Strategic Financial Management · Digital Finance

Digital Lending, Neo-Banking and Open Banking Explained

Updated 11 October 2026 · Fact-checked

Digital lending is credit given through apps and online platforms. Neo-banks are app-only front ends that depend on a licensed bank. Open banking lets customers share financial data with third parties through consent-based APIs; in India, account aggregators do this. To solve questions, identify the player, its regulator, the consent flow and the risk.

Understand Digital Lending, Neo-Banking and Open Banking

Digital finance changes who lends, who holds the customer and who owns the data. This topic has three strands: new ways to lend, new ways to bank, and new ways to share financial data.

Digital lending means credit that is applied for, assessed, sanctioned and repaid mostly through digital channels. The lender can be a bank, an NBFC, or a lender working through a lending service provider (LSP) such as an app that finds borrowers and collects documents. The regulated entity (RE) is the lender. The LSP is only its agent. The RBI's digital lending directions put the responsibility on the RE for what its LSPs do.

Peer-to-peer (P2P) lending connects individual lenders and borrowers on an online platform. In India, a P2P platform must be an RBI-registered NBFC-P2P. It acts only as an intermediary. It cannot lend its own money, cannot give guarantees or assured returns, and cannot take public deposits. Lenders and borrowers face individual and aggregate exposure limits set by the RBI. Check the current limits in your study material before quoting any figure. Crowdfunding is wider. It raises small amounts from many people for a project. Models include donation, reward, debt and equity. Equity crowdfunding sits under securities law, so it is not the same as P2P lending.

Key features of the RBI digital lending framework are these:
- Loans are disbursed directly into the borrower's bank account and repaid directly to the RE's account, not through an LSP's pool account.
- The borrower gets a key fact statement with the annual percentage rate (APR) and all charges before the loan is executed.
- Fees payable to an LSP are paid by the RE, not charged to the borrower.
- There is a cooling-off or look-up period during which the borrower can exit by paying the principal and the proportionate APR for the days the loan was availed, with no penalty. The length of this period is set by the RE's board, subject to the minimum in the RBI directions. Check the current minimum before quoting a figure.
- Data is collected only with clear consent, for a stated purpose, and stored in India as per the directions. Borrowers need a grievance redressal route.

Neo-banks are digital-only platforms with no branches. In India they do not hold a banking licence in their own name. For deposit and account services they partner with a licensed bank, which carries the regulatory duties. Some neo-banks offer credit through an NBFC partner. That partner provides credit only, because an NBFC cannot take demand deposits. The neo-bank owns the user interface and the customer experience. A traditional bank has branches, its own licence and its own balance sheet. Savings and current account balances are held only with the partner bank. Those balances get DICGC cover, because the partner is an insured bank. The cover is up to ₹5 lakh per depositor per bank, and it adds up all of the depositor's accounts in that bank. Any funds held with an NBFC are not DICGC-insured. The neo-bank itself is not a licensed deposit-taker.

Open banking means banks share customer data with authorised third parties through secure APIs, with the customer's consent. India's version is the Account Aggregator (AA) framework. An AA is an RBI-regulated NBFC-AA. It moves data between financial information providers (FIPs), such as banks, and financial information users (FIUs), such as lenders. The AA cannot read, store or use the data. It only passes it, encrypted, after the customer consents. The customer can see, pause or revoke consent. Lenders use AA data, such as bank statements, to assess cash flow and offer quicker, cheaper loans.

Key rules to remember

Digital lending chain: Borrower → LSP (agent) → Regulated Entity (lender) → direct disbursal and repayment via bank accounts; The RE is accountable. The LSP never holds the loan funds.
P2P platform status: P2P platform = RBI-registered NBFC-P2P = intermediary only; No own lending, no guarantee, no assured return, no deposits. Exposure limits apply.
Account aggregator flow: FIU request → customer consent → AA → FIP → encrypted data → AA → FIU; The AA is a conduit and cannot view the data. Consent is purpose-specific and revocable.
Annual percentage rate (APR): APR = annualised effective cost of the loan, including interest and all charges applicable to the loan, such as processing and other fees; Contingent charges, such as penal interest and late fees, are disclosed separately in the key fact statement. Use APR to compare offers, not the headline rate.
Neo-bank vs traditional bank: Neo-bank = app interface + partner bank licence; Traditional bank = own licence + branches + own balance sheet; Regulatory responsibility lies with the licensed partner. Deposits are held only where the partner is a bank. DICGC cover applies only to deposits with an insured bank, not an NBFC partner, and is up to ₹5 lakh per depositor per bank across all accounts in that bank. The neo-bank is not a licensed deposit-taker.

How to solve Digital Lending, Neo-Banking and Open Banking questions

Use this method for theory, case-scenario and MCQ questions on digital lending, neo-banking and open banking.

1Identify the entity in the question: bank, NBFC, LSP, P2P platform, neo-bank, AA, FIP or FIU.
2Name its regulatory status. Ask whether it is a regulated entity or only an agent or interface.
3List what it may do and what it may not do, such as lend, hold funds, store data or give guarantees.
4Trace the money flow and the data flow separately. Check consent at each data step.
5Test the facts against the RBI rules: direct disbursal, key fact statement, APR, cooling-off, data storage and grievance redressal.
6Decide who is accountable. Usually it is the regulated entity or licensed partner bank.
7For a comparison question, use fixed heads: licence, customer ownership, products, cost, risk and protection.
8Close with a one-line conclusion or recommendation that fits the case.

Quickest way: Who, Money, Data, Consent

When to use it: Use this for MCQs and short case questions when you have under two minutes.

