Fintech Compliance Guide · 2026

NBFC Registration vs Lending-as-a-Service: Which Path Should Your Fintech Take?

Both routes let you lend money in India legally. One makes you the regulated entity; the other lets you plug into one. Here's how to tell which is right for where your business actually is.

NBFC registration makes you the RBI-regulated lender: you hold the Certificate of Registration, the loan book, and the compliance obligations that come with it. Lending-as-a-Service (LaaS) means partnering with an existing bank or NBFC as a Lending Service Provider (LSP): you own the product and customer experience, they hold the license and the capital requirement. Most fintechs start with LaaS to launch in weeks, then move to their own NBFC once loan volumes justify the ₹10 crore Net Owned Fund an RBI license requires.

You become the regulated entity

  • ₹10 crore Net Owned Fund (ab initio for most lending NBFCs)
  • 4–6 months for a clean RBI application, longer with queries
  • Full ownership of the loan book and pricing
  • Direct RBI supervision, reporting and audits
You plug into a regulated entity

  • No independent NOF requirement to launch
  • Weeks to a live product via an RE partnership
  • You control product, UX and underwriting logic; RE holds the book
  • Governed by RBI's Digital Lending Directions, 2025

What Is NBFC Registration?

A Non-Banking Financial Company (NBFC) is a company registered under the Companies Act that carries on lending, investment, or other financial-service activity, but does not hold a full banking license. To lend at scale in India, you generally need a Certificate of Registration (CoR) from the RBI under Section 45-IA of the RBI Act, 1934 — that CoR is what "NBFC registration" refers to.

Once registered, you are a NBFC Regulated Entity (RE) in your own right. You underwrite, disburse, and hold loans on your own balance sheet, set your own credit policy within RBI's guardrails, and report directly to the regulator.

Scale-Based Regulation (SBR) layers

Since October 2022, RBI classifies every NBFC into one of four layers based on size, activity and perceived risk. This determines how much regulatory scrutiny and capital discipline applies to you:

  • - Base Layer (NBFC-BL) — smaller, non-deposit-taking NBFCs with lighter-touch regulation.

  • - Middle Layer (NBFC-ML) — deposit-taking NBFCs of any size, and non-deposit-taking NBFCs above ₹1,000 crore in assets.

  • - Upper Layer (NBFC-UL) — the largest, most systemically significant NBFCs, identified individually by RBI and regulated closer to how banks are.

  • - Top Layer (NBFC-TL) — a reserved layer, populated only if RBI judges an Upper Layer NBFC needs even tighter supervision.

Most fintech-founded lending NBFCs start in the Base Layer and move up as their book grows.

What Is Lending-as-a-Service (LaaS)?

Lending-as-a-Service is a partnership model, not a license. A fintech (or any business that wants to embed credit into its product) plugs into a bank or NBFC — the Regulated Entity, or RE — and operates as that RE's Lending Service Provider (LSP): handling customer acquisition, the digital application journey, underwriting support and servicing, while the RE actually holds the license, funds the loans, and carries them on its books.

The infrastructure layer — APIs for onboarding, verification, loan management and disbursal — is what makes this practically workable. That's the "as-a-Service" part: you're consuming lending infrastructure and a regulatory relationship the same way you'd consume any other cloud service, rather than building both from scratch.

How the LaaS stack fits together

  • The bank or NBFC that holds the Certificate of Registration and the loan book.
  • Your business — sourcing borrowers, running the product experience, supporting underwriting.
  • APIs for KYC/verification, loan origination, disbursal, collections and reporting that connect the LSP to the RE.

The regulatory backbone: Digital Lending Directions, 2025

LaaS in India is not an unregulated workaround — it runs inside a specific rulebook. On 8 May 2025, RBI issued the Reserve Bank of India (Digital Lending) Directions, 2025, consolidating the earlier September 2022 Digital Lending Guidelines, the outsourcing/fair-practices circular, and the June 2023 Default Loss Guarantee (DLG) guidelines into one framework. A multi-lender LSP structure — letting one LSP work with several REs under a disclosed, RBI-visible arrangement — became operational on 1 November 2025.

Three rules matter most if you're evaluating this path:

  • - Direct fund flow: Loan disbursal and repayment must move directly between the borrower's bank account and the RE's account — LSPs cannot run pooled or pass-through accounts.

  • - Capped default guarantees: A First Loss Default Guarantee (FLDG/DLG) between an RE and an LSP is allowed but capped at 5% of the outstanding loan portfolio, must be cash, a lien-marked fixed deposit, or a bank guarantee, and must be disclosed to borrowers as optional.

  • - Standardized disclosure: Borrowers must receive a Key Fact Statement (KFS) before sanction, plus a cooling-off period and purpose-limited data collection.

