Non-Banking Financial Companies (NBFCs) play a critical role in India's financial ecosystem, providing credit and financial services to underserved segments of the economy. With the Reserve Bank of India (RBI) continuously enhancing the regulatory framework for NBFCs, compliance has become increasingly complex. This comprehensive guide covers all essential NBFC compliance requirements, including registration, governance, annual returns, and regulatory reporting.
The regulatory landscape for NBFCs has undergone significant transformation in recent years, particularly following the IL&FS crisis in 2018 and the subsequent regulatory tightening by the RBI. The introduction of the scale-based regulation framework, enhanced capital requirements, and stricter governance norms reflect the RBI's commitment to maintaining financial stability while fostering responsible lending practices. For NBFC operators, staying abreast of these regulatory developments is not merely a compliance exercise but essential for business sustainability and growth.
Understanding NBFC Regulation in India
NBFCs are defined under Section 45-I(f) of the Reserve Bank of India Act, 1934 as any company engaged in the business of receiving deposits or making loans and advances, or acquiring securities, hire-purchase, leasing, insurance, or chit fund business. The key distinction between an NBFC and a bank is that NBFCs cannot accept demand deposits and do not form part of the payment and settlement system.
The RBI regulates NBFCs through various directions, circulars, and master directions issued under the RBI Act, 1934 and the Companies Act, 2013. The primary regulations include the Non-Banking Financial Company (Reserve Bank) Directions, 2006, the Companies (Acceptance of Deposits) Rules, 2014, and various master directions on prudential norms, fair practices, and governance.
The RBI introduced the scale-based regulation (SBR) framework for NBFCs in October 2022, which classifies NBFCs into four layers: Base Layer, Middle Layer, Upper Layer, and Top Layer. Each layer has progressively stringent regulatory requirements, with the Top Layer having requirements comparable to banks. The classification is based on a combination of size, activity, interconnectedness, and complex financial transactions.
Types of NBFCs and Their Regulatory Classification
NBFCs are classified into various categories based on their liability structure, activity, and regulatory treatment. Understanding the classification is essential for determining applicable compliance requirements and capital adequacy norms.
NBFCs Accepting Public Deposits (NBFC-D):
- Asset Finance Company (AFC): Finances physical assets such as automobiles, machinery, and equipment
- Loan Company (LC): Provides finance by making loans or advances
- Investment Company (IC): Acquires securities as its principal business
- Infrastructure Finance Company (IFC): Minimum NOF of Rs 300 crore, 75% in infrastructure loans
NBFCs Not Accepting Public Deposits (NBFC-ND):
- NBFC-ND-SI (Systemically Important): Asset size above Rs 500 crore, subject to enhanced prudential norms
- NBFC-ND Non-Systemically Important: Asset size below Rs 500 crore
- NBFC-MFI (Micro Finance Institution): Minimum 85% of net assets in microfinance activities
- Factor Company: Engaged in factoring business
- NBFC-IDI (Infrastructure Debt Fund): Facilitates long-term debt for infrastructure projects
- Housing Finance Company (HFC): Now regulated by RBI after transfer from NHB
NBFC Registration Process
Any company intending to carry on the business of a non-banking financial institution must obtain a Certificate of Registration (CoR) from the RBI under Section 45-IA of the RBI Act, 1934. Operating without a valid CoR is a criminal offense and can result in severe penalties including imprisonment.
The registration process begins with the incorporation of a company under the Companies Act, 2013 with a minimum net owned fund as prescribed by the RBI. The application is filed online on the RBI's COSMOS portal, along with supporting documents including the memorandum and articles of association, board resolution authorizing the application, details of directors and their fit and proper certificates, net owned fund certificate from a chartered accountant, and the business plan of the NBFC.
The RBI scrutinizes the application and may seek additional information or clarification. The fit and proper criteria for directors include background verification, educational qualifications, experience in the financial sector, and absence of criminal convictions or regulatory actions. Upon satisfactory review, the RBI issues the CoR specifying the type of NBFC, the conditions attached to the registration, and the prudential norms applicable. The entire process typically takes 3-6 months from the date of application.
