQs: NBFC Concentration and Exposure Norms

Want chapter-wise mock tests with 100+ MCQs? Start practising free →