NBFC Registration: Requirements, Process, Timeline & Cost (2026)

If the comparison below points you toward full registration, here's what it actually involves right now.

Eligibility and capital

New applicants for a lending NBFC (NBFC-Investment and Credit Company) need a Net Owned Fund of ₹10 crore, ab initio — that is, in place before RBI will register you, not built up afterward. A few categories carry a lower bar: NBFC-P2P, NBFC-Account Aggregator and registered Type I NBFCs need ₹2 crore. Existing NBFCs registered before this rule tightened are on a glide path — ₹5 crore by 31 March 2025 (already passed) and ₹10 crore by 31 March 2027.

Regulatory update

RBI notified draft NBFC (Registration, Exemptions and Framework for Scale Based Regulation) Amendment Directions, 2026 in February 2026. They create a new "Type I NBFC" category and, from 1 April 2026, exempt non-deposit-taking NBFCs with no customer interface and assets under ₹1,000 crore from RBI registration altogether — with a one-time PRAVAAH deregistration window open until 30 September 2026 for existing NBFCs that now qualify. If your structure is asset-light and B2B, confirm current applicability with a compliance advisor before you plan around the older rules.

Step-by-step application process

  1. Incorporate a company under the Companies Act, 2013, with lending as a stated object.
  2. Obtain a Digital Signature Certificate (DSC) and Director Identification Number (DIN) for each proposed director.
  3. Build Net Owned Funds up to the applicable threshold before filing.
  4. Draft a five-year business plan with financial projections, risk policy and target markets — RBI reviews this closely.
  5. Register and file the application on the PRAVAAH portal (pravaah.rbi.org.in), which became mandatory for all regulatory filings on 1 May 2025, replacing the older COSMOS system.
  6. Pay the RBI application fee and upload KYC documents for directors and shareholders.
  7. Courier the physical application and supporting documents to RBI's Central Office, Department of Regulation, Mumbai.
  8. Respond to RBI's scrutiny queries — this stage is where most delays happen.
  9. Receive your Certificate of Registration once RBI is satisfied.

Timeline and Cost

What NBFC registration typically costs and takes

ItemTypical figure
RBI application fee₹3,00,000 (non-refundable)
Minimum Net Owned Fund₹10 crore (ab initio, most lending NBFCs)
Consultant / legal fees₹50,000 – ₹1,50,000
Clean application timeline4–6 months
Timeline with deficiencies/queries9–12 months

NBFC Registration vs Lending-as-a-Service: Side-by-Side Comparison

Here's the same decision, condensed into one table.

NBFC registration vs LaaS at a glance

FactorNBFC RegistrationLending-as-a-Service
Regulatory statusYou are the Regulated EntityYou are an LSP to a Regulated Entity
Capital needed₹10 crore NOF, ab initioNo independent NOF requirement
Time to launch4–12 months for the license aloneTypically weeks, once an RE partnership is signed
Ownership of loan bookFull ownershipHeld by the RE, not you
Control over product/UXFull controlFull control, within RE-approved policy
Compliance burdenDirect — RBI reporting, audits, prudential normsShared — outsourcing, disclosure and data rules under Digital Lending Directions, 2025
Upside on interest marginYou capture the full spreadShared with the RE per your commercial agreement
Best suited forProven lending models with the capital to scale independentlyNew or unproven products validating demand quickly

Pros and Cons of Each Model

NBFC

Registering your own NBFC

Pros: full control of pricing and credit policy, you keep the entire interest margin, no dependency on a partner's risk appetite, and it signals long-term commitment to investors and large borrowers.

Cons: ₹10 crore locked up as regulatory capital before you can lend a rupee, a 4–12 month runway before you're licensed, and direct exposure to RBI inspections, prudential norms and reporting from day one.

LAAS

Partnering as an LSP

Pros: live in weeks rather than months, no capital locked up in a license you might not need yet, and you can test multiple loan products or borrower segments before committing capital to any one of them.

Cons: your growth ceiling is shaped by your RE partner's risk appetite and balance sheet, margins are shared, and switching or adding RE partners takes real integration and legal work.

Which Model Should You Choose? A Decision Framework

Choose NBFC registration
when...

  • You already have ₹10 crore+ in investable capital and don't need it for anything else in the next 12 months.
  • Your lending model is proven — you have real repayment data, not just a hypothesis.
  • You want to own the full economics and aren't relying on a partner's balance sheet to scale.
Choose Lending-as-a-Service
when...

