Financial Institutions and Banking Laws in Nepal: Licensing, Regulation, Compliance & Risk (2025 Guide)
Introduction
This article unpacks financial institutions and banking laws in Nepal in an actionable way for founders, compliance officers, investors, and counsel. It explains the regulatory architecture — the Nepal Rastra Bank (NRB) and the Banks and Financial Institutions Act (BAFIA) — how licensing works (including payment institutions), principal compliance obligations, enforcement trends, prudential norms, and practical steps for legal risk mitigation. The guide synthesises primary statutes, NRB policy pronouncements, and supervisory reports so you can make legally sound operational and strategic decisions.
1. Regulatory architecture: Who regulates banks and financial institutions in Nepal?
The central regulator for the banking sector is the Nepal Rastra Bank (NRB). The NRB’s mandate and functions are prescribed in the Nepal Rastra Bank Act, and its supervisory powers over banks and non-bank financial institutions are reinforced and operationalised by the Banks and Financial Institutions Act (BAFIA). Put simply: NRB issues licensing, prudential regulations, circulars, and enforces compliance; BAFIA constitutes the statutory backbone for oversight, licensing conditions, depositor protection and supervisory enforcement.
Why this matters: every bank, microfinance institution, finance company, development bank and licensed payment institution operates under this dual legal umbrella. Misreading either statute is a common and costly mistake.
2. Banks and Financial Institutions Act (BAFIA) — core features and practical impact
BAFIA (2017) replaced older, fragmented rules and consolidated the law governing BFIs. The Act:
- Defines types of BFIs (commercial banks, development banks, finance companies, microfinance institutions, etc.).
- Makes licensing by NRB mandatory and prescribes pre-conditions for incorporation.
- Establishes depositor protection duties and reserve/ capital requirements delegated to NRB.
- Authorises NRB to conduct inspections, issue directives, and take corrective actions, including suspension of management, revocation of license and amalgamation or forced restructuring of a troubled BFI.
Practical issues under BAFIA: structuring shareholding to comply with fit-and-proper criteria; capital contribution timing; board composition requirements; and pre-licensing documentation (MOA, AOA, business plan, capital proof, promoters’ due diligence). BAFIA’s supervisory latitude for NRB is broad — plan for extensive back-and-forth with NRB during licensing and periodic inspections.
3. NRB Act: monetary policy, macroprudential objectives and supervisory tools
While BAFIA governs bank licensing and conduct, the NRB Act sets out the central bank’s macroeconomic duties: monetary policy, price stability, exchange rate policy and general financial stability. NRB’s monetary policy pronouncements influence liquidity, interest rates and reserve requirements, which ripple into compliance (e.g., reserve ratios, credit guidelines). In recent monetary policy statements, NRB emphasised financial stability, credit growth monitoring, and sectoral support measures.
Client counsel: When building lending or treasury strategies, legal advice must anticipate NRB’s macroprudential direction. Align lending covenants and liquidity contingency plans with likely NRB moves.
4. Licensing: commercial banks, development banks, finance companies, microfinance & payment institutions
a. Pre-conditions and approval process
Licensing to operate a bank or other financial institution requires prior NRB approval; incorporation as a public company follows license-grant steps. Promoters must meet fit-and-proper tests; the NRB reviews capital adequacy, governance arrangements, business plan, and AML/CFT controls. The application review timeline and detailed submission requirements are provided in BAFIA and NRB circulars.
b. Payment and fintech licensing
NRB’s Licensing Policy for Institutions That Perform Payment-Related Work (2079 / 2023) introduced a more granular licensing regime for payment service providers and fintech entities (wallets, payment gateways, switches). The policy differentiates between banks offering payment services and non-bank entities that require distinct authorisation. This is a fast-moving space — lawyers advising fintechs must align corporate structure and governance with the specific payment licensing category sought.
c. Practical timeline
Expect multiple rounds of queries from NRB. Typical timeframes may vary by institution type, completeness of submission, and NRB’s risk assessment — but prepare for an iterative process spanning months.
