Reserve Bank of India (Non-Banking Financial Companies – Credit Risk Management) Directions, 2025 (Updated as on July 01, 2026)
UR
- Applies toFinance companies
- StatusIn force
- ImportanceMUST READ
- IssuedNov 28, 2025
- Last amendedApr 29, 2026 · 2 incorporated
- Length50 points in 5 sections · 4 min read
The four dates on this rule
- PublishedNov 28, 2025The day RBI put this document out.
- Starts to applyNot statedNot stated separately in this document. Read the rule itself before you assume a start date.
- Time to get readyNot statedCannot be worked out until the day it starts to apply is known.
- Last date to actNot statedNo date to act by was found in this document. Other dates may sit inside single paragraphs.
Kept in your browser only. Your desk
What it says
Opening paragraphs
1. Credit risk spreads
Credit risk left unmanaged can spread into other kinds of risk.
Chapter I. Preliminary
1. Credit risk for finance firms
This document sets the credit risk management rules for non-banking financial companies.
2. Start date
These Directions took effect on the day RBI issued them.
BankPulse example. There is no gap here between issue and effect. The Directions come into effect immediately upon issuance. A bank cannot wait for a separate start date, because there is none.
3. Who is covered
These Directions apply to non-banking financial companies.
Chapter II. Board Approved Policies
1. Board approves the policies
The Board must approve policies covering every area these rules name.
Chapter III. Credit Risk Evaluation
1. Test the hard cases
Sensitivity tests must cover project delays and cost overruns, mainly on infrastructure.
2. Check the promoter money
The source and quality of the promoter's own capital must be checked.
3. Parent debt is not equity
Debt of the parent company must not be passed off as equity in the subsidiary.
4. Outside work is no excuse
Work done by others cannot replace the lender's own basic checks.
Chapter IV. Regulatory Restrictions
Do it
1. Board owns related party rules
The Board carries overall responsibility for the related party lending policy.
2. Extra safeguards required
The policy must set extra safeguards against the risks of related party lending.
3. Staff and their relatives
The policy must cover lending to specified employees and their relatives.
4. Cap on related party loans
The policy must set a total limit for loans to related parties.
5. Sub-limits within the cap
Inside that total there must be sub-limits for one party and for a group.
6. Inside RBI limits
Those limits must sit inside the exposure limits RBI already sets.
7. Judged transaction by transaction
The materiality threshold applies to each loan on its own.
8. Thresholds may differ
The threshold may differ for different kinds of related party loan.
9. Board sanctions the big ones
A loan above that threshold must be sanctioned by the Board.
10. Smaller loans delegated
A loan below the threshold may be sanctioned under delegated powers.
11. Step out of the room
Anyone connected to the borrower must take no part in the decision.
12. Yearly report to the Board
Loans to specified employees and their relatives are reported to the Board each year.
13. Breach draws action
Breaking or dodging these rules brings supervisory and enforcement action.
14. No loan on own shares
A lender cannot lend against the security of its own shares.
15. No loan on own debentures
A lender cannot lend against its own debentures either.
16. Tax free bonds excepted
Tax exempt bonds it issues are outside that bar.
Chapter V. Regulations on Credit Default Swaps (CDS) – NBFCs as Users
Do it
1. Buy protection only
In the credit default swap market the lender may only buy protection, never sell it.
2. Hedge only what is held
Protection may be bought only to hedge credit risk on bonds actually held.
3. No short positions
Selling protection and taking short positions in these contracts is barred.
4. Contract must be firm
Apart from unpaid premium, the protection contract must be irrevocable.
5. Match the maturities
The maturity of the exposure and of the hedge must both be defined carefully.
6. Name who decides
The contract must name who decides that a credit event has happened.
7. Not the seller alone
That decision cannot rest with the protection seller alone.
8. Buyer may raise it
The protection buyer must be able to tell the seller a credit event has happened.
9. Corporate bonds at 100
Corporate bonds held carry a risk weight of 100 per cent.
BankPulse example. An NBFC holds ₹50 crore of corporate bonds. The risk weight is 100 per cent, so the whole ₹50 crore counts in the capital sums.
10. Exposure moves to the seller
A swap creates an exposure on the protection seller for the event payment.
11. Unprotected part unchanged
The unprotected part of the exposure keeps the risk weight of the asset itself.
12. Mismatch breaks the cover
If the asset differs from the deliverable obligation, an asset mismatch arises.
13. Short hedge is a mismatch
A swap shorter than the asset counts as a maturity mismatch.
14. Cover lost, risk returns
If the conditions stop being met, the exposure goes back onto the underlying asset.
15. No netting for limits
Positive and negative values with the same counterparty cannot be netted for limits.
Chapter VI. Legal Entity Identifier (LEI) for Borrowers
1. What the identifier is
The legal entity identifier is a 20 digit code that names a party worldwide.
2. Both kinds of exposure
Exposure here covers funded and non-funded, credit and investment alike.
3. Higher of limit or balance
The higher of the sanctioned limit and the outstanding balance is taken.
4. Push the group to enrol
Large borrowers must be encouraged to get codes for parent and group companies.
5. Codes must be renewed
The lender must see that borrowers renew those codes when due.
Chapter VII. Filing of Security Interest relating to Immovable (other than equitable mortgage), Movable, and Intangible Assets in CERSAI
1. Registry open to all
The central registry records must be open to search by any lender or person.
2. Every charge must be filed
Every transaction creating a security interest must be filed with the registry.
3. File as you go
Charges on current transactions must be filed with the registry as they arise.
Chapter VIII. Repeal and other provisions
1. Old actions preserved
Anything already done under the old rules stays governed by those old rules.
2. Approvals carried over
Approvals given under the cancelled rules are now treated as given under these rules.
How this rule has changed
The points above are the rule as it stands today, after every change listed here.
Issued on Nov 28, 2025. This is the date RBI put the rule out.
Changed on Jan 05, 2026.
- Related party lending panel. The Board must set or name a committee to clear loans to related parties.
- Existing committee option. NBFCs may use an existing Board committee, but not the Audit Committee, for related party loans.
- Specified employees meaning. Specified employees are staff up to two levels below the Board and any staff named as such in policy.
Changed on Apr 29, 2026.
- New credit check rule. Non-banking financial companies must include likely calamity impact on borrowers in their credit assessment.
- Who it applies to. This new credit assessment rule applies to every non-banking financial company.
- Effective date. This amendment will apply from July 1, 2026.
The same subject for other kinds of institution
The same subject for other kinds of institution.
Other RBI rules for NBFCs
Every rule page on BankPulse · Questions bankers ask, answered