RBI Report
RBI Report
RBI Report
November 2017
The Working Group gratefully acknowledges the support and guidance received from
Deputy Governor, Shri. N.S. Vishwanathan. The Chairman is grateful for the
contributions made by the individual members of the Working Group for completing the
task entrusted to it. In particular, he wishes to place on record the excellent work done by
the Member-Secretary, Shri Prasant K. Seth, General Manager, RBI in compiling the
Group's Report.
The Group wishes to specially acknowledge the contribution of Shri S.S. Barik, CGM-In-
Charge, DBR in providing necessary support to the Working Group. The Group also
wishes to acknowledge the contribution by Shri Talakona Jagadeesh Kumar, Assistant
General Manager, DBR, in providing assistance to the Working Group for drafting the
Report.
The Group also wishes to thank Shri Rajat Gandhi, M/s Faircent Technologies, Mr.
Lishoy Bhaskaran and Mr. Mohamed Galib, M/s Backwaters Technology and Ms.
Theresa Karunakaran, Deutsche Bank, for sharing their valuable experience and market
perspective on working of various FinTech products.
Contents
Background, Terms of Reference, Methodology & Members of the Group
Executive Summary……………………………………………………………………….. 1
1. Introduction……………………………………………………………………………... 5
1.1. FinTech and Financial Market disruptions………………………………………. 5
1.2. FinTech: Definitions and scope…………………………………………………... 5
2. FinTech and its impact on Global Financial Services…………………………… 7
2.1. FinTech innovations, products and technology…………………………………. 7
2.2. FinTech innovations and their impact on global financial services……………15
3. FinTech and its impact on Indian Financial Services…………………………….17
3.1. FinTech innovations, products and technology………………………………….17
3.2. Innovations in Digital Banking and investment services in India………………22
3.3. Scope for Growth of FinTech and digital banking in India………….…………..26
4. Recent global regulatory Initiatives on FinTech…………………………………..27
4.1. Global experiences on regulatory actions………………………………………..27
4.2. Regulatory Sandboxes/Innovation Hub…………………………………………..29
4.3. Regulatory response in other jurisdictions………………………………….…….45
5. Emerging Regulatory and Supervisory issues in India…………………….…….47
5.1. Regulatory and Supervisory response in India……………………………….….47
5.2. Impact on Financial inclusion………………………………………………….…...49
5.3. Initiatives taken by other financial market regulators in India…………….…….49
5.4. Cyber security and FinTech…………………………………………………….….51
6. Way Forward – for stakeholders………………………………………….…….….…57
6.1. Regulation……………………………………………………………………..…..…57
6.2. Supervision……………………………………………………………………..…....64
6.3. Banks / NBFCs/Securities Markets/Insurance Companies……………..…..….65
6.4. Data Security, Privacy and Fraud prevention………….………………….……..66
6.5. Government……………………………………………………………….……....…66
6.6. Consumers………………………………………………………………….………..67
7. List of Recommendations……………………………………………………………...68
Annexes………………………………………………………………………………….…….71
References / Bibliography, Abbreviations………………………………………………73
Background, Terms of Reference, Methodology and Members of the Group
Background
In view of the growing significance of FinTech innovations and their interactions with the
financial sector as well as the financial sector entities, the Financial Stability and
Development Council - Sub Committee (FSDC-SC) in its meeting held on April 26, 2016
decided to set up a Working Group to look into and report on the granular aspects of
FinTech and its implications so as to review and reorient appropriately the regulatory
framework and respond to the dynamics of the rapidly evolving FinTech scenario.
Given the wide ranging issues involved, Reserve Bank of India set up an inter-regulatory
Working Group (WG) to look into and report on the granular aspects of FinTech and its
implications for the financial sector so as to review and reorient appropriately the
regulatory framework and respond to the dynamics of the rapidly evolving FinTech
scenario. The Group included representatives from RBI, SEBI, IRDA, and PFRDA, from
select financial entities regulated by these agencies, rating agencies such as CRISIL and
FinTech consultants / companies.
Methodology/Approach
The WG reviewed globally published material on the subject, the FinTech developments
worldwide, the approaches adopted by various regulators, evolving views of international
standard-setting bodies, and interacted with some FinTech entities/start-ups/sponsors
operating in India as payment system provider, platform lender, block chain/digital ledger
provider, etc. and took on board their views and concerns, including impact on the
broader financial market 1. These helped inform some of the views of the WG on aspects
to be kept in mind while conceptualizing, designing and implementing the regulatory
framework / structure for FinTech in the near future.
1
M/s Backwaters Tech Pvt. Ltd., Faircent Technologies India and Deutsche Bank and Bill & Melinda Gates Foundation
Executive Summary
a. Financial services, including banking services, are at the cusp of a revolutionary
change driven by technological and digital innovations. A rapidly growing number of
financial entities and technology firms are experimenting with related technological and
financial solutions as well as new products in the financial services field which either
modifies the way financial intermediation takes place or leads to disintermediation.
d. Financial innovation has become a focal point for a lot of attention, and some
jurisdictions have decided to take a more active approach in facilitating this innovation.
To do this, they have taken a variety of regulatory and supervisory initiatives such as
regulatory sandboxes, innovation hubs, innovation incubators or accelerators, etc.
e. The regulatory uncertainty surrounding FinTech could potentially hamper
development. As a result, international standard setting bodies (BCBS, FSB, CPMI,
1
WBG, etc.) including regulatory authorities of different jurisdictions are taking steps to
actively monitor FinTech developments both domestically and in cooperation with
international organizations.
f. Key Recommendations
2
To provide an environment for developing FinTech innovations and testing of
applications/APIs developed by banks and FinTech companies.
An appropriate framework may be introduced for “Regulatory Sandbox/innovation
hub” within a well-defined space and duration where financial sector regulators will
provide the requisite regulatory support, so as to increase efficiency, manage risks
and create new opportunities for consumers in Indian context similar to other
regulatory jurisdictions.
In view of IDRBT’s unique positioning as a research and development institute, and
as indicated by some of its activities, it is felt that IDRBT is well placed to create and
maintain a regulatory sandbox in collaboration with RBI for enabling innovators to
experiment with their banking/payments solutions for eventual adoption. The Institute
may continue to interact with RBI, banks, solution providers regarding testing of new
products and services and over a period of time upgrade its infrastructure and skill
sets to provide full-fledged regulatory sandbox environment. The Reserve Bank of
India may actively engage with the Institute in this regard.
Regulatory and legal reforms are essential to enable the sustained development of a
digital financial industry for the future.
Partnerships / engagements among regulators, existing industry players, clients and
FinTech firms will enable the development of a more dynamic and robust financial
services industry.
Regulators may explore the use of Reg Tech that may facilitate the delivery of
regulatory requirements more efficiently and effectively than existing capabilities.
The organizational structure and human resources (HR) practices of regulators have
to be reoriented to meet the challenges of innovation, in terms of adapted HR hiring
profiles, learning and educational programmes.
There is a need for a stand-alone data protection and privacy law in the country.
Banks / Regulated entities may be encouraged to collaborate with FinTech/start-ups
to improve their customer experience and operational excellence. They may also
consider undertaking FinTech activity in areas such as payments, data analytics and
risk management.
Models of engagement and checklist to be developed by each regulator for each of
the activities.
3
Given that FinTech companies are in their infancy but are growing at a rapid pace,
the Government may consider introducing tax subsidies for merchants that accept a
certain proportion of their business revenues from the use of digital payments.
The requirement of increasing the levels of education/ awareness of customers
should be highlighted by all market regulators.
A self-regulatory body for FinTech companies may be encouraged.
4
1. Introduction
1.1 FinTech and Financial Market disruptions
The term “FinTech” is a contraction of the words “finance” and “technology”. It refers to
the technological start-ups that are emerging to challenge traditional banking and
financial players and covers an array of services, from crowd funding platforms and
mobile payment solutions to online portfolio management tools and international money
transfers.
Some of the major FinTech products and services currently used in the market place are
Peer to Peer (P2P) lending platforms, crowd funding, block chain technology, distributed
ledgers technology, Big Data, smart contracts, Robo advisors, E-aggregators, etc. These
FinTech products are currently used in international finance, which bring together the
lenders and borrowers, seekers and providers of information, with or without a nodal
intermediation agency.
FinTechs are attracting interest both from users of banking services and investment
funds, which see them as the future of the financial sector. Even retail groups and
telecom operators are looking for ways to offer financial services via their existing
networks. This flurry of activities raises questions over what kind of financial landscape
will emerge in the wake of the digital transformation.
FinTech is an umbrella term coined in the recent past to denote technological innovation
having a bearing on financial services. FinTech is a broad term that requires definition
and currently regulators are working on bringing out a common definition.
5
According to Financial Stability Board (FSB), of the BIS, “FinTech is technologically
enabled financial innovation that could result in new business models, applications,
processes, or products with an associated material effect on financial markets and
institutions and the provision of financial services”. This definition aims at encompassing
the wide variety of innovations in financial services enabled by technologies, regardless
the type, size and regulatory status of the innovative firm. The broadness of the FSB
definition is useful when assessing and anticipating the rapid development of the
financial system and financial institutions, and the associated risks and opportunities.
