CertiFlex logo CertiFlex

Industry Intelligence · Banking & Digital Lending

Your lending products reach borrowers through dozens of digital partners. Every one of them speaks for your brand.

RBI is tightening advertising, marketing, and agent governance across NBFCs and digital lending — with a hard effective date of 1 January 2027. This hub summarises the shifting rules, your typical chain, and what to get right before examiners and borrowers see a problem first.

Sign Up

Overview

A changing legal landscape

Curated for distribution and compliance leaders · Last updated October 2026

From product rules to full-funnel accountability

Digital lending guidelines already require clear RE–LSP contracts, borrower-facing disclosure of the regulated entity, and honest representation of DLAs in RBI’s reporting framework. The 2026 Responsible Business Conduct amendments add a dedicated advertising and marketing chapter for NBFCs: board-approved policies, DSA/DMA governance (including LSPs acting as agents), explicit consent for promotional contact, and bans on dark patterns and mis-selling.

What shifts on 1 January 2027

NBFCs must treat DSAs, DMAs, and LSPs in promotional roles as part of the same control environment — training, audits, disciplinary action, and factual ads with rates and fees at every digital touchpoint. Third-party products cannot be advertised as the NBFC’s own; multi-lender apps must show neutral offer comparison without nudging toward a preferred lender. Consumer law (CCPA dark-pattern guidelines) continues to apply to app funnels and subscription-style lending journeys in parallel.

Your distribution chain

Where promotional risk concentrates in Indian digital lending

Regulated entity (Bank / NBFC / HFC)
→ Loan Service Providers (LSPs)
→ Digital Lending Apps (DLAs) — RE-owned or LSP-operated
→ Direct Selling Agents (DSAs) & sub-agents
→ Digital Marketing Agents (DMAs) & affiliate networks
→ Influencers, comparison sites, and paid social creators

Why this matters: RBI defines LSPs and DLAs as part of outsourced digital lending; DSAs/DMAs are now explicitly in scope for advertising conduct when they sell or influence customers on your behalf.

  • At the RE: You own policy, approvals, and mis-selling remediation — even when the post or app screen was built by a partner.
  • At LSP/DLA layer: Highest volume of borrower-facing copy — rates, “instant approval,” and third-party product blur create exam findings.
  • At long-tail partners: Influencers and affiliates often use outdated creatives after you have withdrawn a product or changed pricing.

Common pitfalls

Do’s and don’ts for REs and distribution teams

Do

  • Maintain a board-approved advertising and marketing policy that names LSPs, DSAs, and DMAs in scope.
  • Disclose the regulated entity, APR, fees, and key terms on every digital channel — including partner landing pages.
  • Obtain and record explicit consent before promotional SMS, WhatsApp, or email; honour opt-out instantly.
  • Audit partner sites and app store listings quarterly; pull archived copies when you change rates or products.
  • Ensure DLAs never imply RBI “registration” or endorsement in marketing materials.

Don’t

  • Let partners market co-branded or third-party loans as your “own” product without clear TPPS disclosure.
  • Use dark patterns — hidden fees, pre-ticked insurance, or false urgency — in onboarding or lead funnels.
  • Leave influencer or affiliate creatives unsupervised after a rate change or product sunset.
  • Allow DSAs to use your logo or trademark without a current agency agreement and code of conduct acceptance.
  • Assume app-store or marketplace copy is “the platform’s problem” — borrower complaints still land on the RE.

Industry news & notices

Recent regulatory signals affecting digital lending promotion

NBFC Responsible Business Conduct — advertising & marketing amendments

Second Amendment Directions tighten NBFC advertising, marketing, and sale of financial products — including DSA/DMA/LSP governance, dark-pattern prohibitions, and mandatory disclosures. Effective 1 January 2027.

RBI notification →

Digital lending master directions — LSP & DLA reporting

Consolidated digital lending instructions require contractual RE–LSP clarity, borrower disclosure, and that inclusion in RBI’s DLA reporting must not be misrepresented as RBI endorsement in partner marketing.

Master Directions →

Dark pattern guidelines for digital platforms

Consumer authority guidelines on misleading UI and funnels apply to lending apps and lead-generation journeys — often cited alongside RBI conduct expectations.

CPA 2019 reference →

Summaries are for orientation only; rely on official RBI and CCPA publications for compliance decisions.

How CertiFlex covers this vertical

Licence-aware packs: PACK_BANK, PACK_NBFC, PACK_PAYMENT_AGG. Distribution Monitoring maps LSPs, DLAs, DSAs, and influencers; weekly crawls screen RBI-aligned and CCPA dark-pattern rules; Mitigate ties findings back to your graph with evidence.

See your lending distribution chain before January 2027.

Map partners, run weekly monitoring, and build the evidence trail RBI expects.

Sign Up