Digital Lending Apps Under RBI Scanner: New Compliance Rules for NBFCs

The Reserve Bank of India has published an updated regulatory framework for digital lending service providers (DLSPs), effective 1 April 2026, tightening the rules under which lending apps operate in India. The guidelines build upon the 2022 digital lending norms and address gaps that had allowed certain platforms to impose hidden charges, engage in aggressive collection practices, and misuse borrower data.

What the New Guidelines Mandate

First, all digital lending apps must display a standardised Key Fact Statement (KFS) before loan disbursal. The KFS must include the annual percentage rate (APR) — not just the nominal interest rate — along with all processing fees, platform charges, insurance premiums, and any other deductions from the disbursed amount. The RBI found that some apps were advertising interest rates of 12-15% while the effective APR, including platform fees deducted upfront, exceeded 30-40% on an annualised basis.

Second, a mandatory cooling-off period of three days has been introduced for all digital loans below Rs 1 lakh. During this window, the borrower can return the loan without any penalty or interest charge. This provision targets impulse borrowing, particularly among young users who take small-ticket loans for discretionary spending and then face compounding interest they did not fully understand.

Third, data privacy requirements have been significantly strengthened. DLSPs are now prohibited from accessing a borrower's phone contacts, photo gallery, or call logs under any circumstances. Access to location data is permitted only at the point of KYC verification and must not be continuous. All borrower data must be stored on servers located in India, and DLSPs must obtain explicit, informed consent for each category of data collected.

Impact on the Lending Ecosystem

The guidelines are expected to trigger a consolidation in the digital lending space. India currently has over 1,100 registered lending apps on the Google Play Store, many of which operate through partnerships with a handful of NBFCs. Compliance with the new data storage, disclosure, and cooling-off requirements will increase operational costs, making it unviable for smaller, low-volume platforms to continue. Industry analysts estimate that 200-300 apps may shut down or merge over the next 12 months.

For established fintech platforms like Bajaj Finserv, Tata Capital, and Navi, the guidelines represent an opportunity to differentiate through transparency and compliance. These companies already maintain robust infrastructure and can absorb the incremental compliance cost. The market share of the top 20 digital lenders is expected to increase from 62% to over 75% by March 2027.

What Borrowers Should Watch For

If you use any digital lending app, verify that it displays the RBI registration number of the underlying NBFC or bank on its homepage. Any app that lends directly without a regulated entity behind it is operating illegally. Before accepting a loan offer, examine the Key Fact Statement carefully — the APR is the most important number, not the advertised interest rate. If an app asks for access to your contacts or gallery, report it to the RBI's Sachet portal and uninstall it immediately.

Borrowers trapped in cycles of app-based lending with high effective rates should explore consolidation options. A personal loan from a bank at 10-12% to repay multiple app-based loans at 25-40% effective rates can dramatically reduce the monthly repayment burden. Use the personal loan EMI calculator to model the savings before approaching your bank.