Regulation and the Bodies That Govern Banking & Lending

Regulation and the Bodies That Govern Banking & Lending

A customer scans a QR code at a kirana store, receives a loan offer on the same phone, accepts the terms, and expects money instantly. Behind that tiny screen are KYC rules, lending guidelines, data-consent norms, grievance systems, credit-risk rules, and multiple institutions deciding what is allowed.

Banking regulation is not a dusty compliance chapter. It is the invisible operating system that decides who can take deposits, who can lend, how customer money is protected, and what happens when risk builds up.

  • RBI is the anchor regulator for banks, NBFCs, payments banks, small finance banks, and much of India's lending system.
  • Regulation has two jobs: protect the financial system from failure and protect customers from unfair conduct.
  • Do not say β€œRBI regulates everything.” Securities, insurance, pensions, insolvency, AML, credit information, and deposit insurance involve other bodies.
  • Prudential regulation controls capital, liquidity, leverage, asset quality, and provisioning.
  • Conduct regulation controls transparency, consent, KYC, recovery practices, grievance redressal, and mis-selling.
  • The right interview answer follows the product: deposit, loan, payment, investment, insurance, pension, or recovery.
  • For fintech lending, the killer insight is this: the app may own the customer journey, but the regulated entity owns the credit risk and compliance responsibility.

Big Picture: Regulation Is a Funnel, Not a List of Names

Think of banking and lending regulation as a funnel. A financial product reaches the customer only after it passes through layers of permission, risk control, customer protection, and reporting.

A banking product is not regulated only at launch; it is filtered continuously from licence to supervision.A banking product is not regulated only at launch; it is filtered continuously from licence to supervision.EntityProductRisk RulesCustomer RulesSupervision
A banking product is not regulated only at launch; it is filtered continuously from licence to supervision.

The most confident candidates do not memorise bodies mechanically. They ask: What is the product, who carries the risk, whose money is involved, and which regulator protects that stakeholder?

Core Explanation: Who Governs Banking and Lending in India?

Banking and lending sit at the centre of India's financial system because they combine three sensitive activities: accepting public money, creating credit, and transmitting payments. That is why regulation is stricter here than in most normal businesses.

The regulatory architecture has four layers:

The Main Bodies You Must Know

The Reserve Bank of India is the central institution for banking and lending regulation. But the full answer is wider because a lending business often touches securities, insurance, data, payments, recovery, insolvency, and anti-money-laundering systems.

In an interview, this table gives you breadth. The next step is judgement: do not dump all bodies in every answer. Pick the relevant bodies based on the product.

The Two Sides of Regulation: Safety and Fairness

Banking regulation always balances two questions. First, is the institution financially safe? Second, is the customer being treated fairly?

Prudential rules protect the system; conduct rules protect the customer.Prudential rules protect the system; conduct rules protect the customer.PrudentialCan the firm survive?ConductIs the customer protected?
Prudential rules protect the system; conduct rules protect the customer.

Prudential regulation is about the institution's balance sheet. It asks whether the bank or NBFC has enough capital, liquidity, risk controls and provisions to absorb shocks.

Conduct regulation is about market behaviour. It asks whether customers understand pricing, whether consent is valid, whether recovery is fair, whether complaints are handled, and whether there is mis-selling.

In app-based lending, RBI's focus is not only whether the lender can absorb credit losses. It also covers disclosures, customer consent, disbursement flows, recovery behaviour and grievance redressal. The strategic so what: digital speed does not reduce regulatory responsibility; it increases the need for auditable controls.

The Regulatory Life Cycle of a Lending Business

A regulated lending business is supervised across its life cycle. The regulator does not only approve the licence and disappear.

Regulation is a continuous loop: permission, operation, reporting, supervision and correction.Regulation is a continuous loop: permission, operation, reporting, supervision and correction.LicenceFit and properOperateKYC and lendingReportReturns and auditsSuperviseInspection andreviewCorrectDirections or penalty
Regulation is a continuous loop: permission, operation, reporting, supervision and correction.

This cycle matters because most weak answers stop at β€œRBI gives licences.” A stronger answer explains that regulators also monitor risk, inspect entities, issue directions, handle consumer complaints, and enforce corrective action.

Regulatory Ratios and Checks Interviewers Expect

You do not need to calculate Basel capital models in a general management interview. But you should know what the major regulatory checks mean and why they matter.

The Basel Committee's liquidity coverage ratio framework sets the widely used 100 percent LCR standard. In interviews, use ratios as signals: capital shows loss-absorption capacity, liquidity shows survival capacity, NPAs show asset quality, and provisions show recognition discipline.

