How Lenders Use Data to Spot Repayment Trouble Early

By BillCut
Last updated: September 2026

A lender estimates the chance you will not repay, and in India the inputs are narrower than the marketing suggests. Data collection must be need-based and consented, and lending apps must not access your files, media, contacts, call logs or telephony functions. You can deny consent for specific data, revoke it later and ask for it to be deleted.

What default prediction actually is

Every credit decision is a probability estimate. The lender is asking how likely it is that this borrower stops paying, and it prices and sizes the loan against that answer. Calling the estimate a model or an algorithm changes how it is produced, not what it is.

Two things follow, and they matter more than the technique. The estimate is only as good as the data it is allowed to use, and in India what a digital lender may use is set by rule rather than by what is technically possible. So the useful question for a borrower is not how the model works. It is what goes into it, what cannot, and what you can do about either.

That distinction is practical rather than academic. A borrower who believes the model is watching everything changes the wrong things, declines to use a phone normally, and still leaves the actual inputs untouched. A borrower who knows what the inputs are can check them, correct them where they are wrong, and refuse the permissions that were never permitted in the first place.

What a lending app may not touch

This is the part most articles on the subject get wrong, including the earlier version of this one, which described lenders analysing app usage and social signals.

Under the Reserve Bank of India (Digital Lending) Directions, 2025, a regulated entity must ensure that any collection of data by its digital lending app, or by the app of its Lending Service Provider, is need-based, with the prior and explicit consent of the borrower, and carries an audit trail. The same directions require apps to desist from accessing mobile phone resources such as file and media, contact lists, call logs and telephony functions.

A one-time access may be taken for the camera, the microphone, the location or another facility only where it is necessary for onboarding or know your customer requirements, and only with explicit consent. Biometric data must not be stored or collected by the regulated entity or its service provider unless extant statutory guidelines allow it.

What an app asks for	Position under the directions	What to do
Contact list access	Apps are to desist from accessing contact lists	Refuse. A lender does not need your contacts to price a loan
Files, media and photo gallery	Apps are to desist from accessing file and media	Refuse
Call logs and telephony functions	Apps are to desist from accessing these	Refuse
Camera or microphone, once, for video KYC	Permitted as a one-time access with explicit consent, for onboarding or KYC only	Allow for the KYC step, then check it has not become continuous
Location, once, for onboarding	Same position as above	Allow if the flow needs it for KYC, not as a condition of a better rate
Bank statements or account information you supply	Need-based data with explicit consent and an audit trail	Reasonable. This is what the assessment is actually built on

An app that makes any of the first three a condition of proceeding is not following the directions, whatever it says about improving your offer.

The four rights you have over your own data

The directions give the borrower specific control, and each of the four is worth using rather than reading.

Right	What it means in practice	When to use it
Deny consent for specific data	You can accept some requests and refuse others rather than taking the whole bundle	At the permission screen, before the application proceeds
Restrict disclosure to third parties	Your data is not passed on beyond what the loan requires	At the same point, and in writing if the flow does not offer it
Revoke consent already granted	Permission given earlier can be withdrawn later	After a loan closes, or if you stop using the app
Ask for the data to be deleted	You can require the lender or its service provider to delete or forget what it holds	Once you have no live obligation with them

Each is exercised against the regulated entity or its Lending Service Provider, which is why knowing who the lender actually is matters before anything else. Checking that name against the RBI list of lending apps takes a minute and tells you who you are dealing with.

These are not customer service courtesies. They sit in the same directions that require the app to name the regulated entity whose loan it is arranging, to route repayment directly into that entity’s bank account rather than any pass-through account, and to give you a cooling-off exit of at least one day on payment of principal and the proportionate annual percentage rate.

If a lender’s assessment has already produced an offer you cannot service, the useful step is to price the whole position rather than argue about the model. See what your existing balances would cost as one structured EMI on BillCut.

What actually goes into the assessment

What remains after the prohibitions is unglamorous and entirely checkable, which is why it is more useful than a list of model features.

Your credit report is the spine of it. Under the Credit Information Reporting Directions, 2025, all credit institutions must be members of all credit information companies, must report on a fortnightly basis as on the fifteenth and the last day of each month, and must ensure that no instance of repayment, including that of the last instalment, is left unreported. Every loan and card you hold is therefore visible, with its opening date, status and payment record.

