India’s NBFC Ecosystem Explained: Categories, Regulatory Layers and the Risks Hidden Behind One Label
NBFC is not one business model. The label includes lenders, housing financiers, microfinance institutions, factors, infrastructure financiers, account aggregators, peer-to-peer platforms and holding structures with very different risks.
Finin2min Summary
- An NBFC is a company carrying on specified financial activity as its principal business under the RBI framework.
- Most NBFCs cannot accept demand deposits or issue cheques like banks; only specifically authorised deposit-taking NBFCs may accept public deposits under conditions.
- Scale-Based Regulation places NBFCs in Base, Middle, Upper and, if activated, Top layers.
- Functional categories such as ICC, MFI, Factor, HFC, P2P and Account Aggregator do not all perform ordinary lending.
- Customer-facing risk depends on funding, asset quality, liquidity, governance, technology and conduct—not only AUM.
- Verify registration and deposit permission on RBI's live lists before dealing with an entity.
Posters that list thirteen NBFC categories and attach a count to each can become outdated quickly because RBI registrations, cancellations and classifications change. A more durable explanation starts with the regulatory architecture and then shows how activity, liabilities and customer interface determine the compliance burden.
The live RBI list—not a social image—should be used to verify whether a company holds a current certificate and whether it is permitted to accept public deposits.
What makes a company an NBFC
RBI regulation looks at the company's principal business and specified financial assets and income. Activities can include loans and advances, acquisition of securities, leasing, hire purchase and other notified financial business, while entities whose principal business is agriculture, industrial activity, ordinary goods or services, or immovable property are generally outside the core definition.
Holding a certificate of registration does not make an NBFC a bank. The ability to accept deposits and the type of financial activity are separately controlled.
Scale-Based Regulation
The Base Layer broadly contains smaller non-deposit-taking NBFCs and specified specialised entities. The Middle Layer captures deposit-taking NBFCs and larger or more systemically significant entities. The Upper Layer contains RBI-identified entities requiring enhanced regulation based on size, interconnectedness, complexity and supervisory inputs. A Top Layer can be populated if supervisory risk warrants it.
Movement up the layers increases expectations around capital, governance, disclosures, concentration, liquidity and risk management. A graphic that says only ‘13 categories’ misses this prudential axis.
Functional categories are not interchangeable
Investment and Credit Companies conduct lending and investment activities. NBFC-MFIs operate under qualifying-asset and borrower-protection norms. Factors finance receivables. Housing Finance Companies focus on housing finance under the RBI framework.
Account Aggregators provide consent-based financial-data sharing and are not lenders. P2P platforms facilitate lending between participants and cannot present themselves as guaranteeing repayment. Core Investment Companies mainly hold group investments and have a distinct leverage and governance context. Infrastructure finance, infrastructure debt funds, mortgage guarantee and primary dealer businesses have specialised rules.
Why AUM alone is not a safety score
A large AUM can reflect scale and diversification, but it can also bring concentration, liquidity and interconnectedness. A small specialised NBFC can be conservatively funded, while a fast-growing lender can carry underwriting or conduct risk.
Key indicators include capital adequacy, gross and net non-performing assets, provision coverage, asset-liability mismatches, borrowing mix, credit cost, concentration, related-party exposure, audit qualifications, regulatory action and customer complaints.
Consumer and investor due diligence
A depositor should first confirm whether the entity is specifically permitted to accept public deposits; an RBI registration alone is not permission. A borrower should check the Key Facts Statement, annual percentage rate, fees, recovery practices and grievance route.
Investors should use audited financial statements and RBI disclosures rather than brand familiarity. Fintech branding does not identify who legally lends: the regulated entity named in the agreement matters.
Worked Example
A mobile app markets a personal loan under its brand, but the loan agreement identifies an RBI-registered NBFC as the lender. The borrower should assess the lender's Key Facts Statement and grievance mechanism, not only the app's logo.
An Account Aggregator app, by contrast, may help a customer share bank or investment data under consent but should not be described as an NBFC lender. A P2P platform facilitates matching and servicing; lender capital remains at risk.
Before placing a fixed deposit with any finance company, verify that the entity appears on RBI's current list of NBFCs permitted to accept public deposits.
Practical Checklist
- Verify the exact legal entity and RBI registration on the current official list.
- Check whether it is deposit-taking or non-deposit-taking.
- Identify both the scale-based layer and the functional category.
- Review capital, asset quality, liquidity, concentration and governance.
- For digital loans, read the Key Facts Statement and identify the actual lender.
- Do not treat logos, AUM or an app-store presence as regulatory proof.
Article-Specific Q&A
Is every finance company an RBI-registered NBFC?
No. The legal entity and principal business must satisfy the regulatory framework, and registration should be verified on RBI's official list.
Can every NBFC accept fixed deposits from the public?
No. Only specifically authorised deposit-taking NBFCs can accept public deposits under prescribed conditions.
Is an Account Aggregator a lender?
No. Its regulated role is consent-based financial-information aggregation and sharing, not ordinary lending from its own balance sheet.
Does RBI guarantee repayment of an NBFC deposit or P2P loan?
No. Regulation is not a sovereign repayment guarantee. Product and counterparty risk remains with the participant.
What is the difference between a bank and an NBFC?
Banks can generally accept demand deposits and operate payment accounts under banking law. NBFCs provide specified financial services but operate under a different licence and liability framework.
Why can the number of NBFCs in an infographic be wrong?
RBI grants, cancels and updates registrations, and category treatment changes. Use the current official list with a date stamp.
Can brand logos be shown in the NBFC map?
Yes, as small examples of a functional category, provided the legal entity is correctly identified, the list is not presented as a ranking and a no-endorsement notice is included.
Sources and Verification Trail
- Reserve Bank of India — NBFCs: Official lists of registered and deposit-taking NBFCs.
- RBI Scale Based Regulation framework: Official directions, FAQs and supervisory releases.
- RBI Digital Lending framework: Official conduct and disclosure requirements for regulated digital lending.
Editorial Note
This article is written for education and general awareness. Tax, regulatory and employment outcomes depend on facts, dates, notifications and documentation. Verify the current law and obtain professional advice before acting.
Keywords: NBFC India · RBI regulation · scale based regulation · non bank finance