NBFC Registration, Annual Compliance & Takeover Advisory

RBI applies the 50-50 Principal Business Criteria: if your financial assets (loans, investments in securities, and similar) constitute more than 50% of your total assets, and your income from financial assets constitutes more than 50% of your gross income, your company's principal business is treated as financial activity, and it must register as an NBFC under Section 45-IA of the RBI Act before commencing that business. Both limbs of the test must be met together.

The applicable minimum is expressed as Net Owned Fund (NOF) — paid-up equity capital plus free reserves, minus accumulated losses and certain deductions, further reduced by specified investments in group/subsidiary companies. The minimum NOF varies by NBFC category under RBI's current Scale-Based Regulation framework — a general NBFC-Investment and Credit Company category requires a materially higher NOF than the historical minimum, and category-specific NBFCs (MFI, HFC, CIC, and others) each carry their own prescribed floor. The exact current figure for your intended category should be confirmed against RBI's currently applicable Master Direction at the time of application, since these thresholds have been revised over time.

There is no statutory processing deadline that RBI commits to for NBFC registration, unlike some other licensing regimes. In practice, a well-prepared, complete application with a clear promoter background and a coherent business plan typically takes roughly 6-12 months from submission to Certificate of Registration. Incomplete applications, unclear source-of-funds documentation, or promoters with adverse credit history routinely extend this well beyond a year, and RBI can reject an application outright rather than simply delaying it.

Yes. Many NBFC applicants are freshly incorporated companies set up specifically to house the NBFC business. RBI does not require an operating track record from the applicant company itself — what it scrutinises closely is the promoters' financial soundness, integrity, and relevant experience, and the genuineness of the capital being infused as Net Owned Fund. A new company with strong, well-documented promoters and a clear, credible business plan can and does receive registration.

A deposit-taking NBFC (NBFC-D) is permitted, subject to RBI's specific and stringent conditions, to accept public deposits — and carries correspondingly higher Net Owned Fund, credit-rating, and prudential requirements, along with more intensive ongoing supervision. A non-deposit-taking NBFC (NBFC-ND) funds its lending or investment activity through equity, borrowings from banks and financial institutions, and market instruments like NCDs — not public deposits. RBI has granted very few new deposit-taking NBFC licences in recent years; the realistic path for virtually all new applicants is the non-deposit-taking category.

Scale-Based Regulation, effective from 1 October 2022, organises NBFCs into four layers of increasing regulatory intensity: Base Layer (smaller non-deposit-taking NBFCs and those with specified limited activities), Middle Layer (all deposit-taking NBFCs regardless of size, and larger non-deposit-taking NBFCs above a prescribed asset threshold), Upper Layer (the top NBFCs RBI identifies through a defined scoring methodology, subjected to enhanced governance and prudential requirements), and Top Layer (currently kept empty by RBI design). Most new applicants start in the Base Layer and may move to the Middle Layer as their asset base grows past the prescribed threshold.

RBI expects the Board to include at least one director with relevant financial-sector experience, and evaluates this as part of the overall governance readiness assessment during the application. It is not always an absolute statutory bar on registration if entirely absent, but its absence materially weakens the application and is a common reason for extended RBI queries. We strongly recommend having this in place, in substance, before filing.

Yes. Foreign Direct Investment into NBFC activities is generally permitted up to 100% under the automatic route for most NBFC activities, subject to compliance with RBI's FEMA (Non-Debt Instruments) Rules and the specific conditions attached to NBFC-sector FDI (including minimum capitalisation norms that have applied to certain categories historically, and the current conditions in force). Foreign or NRI promoter shareholding brings the additional layer of FEMA compliance — FC-GPR filing, sectoral condition verification, and pricing-guideline compliance — on top of the standard NBFC application requirements.

