What the RBI actually enforces

Periodic KYC updation, risk categorisation at least every 6 months, single UCIC per customer, valid OVD/PAN capture, and suspicious-transaction monitoring systems.

Escrow/nodal account balances, current account opening rules for borrowers, end-of-day balance ceilings, unclaimed balances and nomination hygiene.

Penal charges as charges (not interest), external benchmark linking, no excessive spread over cost of funds, transparent and uniform pricing policy.

Director eligibility and multiple directorships, prior RBI approval for change in management/shareholding, compensation deferment, accurate disclosures.

Recovery calls only 8am-7pm, no coercion, grievance redressal and ombudsman compliance, no forced insurance tie-ins, KFS disclosure.

NPA recognition timelines, IRACP provisioning, exposure limits, statutory reserve transfers, dividend payout eligibility.

No cash disbursal above limits, LTV and gold-loan norms, end-use monitoring, credit appraisal and valuation by independent valuers.

Fraud reporting timelines, IT governance and outsourcing controls, no unauthorised manual/back-end intervention, data security.

LSP/DLA governance, direct borrower-lender fund flow, outsourcing due diligence, no third-party routing of repayments.

Accurate and timely submission to all four CICs, correction of rejected data, free access to credit reports.

Timely and accurate returns, CRILC/XBRL filings, disclosure of complaints in financial statements.

LRS reporting, due diligence on inward remittances, foreign investment conditions in lending.

Miscellaneous directions issued by RBI.

Carrying on NBFC business within CoR conditions; non-compliance risks cancellation of registration.

Household income assessment, indebtedness caps and repayment-obligation ceilings.