Risk Management by Fintechs

Fintech – Business Overview

Fintech companies leverage technology to offer innovative financial products and services. They utilize various technologies such as mobile apps, cloud computing and artificial intelligence to streamline and automate business processes including last mile customer delivery.
These platforms allow customers to access financial services anytime and anywhere, often through their smartphones. Fintech companies may offer services such as payments and money transfers, investment and wealth management, lending, and insurance, among others.
Fintech companies focus extensively on enhancing user experience and it is their agility that sets them apart from conventional financial institutions. By leveraging artificial intelligence and data analytics, fintech companies personalize their offerings with quicker turnaround.
Fintech companies have gained significant traction and they continue to disrupt and reshape the financial industry by offering new and convenient ways for individuals and businesses to access financial products and services.

Business Model of Fintech Companies

Fintech companies operate using various business models, depending on the nature of products and services offered along with due consideration of target market being catered to.

Following are some generally used business models of fintech companies:

01. Collaboration and Partnerships

• Enables traditional banks to leverage the innovative technology and expertise of fintech companies
• Helps traditional banks gain access to new ideas and solutions that can help improve their existing products as well as develop new products
• Fosters financial inclusion

02. Digital Wallets and Payment Solutions

• Enables users to make electronic transactions quickly and securely
• Facilitates seamless and convenient payments

03. Peer-to-Peer (P2P) Lending

•  Connects borrowers directly with lenders through an online platform
•  Eliminates the need for traditional financial intermediaries
• Streamlines the lending process by providing quicker loan approvals at competitive interest rates

04. Robo Advisory

• Offers automated investment advice and portfolio management to clients based on algorithms and machine learning
• Enhances efficiency and scalability for fintech companies by automating repetitive tasks and routine portfolio management
• Provides greater accessibility and convenience to clients

Regulations governing Fintech

Fintech companies in India offer a wide range of financial services including lending, borrowing, investing, insurance etc. through digital platforms. The use of innovative technologies for product or service delivery brings with it potential risks and challenges. The nature of risks includes technological, information security, customer related, compliance, reputational amongst others. Accordingly, regulations governing consumer protection, data privacy, and cybersecurity become very relevant in the context of fintech landscape.
The emergence of fintech has brought about several innovations in the financial industry. However, it also poses challenges for regulators as they strive to maintain a balance between encouraging innovation and achieving the necessary level of oversight on fintech businesses.
Fintech firms often operate in an interconnected environment, which can increase vulnerabilities in areas such as cybersecurity and data protection. Hence, regulators need to establish robust frameworks to safeguard consumer interests, maintain financial stability, and achieve a level playing field for both traditional financial institutions and fintech businesses. and thereby eliminate possibilities of regulatory arbitrage.

Some key regulations applicable to fintech companies in India include:

RBI
The RBI has introduced guidelines such as:

• Guidelines on digital lending, 2022 – Applies to all the RBI regulated entities and the Fintech platforms that have been engaged by regulated entities to offer digital lending products.
• Master Direction on Digital Payment Security Controls 2021 – These prescribe that RBI regulated entities such as banks, and credit-card issuing NBFCs must:
• Have a robust governance framework for digital payment products and services;
• Implement minimum security control standards; and
• Conduct risk assessment
• Master Directions on Prepaid Payment Instruments (PPIs), 2021 – The PPI Directions govern the issuance and operation of PPIs. Some key examples of PPIs include digital wallets, prepaid cards, gift cards, travel cards etc.
• Scale Based Regulation (SBR): A Revised Regulatory Framework for NBFCs, 2021 – The SBR provides capital guidelines including internal capital adequacy assessment process (ICAAP), prudential norms and governance standards for different categories of NBFCs in India.

SEBI
SEBI (Securities and Exchange Board of India) has implemented regulations for listed companies in order to ensure a fair and transparent market for investors.