There is large investment in FinTech sector by venture capital Funds. During 2014
around USD 12 billion was invested in FinTech companies, and in 2015 the same is
estimated around USD 20 billion 2.
2
KPMG-The pulse of FinTech- https://home.kpmg.com/xx/en/home/media/press-releases/2016/03/kpmg-and-cb-insights.html
6
2. FinTech and its impact on global Financial Services
2.1.1 There is no commonly accepted taxonomy for FinTech innovations. In order to get
a sense of the broad nature of the ongoing developments in this area, the WG
categorized some of the most prominent FinTech innovations into five main groups
through its scoping exercise. Though this does not represent a comprehensive review of
all FinTech innovations, it highlights those regarded as potentially having the greatest
effects on financial markets 3.
2.1.2 A simple categorization of some of the most prominent FinTech innovations into
groups according to the areas of financial market activities where they are most likely to
be applied is as under:
Mobile and web- Crowd-funding Smart contracts Robo advice Big data
based payments Peer to peer lending Cloud computing Smart contracts Artificial
Digital currencies Digital currencies e-Aggregators e-Trading Intelligence
Distributed ledger Distributed Ledger & Robotics
3
Drawing on a categorization from WEF, The Future of Financial Services, Final Report, June 2015
7
2.1.3.1 Mobile and web-based payment applications
The majority of developments in the areas of payments are based on mobile technology
by providing wrappers over existing payments infrastructure. Examples include Apple
Pay, Samsung Pay, and Android Pay, which sit on top of existing card payment
infrastructure enabling the user’s mobile devices to act as their credit/debit cards. There
are also mobile payments built on new payment infrastructure, for example mobile phone
money services, such as M-Pesa in Kenya and IMPS in India, which provide payment
services. While such innovation facilitates the entrance of new users to the financial
system, it may also move the provision of some payment services to non-banking
companies that are not regulated as financial entities. There are a number of web-based
and mobile-based payment applications that primarily focus on the customer experience
and often aim to better integrate payment transactions within the commerce value chain.
These service providers usually do not offer banking services other than payments, and
they normally do not apply for banking licenses. The services can be offered by the
payer’s own payment service provider (PSP) or by third party services (TPS), where an
innovative service provider links payers and merchants by using the payer’s online
banking credentials but without necessarily involving the payer’s PSP in the scheme or
solution or by using the card payment infrastructure (Alipay, PayPal).
2.1.3.2 Digital currencies (DCs)
Digital currencies (DCs) are digital representations of value, currently issued by private
developers and denominated in their own unit of account. They are obtained, stored,
accessed, and transacted electronically and neither denominated in any sovereign
currency nor issued or backed by any government or central bank 4.
Digital currencies are not necessarily attached to a fiat currency, but are accepted by
natural or legal persons as a means of exchange and can be transferred, stored or
traded electronically. DC schemes comprise two key elements: (i) the digital
representation of value or ‘currency’ that can be transferred between parties; and (ii) the
way in which value is transferred from a payer to a payee.
Privately issued DCs, such as Bitcoin, facilitate peer-to-peer exchange, possibly at lower
cost for end-users and with faster transaction times, especially across borders. DC
schemes are also known as ‘crypto currencies’ due to their use of cryptographic
4
Committee on Payments and Market Infrastructures, “Digital Currencies,” November 2015.
8
techniques. It is reported that there are hundreds of crypto currencies currently in use
with an aggregate market capitalization of around USD 6.5bn 5. However, only a very
small fraction of these currencies are traded on a daily basis.
Crypto currencies derive their value solely from the expectation that others will be willing
to exchange it for sovereign currency or goods and services. DC schemes may allow for
the issuance of a limited or unlimited number of units. In most digital currency schemes,
distributed ledger technology allows for remote peer-to-peer exchanges of electronic
value. The various DC schemes differ from each other in a number of ways; they have
different rules for supplying the currency; they differ in the way in which transactions are
verified.
The implications of DCs for financial firms, markets and system will depend on the extent
of their acceptability among users. If use of DCs were to become widespread, it would
likely have material implications for the business models of financial institutions. DCs
could potentially lead to a disintermediation of some existing payment services
infrastructure.
At the moment, DCs schemes are not widely used or accepted, and they face a series of
challenges that could limit their future growth. As a result, their influence on financial
services and the wider economy is negligible today, and it is possible that in the long
term they may remain a product for a limited user base on the fringes of mainstream
financial services.
The regulatory perimeter around DCs is a complicated issue and regulation may depend
on the definition of DCs in particular jurisdictions. The cross-border reach of DC
schemes may make it difficult for national authorities to enforce laws.
2.1.3.3 Distributed ledgers Technology
Distributed ledger technologies (DLT) provide complete and secure transaction records,
updated and verified by users, removing the need for a central authority. These
technologies allow for direct peer-to-peer transactions, which might offer benefits, in
terms of efficiency and security, over existing technological solutions.
The impetus behind the development and adoption of distributed ledger technology are
the potential benefits. The major benefits are reduced cost; faster settlement time;
reduction in counterparty risk; reduced need for third party intermediation; reduced
5
FinTech: Describing the Landscape and a Framework or Analysis by SCAV, FSB-March 2016
9
collateral demand and latency; better fraud prevention; greater resiliency; simplification
of reporting, data collection, and systemic risk monitoring; increased interconnectedness;
and privacy.
Distributed ledger technology is an innovation with potentially broad applications in
financial market infrastructures (FMIs) and in the economy as a whole. Its most common
use at present is for digital currencies, but firms are stepping up their R&D activities for
other uses including securities trading, smart contracts, and land and credit registries. If
widely adopted, distributed ledger technology can pose new challenges for regulation.
Though there are no imminent concerns, constant monitoring of developments in the
application of the distributed ledger technology to financial services and systems is
prudent given the significant potential of the technology.
10
2.1.4 Deposits, lending and capital raising services
Alternative models of lending and capital raising are gaining prominence, potentially
changing the market dynamics of traditional lenders and affecting the role of traditional
intermediaries. A few examples of the products offered by FinTechs are as under:
Depending on the structure, P2P may involve simple matching, deposit taking, or
management of a collective investment scheme. Since P2P lending companies operate
entirely online, they can run with lower overhead and provide services more cheaply than
traditional financial institutions. As a result, lenders often earn higher returns compared
to savings and investment products offered by banks, while borrowers can borrow
6
In the US, new P2P lending was USD 12 billion in 2014, (USD 7 billion in unsecured consumer loans and USD 5 billion in small
business loans). In the UK, P2P platforms originated about EUR 2.7 billion in 2015. Source: Morgan Stanley (2015) “Global
Marketplace Lending: Disruptive Innovation in Financials”. Source-Bloomberg
11
money at lower interest rates. The most common form of P2P loan is an unsecured
personal loan, but start-up and small-business loans are also becoming important.
The principal benefit of P2P lending for borrowers is the fast and convenient access to
funding, while for investors it is the potential for high returns.
In their current form, P2P platforms are different from banks, because they do not take
positions in loans and do not generally perform maturity and liquidity transformation like
banks. P2P platforms more directly match the risk appetite of lenders with the risk profile
of borrowers. These factors are likely to make P2P platforms less systemically important
than banks of comparable size.
The default of a bank can have systemic effects because of the many credit inter
linkages that a bank builds during its business of intermediating credit markets. This
creates the possibility of contagion should a single bank fail. The risk of such a contagion
is likely to be much less with the failure of a P2P platform because they do not have the
same network of credit inter-linkages. This would be true even if a P2P platform was very
large. In sum, P2P lending does not currently pose a systemic risk, and it is not clear
whether it would if the sector grew significantly larger.
12
2.1.5.1 Smart contracts
Smart contracts are computer protocols that can self-execute, self-enforce, self-verify,
and self-constrain the performance of a contract. Development of smart contracts in
relation to financial services could have a large impact on the structure of trade finance
or derivatives trading, especially more bespoke contracts, and could also be integrated
into Robo-advice wealth management services. The widespread adoption of smart
contracts in financial services could be facilitated by the establishment of distributed
ledger technology.
2.1.5.2 E-Aggregators
E-Aggregators provide internet-based venues for retail customers to compare the prices
and features of a range of financial (and non-financial) products such as standardised
insurance, mortgages, and deposit account products. They can also be firms that provide
services that allow users to aggregate and analyse their data on their payment patterns,
across separate accounts and products (example-Yodlee). E-Aggregators also provide
an easy way to switch between providers and may become a major distributor for a
variety of financial products. Reserve Bank of India has issued directions regarding
Account Aggregators which requires that no entity other than a company can undertake
the business of an Account Aggregator, no company shall commence or carry on the
business as an Account Aggregator without obtaining a certificate of registration from the
RBI and every company seeking registration with the RBI as Non-Banking Financial
Company - Account Aggregator shall have a net owned fund of not less than ₹ two crore
or such higher amount, as the RBI may specify. Provided that, entities being regulated
by other financial sector regulators and aggregating only those accounts relating to the
financial assets of that particular sector will be excluded from the registration
requirement.