RBI communicates the specific grounds for rejection — commonly inadequate Net Owned Fund, unsatisfactory promoter background or Fit and Proper assessment, an unclear or unconvincing business plan, or unresolved queries from an earlier round. A rejected applicant does not have an automatic right to refile on identical facts; a fresh application, if pursued, must substantively address the grounds for rejection, which often means restructuring the promoter group, strengthening governance, or revising the business plan.

RBI's Fit and Proper criteria assess the integrity, track record, and financial soundness of directors and, for certain thresholds, significant shareholders of an NBFC — covering matters such as history of default, conviction of any offence involving moral turpitude, adverse findings by any regulator, and financial solvency. NBFCs above a certain size are required to have a board-approved Fit and Proper Policy and to obtain annual declarations and undertakings from directors confirming continued compliance.

NBFCs file periodic prudential and structural returns through RBI's reporting infrastructure (historically the COSMOS portal, increasingly integrated into RBI's CIMS — Centralised Information Management System) — covering capital adequacy, asset-liability profile, exposure norms, and other prudential parameters, with the specific return set and frequency depending on the NBFC's category and Scale-Based Regulation layer. Deposit-taking NBFCs and larger non-deposit-taking NBFCs generally face a more extensive return-filing calendar than smaller Base Layer entities.

Income Recognition and Asset Classification (IRAC) norms require an NBFC to classify every loan asset as Standard, Sub-Standard, Doubtful, or Loss based on defined overdue criteria, and to make prescribed provisioning against each classification. This directly affects reported profitability, capital adequacy computation, and the NBFC's ability to recognise interest income on stressed assets. RBI's supervisory inspections examine asset classification and provisioning as a core area, since misclassification directly overstates both profitability and capital strength.

Yes. Every NBFC must maintain a minimum CRAR as prescribed under the applicable Master Direction for its category — this is a core prudential requirement, monitored on an ongoing basis and reported through periodic RBI returns. Falling below the prescribed CRAR is a serious supervisory concern that can trigger corrective action, restrictions on further lending, or additional capital-raising requirements.

No, not if the activity crosses the 50-50 Principal Business Criteria threshold. If financial activity becomes your principal business by that test, you must obtain a Certificate of Registration before continuing that business — there is no 'partial' or 'incidental' registration exemption once the threshold is crossed. Companies with financial activity that stays genuinely below the threshold do not need NBFC registration, but should monitor the ratio as the business evolves, since crossing the threshold triggers the registration obligation.

Under Section 45-IA of the RBI Act, prior written RBI permission is mandatory before any takeover or acquisition of control of an NBFC, or any change in shareholding (direct or indirect) of 26% or more of paid-up equity, or a change in management resulting in a change of more than 30% of directors (excluding independent directors). The application must be filed with RBI well ahead of the intended transaction date, accompanied by a public notice in newspapers inviting objections, and the incoming promoter's background is scrutinised to the same Fit and Proper standard as a fresh licence application.

Effecting a change in control without the mandatory prior RBI permission is a direct contravention of Section 45-IA. RBI can treat the change as regulatorily void, can direct the parties to reverse the transaction, and can take supervisory or penal action against the NBFC and its officers — independent of whether the transaction is otherwise valid as a matter of company law or contract. This is one of the areas where RBI's scrutiny is strictest and least forgiving of after-the-fact regularisation.

RBI has, at specific points, invited NBFCs meeting stringent eligibility criteria to apply for a Small Finance Bank or Universal Bank licence under separate 'on tap' licensing guidelines — this is a distinct, considerably more demanding licensing process, not an automatic conversion right, and RBI evaluates each application afresh against its own criteria current at that time. A bank cannot simply 'convert' to an NBFC either — surrendering a banking licence and any transition to an NBFC structure would itself require a structured RBI-approved process.

A Core Investment Company (CIC) is an NBFC whose principal business is investment in shares, securities, and lending to companies within its own group, subject to specific asset-composition and exposure conditions under RBI's CIC Master Direction. CICs typically function as the holding-company layer of a larger corporate group structure and are regulated with attention to group-level systemic risk rather than as an operating lender to the public.

