India's banking and finance sector is one of the most complex and rapidly evolving regulatory environments in Asia. The Reserve Bank of India (RBI) exercises broad supervisory authority over banks, non-banking financial companies, payment systems, and foreign exchange transactions. For international businesses entering India through lending arrangements, project finance structures, or fintech partnerships, understanding the legal architecture is not optional - it is a prerequisite for commercial viability. This article maps the regulatory framework, key compliance obligations, financing instruments, dispute resolution pathways, and practical risks that international clients consistently underestimate.
India's financial sector is governed by a multi-layered statutory framework. The Reserve Bank of India Act, 1934 (RBI Act) establishes the central bank's authority to regulate monetary policy, issue currency, and supervise financial institutions. The Banking Regulation Act, 1949 (BR Act) governs the licensing, operations, and supervision of commercial banks, including foreign banks operating in India through branch or subsidiary structures.
Non-banking financial companies (NBFCs) - entities that provide financial services but do not hold a banking licence - are regulated under Chapter III-B of the RBI Act. NBFCs occupy a critical position in India's credit ecosystem, particularly in sectors underserved by scheduled commercial banks. Their regulatory treatment has tightened considerably in recent years, with the RBI introducing a scale-based regulation framework that classifies NBFCs into four layers depending on asset size and systemic importance.
The Securities and Exchange Board of India (SEBI) regulates capital markets, including debt securities, collective investment schemes, and foreign portfolio investment. The Insurance Regulatory and Development Authority of India (IRDAI) oversees insurance-linked financial products. The Insolvency and Bankruptcy Board of India (IBBI) administers the resolution framework under the Insolvency and Bankruptcy Code, 2016 (IBC). Each regulator operates within a defined statutory mandate, and transactions that straddle multiple product categories - such as structured credit with embedded insurance features - require coordinated regulatory analysis.
Foreign exchange transactions are governed by the Foreign Exchange Management Act, 1999 (FEMA). FEMA distinguishes between capital account transactions, which require specific RBI approval or fall within notified liberalised routes, and current account transactions, which are generally permissible subject to documentation. Cross-border lending, equity investment, and repatriation of proceeds each engage distinct FEMA provisions, and non-compliance carries civil penalties that compound over time.
A common mistake made by international clients is treating India as a single unified financial jurisdiction. In practice, state-level money lending legislation - such as the Maharashtra Money-Lending (Regulation) Act, 2014 - imposes additional licensing and interest rate requirements on lenders operating in specific states. A lender structured as an NBFC at the central level may still require a state money-lender's licence depending on the nature and geography of its lending activity.
Lending in India is subject to distinct regulatory regimes depending on the lender's category. Scheduled commercial banks lend under the BR Act and RBI's Master Directions on Interest Rate on Advances. NBFCs lend under the RBI's Master Direction - Non-Banking Financial Company - Systemically Important Non-Deposit taking Company and Deposit taking Company (Reserve Bank) Directions, 2016, as periodically updated. Foreign entities lending into India from offshore must comply with FEMA's External Commercial Borrowings (ECB) framework, which sets minimum average maturity periods, eligible borrower categories, and end-use restrictions.
The ECB framework, notified under FEMA and periodically revised through RBI circulars, permits Indian companies to borrow from recognised foreign lenders in foreign currency or Indian rupees. Track I ECBs - medium-term foreign currency denominated borrowings - carry a minimum average maturity of three years for amounts up to USD 50 million equivalent, and five years for larger amounts. Track III ECBs - rupee-denominated borrowings - are subject to separate hedging requirements. End-use restrictions prohibit deployment of ECB proceeds for real estate activities, investment in capital markets, or on-lending to other entities, subject to limited exceptions.
Credit documentation in Indian transactions typically involves a facility agreement, a deed of hypothecation over movable assets, a mortgage over immovable property, and a personal or corporate guarantee. Security creation and perfection follow distinct procedural requirements. Hypothecation of movable assets must be registered with the Central Registry of Securitisation Asset Reconstruction and Security Interest of India (CERSAI) under the Securitisation and Reconstruction of Financial Assets and Enforcement of Security Interest Act, 2002 (SARFAESI Act). Mortgage of immovable property requires registration under the Registration Act, 1908, with stamp duty payable at state-specific rates that can be commercially significant.