5. Corporate governance and fit-and-proper requirements
NRB uses governance as a front line of prudential supervision. Directors, senior management and major shareholders are evaluated on integrity, competence, experience and financial soundness. BAFIA and NRB circulars allow NRB to remove or bar individuals who fail the fit-and-proper standard. From a legal drafting standpoint, shareholder agreements and MOA/AOA should be structured to prevent unauthorised transfers that would trigger NRB scrutiny.
6. Prudential norms: capital adequacy, provisioning & liquidity
NRB issues detailed prudential regulations on capital adequacy, single-borrower limits, related-party exposures and liquidity ratios. Recent supervisory emphasis includes the adoption of IFRS/NFRS-based impairment models (e.g., NFRS 9 / Expected Credit Loss guidance issued in 2024) and strengthening ECL provisioning. NRB’s annual supervision report highlights supervisory focus on asset quality and provisioning.
Practical checklist for legal teams: ensure loan documentation supports provisioning decisions, retention of rights for restructuring, security perfection and covenants that permit timely classification and provisioning.
7. Consumer protection, deposit insurance and disclosure obligations
BAFIA includes depositor protection objectives; NRB requires disclosure on rates and charges and enforces clarity in consumer contracts. Deposit insurance (where applicable) and statutory disclosures must be integrated into product terms, fee schedules and customer information forms.
8. Anti-Money Laundering (AML), KYC and CFT: a non-negotiable compliance pillar
AML/CFT rules in Nepal require rigorous KYC, customer due diligence, transaction monitoring and STR filing to the Financial Information Unit (FIU). NRB periodically issues AML directives for BFIs. Non-compliance draws penalties and reputational damage — and in practice, NRB scrutinises AML frameworks during inspections and licensing reviews.
Client note: integrate AML legal reviews with operations and IT (transaction monitoring), not as an afterthought.
9. Supervision, inspection and enforcement powers
BAFIA and NRB regulations grant the NRB the power to inspect BFIs, demand information, and apply remedial measures — from directives and monetary penalties to management replacement and license revocation. NRB’s supervisory reports and circulars reflect increasing emphasis on forward-looking supervision, including stress testing and ECL compliance.
Practical move: prepare an NRB compliance binder, maintain a rolling remediation tracker, and conduct mock inspections with counsel present.
10. Foreign investment, cross-border transactions and foreign exchange regulation
FDI into BFIs and foreign participation in banks are tightly regulated. Cross-border transactions must comply with NRB foreign exchange rules and licensing (for FX dealers, remittance companies, etc.). NRB approval is required for direct ownership by foreign entities in certain cases, and repatriation of profits has procedural requirements tied to foreign exchange regulation.
Advisory: counsel on investor structuring must coordinate company law, BAFIA restrictions and foreign exchange rules simultaneously to avoid regulatory gaps.
11. Payment systems and fintech: regulatory opportunities and constraints
NRB’s licensing for payment institutions and the policy on fintech demonstrate openness to innovation, but also insist on customer protection, data governance and interoperability. Payment aggregator models, wallet services, and mobile money arrangements are regulated with specific capital and governance thresholds depending on the license class.
Strategic question to clients: Do you want to operate as a bank’s subsidiary, a standalone payment institution, or a pure technology provider serving licensed BFIs? Each route has different regulatory burdens and commercial trade-offs.
12. Recent supervisory trends and what they signal
NRB’s latest monetary policy and supervision reports evidence several signals:
- Greater emphasis on ECL provisioning and IFRS-aligned accounting.
- Active licensing and enforcement in the payment/fintech space (Licensing Policy 2079).
- Ongoing macroprudential calibration (reserve ratios, sectoral credit monitoring) via the NRB Act mandate.
13. Common compliance traps
- Incomplete licensing dossiers: provide full MOA/AOA, evidence of capital, promoter CVs, AML framework and IT security plans.