13
availed, it can potentially pose several challenges including the ability of jurisdictional
enforcement authorities to effectively ensure security of data.
14
to be currently handling assets under management estimated at $20bn 7 and such
business is growing rapidly. They use client information and algorithms to develop
automated portfolio allocation and investment recommendations that are meant to be
tailored (to a greater or lesser degree) to the individual client.
Robo advisors are regulated just like independent advisors who set up offices and meet
clients on a regular basis in USA. They typically register with the U.S. Securities and
Exchange Commission and are deemed "fiduciaries" who must put their clients' interests
above their own.
2.1.6.2 E-Trading
Electronic trading has become an increasingly important part of the market landscape,
notably in fixed income markets. It has enabled a pickup of automated trading in the
most liquid market segments. Innovative trading venues and protocols, reinforced by
changes in the nature of intermediation, have proliferated, and new market participants
have emerged. This, in turn, has had implications for the process of price discovery and
for market liquidity. It could also lead market structures to evolve from over-the-counter
to a structure where all-to-all transactions can take place. The development of e-trading
platforms contributes to improving the efficiency of market orders and to reducing
average trading costs 8.
7
Fintech: Describing the Landscape and a Framework or Analysis by STANDING COMMITTEE ON ASSESSMENT OF
VULNERABILITIES of FSB-March 2016
8
CGFS, Fixed Income Market Liquidity, January 2016
9
The Pulse of Fintech, KPMG, 2016
10
India emerging a hub for Fintech start-ups, Business Standard, http://www.business-
standard.com/article/companies/india-emerging-a-hub-forFintech-start-ups-116051700397_1.html, 17 May 2016
15
where technological innovations will result in more high-grade products at lower prices. If
banks do not adopt them quick enough, innovation by rivals may put their business
models under pressure. Loss of consumer contact and fragmentation of the value chain
could then diminish banks’ ability to profit from the cross-selling market.
2.2.3 Global Technology players, viz., Apple, Google and Facebook that adopt
innovations effectively and carry technological innovation and new services across the
financial value chains. These companies displace existing financial institutions by
exploiting their scale and innovative capacity.
2.2.4 Technological innovation brings opportunities and risks. FinTech can increase
efficiency and diversity by boosting competition within the financial sector. This effect will
reduce market concentration and may lead to better services for consumers, in particular
as new technological processes often result in greater user-friendliness. This is in
particular relevant for the Indian banking sector. Moreover, innovative new entrants
provide an incentive for established financial institutions to become more competitive
and focus more on their customers.
2.2.5 A more diverse financial sector also reduces systemic risk by increasing the
heterogeneity between the risk profiles of market participants. In addition to creating new
opportunities, FinTech also carries potential risks for the financial sector. These include
risks to the profitability of incumbent market players as well as risks related to cyber-
attacks.
2.2.6 As the rise of FinTech leads to more and more IT interdependencies between
market players (banks, FinTech, and others) and market infrastructures, IT risk events
could escalate into a full-blown systemic crisis.
2.2.7 The entrance of new FinTech players has not only increased the complexity of the
system but has also introduced heightened IT risks for these players who typically have
limited expertise and experience in managing IT risks.
16
3. FinTech and its impact on Indian Financial Services
The Indian FinTech industry grew 282% between 2013 and 2014, and reached USD 450
million in 2015. At present around 400 FinTech companies are operating in India and
their investments are expected to grow by 170% by 2020. The Indian FinTech software
market is forecasted to touch USD 2.4 billion by 2020 from a current USD 1.2 billion 11, as
per NASSCOM. The transaction value for the Indian FinTech sector is estimated to be
approximately USD 33 billion in 2016 and is forecasted to reach USD 73 billion 12 in
2020. The broad FinTech products/services offered in Indian financial markets are as
under Indian FinTech Industry
m POS
ATM
11
India emerging a hub for FinTech start-ups, Business Standard website, http://www.businessstandard.com/article/companies/india-
emerging-a-hub-for-FinTech-start-ups-116051700397_1.html, accessed on 25 May 2016.
12
Statista website, https://www.statista.com/outlook/295/119/FinTech/india, accessed on 25 May 2016, 17 May 2016
17
3.1.1 Peer-to-Peer (P2P) Lending Services
These companies use alternative credit models and data sources to provide consumers
and businesses with faster and easier access to capital, providing online services to
directly match lenders with borrowers who may be individuals or businesses. Examples
are Lendbox, Faircent, i2iFunding, Chillr, Shiksha Financial, Gyan Dhan, and Market
Finance.
Fintech companies are also growing around the need to provide customized financial
information and services to individuals, that is, how to save, manage, and invest one’s
personal finances based on one’s specific needs. Examples are FundsIndia.com,
Scripbox, Policy Bazaar, and Bank Bazaar.
Companies are offering a range of cloud computing and technology solutions, which
improve access to financial products and in turn increase efficiency in day to day
business operations. The scope of FinTech is rapidly diversifying at both macro and
micro levels, from providing online accounting software to creating specialized digital
platforms connecting buyers and sellers in specific industries. Examples include Catalyst
Labs in the agriculture sector, AirtimeUp which provides village retailers the ability to
perform mobile top ups, ftcash that enables SMEs to offer payments and promotions to
customers through a mobile based platform, Profitbooks (online accounting software
designed for non-accountants), StoreKey, and HummingBill.
This includes crowdfunding platforms that are gaining popularity as access to venture
capital is often difficult to secure. These services are particularly targeted at early stage
business operations. Examples include Ketto, Wishberry, and Start51.
India being a more conservative market where cash transactions still dominate, usage of
digital financial currency such as ‘bitcoin’ has not seen much traction when compared to
18
international markets. There are, however, a few bitcoin exchange startups present in
India – Unocoin, Coinsecure, and Zebpay.
Block chain, a seemingly unassuming data structure, and a suite of related protocols,
has recently caught the attention and spurred efforts of a number of domestic firms.
IDRBT has taken the initiative of exploring the applicability of BCT to the Indian Banking
and Financial Industry by publishing a White Paper detailing the technology, concerns,
global experiences and possible areas of adoption in the financial sector in India. In
order to gain first-hand experience of the implementation, the Institute has also
attempted a Proof-of-Concept (PoC) on the applicability of BCT to a trade finance
application with active participation of NPCI, banks and solution provider, the details of
which are presented in the White Paper 13.
The results of the PoC have been quite encouraging, giving comfort and confidence in
the implementability of BCT in the Indian financial sector. The PoC provided a good
insight into the workings of the Blockchain eco-system demonstrating the following key
aspects:
• Complete transparency of various events triggered by various counter-parties
• Immutability/Tamper-Evidence
• Automated flow triggered by the occurrence of specific events.
• Private distributed ledger
The IDRBT White paper has suggested a phased adoption of BCT by the Indian banking
system, the stages of which are as follows:
i. Intra-bank usage of BCT
Banks may setup a private Blockchain for their internal purposes. This not only helps
them to train human resources in the technology, but also benefits by enabling efficient
asset management, opportunities for cross-selling, etc.
ii. Inter-bank usage of BCT
Proof-of-Concept implementation and testing may be carried out in the following order of
increasing application complexity – mainly because of the number of stakeholders
involved in the transaction.
13
Application of Blockchain Technology in Indian banking and financial sector by IDRBT-January 2017
19
Centralized KYC: Secure, distributed databases of client information shared between
institutions helps reduce duplicative efforts in customer onboarding. Secure codification
of account details could enable greater transparency, efficiency in transaction
surveillance and simplify audit procedures.
Cross-Border Payments: BCT enables real-time settlement while reducing liquidity and
operational costs. Transparent and immutable data on BCT reduces fraudulent
transactions. Smart contracts eliminate operational errors by capturing obligations
among FIs to ensure that appropriate funds are exchanged. BCT allows direct interaction
between sender and beneficiary banks, and enables low value transactions due to
reduction in overall costs.
Syndication of loans: Underwriting activities can be automated, leveraging financial
details stored on the distributed ledger. KYC requirements can also be automatically
enforced in real-time. BCT can provide a global cost reduction opportunity within the
process execution and settlement sub-processes of syndicated loans.
Trade Finance: BCT usage for Trade finance enables automation of LC creation,
payment against documents, development of real-time tools for enforcing AML and
customs activities, and associated cost savings.
Capital markets: BCT brings the following advantages in the clearing and settlement
processes: reducing or eliminating trade errors, streamlining back office functions, and
shortening settlement times.
Further areas where BCT can be applied advantageously in BFSI sector would be
Supply-chain finance, Bill discounting, Monitoring of consortium accounts, Servicing of
securities and Mandate management system.
Use cases of BCT banking operations in India
A few banks in India in the recent past have reported successful use of BCT in their
operations, especially in the areas of trade finance, international remittances, etc. and
reported that this has potential to be used in larger scale in many operations of their
bank.