A non-obvious risk in cross-border lending is the treatment of guarantee fees and interest payments under the Income Tax Act, 1961. Payments made by Indian borrowers to foreign lenders are subject to withholding tax, typically at 20% plus surcharge and cess on interest, unless reduced by an applicable Double Taxation Avoidance Agreement (DTAA). Failure to withhold tax at source renders the Indian borrower liable for the shortfall, interest, and penalties. Many international lenders price transactions without adequately accounting for this withholding cost, which can materially alter the economics of the deal.
Enforcement of security under SARFAESI allows secured creditors to take possession of and sell secured assets without court intervention, subject to a 60-day notice period to the borrower. This mechanism is available only to banks and specified financial institutions, not to all NBFCs. For lenders outside the SARFAESI framework, enforcement requires civil court proceedings or, where applicable, proceedings before the Debt Recovery Tribunal (DRT) under the Recovery of Debts and Bankruptcy Act, 1993.
To receive a checklist for structuring cross-border lending transactions in India, send a request to info@vlolawfirm.com.
India's fintech sector operates at the intersection of multiple regulatory frameworks, and the absence of a single consolidated fintech statute creates both opportunity and legal uncertainty. Payment systems are regulated under the Payment and Settlement Systems Act, 2007 (PSS Act), which requires entities operating payment systems to obtain authorisation from the RBI. The Unified Payments Interface (UPI), operated by the National Payments Corporation of India (NPCI), has become the dominant retail payment infrastructure, processing billions of transactions monthly.
Prepaid payment instruments (PPIs) - including digital wallets and prepaid cards - are regulated under the RBI's Master Direction on Prepaid Payment Instruments. Full-KYC PPIs allow interoperability and higher transaction limits, while minimum-KYC PPIs carry strict usage restrictions. Foreign entities seeking to operate payment services in India must either obtain a Payment Aggregator (PA) licence from the RBI or partner with a licensed PA. The RBI's Guidelines on Regulation of Payment Aggregators and Payment Gateways, issued in 2020 and subsequently amended, set out net worth requirements, escrow account obligations, and merchant onboarding standards.
Peer-to-peer (P2P) lending platforms are classified as NBFCs under the RBI's Master Directions - Non-Banking Financial Company - Peer to Peer Lending Platform (Reserve Bank) Directions, 2017. These platforms are subject to aggregate exposure limits per lender and per borrower, mandatory escrow arrangements, and restrictions on providing credit enhancement or guarantees. The regulatory intent is to preserve the marketplace character of P2P lending and prevent platforms from taking on balance-sheet credit risk.
Account aggregators (AAs) - entities that facilitate the sharing of financial data between financial information providers and financial information users with customer consent - operate under the RBI's Master Direction - Non-Banking Financial Company - Account Aggregator (Reserve Bank) Directions, 2016. The AA framework is a consent-based data-sharing architecture that underpins open banking in India. International firms building data-driven credit or insurance products for the Indian market need to integrate with the AA ecosystem to access consented financial data lawfully.
In practice, it is important to consider that the RBI's regulatory sandbox framework, established in 2019, allows fintech entities to test innovative products under relaxed regulatory conditions for a defined period. Cohorts have covered retail payments, cross-border payments, MSME lending, and financial inclusion. Participation in the sandbox does not guarantee subsequent regulatory approval, but it provides a structured pathway for engaging with the regulator before full commercial launch.
A common mistake among international fintech entrants is assuming that a technology partnership with a licensed Indian entity eliminates their own regulatory exposure. The RBI's outsourcing guidelines and its directions on digital lending, issued in 2022, impose direct obligations on regulated entities regarding the conduct of their technology service providers and lending service providers (LSPs). Contractual indemnities do not substitute for regulatory compliance.