- Weak AML/KYC: patchy KYC, insufficient transaction monitoring and poor STR escalation are inspection red flags.
- Governance gaps: absent board charters, vague director duties, or related-party exposures without documented approvals.
- Accounting mismatches: failure to adopt NFRS 9 and provide consistent impairment accounting.
- Payment services misclassification: fintechs operating without the correct NRB license.
Mitigation: conduct pre-launch regulatory gap analysis, AML readiness assessment, and formal board approval memos for governance policies.
14. Practical step-by-step: from concept to fully-compliant bank/financial institution
- Concept & business plan: realistic projections, target segments, product design and risk assessment.
- Regulatory mapping: determine license type (commercial bank, development bank, finance company, microfinance, payment institution).
- Promoter due diligence and capitalisation: ensure promoters meet fit-and-proper tests and funding is demonstrable.
- Document preparation: MOA/AOA, governance charter, AML policy, IT security and business continuity plans.
- Application & engagement with NRB: submit initial dossier and respond to NRB’s queries; anticipate supplements.
- Pre-launch compliance: hire a compliance officer, set up internal controls and independent audit channels.
- Post-licensing: implement NRB reporting, supervisory readiness and ongoing legal support.
15. Dispute risk & enforcement: litigation, administrative remedies & alternative dispute resolution
When NRB takes corrective action, administrative remedies include internal representation and judicial review, though judicial review of regulatory action can be procedurally complex. For commercial disputes (e.g., contract or IP), arbitration remains an efficient forum, but enforcement across borders requires attention to reciprocities and local law limitations.
Client planning: include regulatory risk in dispute clauses and ensure escalation pathways for urgent regulatory interventions.
16. What counsel should push back on?
Don’t accept “NRB will decide” as a legal dead-end. Counsel must interrogate the factual basis for supervisory directives, test the proportionality of penalties, and press for remedial plans that preserve business continuity. Push for clarity where circulars are ambiguous (e.g., interpretation of fintech boundaries) — and if the law is genuinely unclear, seek a policy clarification or pre-application meeting with NRB.
17. Checklist
- Confirm license scope and permitted activities.
- Adopt/update AML/CFT policy; test systems.
- Ensure IFRS/NFRS accounting compliance and ECL policies.
- Board-approved risk appetite and related-party transaction policies.
- Rolling remediation tracker with counsel oversight.
- Contractual audit rights for outsourced payment/IT providers.
18. Conclusion
The legal and regulatory environment for financial institutions and banking laws in Nepal is mature and active. NRB’s supervisory posture is robust; BAFIA empowers NRB with wide discretion. For clients: prepare comprehensive licensing dossiers, embed strong governance and AML frameworks, and treat regulatory engagement as an ongoing operational priority rather than a one-time hurdle.
If you’re building a bank, finance company, or payment solution in Nepal, the right legal strategy combines statutory literacy (BAFIA/NRB), early regulator engagement, operational readiness, and continuous legal oversight.
FAQs
Q1: Who grants banking licenses in Nepal?
A1: The Nepal Rastra Bank (NRB) grants licenses to banks and financial institutions under the Banks and Financial Institutions Act (BAFIA).
Q2: Can a fintech company operate payments without NRB approval?
A2: No — most payment-related activities require NRB licensing or must be operated through a licensed BFI. NRB’s Licensing Policy 2079 (2023) outlines categories and requirements.
Q3: What are the main compliance risks for banks in Nepal?
A3: Key risks include AML/CFT failures, insufficient provisioning (ECL issues), poor governance, related-party exposure breaches, and non-adherence to NRB circulars.
Q4: How does NRB supervise capital and provisioning?
A4: NRB issues prudential norms for capital adequacy and provisioning; recent guidance emphasises NFRS 9 and expected credit loss frameworks.
Q5: Are foreign investments allowed in Nepalese banks?
A5: Foreign investment is permitted subject to NRB and FDI rules, and certain approvals are required; structuring should consider BAFIA restrictions and foreign exchange regulations.