Unlike regular trade transactions where documents are authorized and physically
transferred, in a block chain transaction all parties can view the authorization live. A key
feature is that the records cannot be tampered and any changes can be introduced only
by creating a fresh entry. Besides eliminating the need for moving paper across
countries, the transaction eliminates the need for financial messaging between banks
20
and introduces the convenience of instant cross-border remittances for retail
customers. Examples- SBI, Axis Bank, ICICI Bank, etc.
3.1.7 Developments in Payments landscape in India
Fintech enablement in India has been seen primarily across payments, lending,
security/biometrics and wealth management. The modes of payments in India have
leapfrogged from cash to alternate modes of payments registering phenomenal growth.
The innovations have happened in all spheres - from common USSD channel access
through NUUP, Immediate Payment Service (IMPS) – initiation of transactions through
various options for real-time payments to end customer, with the latest being the Unified
Payments Interface (UPI). Some of the developments in this regard are discussed below.
Leveraging on the high mobile density in India, with a population of more than one billion,
many PSPs utilize mobile payment apps to link underlying payment instruments with
mobile phone numbers for fast payments via the Immediate Payment Service (IMPS) or
for issuance of m-wallets. The Unified Payment Interface (UPI) developed by NPCI
provides complete interoperability for merchant payments as well as P2P payments. The
UPI enables users to link their bank accounts with their mobile phone numbers through
an application provided by the payment service providers (PSPs) and obtain a virtual
address which can be used for making and receiving payments. Introduction of UPI has
the potential to revolutionize digital payments and take India closer towards being a
“Less Cash” society.
The traditional modes to make payments include cheque, electronic payment modes viz.,
NEFT, RTGS, etc. and card (debit and credit) payments. The need for prepaid payment
instruments in the form of physical card or e-wallet was felt to give non-bank customers
the facility to use electronic modes of payments and give existing bank customers a
safeguard measure that limits the extent to which they are exposed. The emergence of
bank (State Bank Buddy, Citi MasterPass, ICICI Pockets) and non-bank (PayTM,
Mobikwik, Oxigen, Citrus Pay, etc.) payment wallets in India has changed the landscape
of payments. Many start-ups have entered the space to simplify mobile money transfer,
such as Chillr application, which provides peer-to-peer money transfer without using
bank account details. Several leading banks have launched their own digital wallets
leveraging NPCI’s IMPS platform. These digital wallets are integrated with social media
features as well. Digital Innovators are also promoting the Online to Offline (O2O) model
to facilitate digital payments at local stores.
3.2.3.2 Banks thus need to have dedicated resources, both people as well as
infrastructure, to form an agile innovation unit, with a view to position themselves at the
forefront of digital innovations amidst changing customer expectations and sea-change
in the competitive landscape.
23
3.2.3.3 Now that digital innovation practice has reached a critical mass, banks are
shifting gears to create a stronger innovation culture via the Internal Social Collaboration
platform and adopting cutting edge technologies like Artificial Intelligence, Block Chain
and Internet of Things (IOT), among others. Customers are taken into a new world of
multi-channel banking, where they can access services from home, at the office, or on-
the-go through Mobile Banking, SMS Banking, Phone Banking, ATMs and Net Banking.
3.2.3.4 Managing investments for Private Banking clients is now simpler and faster.
Clients can now easily access research reports both online and on mobile via the apps,
capitalize on investment opportunities quickly through Net Banking and Mobile Banking,
and track investments using investment tracking apps. The focus on making customers
accomplish more comes with the assurance that the services are secure and protected.
Banks have set up a Digital Security infrastructure which works with other teams to
monitor and set up new security enhancements.
3.2.3.5 Some banks in India are proposing to form a block chain consortium along with
other global banks such as SBI, Citi, Deutsche, JP Morgan, Nomura, HSBC, UBS,
Barclays, Bank of America, BNP, RBS, Macquarie, Westpac, etc.
3.2.3.6 Some of the banks are also collaborating with Indian IT service providers in areas
of voice enabled system for the customers to open new accounts on the basis of
Aadhaar authentication.
3.2.3.7 Banks are also collaborating with IT service providers for e-Sign(digital signature)
facility to help digitally signing the loan documents. This will help in faster approval
process, lesser paper work and lesser paper storage space.
3.2.3.8 Some of the innovations and related initiatives taken by Indian banks in
collaboration with FinTech start-ups/academia and other service providers in the recent
past are SBI FinTech IPDaaS Software Developed with IIT-KGP; Zing HR using
Microsoft AI; Digital Village; cross border remittances, etc. Such start-ups are listed in
Annex-1.
It is believed that banking will not be just about saving, spending or servicing
transactions. It will be about banks acting as the alter ego of their customers, aiming to
maximize their wealth and meet their financial needs seamlessly. Financial advisory,
Investment Management, facilitating commerce on both borrower and lender side will
take center stage and, taking a futuristic view, the entire value chain will be about
“Automation (Blockchain – Robotics Process Automation), Experience (Artificial
Intelligence, NLP & Language support) and Assistance (Humanoids, Holographic
Banking & Robo-advisory).
25
3.2.5 Innovation in Investment services
Technology plays an important role and brings efficiency in terms of cost, reduction in
turnaround time, increasing the reach, anytime availability to the clients, etc. Towards
this the mutual funds industry has adopted technology and the use of same is increasing
day by day. Product manufacturers, i.e. individual mutual funds/asset management
companies (AMCs) are providing online facilities by which investors can subscribe,
redeem and monitor their portfolio by logging onto their websites. AMCs have integrated
the online processes with payment systems which enable investors to make seamless
payment. Some of the AMCs have also developed mobile applications for investors to
access their portfolio through smart phones.
Further, Mutual Fund Distributors (MFDs) have also adopted technology in distribution of
mutual funds. There are distributors such as Scripbox, FundsIndia, MyUniverse,
ArthaYantra, etc, who operate only in the online space and cater to the tech savvy
investors. The processes like onboarding of investors, risk profiling, analysis of their
portfolio, recommendation of schemes, asset allocation, rebalancing of portfolio etc. are
online and driven by technology.
India has a large untapped market for financial service technology startups as 40 percent
of the population are currently not connected to banks and 87 percent of payments are
made in cash. With mobile usage expected to increase to 64 percent in 2018 from 53
percent currently, and internet penetration steadily climbing, the growth potential for
FinTech in India cannot be overstated. Moreover, by some estimates, as much as 90
percent of small businesses are not linked to formal financial institutions. These gaps in
access to institutions and services offer important scope to develop FinTech solutions
(such as funding, finance management) and expand the market base.
26
4. Regulatory Initiatives: Recent global regulatory Initiatives on FinTech
4.1 Global experiences on regulatory actions
28
focus its activities, the CPMI has established a dedicated Working Group to look at the
impact of digital innovations and to analyse the implications of such innovations on
payment services and systems, having particular regard to the technical and
infrastructure aspects of products and services based on innovative technologies, such
as block chain and distributed ledgers.
15
http://pubdocs.worldbank.org/en/877721478111918039/breakout-DigiFinance-McConaghy-FinTech.pdf
29
• Play an active role as a catalyst for promoting interaction among financial
practices and innovative technologies, research and study, and the needs of the
economic society.
31
• Number of customers
• Transaction volume
• Specific customer groups
• Information to customer
32
II. The second element is informal guidance from ASIC to help new businesses
consider the important regulatory issues. Eligible businesses can request
guidance from ASIC through its website. ASIC expects that this guidance will
minimise the time and cost of applying for a licence or relief from the law.
III. Thirdly, ASIC has established new ‘Innovation Hub’ webpages for innovative
businesses to access information and services targeted at them.
IV. The fourth element is a senior internal taskforce to coordinate the work on new
business models. The taskforce draws together learnings and skills from across
ASIC.
V. The final element is the Digital Finance Advisory Committee (DFAC) that meets
quarterly, which was established to advise ASIC on its efforts in this area. DFAC
members are drawn from a cross-section of the FinTech community, as well as
academia and consumer backgrounds. Other financial regulators are observers
on DFAC.
33
4.2.4.1.3 Consumer protection:
FinTech entities are required to maintain adequate compensation arrangement and
register with an External Dispute Resolution (EDR) scheme in order to provide
consumers with an outlet to settle disputes with sandbox business. The entities need to
comply with key consumer protection provisions in the financial services and credit laws.
FinTechs are required to tell their clients that:
(a) they do not hold a licence;
(b) the service they will provide is being tested under the FinTech licensing exemption
(c) some of the normal protections associated with receiving services from a licensee will
not apply.
34
4.2.4.1.7 FinTech set up in ASIC
ASIC has created the Innovation Hub/Sandbox with 2-3 staff sourced from its various
functions.
35
The second cohort was opened for applications from around November 2016 to mid-
January 2017.
4.2.4.2.1 Eligibility criteria for Sandbox
The key requirements for applying the sandbox are that is the applicant has a genuine
innovation that addresses a consumer need. To conduct a regulated activity in the UK,
the firm must be authorised or registered by the FCA, unless certain exemptions apply.
