How is credit risk regulated in Indian banking? Primarily through Basel III capital adequacy norms, which the RBI enforces with tighter minimums than the global standard requires. Banks must hold at least 9% CRAR, including a 2.5% capital conservation buffer. Provisioning discipline, stress testing, and ongoing RBI supervision back that up.
Credit risk is simple to define but hard to manage. A borrower fails to repay a loan or meet a contractual obligation, and the lender loses principal, interest, or both. It shows up across retail lending, corporate credit, and treasury counterparty exposures — a missed home loan EMI and a defaulted corporate bond are both credit risk, just at different scales. A single default is manageable, since a bank absorbs it through normal provisioning. By contrast, widespread, correlated defaults are a different problem. They erode capital fast, and in severe cases threaten depositor confidence and the stability of the wider system.
Left alone, this risk tends to build up quietly. Underwriting standards loosen during good times, defaults stay low, and the risk surfaces all at once when the cycle turns. Regulators can’t leave that to each bank’s internal judgment. They need an external, enforceable framework instead — one that sets minimum capital, dictates how losses get recognised, and gives a supervisor room to step in before trouble spreads.
Credit risk regulation in India works on two levels. The Basel Committee on Banking Supervision, housed at the Bank for International Settlements, sets the global minimum standards known as Basel III. These aren’t directly enforceable law anywhere, though — they bind only once a national regulator adopts and adapts them. In India, that regulator is the RBI.
The RBI has folded its Basel III rules into the Master Circular – Basel III Capital Regulations (RBI/2025-26/08, DOR.CAP.REC.2/21.06.201/2025-26, dated April 1, 2025), which banks must follow as law under the Banking Regulation Act, 1949. And where global Basel III sets a floor, the RBI often sets a higher one. That reflects the risk profile and concentration patterns specific to Indian banking.
Regulation doesn’t stop at capital, either. The RBI separately governs how banks classify stressed assets, how much they provision against expected losses, and how they measure and report risk internally. On April 27, 2026, it issued final Directions on this front. These move banks from incurred-loss provisioning to a forward-looking Expected Credit Loss (ECL) framework aligned with IFRS 9 principles, alongside a revised Standardised Approach for calculating credit risk capital charges.
Both sets of Directions finalise the October 2025 drafts, with refinements on points like prudential floors and how purchased or originated credit-impaired assets get treated. Both take effect from April 1, 2027, giving banks a runway to get their models, data, and governance in order. A separate regulation — the RBI (Commercial Banks – Credit Risk Management) Directions, 2025 — is already in force. It covers board-approved credit policies, credit risk evaluation standards, and things like unhedged foreign currency exposure monitoring.
So, how is credit risk regulated at the capital level? Capital is the core mechanism: banks must hold it in proportion to how risky their assets are, so that losses hit shareholders before they hit depositors. The Capital to Risk-weighted Assets Ratio, or CRAR, is how this gets measured:
CRAR = (Tier 1 Capital + Tier 2 Capital) ÷ Risk-Weighted Assets × 100
The RBI’s minimums exceed Basel III’s global floor at every level:
Three banks — the State Bank of India, HDFC Bank, and ICICI Bank — carry an extra CET1 surcharge. The RBI classifies them as Domestic Systemically Important Banks (D-SIBs): institutions whose failure would shake the wider financial system. Accordingly, their surcharges run 0.80%, 0.40%, and 0.20% respectively, under the RBI’s latest classification.
Meanwhile, the RBI also sets a minimum leverage ratio — 4% for D-SIBs, 3.5% for everyone else, effective since October 1, 2019. It’s a simple, risk-insensitive backstop against banks over-extending their balance sheets.
For instance, a bank holding ₹9,200 crore of eligible capital against ₹80,000 crore of risk-weighted assets has a CRAR of 11.5%. That’s right at the effective floor, with nothing to spare if a downturn hits.
For credit exposures, the RBI mandates the Standardised Approach (SA) for calculating risk-weighted assets, rather than the Internal Ratings-Based (IRB) approach many global banks use. Under IRB, by contrast, banks estimate their own Probability of Default and Loss Given Default inputs for capital purposes. That takes mature internal data, long default histories, and validated models — which most Indian banks haven’t built to the RBI’s satisfaction yet. The SA sidesteps that by applying regulator-prescribed risk weights per exposure category instead.
The RBI’s final Directions on this framework, issued April 27, 2026, made it noticeably more risk-sensitive. They introduce more granular risk weights for corporate, MSME, and real estate exposures. They also lower risk weights for AA, BBB, and BB-rated entities, including A1-rated short-term paper, and adjust credit conversion factors for off-balance-sheet items. All of it takes effect April 1, 2027.
Capital sets the floor. On top of it, the RBI runs several other tools to keep credit risk in check day to day.
Banks currently work under the Income Recognition, Asset Classification and Provisioning (IRACP) framework. It classifies a loan as non-performing once the loan is 90 days past due. Provisions then escalate as the account ages through sub-standard, doubtful, and loss categories. It’s an incurred-loss model — trouble has to become visible before it gets recognised.
