Fintech, digital lending and the e-rupee (CBDC)

Fintech is where the RBI's two mandates meet: encourage innovation and protect customers and the system. The exam tends to ask for balance: the benefits of digital lending and the problems it created; why a central bank digital currency might be useful when UPI already works so well. Your answers will stand out if you explain the design choices behind each rule, not just list the rules.

Digital public infrastructure: the rails

India's fintech growth rests on shared, interoperable public platforms, often called digital public infrastructure (DPI) or the "India Stack":

• Identity: Aadhaar and e-KYC reduce the cost of opening accounts.
• Payments: UPI lets any app move money between any banks.
• Data: account aggregators allow consent-based sharing of financial data.
• Documents: DigiLocker holds verified documents.
• Commerce and credit: the Open Network for Digital Commerce (ONDC) and the RBI's Unified Lending Interface (ULI), piloted from 2023, aim to do for commerce and credit what UPI did for payments.

The principle is that the public sector builds open rails and private firms compete on the services built on top.

Account aggregators

An account aggregator (AA) is an RBI-regulated NBFC that moves a customer's financial data from a financial information provider (a bank, mutual fund or insurer) to a financial information user (a lender or wealth adviser), only with the customer's explicit, specific and revocable consent. The RBI issued the AA directions in 2016, and the network went live in 2021.

Key design features:

• Data-blind: the AA passes encrypted data and cannot read or store it.
• Consent artefact: the customer sees what data is shared, with whom, for what purpose and for how long.
• Use: a small business with no collateral can share its bank statements and GST data, and a lender can underwrite on cash flows instead of assets.

Digital lending: problems and rules

App-based lending grew fast, and so did abuse: hidden charges, loans disbursed through third-party wallets, harvesting of phone contacts and photos, and abusive recovery calls. The RBI set up a working group in 2021 and issued digital lending guidelines in 2022, later consolidated into directions. The main rules:

• Only regulated entities lend. Lending service providers and apps can only be agents; the loan must sit on the books of a bank or NBFC.
• Direct flows: disbursement and repayment go directly between the borrower's bank account and the lender's, not through a third party's pool account.
• Key fact statement (KFS): before the loan, the borrower gets a standard sheet showing the annual percentage rate (APR), the all-inclusive cost including fees.
• Cooling-off period: the borrower can exit early by repaying the principal and proportionate APR without a penalty.
• Data: collection must be need-based and with consent; apps cannot access contacts and media files.
• Default loss guarantee (DLG): a fintech partner may guarantee losses on a lender's digital portfolio, but only up to 5% of the portfolio (2023 rules).
• Grievance redress with a named officer, and fair recovery practices.

Worked example: why APR matters

An app advertises a 30-day loan of ₹10,000 at "just 3% interest". It deducts a processing fee of ₹500, so the borrower receives ₹9,500, and the borrower repays ₹10,300 after 30 days.

1. Total cost = 10,300 − 9,500 = ₹800.
2. Cost relative to the money actually received = 800 ÷ 9,500 = 8.42% for 30 days.
3. Annualised (simple) = 8.42% × 365 ÷ 30 ≈ 102% a year.

The "3%" headline hides an APR of about 102%. The KFS rule forces this number onto one page before the borrower signs.

Regulatory sandbox and self-regulation

The RBI's regulatory sandbox (framework issued in 2019) lets firms test new products with real customers, under supervision, for a limited time and scale, with some regulatory relaxations. Cohorts have been themed; early ones covered retail payments and cross-border payments, and later ones included MSME lending and fraud prevention.

The RBI has also issued a framework for self-regulatory organisations in fintech (SRO-FT), so that an industry body can set and enforce conduct standards for its members.

Central bank digital currency: the e-rupee

A CBDC is legal tender issued by the central bank in digital form. It is a direct liability of the RBI, like cash, unlike a bank deposit, which is a liability of a commercial bank. The Finance Act, 2022 amended the RBI Act so that "bank note" includes a digital form. The RBI released a concept note in October 2022.

Design choices:

• Two-tier distribution: the RBI issues, banks distribute and run the wallets.
• Non-interest-bearing: like cash, so that it does not pull deposits out of banks.
• Features tested in pilots: offline payments, programmability (money that can be spent only for a set purpose), and interoperability with UPI QR codes.

Benefits and concerns

Model answer outline (15 marks)

Question: Should the RBI actively promote a retail CBDC when UPI is already widespread? Discuss.

1. Introduction: define CBDC; RBI Act amendment 2022; pilots from November and December 2022.
2. UPI versus e₹: UPI moves bank deposits; e₹ is central bank money itself, like cash.
3. Case for: replace some cash; settlement finality; offline and programmable use; cross-border potential; answer to private digital currencies.
4. Case against: overlap with UPI; deposit flight in stress; privacy; cost; limited demand so far.
5. Middle path: non-interest-bearing design, holding limits, two-tier model, gradual rollout, focus on use cases UPI does not serve.
6. Conclusion: complement, not competitor; build slowly, driven by use cases.

Short model answer (10 marks)

Question: How do account aggregators help credit flow to small borrowers?

Small businesses and first-time borrowers often lack collateral and credit history, so lenders cannot assess them cheaply. Yet many of them leave a rich digital trail in bank statements, GST returns and UPI receipts. Account aggregators unlock that trail.

An account aggregator is an RBI-regulated NBFC that, with the customer's explicit consent, moves financial data from providers such as banks to users such as lenders. The consent specifies what data, for which purpose and for how long, and it can be withdrawn. The aggregator is data-blind: it passes encrypted data without reading or storing it.

With this data, a lender can judge repayment capacity from actual cash flows, process a loan in minutes rather than weeks, and lend without property as security. This lowers costs and can bring more small firms into formal credit. The limits are that data quality varies, digital literacy is uneven and consent can become a routine click. Strong data protection and awareness are therefore part of making the system work.

Practice questions

1. Which type of entity is an account aggregator under RBI regulation?
   • An NBFC (NBFC-AA).
2. When did the wholesale e₹ pilot begin?
   • 1 November 2022.
3. Is the retail e₹ account-based or token-based?
   • Token-based.
4. What is the cap on default loss guarantees in digital lending?
   • 5% of the loan portfolio.
5. A borrower receives ₹19,000 and repays ₹20,000 after 30 days. What is the approximate annualised cost?
   • About 64%. 1,000 ÷ 19,000 = 5.26% for 30 days; × 365 ÷ 30 ≈ 64%.
6. Why is the e₹ designed to pay no interest?
   • To avoid drawing deposits away from banks.

What to do next

• Write the difference between a bank deposit, UPI and the e₹ in three lines.
• Rework the APR example with a ₹300 fee instead of ₹500.
• Read the payment systems guide for the plumbing under UPI.
• Then read the financial inclusion guide.