Firms who are accepted into a cohort will need to apply for the relevant authorisation or
registration in order to be able to test. The FCA has set up a tailored authorisation
process to work closely with firms accepted into the sandbox to enable them to meet
these requirements. Any authorisation or registration will be restricted to allow firms to
test only their ideas as agreed with the FCA. The process should make it easier for firms
to meet their requirements and reduce the cost and time to get the test up and running.
The evaluation criteria by FCA for FinTech entities are as under:
i. Is the firm looking to deliver innovation which is either regulated business or
supports regulated business in the UK financial services market?
ii. Does the firm have a UK nexus and is it related to financial services?
iii. Is it a genuine innovation? Is the innovation ground-breaking or constitutes a
significantly different offering in the marketplace?
iv. Is there consumer benefit? Does the innovation offer a good prospect of
identifiable benefit to consumers?
v. Is there a need for a sandbox?
vi. Does the business have a genuine need to test the innovation on real customers
and in the FCA sandbox? Which tool is suitable for testing and why?
vii. Is the firm ready for testing? Is the business ready to test their innovation in a live
environment?
37
4.2.4.2.5 International co-operation/MOU and agreement
FCA Innovation Hub has an innovation hub agreement with the ASIC, Australia
Innovation Hub during March 2016. The UK (HM Treasury and the FCA) and Singapore
(MAS) concluded a “FinTech Bridge” agreement. The agreement will enable the
regulators to “refer” FinTech firms to each other. According to the FCA and the MAS, the
agreement also sets out how the regulators plan to share and use information on
financial services innovation in their respective markets.
38
Technology Infrastructure Office and Technology Innovation Lab. The group is
responsible for formulating regulatory policies and developing strategies to facilitate the
use of technology and innovation to better manage risks, enhance efficiency, and
strengthen competitiveness in the financial sector.
40
digital labs. Examples include Aviva Digital Garage, Metlife’s Lumen Lab, AXAá data
Innovation Lab in Singapore.
41
- Provisional authorisation might also prove to be an option that offers the best
solution for some initiatives.
42
additional requirements at any time. As the Netherlands are part of the European Union
and the Single Supervisory Mechanism, the authorities have indicated that most
applications for sandbox are approved within the scope of their own policies.
4.2.4.5 USA: OCC Special Purpose National Bank Charters for FinTech Companies
5.2.4.5.1 On December 2, 2016, the OCC released a paper entitled 'Exploring Special
Purpose National Bank Charters for Fintech Companies' that sets forth the OCC’s plans
to allow FinTech companies to apply to become special purpose national banks. The
OCC requested comment on the proposal, with the comment period closing on January
15, 2017. The OCC’s special purpose charter is a licensing system, not a space for
piloting or testing new products. The charter is designed to be a more permanent
license, while participants in the sandboxes often need to go through another application
process, expedited for some, at the end of their pilot or testing program. Sandboxes
often have limitations on the test market, such as number of clients and products, while
the OCC’s special purpose charter does not restrict the same. Fintech companies
receiving an OCC special purpose charter would generally be subject to the same type
of regulatory oversight as a national bank.
4.2.4.5.1 Eligibility:
Fintech companies that are eligible to apply for charters are those that engage in
fiduciary activities or in at least one of the three “core banking” activities that include
receiving deposits, paying checks, or lending money. The eligibility decision will be made
by the OCC on a case-by-case basis.
43
4.2.4.5.2 Regulatory applicability:
• Fintech companies with special charters will be subject to the same laws, regulations,
examination, reporting requirements, and ongoing supervision as other national
banks.
• State laws, as they apply to national banks, including fair lending, unfair and
deceptive acts and practices, and debt collection, will also apply.
• The OCC may extend a framework for receivership of an uninsured national bank to
FinTech companies with special charters that are not insured.
• Most special purpose national banks become members of the Federal Reserve
System. In that case, status and Federal Reserve regulations for member banks will
be applicable to special purpose national banks.
• A FinTech company that proposes to accept deposits other than trust funds would be
required to apply to, and receive approval from, the FDIC for deposit insurance.
• Fintech companies can receive a charter without being insured by the FDIC, if they
do not take deposits.
• If special purpose national banks engage in activities that are regulated under a
federal consumer financial law, they may be subject to oversight by the CFPB.
• The OCC has the right to apply additional conditions in connection with granting
special purpose charters, such as capital, liquidity, safety and soundness, compliance
risk management and encouraging financial inclusion and fair lending.
4.2.4.5.3 The OCC paper states that entities interested should provide the
following:
• A robust, well-developed business plan
• A governance structure that commersurate with the risk and complexity of the firm -
the Board of Directors must have a prominent role
• Capital levels, liquidity, and compliance risk management commensurate with risks
and products
• A financial inclusion plan – in particular, lenders should demonstrate a commitment to
financial inclusion
• A recovery plan and exit strategy
44
4.2.4.6 HKMA 17
HKMA has commissioned ASTRI to carry out a comprehensive study on distributed
ledger technology (DLT). First stage of this research project is completed and a white
paper has been published. HKMA-ASTRI FinTech Innovation Hub - equipped with high-
powered computing resources and supported by the experts at ASTRI to allow banks,
payment service providers, FinTech firms and the HKMA to brainstorm innovative ideas,
tries out and evaluates new FinTech solutions in a safe and efficient manner.
FinTech Supervisory Sandbox was launched in September 2016 in order to create a
regulatory environment that is conducive to FinTech development. The stated purpose of
the Sandbox is to enable banks to conduct pilot trials of their FinTech initiatives in a
controlled production environment without the need to achieve full compliance with the
HKMA's usual supervisory requirements. So far, two banks have already made use of
the Sandbox to conduct pilot trials of their biometric authentication and securities trading
services.
17
http://www.bis.org/review/r161111c.htm
18
http://www.bis.org/review/r160823d.pdf
45
law firms, and start-up/venture companies. The Bank has also built up a “FinTech
network” comprised of a wide range of staff drawn from the relevant departments of the
Bank. This FinTech Network, for which the FinTech Center functions as the secretariat,
promotes the sharing of information and expertise related to FinTech in a cross-sectoral
manner within the Bank.
46
5. Emerging Regulatory and Supervisory issues in India
5.1 Regulatory and Supervisory response in India
FinTech has significant implications for the entire financial system in India. The multiplicity of
firms and a mosaic of business models complicate the classification of the various types of
activities, products and transactions covered under the FinTech spectrum.
Though the western world has been using the term 'FinTech' for some time, it has only
recently become a buzzword in India. Notwithstanding this, FinTech has, since quite some
time, gathered momentum in the country. However, as of now, the FinTech risks are being
looked at more in terms of what is associated with the traditional IT systems, such as cyber-
security risks. While the IT related risks are no doubt multiplying manifold under FinTech, the
whole gamut of issues under the FinTech umbrella, particularly those of regulatory concern,
have to be responded to on priority. It is, therefore, necessary to examine these issues and
outline the contours of an appropriate regulatory strategy. However, FinTech treads across
several activities that are within the scope of different financial sector regulators.
5.1.1 RBI issued a consultation paper on P2P lending in April 2016. Some of the issues
raised in the consultation paper are as under:
• Regulations may also be perceived as too stringent, thus stifling the growth of an
innovative, efficient and accessible avenue for borrowers who either do not have
access to formal financial channels or are denied loans by them.
• The market for P2P lending is currently in a nascent stage and they neither pose
an immediate systemic risk nor any significant impact on monetary policy
transmission mechanism.
• In its nascent stage, this industry has the potential to disrupt the financial sector
and throw surprises. A sound regulatory framework will prevent such surprises.
• P2P lending promotes alternative forms of finance, where formal finance is unable
to reach and also has the potential to soften the lending rates as a P2P Lending
result of lower operational costs and enhanced competition with the traditional
lending channels.
47
• If the sector is left unregulated altogether, there is the risk of unhealthy practices
being adopted by one or more players, which may have deleterious
consequences.
It has been proposed in the consultation paper to bring the P2P lending platforms under
the purview of Reserve Bank’s regulation by notifying P2P platforms as NBFCs.
5.1.2 Monitoring framework for new technologies / innovations
The RBI as regulator and supervisor of payment systems has been playing the role as
the catalyst / facilitator for innovations in payment systems. The Payment and Settlement
System Vision – 2018 also covers this aspect appropriately under the Strategic Initiatives
– Responsive Regulation and Effective Oversight. In order to ensure that regulations
keep pace with the developments in technology impacting the payment space, the global
developments in technology such as distributed ledgers, blockchain, etc. will be
monitored, and regulatory framework, as required, will be put in place. Further, the
payments eco-system is dynamically evolving with the advancements and innovations
taking place, particularly in the area of FinTechs. In order to provide a platform for
innovators to showcase their models to the industry, particularly in the areas of interest
to payment systems and services, the Reserve Bank has organized an innovation
contest through the Institute for Development and Research in Banking Technology
(IDRBT). Learnings from such interfaces will also be used as inputs for policy
adaptations. RBI has taken various initiatives in the technology-enabled banking space
as listed below:
(i) Issued in-principle approvals for Payments Banks, of which some have
since been licensed
(ii) Allowed entry of non-banks in the payments space both as payment
system operators and technology service providers
(iii) Introduced Bharat Bill Payments System (BBPS)
(iv) Published a consultative paper on Card Payment Infrastructure
(v) Issued a consultation on Peer to Peer (P2P) lending
(vi) Issued Directions on Account Aggregators
(vii) Authorised payment solutions provided by NPCI such as NACH, AEPS,
IMPS, Unified Payment Interface (UPI)
(viii) Given in-principle approval for National electronic toll collection project.