Alongside it sits what you declare and evidence: income, employment, and the obligations already committed each month. And alongside that, the information you consent to share, most commonly bank account data that shows inflows and existing repayments.

The TransUnion CIBIL’s published list of what moves a score names four things that move a score: payment history, credit mix, multiple enquiries and high credit utilisation. The bureau publishes no weightings and describes the calculation as proprietary, which is worth knowing before reading any page that assigns percentages to each. The mechanics of the report itself are covered in how credit bureaus work in India.

Does automation make the decision fairer

The earlier version of this page said AI applies objective parameters, ensuring fairer credit access, and that models are more accurate and unbiased than traditional methods. Neither claim is supportable, and the second is close to the opposite of how these systems are built.

A model trained on historical lending decisions learns the patterns in those decisions. If a category of applicant was declined more often in the past, for whatever reason, that pattern is in the training data and the model reproduces it unless someone deliberately removes it. Automation makes a decision faster and more consistent. Consistency is not the same as fairness, and speed is not accuracy.

What a borrower can do about it is concrete rather than philosophical. Ask for the reason a decision was taken. Check your credit report for the entries the decision was based on, since an error there is the commonest fixable cause. And escalate if the answer is unsatisfactory, through the lender’s grievance process and then the Reserve Bank Integrated Ombudsman Scheme, launched on 12 November 2021, using the Complaints Management System portal at cms.rbi.org.in or the contact centre on 14448.

If you think the assessment is wrong

Start with the report rather than the lender, because most disputable decisions rest on something recorded rather than something inferred.

Every individual is entitled to one free full credit report, including the score, once during each calendar year. Read the accounts section line by line: a closed loan still showing a balance, a settled account marked as outstanding, or a payment recorded in the wrong month are all common and all correctable.

A credit information complaint must be resolved within thirty calendar days of being filed, and where it is not, compensation of Rs 100 per calendar day of delay is payable to you. Quote that entitlement in writing. Where the dispute is about a lending app showing amounts you do not recognise, keep timestamped screenshots alongside your payment references, as set out in dues shown incorrectly in a lending app.

What genuinely improves how you are assessed

Four things, none of which involve the model.

Pay on time, because payment history is the one factor every source agrees on and the one the report records in the most detail. Keep the number of open facilities and recent enquiries down, since each new provider adds both. Clear obligations before a large application, because what your income is already committed to is counted on the day you apply rather than over the year. And read the Key Facts Statement rules for retail loans on any offer you receive, since the annual percentage rate there includes the interest rate and all other charges, and no fee outside it may be levied during the term without your explicit consent.

Claim you will read elsewhere	Status
Lenders score your app usage and social signals	Unsupported, and the data behind it sits under permissions apps are told to desist from requesting
Automation removes bias from credit decisions	Unsupported. A model trained on past decisions reproduces the patterns in them
Specific percentage weightings for each scoring factor	Not published by the bureau, which names four factors and describes the calculation as proprietary
Paying on time is recorded and matters	Documented. Reporting is fortnightly with no instance of repayment left unreported
Open obligations reduce what you can borrow	Documented in the sense that lenders count them against income, though each sets its own ceiling

That list is short because the honest version is short. What a borrower controls is conduct and exposure, not the weighting of a feature in someone else’s model. What the same conduct does to a later application is set out in how a credit score affects loan approvals, and what keeps the payment record clean in the first place in what keeps borrowers disciplined.

Who needs to act on this, and who does not

Act on it if you are about to apply through a lending app. Check the permissions it requests against the table above, check that the regulated entity is named, and decline anything on the prohibited list rather than assuming it helps your case.

Act on it if you have been declined and given no reason, or a reason that does not match your own record. That is the situation the rights above exist for.

Act on it if you have used several lending apps and want the data deleted. The right to revoke consent and to ask for deletion applies to each of them separately.

You can reasonably skip all of this if you borrow from a bank you already hold an account with, through a branch or its own app, and have no dispute. The data questions arise most sharply where a third party app sits between you and a lender you have never heard of.

Frequently asked questions

This article is for general information only and is not financial, legal or tax advice. Lending criteria and assessment methods vary between institutions and are not published. Check your own credit report, the permissions any lending app requests, and the Key Facts Statement on any offer, and speak to a qualified adviser before making a borrowing decision.