NBFC Scale-Based Regulation (SBR): Layers and Classification Guide

The NBFC scale-based regulation (SBR) framework. Introduced by the Reserve Bank of India in October 2021 and effective from October 2022, fundamentally reshaped how Non-Banking Financial Companies are supervised in India. Instead of a one-size-fits-all rulebook, the RBI now applies regulation in proportion to the size, activity and perceived systemic risk of each entity. For anyone preparing for IIBF certifications. Mastering NBFC scale-based regulation is essential because it touches capital adequacy, asset classification, governance and exposure norms all at once.

This article breaks down the four-layer SBR pyramid. The classification logic, and the prudential norms that flow from it, with the evergreen detail you need for both the exam hall and the branch.

Why the RBI moved to scale-based regulation

NBFCs have grown into a critical pillar of credit delivery in India, channelling funds to MSMEs, vehicle buyers, gold-loan borrowers and the underserved. As their balance sheets swelled and their interconnectedness with banks and markets deepened. The failure of a large NBFC could transmit shocks across the financial system. The earlier category-based approach treated a tiny asset-finance company and a giant systemically important NBFC under broadly similar lenses, which no longer matched reality.

The NBFC scale-based regulation approach answers this by grading regulatory intensity to risk. Larger and more interconnected entities face bank-like discipline, while smaller players retain lighter-touch compliance. This proportionality is the core idea the examiner wants you to articulate: regulation should rise with systemic footprint. The framework also harmonises several earlier classifications (deposit-taking, non-deposit-taking, systemically important) into a cleaner, layer-based architecture that supervisors and candidates alike can navigate. You can track the latest circulars on the IIBF news and updates page.

The four layers of the SBR pyramid

The SBR framework arranges NBFCs into four layers, visualised as a pyramid where regulatory stringency increases as you move up:

• Base Layer (NBFC-BL): Non-deposit-taking NBFCs with asset size below the threshold (₹1,000 crore) and certain low-risk categories such as Peer-to-Peer lending platforms, Account Aggregators and NBFC-Type II companies that do not access public funds. Lightest regulation.
• Middle Layer (NBFC-ML): All deposit-taking NBFCs (irrespective of size) and non-deposit-taking NBFCs above the asset threshold, plus specified categories like Standalone Primary Dealers, Infrastructure Finance Companies, Core Investment Companies and Housing Finance Companies.
• Upper Layer (NBFC-UL): NBFCs specifically identified by the RBI as warranting enhanced regulation based on a scoring methodology (size, interconnectedness, complexity and supervisory inputs). The RBI publishes a list of the top entities annually.
• Top Layer (NBFC-TL): Ordinarily empty. It is populated only if the RBI judges that an Upper Layer NBFC poses an extreme, unsustainable increase in systemic risk, attracting the highest supervisory rigour.

How NBFCs are classified into layers

Classification under NBFC scale-based regulation rests on a few decisive criteria. Asset size is the first filter: an NBFC with total assets of ₹1,000 crore or more generally falls into the Middle Layer or above. While smaller entities sit in the Base Layer. Deposit acceptance is the second: any NBFC permitted to take public deposits is placed at least in the Middle Layer. Reflecting the heightened need to protect depositors.

Activity type forms a third axis. Certain businesses are slotted by their nature regardless of size. For example Infrastructure Finance Companies and Core Investment Companies in the Middle Layer, and inherently low-risk constructs like Account Aggregators in the Base Layer.

For the Upper Layer, the RBI applies a quantitative scoring model combining size, leverage, interconnectedness and complexity, then exercises supervisory judgement to finalise the list. Once an NBFC enters the Upper Layer. It must remain under enhanced regulation for at least five years even if its score later dips, preventing regulatory arbitrage.

Prudential norms across the layers

Regulatory obligations escalate as you climb the pyramid. In the Base Layer, the NPA classification norm has been progressively tightened to the 90-day overdue standard, aligning with banks. Net Owned Fund requirements and a simplified governance regime apply, but there is no mandatory listing or differential capital buffer.

The Middle Layer introduces stricter exposure limits, a board-approved policy on internal capital adequacy, and limits on lending to directors and group entities. The Upper Layer attracts the most bank-like discipline: a mandatory Common Equity Tier 1 (CET1) ratio of 9%, a differential standard asset provisioning regime, a ceiling on the Internal Capital Adequacy Assessment Process, compulsory listing within three years of identification, and the appointment of a Chief Compliance Officer and Chief Risk Officer. Large exposure norms and a leverage discipline also bind UL entities. Understanding how capital, provisioning and governance scale up is exactly the kind of integrated knowledge IIBF rewards. Sharpen it with the CAIIB course and reinforce with regular mock tests. The definitive source remains the RBI's master directions on rbi.org.in.

Governance, disclosure and compliance takeaways

Beyond capital, SBR overhauled governance expectations. Upper and Middle Layer NBFCs must constitute board committees, adopt a fit-and-proper policy for directors, cap the tenure of independent directors, and disclose granular information on related-party transactions, breaches of covenant and divergence in asset classification. A formal compliance function and risk management framework are no longer optional for larger entities. For exam purposes, remember that disclosure obligations and key managerial appointments are calibrated to the layer. Practice these distinctions actively rather than passively reading them; the match-the-concept game is a quick way to lock in which norm sits in which layer, and the iibf.store blog carries deeper explainers on each prudential rule.

Conclusion

The NBFC scale-based regulation framework is now the backbone of NBFC supervision in India, replacing a flat rulebook with a risk-proportionate, four-layer pyramid. If you can explain the layers, the classification triggers and the escalating prudential norms, you have covered the heart of what IIBF examiners ask. A handy revision anchor is to remember that everything in SBR flows from one question: how much systemic risk does this NBFC carry? Once you can answer that, the layer, the capital and the governance obligations follow logically. Put that knowledge to the test today with the full bank of practice questions at iibf.store/tests and walk into your exam with confidence.