48
(ix) Set up the framework for the electronic Trade Receivables Discounting
System (TReDS) to improve flow of funds to MSMEs
49
5.3 Initiatives taken by other financial market regulators in India
5.3.1 SEBI
5.3.1.1 Specifically, considering the financial sector and the evolution of SEBI over the
last two and a half decades, it is believed that increasing preponderance of technology
has been largely beneficial to the financial markets, increasing the efficiency of trading
systems, reducing overall cost of transactions and most importantly democratising the
reach of financial markets and increasing retail participation. SEBI on its part has also
made its best efforts to evolve with the changing technological landscape. Screen Based
Trading, nationwide trading systems and dematerialisation of shares are amongst the
biggest gifts of the technology revolution which has brought significant reforms in the
Indian capital market.
5.3.1.2 In the recent past one of the most pertinent innovations in financial sector is the
adoption of algorithmic and machine based trading. Additionally, tools like robot advisors
in the investment advisory space are another innovation gathering speed in recent times.
Another important innovation is the emergence of social media, which serves as the
carrier of news - financial or otherwise - faster than any other mode and more importantly
with a very wide reach.
5.3.1.3 It has also been observed that market participants in other securities markets are
exploring the usage of BlockChain or Distributed Database technology to provide various
services such as clearing and settlement, trading, etc. Indian securities market may also
see such developments in near future and, therefore, there may be a need to understand
the benefits, risks and challenges such developments may pose.
50
and retailers through white-labelling and over-the-counter products have become
increasingly popular.
5.3.2.2 In some geographies, customer-centric high-touch services have emerged to
provide differentiated claims experience. Some of the initiatives taken in the recent past
are:
• The adoption of digital channels has begun to replace manual time-consuming
processes to empower customers and / or workforce
• Innovation labs within insurance companies are being established to combine
brand and product managers with technological and analytical resources
• New products increasingly require integration with 3rd party data providers
• Advanced statistical models are being deployed to understand the correlation
between measurable factors and risk (actuarial) using historical data
• A large portion of pricing risks with collected data (underwriting) has been
automated over the years to improve accuracy and speed, especially with the
advent of out-of-box solutions
51
Insurance companies may collaborate with Insurtech entities or start-ups to provide
better customer experience in a cost effective manner.
5.4 Cyber security and FinTech
Since early 1990s (accelerated in 2000s) with entry of New Pvt. Sector banks, the PSU
banks have also embraced technology by leaps and bounds in the last decade or so. But
the key shift has been brought in by consumer demand for real-time and always ON
(anytime/anywhere) banking aided by growing demand coming from explosive growth in
use of personal computing devices and internet connectivity, innovative products (plastic
cards, now contactless cards, future - internet of things) by consumers. The banks have
also been trying to make their processes more efficient and continuously looking for
ways to leverage enhanced level of engagement with customers with a view to offering
innovative products and services keeping in view cost, convenience and profitability
factors. Being a largely service based industry, there is a high degree of dependency on
technology for delivering services (be it from sourcing to servicing) by banks and
competitive pressures to continually innovate in order to retain customers in the wake of
entry of niche players/new players/entrants (banks, small finance banks, payment
banks).
Along with the benefits that the technology advancements have brought in, with
increased reach of connectivity (internet) and geo political/macro-economic factors, we
52
are beginning to see another side/dark side of the technology in the form of cyber-
attacks. The sophistication of cyber-attacks are on the rise and may well continue in the
future with connected devices set to exceed the human population at some point in the
future.
Cyber Security is an issue that has been growing in importance with the advancements
in technology. From a securities market point of view, some developed jurisdictions have
observed cases of hacking of trading accounts for market manipulation. However, the
same is as yet unheard of in Indian market, largely on account of separation of trading
and bank accounts. Consequently, while infeasible (from the point of view of
manipulator/offender) because of the practicality issue of hacking multiple accounts,
hacking of trading accounts and like activities, is not impossible in the Indian context.
However, the real danger here could be an attack on the systems of Market
Infrastructure Institutions or even the Regulator for that matter as targets of economic
terrorism or warfare.
54
end-user devices directly connected to the internet and in respect of Server operating
Systems / Databases / Applications / Middleware, etc.
55
interactive, only heightens this risk. In a worst case scenario, it is possible to imagine a
wave of concerted attacks triggering a liquidity squeeze in the markets and threatening
the solvency of sector participants. For regulators, however, the difficulty is knowing how
to evaluate these new risks. There are no historical examples that can be used to
construct realistic scenarios. All regulators can do is to take a pragmatic approach,
defining plausible attack scenarios and testing the defence mechanisms put in place by
digital enterprises. This task is made all the more difficult by the fact that ongoing
financial innovation is constantly opening up new possibilities of attack. Only by
developing in-depth expertise in this field can the regulators expect to effectively fulfil
their role.
The second source of risk is the outsourcing of certain tasks in the financial transaction
processing chain. Before the technological revolution, it was usual for banks to carry out
all tasks in the value chain internally, so that all these tasks were subject to supervisoey
oversight. These days, this is increasingly rare, both for conventional players and new
market entrants. In the case of conventional banks, for example, cost pressures have
pushed them to offload some tasks to unregulated entities.
56
6 Way Forward – for stakeholders
6.1 Regulation
6.1.1 FinTech powered business should ideally be undertaken by only regulated entities,
e.g. banks and regulated payment system providers. The forms of business which can
be undertaken by, say, a banking company are specified in section 6 of the Banking
Regulation Act, 1949 and no banking company can engage in any form of business other
than those referred to in that section. This provision however also enables a banking
company to do such other things which are incidental or conducive for the promotion or
advancement of its business. Banking companies can therefore form subsidiaries for
undertaking any business which supports their main business. Subsidiaries can also be
formed for undertaking such other business which Reserve Bank may, with the approval
of the Central Government, consider to be conducive to spread banking in India or to be
otherwise useful for necessary in the public interest [section 19(c), BR Act]. These
provisions give room for banking companies to undertake focused innovative FinTech
business relevant to their operations, via a dedicated subsidiary, while remaining within
the legal framework of the Banking Regulation Act. However, as FinTech innovations are
typically multiple-use, with significant applications beyond financial regulation, it may be
inefficient and counterproductive to restrict core FinTech activities to only those entities
and applications which are covered under financial regulation/supervision.
6.1.2 The Payment and Settlement Systems Act, 2007 provides for authorisation,
regulation and supervision of payments systems by Reserve Bank. A payment system is
defined in that Act as a system that enables payment to be effected between a payer
and a beneficiary, involving clearing, payment or settlement service or all of them, but
does not include a stock exchange or clearing corporation set up under a stock
exchange. It is further stated by way of an explanation that a “payment system” includes
the systems enabling credit card operations, debit card operations, smart card
operations, money transfer operations or similar operations. As the bulk of FinTech
innovations do not amount to ‘payment system’ as defined under that Act, they will not
fall under its regulatory framework.
6.1.3 Section 35A of the Banking Regulation Act empowers the Reserve Bank to issue
directions to banking companies in public interest and in the interest of banking polices,
etc. Reserve Bank is also empowered under section 36 of the BR Act to caution or
57
prohibit banking companies generally and generally to give advices to banking
companies. As regards payment systems, section 17 of the Payment and Settlement
Systems Act gives the RBI the power to issue directions to payment systems and
systems participants. It may be possible for the Reserve Bank to invoke these
provisions in case FinTech innovations used by these regulated entities require RBI
intervention. However, there is scope for developing a legal framework that sets out the
broad contours of what principles financial innovations should conform to.
6.1.4 Faced with the profound changes that FinTech is bringing to the banking and
financial sectors, regulators need to take care to avoid two pitfalls. The first is
overprotecting incumbents by erecting barriers to entry for newcomers. Doing so would
discourage financial innovation and stifle competition in the financial sector. The second
potential pitfall is choosing instead to unduly favour newcomers by regulating them less
stringently than incumbents, in the name of fostering competition.
Regulators have a difficult role to play as their decisions have both a direct and indirect
impact on competition between incumbent firms and newcomers. They have to provide a
level playing field for all participants, but at the same time foster an innovative, secure
and competitive financial market.
6.1.5 The Watal Committee Report has noted that the current law does not impose any
obligation on authorised payment systems to provide open access to all PSPs. This has
led to a situation where access to payment systems by new non-bank payments service
providers, including FinTech firms, is restricted. Most of them can access payment
systems only through the banks, which are also their competitors in the payments
service industry. This, according to the Committee, has restricted fast-paced expansion
of digital payments in India by hindering competition from technology firms 19.
