The explosion of app-based lending in India solved a real problem — millions of people and small businesses with little or no credit history gained access to small, fast loans — but it also produced abuse: hidden charges, aggressive recovery, misuse of personal data and a proliferation of illegal loan apps. In response, the Reserve Bank of India issued its Digital Lending Guidelines in 2022, reshaping how the business must operate.
The core principles
Several rules stand out. Loan money must flow directly between the borrower and the regulated lender's bank account, rather than passing through a third-party app or intermediary pool. Borrowers must receive a clear, standardised statement of the all-in cost of a loan — the annual percentage rate — before they borrow, ending the practice of burying fees. Lending service providers and the apps that front them must disclose which regulated entity actually holds the loan. And data collected by lending apps must be need-based, taken with consent, and cannot be harvested indiscriminately.
The impact
The guidelines forced a clean-up. Fintechs that had operated in grey areas had to partner transparently with banks and non-banking financial companies or exit. A subsequent framework brought structure to "first-loss default guarantee" arrangements, clarifying how fintechs can share credit risk with lenders within defined limits. For consumers, the rules improved disclosure and curbed the worst practices; for the industry, they raised compliance costs but also legitimacy.
The broader message was that digital lending is welcome but must sit inside the regulated financial system, not around it. For founders, the lesson is that in Indian fintech, the durable businesses are the ones built to satisfy the regulator rather than to outrun it.