An NBFC-P2P is a company registered to operate an online platform that brings individual lenders and borrowers together, facilitating the loan agreement between them — the platform itself does not lend from its own balance sheet and is prohibited from holding or dealing in the funds transferred between lenders and borrowers, which must move through a designated escrow arrangement maintained by a bank. RBI's Master Direction on NBFC-P2P Lending Platforms prescribes lender and borrower exposure caps, mandatory disclosures, and specific data and IT-security requirements.

An NBFC-Account Aggregator (NBFC-AA) does not lend or invest at all — it operates a consent-based technology framework that retrieves and shares a customer's financial information (bank accounts, investments, insurance, tax data, and similar) between regulated financial institutions, with the customer's explicit consent, to support faster and better-informed lending, investment, or advisory decisions elsewhere in the financial system. It is registered as an NBFC because of RBI's regulatory framework choice, not because it carries financial assets on its own balance sheet.

A Housing Finance Company (HFC) is an NBFC whose principal business is providing finance for housing, whether to individuals or for construction/development activity, subject to a prescribed minimum proportion of the asset book being qualifying housing finance. Regulatory and supervisory authority over HFCs was transferred from the National Housing Bank (NHB) to the RBI with effect from August 2019, and HFCs are now governed under RBI's Scale-Based Regulation framework alongside other NBFC categories, subject to HFC-specific conditions that remain distinct.

An NBFC-MFI is a non-deposit-taking NBFC with at least a prescribed minimum proportion of its net assets in the form of qualifying collateral-free loans to low-income borrowers meeting specified income and loan-size criteria. RBI's microfinance regulatory framework prescribes a pricing methodology — including a margin cap over the NBFC-MFI's cost of funds and an overall interest-rate ceiling — designed to protect vulnerable borrowers from excessive lending rates, and this pricing discipline is monitored closely as part of ongoing supervision.

Yes. Every NBFC must implement a board-approved KYC policy aligned with RBI's KYC Master Directions and comply with the Prevention of Money Laundering Act, 2002 framework — customer identification, risk categorisation, ongoing due diligence, and Suspicious Transaction Reporting to the Financial Intelligence Unit-India where applicable. This applies from the first customer onboarded, not as a later-stage addition once the NBFC scales.

The Fair Practices Code is a board-approved policy governing how the NBFC deals with borrowers — loan application processing timelines, disclosure of all terms and charges before disbursement, interest-rate policy and the methodology behind it, treatment of loans in default, and a defined grievance-redressal mechanism with an escalation path. RBI requires this to be board-approved and operational before registration because borrower-protection is a core supervisory concern from Day 1 of lending, not a later addition.

RBI's Department of Supervision conducts periodic inspections (and can conduct risk-triggered inspections outside the routine cycle) examining the NBFC's books, asset classification and provisioning accuracy, compliance with prudential norms, governance and Board functioning, KYC/AML implementation, and adherence to the Fair Practices Code. Findings are communicated to the NBFC with a rectification timeline; unresolved or repeated adverse findings can escalate to formal corrective action, business restrictions, monetary penalties, or, in serious cases, licence cancellation proceedings under Section 45-IA(6).

Yes. RBI can cancel a Certificate of Registration under Section 45-IA(6) on grounds including the NBFC ceasing to carry on the business for which it was registered, failure to comply with any condition attached to the CoR, failure to maintain the prescribed Net Owned Fund, failure to comply with directions or requirements of the Act, or the NBFC's affairs being conducted in a manner detrimental to the interest of depositors or the public. RBI typically issues show-cause notices and an opportunity to be heard before final cancellation, except in cases requiring urgent action.

RBI does not levy a significant government application fee for NBFC registration itself, but the real cost lies in the Net Owned Fund capital that must genuinely be infused (which is a capital requirement, not a fee), the cost of statutory audit certification, valuation/CA certifications required in the document set, and professional advisory fees for structuring, drafting, and managing the RBI application process. PNPC discusses and confirms a written scope and fee for the advisory and application-management engagement before work begins — separate from the capital the promoters must bring in as NOF.