India's anti-money laundering framework is anchored in the Prevention of Money Laundering Act, 2002 (PMLA). The PMLA imposes obligations on reporting entities - which include banks, NBFCs, payment system operators, and certain other financial intermediaries - to maintain records, conduct customer due diligence (CDD), and report suspicious transactions to the Financial Intelligence Unit - India (FIU-IND). The PMLA was significantly amended in 2023 to expand the definition of reporting entities and strengthen beneficial ownership disclosure requirements.
Know Your Customer (KYC) norms are prescribed by the RBI through its Master Direction - Know Your Customer (KYC) Direction, 2016, as amended. The KYC framework requires customer identification, verification, risk categorisation, and ongoing monitoring. Aadhaar-based e-KYC, using biometric authentication through the Unique Identification Authority of India (UIDAI) infrastructure, is available to regulated entities for digital onboarding, subject to UIDAI's authentication framework and the Supreme Court's judgment on Aadhaar usage by private entities.
Beneficial ownership disclosure is required under both the PMLA and the Companies Act, 2013. Under Section 90 of the Companies Act, 2013, companies must identify and register significant beneficial owners (SBOs) - individuals holding more than 10% of shares, voting rights, or distribution rights, directly or indirectly. Failure to comply with SBO disclosure requirements attracts penalties and can result in restrictions on the transfer of shares. For foreign investors structuring Indian holding companies, the SBO framework requires careful upstream mapping of ownership chains.
The Foreign Contribution (Regulation) Act, 2010 (FCRA) imposes separate restrictions on the receipt of foreign contributions by Indian entities. While primarily applicable to non-profit organisations, FCRA has implications for certain structured finance transactions where foreign funds flow through Indian intermediaries. Misclassification of a transaction as a commercial arrangement when it has the character of a foreign contribution can trigger FCRA liability.
FIU-IND, established under the PMLA, receives suspicious transaction reports (STRs) and cash transaction reports (CTRs) from reporting entities and shares financial intelligence with law enforcement and regulatory agencies. Reporting entities that fail to file STRs within the prescribed timeline - seven working days from the date of forming a suspicion - face penalties under the PMLA. In practice, the threshold for forming suspicion is lower than many international compliance teams assume, and erring on the side of non-reporting creates greater regulatory risk than over-reporting.
To receive a checklist for AML and KYC compliance setup for financial entities in India, send a request to info@vlolawfirm.com.
Project finance in India involves the creation of a special purpose vehicle (SPV) - typically a private limited company under the Companies Act, 2013 - to ring-fence project assets and cash flows from the sponsor's balance sheet. Infrastructure sectors including roads, ports, airports, power generation, and renewable energy have been the primary recipients of project finance structures. The government's National Infrastructure Pipeline and the Production Linked Incentive (PLI) schemes have sustained deal flow in these sectors.
Security packages in Indian project finance transactions are more complex than in many comparable jurisdictions. A typical package includes a mortgage of immovable project assets, hypothecation of movable assets and receivables, pledge of SPV shares held by sponsors, assignment of project documents (including concession agreements, power purchase agreements, and EPC contracts), and a trust and retention account (TRA) arrangement governing cash flow waterfall. The TRA is governed by an agreement among the lenders, the SPV, and a designated bank, and it is the primary mechanism for ensuring that project revenues are applied in the agreed priority sequence.
The Insolvency and Bankruptcy Code, 2016 (IBC) has materially altered the risk calculus for project finance lenders. Under the IBC, a financial creditor can initiate corporate insolvency resolution process (CIRP) against a defaulting SPV by filing an application before the National Company Law Tribunal (NCLT). The CIRP must be completed within 180 days, extendable by 90 days with creditor approval. The resolution professional takes control of the SPV during CIRP, and the committee of creditors (CoC) - comprising financial creditors - approves the resolution plan. Lenders with security interests must navigate the IBC's moratorium provisions, which suspend enforcement of security during CIRP.
A non-obvious risk in infrastructure project finance is the treatment of government guarantees and sovereign support instruments. Viability Gap Funding (VGF) provided by the central government and state government support letters are not equivalent to sovereign guarantees and do not carry the same enforceability. International lenders that price political risk on the assumption of sovereign backing for state-owned project counterparties often discover, during stress scenarios, that the legal basis for that assumption is weaker than anticipated.