Who: label each party as RE, LSP, AA, FIP, FIU or partner bank.
Money: check that funds go directly between the borrower and RE accounts.
Data: check that the data is taken only with consent and for a stated purpose.
Consent: check that the customer can revoke it and that the AA does not see the data.
Eliminate any option that gives an LSP, an AA or a P2P platform a power it does not have.

Common mistakes in Digital Lending, Neo-Banking and Open Banking

Treating the lending app as the lender.
The app is the part the customer sees, so it looks like the lender.
Fix: Remember that the LSP is an agent. The regulated entity is the lender and is accountable.
Saying a P2P platform can lend its own funds or promise returns.
Students confuse P2P with an NBFC lender or a deposit scheme.
Fix: Write that an NBFC-P2P is only an intermediary. It gives no guarantee or assured return and takes no deposits.
Saying an account aggregator stores and analyses customer data.
The word 'aggregator' suggests collecting and processing data.
Fix: State that the AA only passes encrypted data on the customer's consent. It cannot read, store or use it.
Calling a neo-bank a licensed bank with no branches.
Digital-only sounds like a different kind of bank licence.
Fix: Say that in India a neo-bank works through a licensed partner, which holds the licence. Deposits are held only with a partner bank, not an NBFC.
Mixing up crowdfunding and P2P lending.
Both raise money from many people online.
Fix: Crowdfunding is the wider term and includes donation, reward, debt and equity models. P2P is only lending, through a registered NBFC-P2P.
Quoting specific limits or timelines from memory without certainty.
RBI directions are updated and students mix old and new figures.
Fix: Use exact figures only if you are sure they are current. Otherwise state the principle, such as 'exposure limits apply'.

Worked examples

Example 1

Case: Rupee Quick, a mobile app, finds borrowers for Bharat Finance Ltd, an NBFC. Rupee Quick collects the borrower's documents and receives a pooled settlement account where loan money first lands and is then forwarded to the borrower. It also charges the borrower a processing fee. Identify the roles and point out the issues under the RBI digital lending framework.

Show the solution

Roles: Bharat Finance Ltd is the regulated entity (lender). Rupee Quick is the lending service provider (agent).
Issue 1: Funds pass through Rupee Quick's pool account. Under the framework, disbursal must go directly from the RE's bank account to the borrower's account, and repayments directly to the RE.
Issue 2: Rupee Quick charges the borrower a fee. Under the framework, fees for an LSP's services are paid by the RE, not charged to the borrower.
Issue 3: The RE stays accountable for the LSP's conduct, so Bharat Finance must correct the process.
Fix: Direct disbursal and repayment, a key fact statement with APR before execution, fees paid by the RE, and consent-based data collection.

Answer: Bharat Finance is the lender and Rupee Quick is its agent. The pooled-account flow and the borrower-paid LSP fee both breach the framework. Bharat Finance must switch to direct bank-to-bank flows, bear the LSP fee itself and disclose the APR.

Example 2

Priya Textiles, an MSME, wants a working capital loan. Its lender, Kaveri Bank, uses the account aggregator framework. Explain how the data moves and what protects Priya's privacy.

Show the solution

Kaveri Bank is the financial information user (FIU). It needs Priya's bank statements.
Priya's own bank is the financial information provider (FIP).
Kaveri Bank sends a consent request for the data through an NBFC-AA, such as a licensed aggregator.
The AA shows Priya the consent request with the purpose, the data type and the period. She approves it through the AA.
Once consent is given, the AA requests the data from her bank. The bank sends the data to the AA in encrypted form.
The AA passes the data to Kaveri Bank without reading, storing or using it.
Privacy protection: consent is specific to a purpose, Priya can see and revoke it, and the AA cannot see the data.

Answer: Data flows FIU consent request → Priya approves via AA → AA requests FIP → FIP sends encrypted data → AA → FIU. Privacy is protected by purpose-specific, revocable consent and an AA that acts only as a blind conduit.

Exam tips

Case scenarios often hide a breach, such as an LSP holding funds. Read each sentence and ask who holds the money and the data.
In comparison questions, use heads such as licence, customer ownership, cost and protection. Do not write an unstructured paragraph.
Use the standard terms: RE, LSP, NBFC-P2P, NBFC-AA, FIP, FIU, APR and key fact statement.
Do not quote exact limits or dates unless you are sure. State the principle instead.
For a recommendation, name the benefit (speed, financial inclusion) and the risk (data privacy, over-indebtedness).

Practice questions from Digital Finance

Digital Lending, Neo-Banking and Open Banking: frequently asked questions

What is the account aggregator framework in simple words?

It is an RBI-regulated system where a licensed NBFC-AA moves your financial data from one institution to another only after you consent. The AA cannot read or keep the data. You can view and revoke your consent.

What is the difference between neo-banking and traditional banking?

A traditional bank has its own licence, branches and balance sheet. A neo-bank is a digital-only interface that runs on a partner's licence in India and is not itself a licensed deposit-taker. Savings and current account balances are held only with the partner bank. They then carry DICGC cover of up to ₹5 lakh per depositor per bank, across all the depositor's accounts in that bank. An NBFC partner provides credit only and cannot take demand deposits, and any funds held with an NBFC are not DICGC-insured.

Can a P2P lending platform guarantee returns to lenders?

No. An RBI-registered NBFC-P2P is only an intermediary. It cannot guarantee returns or lend its own funds and cannot accept public deposits.

Who is responsible if a lending app breaks the rules?

Under the RBI digital lending framework, the regulated entity that gives the loan remains responsible for its LSPs. The LSP is only its agent.