6.1.6 FinTech companies that require to connect to banking systems to serve their
customers tend to face restrictive practices. This anti-competitive setting may not be
conducive for innovation and consumer interest. Moreover, India may not then reap the
full benefits from global innovation as international technology based PSPs would not
find it attractive to grow in India. That said, the approach of RBI has been to regulate
non-bank payments service providers lightly. This has enabled them to emerge as
significant players in a relatively short time frame. This growth now needs to be nurtured
19
Watal Committee: http://www.finmin.nic.in/reports/watal_report271216.pdf
58
in a balanced way, so that banks have competitive pressure to innovate and non-banks
have adequate opportunity to compete, without losing sight of systemic stability.
6.1.7 Globally, the above approach has been recognised and structural changes have
been put in place to ensure that the consumers benefit the most from this technology led
payments revolution. This is true for many progressive economies including countries in
European Union (including UK), Australia and South Africa. The common themes across
these jurisdictions is to promote increased participation of non-banks in payments, and
promote access and competition in the payments industry.
6.1.8 The Watal Committee Report recommends that the regulator should enable a
formal framework for a regulatory sandbox. A regulatory sandbox can be used to carve
out a safe and conducive space to experiment with FinTech solutions, where the
consequences of failure can be contained.
6.1.9 IDRBT, an institute established by the Reserve Bank of India exclusively for
research and development in the area of banking technology, has been working closely
with banks and technology companies. The institute, at the instance of RBI, organized a
payment system innovation contest in the year 2016. There have been several entries
from academicians, banks, start-ups from India and other countries. The Institute
awarded prizes to best entries, after a rigorous evaluation process. Similarly, the Institute
has brought out a white paper on application of block chain technology in banking and
finance. The white paper also describes a Proof of Concept exercise in the area of trade
finance, done with active participation of NPCI, banks and an international solution
provider. The institute has facilities for testing mobile apps, which are being used by
banks.
6.1.10 In view of IDRBT’s unique positioning as a RBI established institute, and its
expertise and experience, it is felt that IDRBT is well placed to operate a regulatory
sandbox, in collaboration with RBI, for enabling innovators to experiment with their
solutions for eventual adoption. The Institute may continue to interact with RBI, banks,
solution providers regarding testing of new products and services and over a period of
time upgrade its infrastructure and skill sets to provide a full-fledged regulatory sandbox
environment. The Reserve Bank of India may actively engage with the Institute in this
regard. Other regulators may also leverage the expertise of IDRBT to provide sandbox
for respective sectoral solutions.
59
6.1.11 It is possible, however, to outline a number of general regulatory principles. The
first should be to maintain a neutral stance with regard to technological advances.
Regulations should foster healthy competition between players, regardless of whether
they offer conventional approaches or use new technological solutions. We need to
avoid putting unnecessary obstacles to growth for new entrants. The second principle is
that we have harmonised sets of rules, inter-operability and platform utilization security
protocols, covering a given activity across all players simultaneously, rather than treating
players differently according to their characteristics, an approach that would artificially
segment the market and hence limit competition. The third principle is that regulators
must also act in the interests of users, protecting them in a changing environment that
can pose new, unanticipated risks. The fourth principle is that systemic stability concerns
should be addressed.
6.1.12 Respecting these principles in equal measure will clearly be difficult, and giving
one principle priority could undermine the others. The role of the regulator is to find the
right balance.
6.1.13 Regulators are responding to challenges posed by technological innovation and
are seeking to strike a balance between mitigating the potential risks associated with this
development, and not impeding the positive effects of innovation. The range of actions
taken by various regulators include:
Research and publishing papers on FinTech developments
Proactive engagement with existing firms and new entrant FinTech firms
Modifications to supervisory processes;
New guidance or regulations
6.1.14 It would be difficult for a regulator to imagine and fully anticipate what kind of
innovations can take place in the market and their impact on the broader market and
institutions. Generally, the need for a certain service creates demand for the product,
which the entrepreneurs tap, and try to make a business model out of it. At times,
products are designed in advance and the market is created for such product. While
encouraging such innovations, as already stated, the challenge would be to keep in mind
systemic risk, which may arise with greater innovation; consequently, risk management
measures would need to be in place.
60
Illustratively, a securities market regulator (e.g. SEBI) would want to minimise the impact
of tail events like flash trades, freak trades or malfunctioning of Algos, etc. For example:
• The technology should not prove a hindrance or obstacle for surveillance or
investigation function of SEBI.
• Cases have been observed in the recent past of usage of tools like SMS to spread
misinformation relating to specific scrips; there is the possibility of usage of similar
tools to spread general market wide panic. The challenge in this case is twofold;
firstly, in terms of prevention of such activity, which presently at least, seems
infeasible for all practical purposes. Secondly, the challenge of establishment of
audit trail post the concerned event makes it difficult to identify and nail the actual
culprit/brain behind the activity. Such acts are observed to have taken place under
layers and layers of front entities, some of which may not even be within the
jurisdictional reach or ambit of the regulator, geographically, legally or otherwise
and necessary supervisory response might require inter-regulatory and cross
jurisdictional coordination, in addition to the technological capacity to identify such
issues.
6.1.15 The use of technology has been of great help for increasing the reach of the
financial services and has also facilitated the ease of doing business. Regulators can be
open to considering all these FinTech options and facilitating the same, so long as these
serve to subserve their regulatory mandate without compromising on the risk associated
with such innovations. As and when such products are introduced or emerge in the
market, the issue for consideration before the regulator would be to assess the product
and its implications for stakeholders, and how to monitor its use.
61
In this regard, the following steps are recommended by the Working Group:
The regulatory actions may vary from “Disclosure” to “Light-Touch Regulation &
Supervision” to a “Full-Fledged Regulation and Supervision”, depending on the
risk implications. As suggested per the matrix in the Annex-2.
To develop a more detailed understanding of risks inherent in platform based
FinTech.
To identify sector specific FinTech products, study regulatory approaches by
various financial sector regulators, and devise the regulatory approach.
To provide an environment for developing FinTech innovations and testing of
applications/APIs developed by banks/FinTech companies.
An appropriate framework may be introduced for “Regulatory Sandbox/innovation
hub” within a well-defined space and duration where financial sector regulators
will provide the requisite regulatory support, so as to increase efficiency, manage
risks and create new opportunities for consumers, for Indian context, similar to
other regulatory jurisdictions.
In view of IDRBT’s unique positioning as an RBI established institute, and as
indicated by some of its activities, it is felt that IDRBT is well placed to act as
regulatory sandbox in collaboration with RBI for enabling innovators to experiment
their solutions for eventual adoption. The Institute may continue to interact with
RBI, banks, solution providers regarding testing of new products and services and
over a period of time upgrade its infrastructure and skill sets to provide full-fledged
regulatory sandbox environment. The Reserve Bank of India may actively engage
with the Institute in this regard.
In order to identify and monitor the challenges associated with the development of
major FinTech innovations and to assess opportunities and risks arising for the
financial system from these innovations, a ‘dedicated organizational structure’
within each regulator should be created.
Financial sector regulators require to engage with FinTech entities in order to
chalk out appropriate regulatory response and to re-align existing regulatory and
supervisory framework.
Regulatory and legal reforms which are essential to enable the sustained
development of a digital financial industry for the future.
62
Partnerships/engagements with regulators, existing industry players, clients and
FinTech firms will enable the development of a more dynamic and robust financial
services industry.
Models of engagement and risk-benefit checklist to be developed by each
regulator for identified FinTech based activities.
20
https://www.fca.org.uk/publication/feedback/fs-16-04.pdf
63
System monitoring and visualisation: Technology that captures and traces all
messages created by systems and their interactions.
6.1.17.3 The emerging focus of Reg Tech for regulators may include the following:
• Regulatory Reporting: streamlining the existing regulatory reporting structure
across the value chain
• Risk and compliance monitoring
• Protecting Customer interest
• Detecting Financial Crime
6.2 Supervision
Technical innovations will have to be monitored in terms of their potential systemic risks.
Crucially, it seems difficult to draw up a complete list of the associated risks because of
the large spectrum of FinTech businesses. With respect to crowd funding and crowd
lending, for example, unless effective control mechanisms are put in place, asymmetric
information on creditworthiness may encourage moral hazard on unregulated platforms
in the same way as originate-to-distribute schemes did during the crisis. For many
innovations, consumer protection issues might become important because these
innovations are put into effect at the interface with the customer.
While innovative players and new technologies are entering the financial industry with
impressive rapidity, regulation should not aim for an artificial separation between
FinTechs on the one hand and traditional banking on the other. While there may be good
reasons for fostering an innovation-friendly environment for FinTechs, these should be
addressed independently of supervisory and regulatory concerns. Also supervisory
authorities risk a conflict of interest between those dissimilar mandates.
