Who Is In Scope
The 2026 Directions apply to a broader set of entities than the 2023 framework. NBFCs crossing the threshold after March 31, 2025 must comply within six months of crossing it. The entities in scope are:
The Independence Requirement — Where Most NBFCs Are Getting It Wrong
The most commonly misunderstood element of the 2026 Directions is the independence criterion. The IO must not be a current or recent employee of the NBFC. Many NBFCs have appointed retired senior officers from their own ranks — this does not satisfy the independence test if the period of cooling-off is insufficient or if the person has material relationships with the NBFC.
The IO must have a minimum of 7 years of experience in banking, NBFCs, regulation, payments, credit information, or consumer protection. The appointment must be made by the Board and reported to RBI. The IO has a defined term and cannot be removed without Board approval and RBI notification.
What the IO Actually Does — The Three-Gate Review Process
The IO only reviews complaints that have been: (a) completely rejected by the NBFC's internal grievance mechanism, (b) partially resolved with the complainant not satisfied, or (c) not resolved within the prescribed timeline. Complaints that are fully resolved to the customer's satisfaction do not go to the IO.
The IO conducts an independent apex-level review of the NBFC's decision. The IO is not a rubber stamp — the Directions are explicit that the review must assess whether the decision was fair, reasoned, and consistent with RBI regulations. The IO must give the complainant an opportunity to present their case.
The IO's determination is binding on the NBFC — not on the complainant. The complainant retains the right to approach the Reserve Bank Integrated Ombudsman Scheme (RBIOS) 2026 if unsatisfied with the IO's determination. The NBFC must implement the IO's decision within the prescribed timeline.
Board Accountability — What the 2026 Directions Require from the Board
The 2026 Directions embed Board accountability in a way the 2023 framework did not. The Board must approve the IO appointment, receive periodic reports from the IO, and ensure that systemic issues identified by the IO are addressed at a governance level. The IO must have direct access to the Board — not just the compliance function.
NBFCs where the IO reports only to the MD/CEO or the compliance team are not meeting the governance standard of the 2026 Directions. The IO must have an independent reporting line to the Board or a Board sub-committee — and the Board must demonstrate that it engages with IO reports substantively, not as a formality.
Is your Internal Ombudsman framework compliant with the 2026 Directions?
A 30-minute review call will assess your IO appointment, independence criteria, complaint routing, and Board reporting against the January 2026 standard.
Book a Compliance Review Call