Definitions You Can Say Cleanly

  • Banking: Accepting public deposits for lending or investment, with withdrawal rights through recognised instruments.
  • NBFC: A financial company that lends or invests but does not operate as a full deposit-taking bank.
  • Prudential regulation: Rules that preserve institutional soundness through capital, liquidity, provisioning and risk controls.
  • Conduct regulation: Rules that ensure fair customer treatment, transparent disclosure, consent, grievance redressal and ethical recovery.
  • Systemic risk: The risk that failure in one institution or market spreads across the financial system.

For Indian interviews, anchor the definition of banking to the Banking Regulation Act, 1949 conceptually: banks accept public deposits and use them for lending or investment. That is why deposit-taking receives the highest regulatory scrutiny.

Case Study: Fino Payments Bank - Regulation as a Business-Model Boundary

Fino Payments Bank shows how regulation can define the business model itself: payments banks can serve transaction and deposit needs, but cannot run a normal lending book.

Payments-bank regulation lives at the counter where digital finance meets cash-heavy India.
Payments-bank regulation lives at the counter where digital finance meets cash-heavy India.

Situation: Payments banks were designed to deepen financial inclusion and digital payments, especially for customers who need small-value transactions, remittances and basic banking access. Under the RBI's payments bank licensing guidelines, payments banks are not permitted to undertake lending activities.

The move: Fino Payments Bank built its model around transactions, deposits, merchant points, remittances and distribution-led financial services rather than balance-sheet lending. The primary driver was licence-fit: it shaped the business around what the payments-bank model allows. Supporting drivers included a physical merchant network, technology-led account servicing, compliance-heavy KYC processes, and partnerships for adjacent products.

The lesson: Regulation did not merely constrain Fino; it clarified where value could be created. A payments bank cannot simply behave like an NBFC with a banking label. It must earn through payments, accounts, distribution, customer access and partnerships while leaving credit underwriting to appropriately regulated lending entities.

Fino's strategic choices follow directly from the boundary of its regulatory licence.Fino's strategic choices follow directly from the boundary of its regulatory licence.LicencePayments bankAllowed CorePayments anddepositsRestrictedAreaNo own lendingStrategicModelFees andpartners
Fino's strategic choices follow directly from the boundary of its regulatory licence.

Strategic so what: In regulated financial services, strategy is not only β€œwhere is the market opportunity?” It is also β€œwhat does the licence permit, what risk does the entity carry, and which activities require another regulated partner?”

How AI Changes Regulation and the Bodies That Govern Banking & Lending

AI is changing this topic in three concrete ways.

  1. AI underwriting increases model-governance pressure. Lenders using machine-learning scores must explain approvals, rejections, bias controls, data sources and override logic. The compliance question shifts from β€œWhat is the policy?” to β€œCan you audit the model's decision path?”
  2. RegTech and SupTech are making supervision more data-driven. Banks and NBFCs increasingly use automation for transaction monitoring, AML alerts, KYC checks, fraud detection, regulatory reporting and complaint classification. Regulators can also analyse filings and risk signals faster.
  3. Digital-lending conduct becomes harder to hide. AI can monitor call scripts, recovery behaviour, app permissions, consent journeys and grievance trends. That helps compliant firms, but exposes firms that use dark patterns or aggressive recovery tactics.

Before a banking or fintech interview, load the company's latest annual report or investor presentation plus relevant RBI guidelines into NotebookLM. Ask: β€œMap this company's product lines to the likely regulators, prudential risks, conduct risks and interview questions.” Then convert the answer into a one-page regulator-product-risk table.

Interview Relevance

β€œA fintech app wants to offer instant personal loans in India. Which regulators and bodies matter, and what checks would you do before launch?”

Use this sentence in interviews: β€œI would not start with the app interface; I would start with the regulated entity carrying the risk, then map the product to the relevant regulator and customer-protection obligations.”

Common Mistake

The biggest mistake is saying, β€œRBI regulates the whole financial sector.” It sounds confident but is incomplete. RBI is central for banking and lending, but SEBI, IRDAI, PFRDA, DICGC, CERSAI, FIU-IND, IBBI and sectoral institutions can become relevant depending on the product. Fix: follow the product and the risk - deposit, loan, payment, investment, insurance, pension, collateral, AML or insolvency.

Mark Lesson Complete (Regulation and the Bodies That Govern Banking & Lending)