IIBF NBFC common mistakes
IIBF NBFC · Understand the traps and how to avoid them.
Treating every deposit-taking and non-deposit-taking NBFC under one rulebook, instead of first classifying the entity as Type I (non-deposit taking, including systematically important) or Type II (deposit taking), and then applying the correct scale-based layer.
Candidates memorise a single list of thresholds and ratios from coaching summaries and never internalise that the 2021 scale-based regulatory framework (base, middle, upper, top layers) replaced the older systemic-importance-only approach, so they apply the wrong set of norms to a given fact pattern.
What to do instead
Before answering any regulatory question, write down the entity's classification chain: deposit-taking or not, systemic importance (asset size of Rs 500 crore or more), and the applicable layer. Then state which specific direction and paragraph governs. Practise classifying ten short entity profiles until the chain is automatic.
Applying the statutory liquidity ratio and cash reserve ratio figures that apply to banks to an NBFC, or assuming deposit-taking NBFCs have no reserve requirements at all.
Bank ratios are the most heavily publicised numbers in Indian finance, so they crowd out the NBFC-specific figures. Candidates also confuse the liquid asset maintenance requirement for deposit-taking NBFCs with the CRR regime for banks.
What to do instead
Learn the deposit-taking NBFC reserve requirement as a separate, self-contained fact: the minimum liquid asset holding in unencumbered approved securities and the statutory liquid ratio, plus the prohibition on holding these as deposits with group companies. Build a two-column comparison table of bank versus deposit-taking NBFC reserve norms and revise it weekly.
Confusing the NOF (net owned fund) requirement with net worth, tangible net worth, or capital adequacy, and applying the wrong minimum to a new applicant versus an existing NBFC.
The terms sound interchangeable and the thresholds have been raised over time, so candidates mix the entry-level NOF for registration with the ongoing minimum and with the capital-to-risk-weighted-assets ratio.
What to do instead
Define each term precisely in your own notes: NOF as the aggregate of paid-up equity capital and free reserves less accumulated losses, deferred revenue expenditure and other intangible assets, with the prescribed deductions. Then record the current minimum NOF for new registration and for existing NBFCs separately, and keep capital adequacy as a third, distinct concept.
Assuming all lending by an NBFC is governed by the same fair-practice and interest-rate rules, without checking whether the entity falls into the microfinance, gold-loan, or general lending regime.
The fair practices code, the microfinance directions and the gold loan directions each impose different caps on margins, different disclosure requirements and different pricing rules. Candidates learn one code and apply it everywhere.
What to do instead
For each product line, memorise the three or four rules that differ: margin caps, processing fee limits, disclosure of the annualised rate, and grievance redressal timelines. Build a product-by-product matrix and test yourself on the distinguishing rule rather than the shared ones.
Answering customer-protection questions by describing good intentions (transparency, fairness) rather than naming the specific mechanism: the fair practices code approved by the board, the grievance redressal officer, the nodal officer, and the ombudsman escalation route.
Customer protection feels like a soft topic, so candidates write generalities. Examiners award marks for the named mechanism, the designated official and the prescribed timeline.
What to do instead
Convert every customer-protection topic into a three-part answer template: the board-approved policy, the designated officer, and the escalation ladder with timelines. Write out the ombudsman scheme's coverage and the internal escalation steps from memory.
Confusing credit appraisal outputs with credit monitoring, and describing only the initial sanction process when asked about the credit cycle.
Case-study questions on credit risk are usually answered from the sanction angle because that is what is most taught, while post-disbursement monitoring, early warning signals and restructuring receive little attention.
What to do instead
Structure credit answers as a lifecycle: sourcing, appraisal, sanction, documentation, disbursement, monitoring, early warning, restructuring, recovery. For each stage, name one concrete control (for example, the early warning signal register and its escalation trigger) so the answer demonstrates breadth.
Treating asset-liability management as a synonym for liquidity management, and failing to distinguish interest rate risk in the banking book from pure funding risk.
Both topics appear under the same heading in most summaries, so candidates collapse them into one and miss the specific tools: gap analysis, duration, simulation, and the structural liquidity statement.
What to do instead
Learn the ALM toolkit by risk type: liquidity risk uses the structural liquidity statement and stock ratios; interest rate risk uses repricing gaps, duration and earnings-at-risk simulation. Practise stating which tool answers which question before writing the answer.
Listing AML/CFT obligations as general duties without naming the risk-based approach, the customer due diligence tiers, the beneficial ownership threshold, and the reporting formats for cash and suspicious transactions.
Candidates know that KYC and STRs exist but not the operational specifics, so answers stay at the level of 'follow KYC norms' and lose the marks attached to thresholds and reporting channels.
What to do instead
Memorise the AML/CFT chain as five concrete items: board-approved policy, designated principal officer, risk categorisation of customers, CDD and enhanced due diligence triggers including beneficial ownership, and reporting to FIU-IND. Attach the specific threshold or format to each item.
Confusing statutory audit, internal audit and concurrent audit, and misidentifying who appoints each, what period each covers, and to whom each reports.
All three are called 'audit', so candidates treat them as interchangeable and give the statutory auditor's role when the question asks about internal control testing.
What to do instead
Build a three-row table: appointment authority, scope and frequency, reporting line, and the committee that reviews the output. Include the audit committee and the requirement for the statutory auditor's certificate on compliance with the directions.
Describing corporate governance in terms of good practice rather than the specific structural requirements: board composition, the fit-and-proper criteria for directors, the number of committees and their chairing rules, and the chief executive's tenure and qualification norms.
Governance is often revised from general company-law knowledge, which differs from the RBI's NBFC-specific expectations on board committees and senior management tenure.
What to do instead
Memorise the governance structure as a diagram: board, audit committee, nomination and remuneration committee, risk management committee, and the asset-liability management committee, with composition and chair for each. Add the fit-and-proper declaration and the cooling-off or tenure rule for the chief executive as separate facts.