Capital Adequacy Requirements
NBFCs are required to maintain minimum capital adequacy ratios as prescribed by the RBI. The capital adequacy is measured by the Capital to Risk-weighted Assets Ratio (CRAR), which is the ratio of a company's capital to its risk-weighted assets. The CRAR framework for NBFCs is designed to ensure that they maintain sufficient capital to absorb potential losses from their lending and investment activities.
Capital Requirements by NBFC Category:
- Minimum Net Owned Fund (NOF): Rs 2 crore for most NBFCs
- Minimum NOF for NBFC-MFI: Rs 5 crore (Rs 2 crore for North-Eastern region)
- Minimum NOF for IFC: Rs 300 crore
- Minimum CRAR for NBFC-ND-SI: 15% (with Tier I minimum of 10%)
- Minimum CRAR for other NBFCs: 12%
- Minimum CRAR for IFC: 15%
The CRAR must be maintained on an ongoing basis and reported to the RBI on a quarterly basis. The components of CRAR include Tier I capital (equity capital and disclosed free reserves) and Tier II capital (subordinated debt, revaluation reserves, and other qualifying instruments). NBFCs that fail to maintain the minimum CRAR are required to submit a corrective action plan to the RBI and may face restrictions on business operations.
Governance and Board Composition Norms
The RBI has prescribed detailed governance norms for NBFCs under the Non-Banking Financial Company (Reserve Bank) Directions, 2006, and subsequent circulars. These norms cover board composition, fit and proper criteria for directors, appointment of key managerial personnel, and risk management frameworks.
The board of directors of an NBFC must have a minimum of three directors. At least one director must have special knowledge or experience in accounting, finance, or banking. For NBFCs in the Middle Layer and above under the SBR framework, at least one-third of the board must consist of independent directors, and at least one woman director must be on the board.
The board must constitute the following committees: an Audit Committee (with at least three directors, majority being independent), a Nomination and Remuneration Committee, and a Risk Management Committee. For NBFCs in the Upper Layer, a Technology Committee and a Stakeholders Relationship Committee are also mandatory.
All directors must meet the fit and proper criteria prescribed by the RBI, which includes background checks, educational qualifications, experience in the financial sector, absence of criminal convictions, and no regulatory actions by financial regulators. The company must submit a certificate of compliance with fit and proper criteria to the RBI annually.
Annual Returns and Regulatory Filings
NBFCs are required to file several annual returns with the RBI within prescribed timelines. These filings provide the RBI with information about the financial health, compliance status, and operational details of the NBFC. Timely filing of these returns is mandatory, and delays attract penalties from the RBI.
Key Annual Returns and Filing Deadlines:
- NBS-7: Annual return on financial position of NBFCs-ND, due within 30 days from the date of annual general meeting
- NBS-8: Annual return on prudential norms for NBFCs-D, due within 30 days from the date of annual general meeting
- NBS-9: Annual return on prudential norms for NBFCs-ND, due within 30 days from the date of annual general meeting
- ALM-1: Statement of Asset Liability Management, due on the 10th of every month (for NBFCs with asset size Rs 100 crore and above)
- ALM-2: Statement of Structural Liquidity, due on the 10th of every month
- ALM-3: Statement of Interest Rate Sensitivity, due on the 10th of every month
- CRAR Return: Quarterly return on Capital to Risk-weighted Assets Ratio, due within 15 days from the end of each quarter
- Annual Return on deposits: Due within 30 days from the close of the financial year (for NBFCs-D)
Regulatory Reporting Requirements
Beyond annual returns, NBFCs must comply with various periodic reporting requirements to the RBI. These include monthly returns on exposure to sensitive sectors, quarterly returns on prudential norms, half-yearly returns on financial inclusion activities, and annual returns on foreign exchange exposure. The reporting frequency varies based on the size and category of the NBFC.
NBFCs must also report major incidents to the RBI within 24 hours, including fraud cases exceeding Rs 1 lakh, significant adverse changes in asset quality, significant changes in shareholding or management, and any event that may affect the NBFC's ability to meet its obligations to depositors or creditors. This incident reporting framework ensures that the RBI can take timely corrective action when necessary.
The RBI also requires NBFCs to submit quarterly returns on details of top 10 borrowers, top 10 deposits holders (for NBFCs-D), and details of assets classified as non-performing. These granular reporting requirements enable the RBI to assess concentration risk and asset quality trends across the NBFC sector.