Ongoing annual compliance for a registered NBFC is materially more involved than for a standard private limited company — it includes the standard Companies Act compliance (MCA filings, statutory audit, ITR), plus the NBFC-specific layer: periodic RBI returns, the auditor's NBFC-specific certification, quarterly asset-classification and CRAR monitoring, Fair Practices Code and KYC/AML policy adherence, and Board-level review of risk and compliance reports. The exact cost depends heavily on the NBFC's asset size, Scale-Based Regulation layer, and transaction volume — a small Base Layer NBFC's compliance load is considerably lighter than a Middle Layer HFC's.

NBFC registration is fundamentally different from company incorporation or a standard business licence — it is a discretionary financial-sector licence where RBI evaluates promoter integrity, capital genuineness, business viability, and governance readiness as a matter of judgement, not a checklist. A generic registration service that treats it as another form-filing exercise routinely produces applications with templated policies and thin business plans that trigger extended RBI query cycles or outright rejection. PNPC has advised on RBI regulatory matters and financial-sector compliance since 1986 — we assess suitability before we draft a single document, and we stay engaged through the full life of the NBFC, not just until the Certificate of Registration is issued.

Pre-application suitability and category assessment. Promoter background and Fit and Proper readiness review. Net Owned Fund planning and source-of-funds documentation. Business plan drafting specific to your model. Full board-approved policy framework — Fair Practices Code, KYC/AML, Credit, Risk Management, IT Security, and Fit and Proper policies. Application compilation and submission to the correct RBI Regional Office. Management of the full RBI query-response cycle through to Certificate of Registration. Post-registration compliance calendar setup — RBI returns, quarterly asset-classification and CRAR review, annual audit coordination with NBFC-specific certification. Ongoing advisory for Scale-Based Regulation layer transitions and takeover/change-in-control approvals.

Yes, through PNPC's Dubai office. UAE financial-services licensing sits under a different regulatory framework entirely — the UAE Central Bank for conventional finance-company activity, or a Free Zone financial regulator such as the DIFC's DFSA or ADGM's FSRA for entities structured within those free zones — and does not map directly onto India's RBI NBFC framework. For groups with India-UAE lending, trade-finance, or investment operations, we coordinate the India NBFC advisory and the UAE entity/licensing conversation as a single engagement, so the group structure, related-party lending, and cross-border compliance are considered together rather than in two disconnected silos.

Yes. A change in the registered NBFC category is treated by RBI as a material change requiring prior approval, since each category carries distinct Net Owned Fund, business-model, and prudential conditions. The NBFC must apply to RBI demonstrating it meets the eligibility criteria for the new category, and RBI evaluates the application with the same rigour applied to the underlying category-specific Master Direction, rather than treating it as an administrative update to an existing licence.

The 26% threshold (of paid-up equity capital, whether acquired directly or indirectly, including through a series of linked transactions) is the trigger point at which RBI's Section 45-IA prior-approval requirement for change in control applies. Share transfers below this threshold, and not otherwise resulting in a change of control or a change of more than 30% of directors, generally do not require the same prior RBI approval, though the NBFC should still evaluate whether the transaction has any other regulatory trigger (such as FEMA reporting for a non-resident transferee) and maintain appropriate internal governance documentation regardless of size.

Yes. Many NBFCs today operate as digital-first lenders, originating and servicing loans entirely through mobile apps and online platforms. This does not change the core NBFC registration requirements, but does bring the NBFC squarely under RBI's Digital Lending Guidelines — covering direct disbursement to the borrower's bank account (not routed through a loan-service-provider or lending-app intermediary's account), mandatory Key Fact Statement disclosure, a cooling-off/look-up period, and specific restrictions on data collection and recovery practices by any outsourced digital lending app or loan service provider engaged by the NBFC.