The RBI’s final ECL Directions replace that with a three-stage, forward-looking model instead. Stage 1 covers exposures with no significant rise in credit risk since origination and uses 12-month expected losses. Once credit risk has risen materially, the exposure moves to Stage 2, which uses lifetime expected losses. Assets that are already credit-impaired fall into Stage 3. In addition, banks have to build forward-looking macroeconomic scenarios into their ECL estimates, and the RBI wants a minimum of three — stricter than IFRS 9 itself requires.
Beyond provisioning, banks run their own internal stress tests across credit, liquidity, and interest rate risk. The RBI runs its own too, publishing macro stress test results periodically in its Financial Stability Report. These checks show whether the banking system’s capital could absorb a sharp NPA spike or a growth shock.
Banks use internal credit scoring, PD models, and provisioning models — including for Loss Given Default (LGD) estimation. Wherever they do, the RBI expects periodic validation and back-testing. Models drift as portfolios and economic conditions change, and validation is what keeps pricing and provisioning accurate.
Under its Risk-Based Supervision framework, the RBI runs Annual Financial Inspections. It also keeps a continuous eye on asset quality trends, credit concentration, and early-warning indicators in between.
If a bank’s financial position deteriorates, the RBI’s PCA framework — revised effective January 1, 2022 — triggers automatic restrictions based on defined thresholds. A CRAR between 7.75% and 10.25%, or a net NPA ratio between 6% and 9%, breaches Risk Threshold 1. That brings restrictions on dividend payouts, branch expansion, and further lending, until the bank’s position improves.
For banks, none of this is background compliance — it directly shapes what they can do. Capital adequacy sets how much a bank can lend, at what price, and how much it can return to shareholders. Breaching PCA thresholds can freeze growth plans overnight.
For borrowers, the same rules shape what credit costs and how available it is. Risk weights under the Standardised Approach affect how expensive a loan is for a bank to fund, which flows straight through to pricing. The revised SA’s more granular treatment of MSME and real estate exposures should ease that pricing for some borrowers once it kicks in.
For the financial system as a whole, several layers work together: capital rules, provisioning discipline, stress testing, and active supervision. Together they reduce the odds that a wave of defaults turns into a systemic crisis. It’s a lesson regulators worldwide relearned after 2008 exposed just how thin some banks’ capital buffers really were.
None of this is just compliance trivia, either. Anyone building credit scorecards, PD/LGD models, or provisioning engines is working inside these capital and provisioning rules, whether they think about it or not. In practice, a model has to satisfy RBI’s validation expectations, not just perform well statistically. Understanding that difference often separates a model that survives audit from one that gets flagged and sent back for rework.
Explore our Credit Risk Modeling Certification Training to master Risk Analytics. Learn how to build PD, LGD, and ECL models that hold up to RBI’s regulatory standards.
What is the minimum capital adequacy ratio required by the RBI?
The RBI requires a minimum CRAR of 9% of risk-weighted assets, above Basel III’s global floor of 8%. Including the 2.5% capital conservation buffer, the effective minimum for a well-capitalised bank is 11.5%.
Does India use the IRB approach for credit risk capital?
No. The RBI mandates the Standardised Approach (SA) for all Indian banks, using regulator-prescribed risk weights. The IRB approach instead requires banks’ own internal PD/LGD models.
What is the capital conservation buffer?
It’s an extra 2.5% of risk-weighted assets, held entirely in Common Equity Tier 1 capital. Banks build it up in good times, so they can draw it down during stress without breaching their minimum requirements. It’s been in force since October 1, 2021.
Is India adopting IFRS 9-style Expected Credit Loss provisioning?
Yes. In fact, the RBI issued final Directions on April 27, 2026, moving Indian banks from the incurred-loss IRACP model to a three-stage, forward-looking Expected Credit Loss framework aligned with IFRS 9 principles, effective April 1, 2027.
What happens if a bank breaches RBI’s capital requirements?
The bank falls under the RBI’s Prompt Corrective Action framework. This imposes automatic restrictions, such as limits on dividend payouts, branch expansion, and new lending. How severe they are depends on how far its CRAR, net NPA ratio, or leverage ratio has slipped below the prescribed thresholds.
Explore Dexlab Analytics’ Credit Risk Modeling certification program to build PD, LGD, and EAD models from scratch, work through IFRS 9 ECL frameworks, and learn model validation techniques used by practicing risk teams.
.
Credit and Market Risk, Credit Risk, credit risk analysis, Credit Risk Analytics And Modeling, credit risk analytics training, Credit risk certification India, Credit risk modeling course India, Credit Risk Modelling, Credit Risk Modelling Using SAS, Credit scorecard modeling, Expected credit loss ECL, IFRS 9 modeling course India, Logistic regression scorecard, PD LGD EAD modeling, Python credit risk modeling, Risk Management Courses, risk management courses online, Risk Management in Banking
Comments are closed here.