Digital Lending Compliance Norms
The RBI issued comprehensive guidelines on digital lending in September 2022, which apply to all entities regulated by the RBI, including NBFCs. These guidelines were further strengthened with additional circulars in 2024 to address emerging risks in the digital lending space.
Key requirements under the digital lending guidelines include: the borrower's bank account must be credited directly by the regulated entity (not through a lending service provider or third party), all fees and charges must be paid directly to the regulated entity, borrowers must receive a standardized Key Facts Statement (KFS) before executing the loan agreement, and a cooling-off or look-up period of at least three days must be provided for early loan termination without penalty.
NBFCs engaged in digital lending must also ensure robust data security frameworks, privacy policies compliant with the Digital Personal Data Protection Act, 2023, and grievance redressal mechanisms that meet the RBI's requirements. The RBI conducts on-site inspections and off-site surveillance of digital lending platforms to verify compliance. Non-compliance with digital lending norms can attract penalties and restrictions on business operations.
Penalties and Enforcement Actions
Non-compliance with RBI regulations can result in severe penalties for NBFCs. The RBI has a range of enforcement tools at its disposal, including monetary penalties, restrictions on operations, and cancellation of registration.
- Monetary Penalties: Up to three times the amount involved in the contravention, or up to Rs 5 lakh per day for continuing violations under Section 58B of the RBI Act. For specific violations such as acceptance of deposits without CoR, penalties can go up to Rs 1 crore per violation.
- Cancellation of Registration: The RBI may cancel the CoR if the NBFC fails to comply with conditions of registration or directions issued by the RBI. This effectively shuts down the NBFC's operations.
- Restriction on Deposits: NBFCs-D may be restricted from accepting fresh deposits and may be directed to refund existing deposits in case of non-compliance with prudential norms.
- Dividend Restriction: The RBI may restrict payment of dividends by non-compliant NBFCs until they achieve full compliance with prudential norms.
- Business Restriction: The RBI may impose restrictions on branch expansion, new business activities, hiring of key managerial personnel, and changes in management or shareholding.
Need Help with NBFC Compliance?
Our NBFC compliance team can assist with registration, regulatory filings, governance framework setup, capital adequacy planning, and ongoing compliance management. We work with NBFCs across all categories and sizes.
SCHEDULE A CONSULTATIONRelated Services
Frequently Asked Questions
What are the types of NBFCs registered with RBI?
NBFCs are broadly classified into NBFCs accepting public deposits (NBFC-D) and NBFCs not accepting public deposits (NBFC-ND). Further classifications include Asset Finance Company, Investment Company, Loan Company, Infrastructure Finance Company, Micro Finance Institution, and Housing Finance Company.
What is the minimum capital requirement for NBFC registration?
The minimum net owned fund requirement is Rs 2 crore for most NBFCs, Rs 5 crore for NBFC-MFIs, and Rs 300 crore for Infrastructure Finance Companies. The RBI may prescribe higher requirements based on the NBFC's risk profile and category.
What are the annual compliance requirements for NBFCs?
NBFCs must file annual returns (NBS-7, NBS-8, NBS-9), maintain capital adequacy ratios (CRAR), file ALM returns, comply with fair practices code, maintain governance norms including board composition, and conduct internal and statutory audits. Quarterly CRAR reporting is also mandatory.
What is the capital adequacy ratio requirement for NBFCs?
NBFCs must maintain a minimum CRAR of 15% for NBFCs-ND-SI and 12% for other NBFCs. This includes Tier I capital (equity and free reserves, minimum 10% for NBFC-ND-SI) and Tier II capital (subordinated debt and revaluation reserves).
What are the penalties for NBFC non-compliance with RBI?
Penalties include monetary penalties up to three times the amount involved or Rs 5 lakh per day for continuing violations, cancellation of certificate of registration, restriction on accepting public deposits, dividend payment restrictions, and restrictions on business expansion and management changes.
Related Articles
Corporate Governance Best Practices for Indian Companies 2026
Comprehensive guide covering governance framework, SEBI LODR, and board composition.
Private Limited Company Annual Compliance Checklist India 2026
Complete annual compliance checklist for private limited companies in India.
Disclaimer: This article is for general informational purposes only and does not constitute legal or professional advice. NBFC regulations are subject to change by the RBI. Readers should consult with qualified professionals for advice specific to their circumstances.