Foreign lenders participating in Indian project finance transactions through ECB must comply with end-use restrictions. ECB proceeds cannot be used for on-lending or investment in real estate, but can be used for capital expenditure in infrastructure projects. Where a project involves both eligible and ineligible components, lenders must structure drawdown and utilisation tracking mechanisms to demonstrate compliance. The RBI's authorised dealer banks are responsible for monitoring ECB utilisation and filing periodic reports.
Practical scenario one: a European infrastructure fund extends a USD 150 million ECB to an Indian road SPV. The fund must ensure the SPV is an eligible borrower, the lender is a recognised foreign lender, the minimum average maturity is met, and end-use is restricted to capital expenditure. Hedging obligations under the ECB framework apply to the extent the SPV has rupee revenues. Failure to hedge as required can result in compounding penalties under FEMA.
Practical scenario two: a domestic NBFC co-lends with a public sector bank to a renewable energy SPV under the RBI's co-lending model (CLM) framework. The CLM requires the NBFC and the bank to enter a master agreement specifying the loan ratio, interest rate methodology, and servicing responsibilities. The bank takes the senior tranche and the NBFC retains a junior tranche. Regulatory capital treatment differs for each party, and the documentation must clearly delineate origination, servicing, and collection responsibilities.
Practical scenario three: a foreign strategic investor acquires a controlling stake in an Indian NBFC engaged in infrastructure lending. The acquisition requires prior RBI approval under the BR Act and FEMA. The investor must demonstrate fit-and-proper criteria, submit a business plan, and comply with foreign ownership limits applicable to the NBFC category. Post-acquisition, the investor is subject to ongoing reporting obligations and cannot unilaterally alter the NBFC's business model without regulatory engagement.
Disputes in Indian banking and finance arise across several forums depending on the nature of the claim, the parties involved, and the contractual choice of law and jurisdiction. Domestic bank-borrower disputes over loan recovery are typically adjudicated before the Debt Recovery Tribunal (DRT), established under the Recovery of Debts and Bankruptcy Act, 1993. DRTs have exclusive jurisdiction over recovery claims by banks and specified financial institutions where the debt exceeds INR 20 lakhs. Appeals from DRT orders lie to the Debt Recovery Appellate Tribunal (DRAT).
The NCLT is the primary forum for insolvency proceedings under the IBC. Financial creditors initiate CIRP by filing an application supported by evidence of a financial debt and a default. The NCLT must admit or reject the application within 14 days of filing. Once admitted, the moratorium takes effect immediately, and the resolution professional is appointed. The IBC's strict timelines have reduced the average resolution period compared to the pre-IBC era, though complex infrastructure cases frequently require timeline extensions.
International arbitration is increasingly used in cross-border banking and finance disputes involving Indian parties. The Arbitration and Conciliation Act, 1996 (A&C Act), as amended in 2015 and 2019, governs both domestic and international commercial arbitration in India. Section 2(1)(f) of the A&C Act defines international commercial arbitration as arbitration where at least one party is a foreign national, foreign body corporate, or foreign government. Indian courts have generally supported the enforcement of international arbitration agreements and foreign awards, subject to the public policy exception under Section 48 of the A&C Act.
A common mistake in cross-border finance documentation is the use of exclusive foreign court jurisdiction clauses without a parallel arbitration agreement. Indian courts have, in certain circumstances, declined to enforce exclusive foreign jurisdiction clauses where the subject matter has a strong Indian nexus. An arbitration clause seated in a neutral jurisdiction - Singapore, London, or Paris - with the A&C Act as the applicable procedural law for enforcement in India provides greater certainty of enforcement.
The RBI's Banking Ombudsman Scheme, now consolidated under the Reserve Bank - Integrated Ombudsman Scheme, 2021, provides a free, expedited grievance redressal mechanism for retail and MSME customers of regulated entities. The Ombudsman can award compensation up to INR 20 lakhs. This mechanism is not available for disputes between financial institutions or for corporate borrowers above the MSME threshold.