Regulators and supervisors need to gear up their organizational structure and human
resources (HR) practices to meet the challenges of innovation, in terms of adapted HR
hiring, learning and educational programmes. To enhance supervisory effectiveness
across the regulatory authorities, the WG recommends the following initiatives to meet
the challenges faced by the regulators/supervisors:
Identify organizational structure changes that regulatory agencies can apply for
responding to new innovations
64
Assess and put in place the different skill sets required for regulating/supervising
FinTech innovations, including lateral induction
Identify specific technologies that regulatory agencies may benefit from having or
may need to have appropriate expertise to supervise.
Realignment of existing supervisory framework
Developing policy stance based on enhanced knowledge
65
With the rise of FinTech, IT interdependencies between market players (banks,
FinTech and others) and market infrastructures are growing, which increases the
potential for an IT risk event at a significant market player to escalate into a wider
systemic event.
Additionally, within individual banks, the complexity surrounding the delivery of
financial services is expected to increase, making it more difficult to manage and
control operational risk.
6.4 Data Security, Privacy and Fraud – set of principles/Model code of conduct
Every FinTech company should invest in fraud prevention. Some studies show that it is
easier to track frauds undertaken through electronic means than physical fraud. FinTech
companies can use technology and analytics to prevent and predict frauds. The onus
could be on the FinTech players to utilize their technological expertise, and assist/
engage with regulators to draft appropriate guidelines to prevent fraud. There is dearth of
coherent data protection and privacy law in the country and it is suggested to bring this to
the notice of the financial sector regulators / Government.
6.5 Government
6.5.1 Investment in FinTech and start-ups
Some Governments and regulators are backing disruptors as a way of introducing more
competition and transparency and preserving competitiveness of their financial service
industry.
Government may take supportive approach to FinTech / start-ups like other sovereigns
in Asia. In order to develop and promote Singapore as smart financial center,
Government of Singapore through MAS has committed USD 160 mio during next 5 years
to the FinTech and Innovation Scheme 21. Similarly Hong Kong Government announced
in November 2016 USD 370 mio VC Fund investment as part of their drive to position HK
as Asia’s FinTech hub 22.
Given that FinTech companies are in their infancy but are growing at a rapid pace, the
Government may consider introducing tax subsidies for merchants that accept a certain
21
https://www.straittimes.com/business/banking/225m-boost-for-finnacial-technology
22
https://www.crowdfundinsider.com/2016/09/90450-investhk-initiativeshk-first-hong-kong-FinTech-week/
66
proportion of their business revenues from the use of digital payments as opposed to
cash.
6.6 Consumers
6.6.1The rise of FinTech has been driven by rising customer expectations for more
personalized and digital experiences, increased access to VC funding, reduced barriers
to entry, and accelerated advancements in technology.
6.6.2 The requirement of increasing the levels of education/ awareness of customers
should be highlighted by all market regulators as well as the self-regulatory body for
FinTech companies.
67
7 List of Recommendations
In order to identify and monitor the challenges associated with the development of
major FinTech innovations and to assess opportunities and risks arising for the
financial system from these innovations, a ‘dedicated organizational structure’ within
each regulator may be created. [para-6.1.16 page- 62]
Financial sector regulators should engage with FinTech entities in order to chalk out
appropriate regulatory response and re-align existing regulatory and supervisory
framework. [para-6.1.16 page- 62]
Regulatory and legal reforms are essential to enable the sustained development of a
digital financial industry for the future. [para-6.1.16 page- 62]
68
Partnerships/engagements with regulators, existing industry players, clients and
FinTech firms will enable the development of a more dynamic and robust financial
services industry. [para-6.1.16 page- 63]
Regulators may decide to use Reg Tech technologies that may facilitate the delivery
of regulatory requirements more efficiently and effectively than existing capabilities.
[para-6.1.17 page- 63]
The organizational structure and human resources (HR) practices of regulators need
to be geared up to meet the challenges of innovation, in terms of adapted HR hiring
profiles, learning and educational programmes. [para- 6.2 page-64]
Identify organizational structure considerations that regulatory agencies can apply in
responding to new innovations. [para-6.2 page-64]
Individual regulatory agencies to assess the different skill sets that they have
assigned towards evaluating FinTech innovations. [para- 6.2 page-65]
Identify specific technologies that regulatory agencies may benefit from having or
may need to have appropriate expertise to supervise. [para- 6.2 page-65]
Realignment of existing supervisory framework. [para- 6.2 page-65]
Developing policy stance enhancing knowledge. [para- 6.2 page- 65]
The adoption of digital channels to replace manual time-consuming processes to
empower customers and / or workforce in insurance sector. [para- 5.3.2.2 page-50]
Innovation labs within insurance companies may be established to combine brand
and product managers with technological and analytical resources. [para- 5.3.2.2
page-51]
Advanced statistical models may be deployed to understand the correlation between
measurable factors and risk (actuarial) using historical data in insurance business.
[para- 5.3.2.2 page-51]
There is need for a stand-alone Data Protection Law in the country. [para-5.4.1
page-53]
Given that FinTech companies are in their infancy but are growing at a rapid pace,
the Government may consider introducing tax subsidies for merchants that accept a
certain proportion of their business revenues from the use of digital payments as
opposed to cash. [para- 6.5.1 page-66]
69
The requirement of increasing the levels of education/ awareness of customers
should be highlighted by all market regulators as well as the self-regulatory body for
FinTech companies. [para- 6.6.2 page-67]
Banks may be encouraged to collaborate with FinTech/start-ups to improve their
customer experience and operational excellence. Banks may also undertake FinTech
activity in areas like payment, data analytics and risk management areas. [para-6.3.2
page-65]
Models of engagement and checklist to be developed by each regulator for each
activity. [para-6.1.16 page- 63]
FinTech companies take an approach that is more collaborate than disruptive.
Insurance companies may collaborate with Insurtech entities or start-ups to provide
better customer experience with cost effective manner. [para- 5.3.2.5 page- 51]
70
Annex-1
71
Annex-2
Disclosure Light Touch Full-fledged
Mobile wallet
e-commerce platform
Payment bank
Recharge
Bill payments
Online marketplace providing customized rate
quotes on loans and insurance products
Online Lending
Financial inclusion technology provider
Multi-Purpose Prepaid Cash Card
PoS terminal for accepting card payments
Payment device maker
Payment gateway
Payment services through retail outlets
Loyalty relationship management company
Real-time market data and financial news
Online investment platform for mutual funds
Insurance aggregator and selling platform
Analytics, Risk Compliance Solutions for Banking
Small business lending
Online platform that provides working capital for
SMBs in India
Multi-brand gift card store
B2B backend technology provider
Web mobile based personal finance management
platform
Cloud based management platforms for lending
institutions
Smartphone application for P2P money transactions
Virtual marketplace for money borrowers and lenders
Managed subscription billing service for SaaS
BFSI software provider
Branchless Mobile Banking
Alternative payments solution for e-commerce
companies to allow users to buy and pay later
Online retail brokerage firm
Care coordination solutions for healthcare
organizations
Fraud Customer experience management solutions
for financial, retail and telecom industry
Cloud based compliance platform
Market intelligence platform for private market
investing
Free Income Tax preparation and e-filing portal
Web-based deal origination tool for PE firms and
investment banks
Financial planning and management tool
Credit management services
Online selling and comparison platform for insurance
72
References / Bibliography
1 M/s Backwaters Tech Pvt. Ltd., Faircent Technologies India and Deutsche Bank and Bill & Melinda
Gates Foundation
3 Drawing on a categorization from WEF, The Future of Financial Services, Final Report, June 2015
6 In the US, new P2P lending was USD 12 billion in 2014, (USD 7 billion in unsecured consumer
loans and USD 5 billion in small business loans). In the UK, P2P platforms originated about EUR 2.7
billion in 2015. Source: Morgan Stanley (2015) “Global Marketplace Lending: Disruptive Innovation in
Financials”. Source-Bloomberg
11 India emerging a hub for fintech start-ups, Business Standard website, http://www.business-
standard.com/article/companies/india-emerging-a-hub-for-fintech-start-ups- 116051700397_1.html,
accessed on 25 May 2016.
14 http://www.fsb.org/wp-content/uploads/Chatham-House-The-Banking-Revolution-Conference.pdf
15 http://pubdocs.worldbank.org/en/877721478111918039/breakout-DigiFinance-McConaghy-Fin
Tech.pdf
16 https://www.afm.nl/nl-nl/professionals/nieuws/2016/jun/innovation-hub
17 http://www.bis.org/review/r161111c.htm
18 http://www.bis.org/review/r160823d.pdf
21 https://www.straittimes.com/business/banking/225m-boost-for-finnacial-technology
22 https://www.crowdfundinsider.com/2016/09/90450-investhk-initiativeshk-first-hong-kong-fintech-
week/
74
Abbreviations
75
E
76
L
LC - Letter of Credit
O
OCC - Office of the Comptroller of the Currency
P2P - Peer-to-peer
PFRDA - Provident Fund Regulatory and Development Authority
PoC - Proof-of-Concept
PPI- Pre-paid payment instrument
PRA - Prudential Regulation Authority
PSP - Payment service provider
QR - Quick Response
77
S
VC - Venture Capital
78