A Practical Guide to Peer-to-Peer Lending & Account Aggregator Licensing
Peer-to-Peer lending platforms and Account Aggregators are not ordinary fintech startups — they are Non-Banking Financial Companies regulated directly by the Reserve Bank of India, and both carry a Certificate of Registration requirement before a single rupee of customer money or a single byte of financial data can move through the platform. Getting the entity structure, Net Owned Fund, fit-and-proper promoter profile, and technology architecture wrong at the application stage does not just delay launch — it can mean outright rejection and a fresh application cycle. PNPC Global has advised NBFC and fintech promoters across India and the UAE since 1986 on RBI licensing, and we stay engaged from the pre-application structuring conversation through the annual compliance cycle that follows registration — not just the day the Certificate of Registration is issued.
What This Actually Covers
An NBFC-Peer to Peer Lending Platform (NBFC-P2P) is a non-banking financial company that operates an online platform to bring individual and institutional lenders and borrowers together for unsecured personal loans, without the platform itself lending from its own books. It is regulated under the RBI Master Directions – Non-Banking Financial Company – Peer to Peer Lending Platform (Reserve Bank) Directions, 2017 (as amended from time to time), issued under Sections 45-IA and 45JA of the Reserve Bank of India Act, 1934. A P2P platform acts purely as an intermediary or marketplace: it matches lenders with borrowers, facilitates loan agreements, handles disbursement and repayment through escrow-style nodal/trust accounts, and earns fee-based revenue — it does not raise deposits, does not hold funds on its own balance sheet as a lender, and does not guarantee returns or provide credit enhancement to participants.
For the full scope, current process and what PNPC includes, see the dedicated Peer-to-Peer Lending & Account Aggregator Licensing service page.
When You'd Need This
- You are building a digital platform that matches individual or institutional lenders with individual borrowers for unsecured personal loans, and the platform itself will not lend from its own balance sheet — this is the NBFC-P2P activity requiring RBI CoR before launch
- You are building a consent-based data-sharing platform intended to pull financial information (bank statements, GST returns, tax data, insurance, investment holdings) from regulated Financial Information Providers and deliver it to lenders or other regulated Financial Information Users — this is the NBFC-AA activity, a distinct RBI licence from P2P
- You are a fintech, lending, or wealthtech company evaluating whether to integrate as a Financial Information User (FIU) with an already-licensed Account Aggregator, and need advisory on the participation agreement, consent-flow compliance, and data-usage restrictions rather than a fresh AA licence yourself
- You are a bank, NBFC, insurer, mutual fund, or pension fund considering onboarding as a Financial Information Provider (FIP) on the Account Aggregator network and need regulatory and technology-compliance advisory on that participation
Before You Assume You Need This
- You are building a traditional lending business that lends from your own balance sheet (on-book lending) rather than merely matching third-party lenders and borrowers — this requires a standard NBFC-Investment and Credit Company (NBFC-ICC) registration, a different Master Direction and NOF threshold, not the P2P framework
- You are a digital lending app that partners with a bank or NBFC to originate and service loans on the regulated entity's books (the loan service provider / lending service provider model) — this is governed by RBI's Digital Lending Guidelines, not the P2P Master Direction, since the platform is not itself matching P2P lenders and borrowers
- You want to build a personal finance or budgeting app that only displays a user's own data back to them, with no data transmission to a third-party FIU for lending, underwriting, or wealth-advisory purposes — this may not require an AA licence at all if no regulated data-sharing to a third party is involved; a narrower data-privacy and technology advisory may be the correct engagement
Questions We're Actually Asked
What exactly is the difference between an NBFC-P2P and an NBFC-Account Aggregator?
They are two entirely separate RBI-regulated activities governed by two different Master Directions. An NBFC-P2P operates a marketplace that matches individual lenders with individual borrowers for unsecured personal loans — money moves between the participants through escrow accounts, and the platform earns a fee without lending from its own books. An NBFC-Account Aggregator never handles money at all — it operates a consent-based technology layer that retrieves a customer's financial data from banks, NBFCs, insurers, and other Financial Information Providers, and transmits it to a lender or other Financial Information User only with the customer's explicit, revocable consent. One is a lending marketplace; the other is a regulated data pipe. Neither can be operated under the same Certificate of Registration as the other.
Do I need RBI registration before I can even build and test the platform?
You can build and internally test the technology. What you cannot do is operate the regulated activity commercially — onboard real lenders and borrowers to facilitate actual P2P loans, or go live with real customer consent flows moving actual financial data to a Financial Information User — before the Certificate of Registration is issued. Operating the commercial activity without RBI registration is a contravention of Section 45-IA of the RBI Act.
What is the Net Owned Fund requirement for a P2P or Account Aggregator licence?
RBI prescribes a minimum Net Owned Fund threshold for both categories under their respective Master Directions, computed per the Section 45-IA definition of NOF — broadly, paid-up equity capital and free reserves, reduced by accumulated losses, deferred revenue expenditure, and certain specified intangible assets and investments in group companies. Because RBI periodically revises these thresholds, we confirm the exact figure applicable as of your specific filing date during the pre-application consultation rather than quoting a number that may already be superseded.
Where PNPC Fits In
If you are building a P2P lending platform or an Account Aggregator, the licensing decision you get right — or wrong — in the first month shapes every year of regulatory standing that follows. Talk to PNPC before you draft the application, not after RBI's first query arrives.
PNPC Global has advised Chennai, Bangalore and Hyderabad businesses since 1986. Explore the full FEMA & RBI practice for related services, or go straight to the Peer-to-Peer Lending & Account Aggregator Licensing page for specifics.
Specific rates, fees, thresholds and deadlines are set by the relevant authority and change over time — this article deliberately does not quote figures that could go stale. Confirm current numbers directly with PNPC or the official source before you act.