Loss caused by incorrect dispute strategy in Indian banking matters can be substantial. A lender that pursues civil court proceedings instead of DRT proceedings for a qualifying debt loses the benefit of the DRT's summary procedure and faster timelines. A borrower that fails to challenge a SARFAESI notice within the 45-day window prescribed under Section 17 of the SARFAESI Act loses the right to approach the DRT for relief against the security enforcement action. Procedural defaults of this kind are difficult to remedy at a later stage.
The risk of inaction is particularly acute in IBC proceedings. A financial creditor that delays filing a CIRP application while the debtor dissipates assets may find that the resolution value of the company has deteriorated significantly by the time insolvency proceedings commence. The IBC's avoidance transaction provisions - covering preferential transactions under Section 43, undervalued transactions under Section 45, and fraudulent trading under Section 66 - allow the resolution professional to challenge pre-insolvency asset transfers, but recovery is not guaranteed and adds procedural complexity.
To receive a checklist for dispute resolution strategy in Indian banking and finance matters, send a request to info@vlolawfirm.com.
What is the primary risk for a foreign lender extending credit to an Indian borrower without local legal advice?
The primary risk is non-compliance with FEMA's ECB framework, which can render the loan agreement unenforceable and expose both the lender and the borrower to civil penalties. Beyond FEMA, withholding tax obligations on interest payments, security perfection requirements under SARFAESI and CERSAI, and state-level stamp duty on loan documents each carry independent compliance obligations. A foreign lender that relies solely on its home-jurisdiction documentation standards will typically produce a credit agreement that is legally deficient in the Indian context. Remediation after disbursement is costly and sometimes impossible without regulatory intervention.
How long does it take to enforce security or recover a debt in India, and what does it cost?
Timelines vary significantly by enforcement route. SARFAESI enforcement - available to banks and specified financial institutions - can result in possession and sale of secured assets within six to twelve months in straightforward cases, though borrower challenges before the DRT can extend this. DRT proceedings for debt recovery typically take one to three years at first instance, with further time for DRAT appeals. IBC CIRP proceedings are nominally capped at 270 days but frequently extend to two to three years in complex matters. Legal fees for contested enforcement proceedings start from the low tens of thousands of USD for DRT matters and can reach the low hundreds of thousands for complex IBC or arbitration proceedings. State-level stamp duty on security documents and court fees on DRT applications add to the overall cost.
Should a cross-border finance transaction involving India be governed by Indian law or a foreign law?
The choice depends on the transaction structure and the parties' enforcement strategy. Indian law is mandatory for security documents over Indian assets - mortgage deeds, hypothecation agreements, and share pledges must be governed by Indian law to be valid and enforceable in India. The facility agreement itself can be governed by English law or another foreign law, and Indian courts will generally recognise and apply a foreign governing law clause in commercial contracts. However, where enforcement is likely to occur in India, having the facility agreement governed by Indian law simplifies the evidentiary burden in DRT or NCLT proceedings. For transactions with significant cross-border elements and sophisticated counterparties, a dual-document structure - English law facility agreement with Indian law security documents - is a common and workable approach.
India's banking and finance legal framework rewards careful preparation and penalises improvisation. The regulatory architecture spans multiple statutes, multiple regulators, and multiple enforcement forums, each with distinct procedural requirements and timelines. International businesses that invest in structuring transactions correctly from the outset - addressing FEMA compliance, security perfection, tax withholding, and AML obligations before disbursement - avoid the disproportionate costs of remediation and enforcement failure. The IBC has improved creditor outcomes relative to the pre-2016 environment, but it has also introduced new strategic considerations for lenders and borrowers alike. Fintech and digital finance remain areas of active regulatory development, requiring ongoing monitoring of RBI directions and SEBI guidelines.
Our law firm VLO Law Firm has experience supporting clients in India on banking, finance, and regulatory compliance matters. We can assist with structuring cross-border lending transactions, ECB compliance, FEMA filings, security documentation, AML framework setup, and dispute resolution strategy before DRTs, NCLTs, and arbitral tribunals. We can help build a strategy tailored to your transaction structure and risk profile. To receive a consultation, contact: info@vlolawfirm.com.