• Guidelines on AML Standards and CFT /Obligations of Securities Market Intermediaries under the PMLA, 2002 and Rules framed there under – These guidelines are aimed at preventing money laundering and terrorist financing activities in the securities market
• SEBI Listing Obligations and Disclosure Requirements (LODR), 2015 – These regulations focus on enhancing transparency and safeguarding the interests of stakeholders in listed companies
• SEBI (Investment Advisers) Regulations, 2013 – This regulation applies to fintech companies that provide investment advice or consultancy services to clients. It requires such companies to:
• Obtain registration with SEBI; and
• Comply with various obligations, including maintaining a minimum net worth, adopting a code of conduct, and conducting risk assessment and suitability analysis for clients.

IRDAI
IRDAI regulations in the insurance fintech sector broadly govern insurance brokers, web aggregators and corporate agents:

• IRDAI (Insurance Brokers) Regulations, 2018 – These regulations aim to:
• Safeguard the policyholder’s interest by ensuring that insurance brokers are qualified, registered and licensed
• Regulates online sales, telemarketing and distance marketing and highlights measures to be followed upon non-compliance
• Insurance Web Aggregator Regulations, 2017 – This regulation aims to oversee and monitor web-aggregators acting as insurance intermediaries
• IRDAI (Registration of Corporate Agents) Regulations, 2015) – This regulation provides a framework with respect to the ownership and control, record keeping, registration, conduct, and operations of corporate agents operating in the insurance business of life insurance, health insurance and general insurance.

Processes and internal controls for fintech

Fintech firms have disrupted traditional banking by offering new ways for individuals and businesses to manage their finances, including digital wallets, peer-to-peer lending platforms, and online payment services.
In order to mitigate risks arising from use of technology and public money being involved in Fintech landscape, there are necessary regulations in place to avoid non-compliances. Fintech companies typically handle sensitive financial data and transactions, making it crucial to ensure the integrity, confidentiality, and availability of this information.
Implementing strong process and internal controls is essential to ensure compliance with the necessary regulations and smooth conduct of fintech business in India.
In India, the Institute of Chartered Accountants of India (‘ICAI’) has issued Guidance on Internal Financial Controls over Financial Reporting (‘ICoFR’) which provides a framework for companies to establish and maintain effective internal financial controls over financial reporting. The guidance note emphasizes the importance of management’s responsibility in establishing and maintaining internal controls. It highlights the need for a sound control environment, risk assessment, control activities, information and communication, and monitoring.
Fintech companies, which operate in a technology-driven and rapidly evolving landscape, must embrace an automated internal control environment to keep pace with growth in business.

Key considerations for Board of Directors

Sound governance practices contribute to stability of broader ecosystem and striking the right balance between growth and effective governance. Corporate governance practices embody the dual goals of protecting the interests of all stakeholders while respecting the duty of the Board and senior management to oversee the affairs of a company, ensure accountability, inculcate integrity and promote long-term growth and profitability.
Considering global best practices, the Board of Directors at Fintech companies should consider following guiding principles to enhance risk management:

1.  Establish a corporate culture that is guided by strong risk management and that supports and provides appropriate standards and incentives for professional and responsible behaviour
2.  Oversee senior management to ensure that the policies, processes and systems are implemented effectively at all decision levels
3. Approve and review a risk appetite and tolerance statement for operational risk that articulates the nature, types, and levels of operational risk that the company is willing to assume
4. Ensure the identification and assessment of operational risk inherent in all material products, activities, processes and systems is carried out so that inherent risks and incentives are well understood and periodically monitored
5. Implement business resiliency and continuity plans in place to ensure an ability to operate on an ongoing basis and limit losses in the event of severe business disruption
6. Acknowledge and address all regulatory feedback in a time bound mannerIn conclusion, risk management comprising financial and non-financial risks is crucial for fintech companies to achieve orderly and efficient conduct of business. By implementing effective risk management practices and controls, fintech companies can enhance their operational resilience, reduce the probability of operational disruptions, and improve their ability to manage shocks.