Audit digital lending guidelines (DLG), 5% FLDG caps, Key Fact Statement (KFS) APR, and fintech KYC/AML thresholds.
Audit FinTech and Lending Service Provider (LSP) compliance with the RBI Digital Lending Guidelines (DLG), calculate the statutory 5% First Loss Default Guarantee (FLDG) portfolio cap, and compute transparent Key Fact Statement (KFS) True APR.
Audit NBFC and FinTech digital lending operations against the RBI Digital Lending Guidelines (DLG), test the statutory 5% First Loss Default Guarantee (FLDG) ceiling, and compute Key Fact Statement (KFS) True APR.
Audit Customer Due Diligence (CDD), Politically Exposed Persons (PEP) controls, 10% Ultimate Beneficial Ownership (UBO) thresholds under PMLA 2023, V-CIP video KYC guidelines, and Small Account limits.
Audit digital payment systems against the RBI Master Direction on Digital Payment Security Controls (MD-DPSC). Evaluate AFA 2-factor authentication, Card-on-File Tokenization (CoFT), mobile app root detection, and SSL pinning.
Calculate statutory turnaround time (TAT) deadlines and ₹100/day customer delayed compensation for failed transactions across UPI (T+1), ATM (T+5), IMPS (T+1), and Card POS/E-Com under RBI Circular DPSS.CO.PD No.629.
Audit Open Banking, UPI switches, and Account Aggregator APIs against RBI Master Direction on IT Governance 2023. Generate and verify client-side HMAC-SHA256 payload signatures and mTLS 1.2+ controls.
Evaluate vendor materiality under Chapter III of the RBI Master Direction on Outsourcing of IT Services (April 2023), audit mandatory Right-to-Audit clauses, data localization, and BCP failover drills.
Audit Segregation of Duties (SoD), Maker-Checker dual authorization for financial disbursements, Privileged Access Management (PAM), quarterly User Access Reviews (UAR), and 24-hour offboarding SLAs.
Track landmark directions, circulars, and compliance implementation deadlines across RBI, NPCI, and SEBI (MD-IT Governance, DLG, KFS APR, CoFT, and E-Mandates).