India’s NBFC Registrations now operate under a risk-based supervisory framework, which requires them to stop using their previous system’s standardised reporting rules. The Scale-Based Regulation (SBR) system categorises NBFCs into four distinct tiers based on their operational size their risk profile and their systemic impact on the general financial system.
Statutory Returns and RBI Compliance for NBFCs
RBI enforced its zero-tolerance policy during 2024–25 to enhance its enforcement efforts against unfair loan pricing, digital lending, violations, governance failures and weak board oversight.
Why Compliance-First Matters
After NBFC Registration, a compliance-first approach protects against regulatory risks while reducing compliance expenses and it enhances investor confidence in the business. NBFCs which use effective governance systems achieve superior credit ratings and greater access to funding resources.
This practice helps them maintain stronger and more reliable relationships with banks, financial institutions and their vital stakeholders. The combination of transparent reporting and timely statutory filings establishes market credibility. In today’s strict regulatory environment, compliance is no longer just a legal obligation but a long-term strategic advantage.
The Four-Layered Regulatory Architecture
Base Layer (NBFC-BL)
The Base Layer (NBFC-BL) applies to non-deposit-taking NBFCs which have assets below ₹1,000 crore according to the Scale-Based Regulation framework. The organisations must increase their Net Owned Fund (NOF) to ₹10 crore by March 2027, while they need to improve their capital adequacy standards for ongoing regulatory compliance and operational stability.
Middle Layer (NBFC-ML)
The Middle Layer (NBFC-ML) includes all deposit-taking NBFCs and non-deposit-taking NBFCs with assets above ₹1,000 crore. These NBFCs are subject to stricter disclosure norms, additional prudential standards, and more frequent regulatory assessments, given their greater impact on the financial system.
Upper Layer (NBFC-UL)
The RBI[1] identifies the top 15 systemically important NBFCs under this category. Bajaj Finance and LIC Housing Finance serve as organisations that must meet mandatory listing requirements together with enhanced capital standards because their operations create a systemic impact.
Top Layer (NBFC-TL)
This layer is empty by default. It is reserved for NBFCs that pose extreme systemic risk to the Indian financial system. If classified here, an entity faces the highest regulatory scrutiny.
Mastering the CIMS Portal: The New Standard for Reporting
Transition from XBRL
The Reserve Bank of India has replaced XBRL filings with the Centralised Information Management System (CIMS), which is now the exclusive portal for submitting all NBFC statutory returns.
System-Driven Data
The system-based data CIMS uses data analytics to cross-verify returns by matching DNBS02 figures with audited financial statements and detecting any inconsistencies or mismatches.
Zero-Error Validation
CIMS follows strict validation rules. If previous returns contain discrepancies, the system may block new filings. NBFCs must maintain consistent and accurate records across all submissions.
Mandatory Periodic Returns (The Compliance Calendar)
Monthly Filings
- DNBS04B – Monitors structural liquidity and asset-liability mismatches.
- CRILC – Required for ML and UL entities reporting borrower exposures above ₹5 crore.
Quarterly Filings
- DNBS01 & DNBS03 – Essential for monitoring Capital Adequacy Ratio (CRAR) and overall financial health.
- NBS-1, NBS-2, NBS-3 – Applicable to deposit-taking NBFCs to ensure depositor protection compliance.
Annual Filings
- DNBS10 (Statutory Auditor Certificate – SAC) – Must be filed by 31st December each year.
Delayed SAC filings are the number one reason for show-cause notices from the RBI. Non-compliance may restrict dividend declaration or branch expansion.
Event-Based Compliance: Beyond Routine Reporting
Change in Management or Control
The Reserve Bank of India requires prior approval for all changes to shareholding and management that exceed 26% ownership. The organisation will face penalties, supervisory restrictions, and regulatory permission revocation for failing to comply with this requirement.
Fraud Reporting
The Fraud Monitoring Return (FMR) must be submitted within 14 days of detecting fraud exceeding ₹1 lakh. The 2024 Fraud Risk Management Directions establish this stricter deadline for Middle Layer and Upper Layer NBFCs which operate with assets of more than ₹500 crore. They will face penalties for submitting their report after the deadline and providing incorrect information.
Branch Expansion
Branch expansion norms depend on the NBFC’s regulatory layer. Base Layer entities may require simple intimation, while Middle and Upper Layer NBFCs often need prior approval before opening new branches.
Third-Party & Outsourcing Compliance
Board Accountability
Outsourcing IT systems or recovery agents does not transfer responsibility. The Board remains accountable for compliance failures by service providers.
Digital Lending Guidelines
NBFCs must issue a Key Fact Statement (KFS) to borrowers. This ensures transparency in interest rates, charges, and repayment schedules. Hidden fees are strictly prohibited.
CIC Reporting
NBFCs must report credit data to all four Credit Information Companies (CICs) on a fortnightly basis, effective January 1, 2025. Reporting is due on the 15th and last day of each month, with submission completed within 7 calendar days. Incomplete or delayed reporting affects borrower credit histories and attracts regulatory attention.
Critical Prudential Norms & NPA Timelines
The 90-Day Norm
The RBI is aligning NBFCs with banks for Non-Performing Asset (NPA) recognition.
- By March 2024: Overdue >150 days classified as NPA.
- By March 2025: Overdue >120 days classified as NPA.
- By March 2026: Overdue >90 days classified as NPA.
This convergence increases provisioning requirements and demands stronger risk monitoring systems.
Capital Adequacy
NBFCs must maintain a minimum 15% CRAR. Specific Tier-I capital requirements apply depending on the regulatory layer. Insufficient capital may restrict growth or invite corrective action.
Common Pitfalls & How to Avoid Them
Data Inconsistency
Manual NPA calculations are error-prone. Loan management systems are essential tools for accurate, real-time NPA evaluation and ongoing compliance.
Delayed SAC Filing
Late submission of DNBS10 (Statutory Auditor Certificate) commonly triggers regulatory warnings and supervisory scrutiny. In serious cases, the RBI may restrict dividend declarations or block branch expansion.
Group Asset Aggregation
NBFCs often ignore that group entities’ assets are consolidated for SBR classification. This may unexpectedly shift a company from Base Layer to Middle Layer, resulting in stricter regulatory requirements.
Conclusion: Future-Proofing Your NBFC
statutory returns and RBI compliance functions as a foundation for establishing regulatory confidence which supports business growth throughout its operational period. NBFCs should treat compliance as a strategic investment, leveraging RegTech solutions to automate CIMS filings and reduce errors. By reviewing RBI Master Directions and circulars on a regular basis, your organisation will always be one step ahead of changes in regulations.
At Advisou, we provide complete services for NBFC Registration to operation which include RBI compliance, statutory reporting, and regulatory planning according to their specific needs. Our expert guidance helps your organisation avoid penalties while improving operational accuracy and building internal controls and governance systems for sustainable long-term growth.
Also Read: RBI Payment Aggregator License Guide 2026
