Open any app store and search for “instant loan.” You’ll find hundreds of options promising ₹5,000 to ₹5,00,000 in minutes, with minimal documentation and no collateral. Some are legitimate NBFC-backed platforms with proper RBI registration. Others occupy a grey zone that regulators are only now beginning to address.

The micro-lending market in India has grown at a compound annual rate exceeding 40% since 2021, driven by smartphone penetration, Aadhaar-based KYC, and UPI-enabled disbursements. The problem isn’t the growth itself — it’s that the regulatory infrastructure was designed for a world where lending involved branch visits, paper applications, and weeks of processing.

The Scale of the Problem

According to RBI’s latest Financial Stability Report, digital lending platforms disbursed approximately ₹1.2 lakh crore in loans during FY2025, up from ₹33,000 crore in FY2021. The borrower base has expanded from roughly 2 crore to over 12 crore accounts.

These numbers are impressive. They’re also incomplete. The RBI’s data captures only loans originated through regulated entities — registered NBFCs and banks that use digital platforms as origination channels. It doesn’t fully account for the peer-to-peer lending platforms, the employer salary advance apps, or the numerous fintech companies that structure their products as “credit lines” rather than traditional loans to avoid certain regulatory triggers.

The actual volume of digital micro-lending in India is likely 30-40% higher than official figures suggest.

What RBI’s Digital Lending Guidelines Actually Cover

The RBI’s Digital Lending Guidelines issued in September 2022 were a meaningful step. They established that all lending must flow through regulated entities, required that loan disbursements and repayments go directly between borrower and lender bank accounts (no pass-through via fintech wallets), and mandated disclosure of the annual percentage rate and all fees upfront.

These guidelines solved the most egregious problems. Before them, several digital lenders were charging effective annual interest rates exceeding 300% while burying the cost structure in processing fees and “platform charges.” Some were accessing borrowers’ contact lists and sending threatening messages to family members when repayments were late.

But the guidelines have gaps. Significant ones.

First, enforcement capacity is limited. The RBI has revoked registrations of several dozen NBFCs since 2022, but the number of entities operating through digital channels far exceeds the regulator’s ability to monitor them individually. An analysis by the Internet and Mobile Association of India found over 600 active lending apps on Indian app stores in late 2025. Many operate through complex corporate structures that make identifying the actual lending entity difficult.

Second, the guidelines don’t adequately address pricing. While disclosure is mandated, there’s no cap on interest rates for NBFC lending. A micro-lending app charging 45% annual interest on a ₹10,000 three-month loan to a daily wage worker is fully compliant with disclosure norms — it just has to show the rate clearly. Whether that rate is exploitative is a question the current framework doesn’t really engage with.

Third, algorithmic credit decisions remain a black box. Most digital micro-lenders use proprietary credit scoring models that incorporate non-traditional data — smartphone usage patterns, social media activity, transaction history, location data. The RBI requires that borrowers be informed of the factors affecting their credit decision, but the practical implementation of this requirement is often a generic decline message rather than meaningful transparency.

The Debt Spiral Risk

The most concerning aspect of unregulated micro-lending growth isn’t individual loan sizes — it’s stacking. A borrower who takes a ₹15,000 loan from one platform and struggles to repay can, within minutes, take a ₹20,000 loan from another platform to cover the first, creating a cascading debt cycle.

Credit bureau data should theoretically prevent this, but there’s a timing problem. Bureau records update with a lag of days to weeks. A borrower can take loans from multiple platforms within a 48-hour window before any of them show up on a credit report.

The firms working on AI-based solutions for lending risk assessment, including Team400, have pointed out that real-time credit monitoring infrastructure would significantly reduce stacking risk. But building that infrastructure requires coordination between the four licensed credit bureaus, the RBI, and hundreds of lending platforms — a coordination problem that nobody has yet solved satisfactorily.

Where This Is Heading

The RBI has signalled through multiple speeches and working papers that further regulation is coming. Expected measures include:

A lending app registry. Similar to what Google and Apple have done voluntarily (removing unverified lending apps), but mandated by regulation. Every app offering credit products would need to be registered with the RBI or a designated self-regulatory organisation.

Real-time loan reporting. Requiring digital lenders to report loan originations to credit bureaus within 24 hours, rather than the current 30-day cycle. This directly addresses the stacking problem.

Interest rate guidelines for micro-loans. Not necessarily a hard cap, but likely a benchmark-linked ceiling for loans below ₹1 lakh. The Malegam Committee had recommended a margin cap for microfinance institutions back in 2011, and similar logic may be applied to digital micro-lending.

Data usage restrictions. Stricter rules on what personal data lending apps can access and how they can use it. The Digital Personal Data Protection Act of 2023 provides the legal basis, but specific sectoral guidelines for lending are still being developed.

The Bigger Picture

India’s micro-lending boom is, in many ways, exactly what financial inclusion advocates have been asking for. Credit access has reached populations that traditional banks wouldn’t touch — street vendors, gig workers, agricultural labourers, women running home-based businesses. The convenience is genuine and the speed is transformative.

But financial inclusion without borrower protection isn’t inclusion — it’s extraction. The next phase of India’s digital lending story will be defined by whether regulators can build guardrails fast enough to protect vulnerable borrowers without strangling the innovation that’s made credit accessible in the first place.

That balance is incredibly difficult to get right. So far, RBI has shown a willingness to act, but the pace of regulatory development still lags behind the pace of market innovation. The gap between those two speeds is where borrowers get hurt.