  • You need to validate demand and underwriting performance before committing capital.
  • Speed to market matters more than owning 100% of the margin right now.
  • Lending is a feature of a broader product (embedded finance) rather than the whole business.
Hybrid
Start LaaS, graduate to NBFC

A common path in India: launch through an RE partnership to prove the product, build a repayment track record, then use that data to strengthen your own NBFC application later — or move into co-lending, where your eventual NBFC originates loans jointly with a bank on a shared-risk basis.

Common Mistakes to Avoid

Treating PRAVAAH filing as a formality.

Incomplete business plans and unclear NOF sourcing are the top reasons applications stall in scrutiny.

Structuring FLDG informally.

Corporate guarantees or "soft" default-cover arrangements outside the permitted cash/FD/bank-guarantee forms fall outside the RBI-permitted structure.

Running disbursals through a pooled account.

Any intermediary account between borrower and RE breaks the direct-flow requirement under the 2025 Directions.

Missing the expanded "public funds" definition.

More funding sources now count as public funds than founders assume, which changes your NOF and registration category.

Going for an NBFC license before validating the product.

Locking up ₹10 crore behind an unproven lending model is expensive to unwind.

Ignoring self-regulatory expectations.

FACE (Fintech Association for Consumer Empowerment) is RBI's recognized SRO for digital lending — membership is fast becoming a trust signal, not a formality.

Best Practices for Fintech Founders and Compliance Teams

Design for direct-to-RE fund flow from day one

— retrofitting it later is far more expensive than building it in.

Build your five-year business plan on real disbursement data

where you have it, not aspirational projections.

Keep KFS, cooling-off and consent flows native to the product

rather than bolted on before a compliance review.

Choose an infrastructure partner already operating inside RBI's outsourcing framework

— it removes a whole category of integration risk.

If you're an existing NBFC, plan your NOF glide path now

— 31 March 2027 is closer than it looks once audits and capital raises are factored in.

Track RBI circulars on a fixed cadence.

This framework has changed substantially twice in the last 14 months alone.

An Illustrative Scenario: Two Founders, Two Paths

Illustrative example

Founder A is building a working-capital product for small retailers and has strong distribution but no lending track record yet. She partners with a mid-sized NBFC as an LSP, launches in six weeks, and spends the first year proving her underwriting model with real repayment data.

Founder B has already run a lending book for two years through a bank partnership and has raised ₹15 crore specifically to go independent. He uses that capital and repayment history to register his own NBFC, gaining full control of pricing and margin once he's licensed.

Same market, same regulatory system — different starting points, different paths. That's the actual decision, more than any generic "which is better" answer.

Expert Tips

PRO TIP

If you're not sure which path fits, don't guess — model both. Run your projected loan volumes against the NBFC cost structure (₹10 crore NOF + compliance overhead) and against a realistic LSP revenue-share, then compare break-even timelines. The math usually makes the decision for you.

AOPAY works on both sides of this decision: our NBFC registration advisory takes founders through the PRAVAAH filing end-to-end, and our co-lending and loan management infrastructure supports businesses running as an LSP under an existing RE. If you already hold a license and want to grow through a partner network instead of a second license, our NBFC collaboration services are built for exactly that.

Readiness Checklist

Before you apply for NBFC registration

₹10 crore Net Owned Fund sourced and verifiable
Five-year business plan with realistic financial projections drafted
DSC and DIN in place for all proposed directors
PRAVAAH portal registration completed
Legal/compliance advisor engaged for document review

Before you go live as an LSP

RE-partnership agreement signed, with FLDG terms (if any) within the 5% cap
Direct borrower-to-RE fund flow built into your disbursal architecture
Key Fact Statement and cooling-off period implemented in the product
Data collection scoped to purpose-limited, explicit consent
DLA listed on RBI's CIMS portal reporting, as applicable

Frequently Asked Questions

Key Takeaways

  • NBFC registration makes you the regulated lender; LaaS makes you a service provider to one.
  • New lending NBFCs need ₹10 crore in Net Owned Fund, ab initio, filed through the PRAVAAH portal.
  • LaaS runs inside RBI's Digital Lending Directions, 2025 — it's regulated, not a loophole.
  • FLDG/DLG between an LSP and RE is capped at 5% of the loan portfolio and must be cash, FD, or bank guarantee.
  • Many fintechs start with LaaS to prove the model, then graduate to their own NBFC or into co-lending.
  • A February 2026 draft RBI amendment may exempt some smaller, no-customer-interface NBFCs from registration entirely from April 2026 — worth checking against your structure.

This article is for general information and does not constitute legal or regulatory advice. NBFC and digital-lending rules referenced here reflect RBI directions in effect as of July 2026, including regulations that were updated or newly notified during 2025–2026; confirm current applicability with RBI's official publications or a licensed compliance advisor before acting. © 2026 AOPAY. All rights reserved.