In September 2019, the Reserve Bank of India placed Punjab and Maharashtra Co-operative Bank under restrictions after discovering that a single borrower — HDIL — accounted for 73% of the bank's total loan book, a fact hidden from depositors, regulators, and auditors through years of falsified financial statements. Over Rs 6,200 crore in loans had been disguised by replacing 44 loan accounts with 21,049 fictitious entries. The fraud was possible because PMC Bank's financial disclosures — the notes to accounts, the exposure reports, the NPA breakdowns — were fabricated. Had genuine disclosure requirements been enforced, the concentration in a single borrower would have been visible in the very first published balance sheet.
This is why bank disclosure regulation exists. Not as bureaucratic paperwork, but as a defence mechanism — a system designed to make hidden risk visible before it becomes a crisis. The RBI's framework for financial statement disclosure has evolved over decades, and in November 2025, it was comprehensively overhauled through nine simultaneous Master Directions covering every category of regulated entity.
See also: The November 2025 Consolidation | When the RBI Investigates Your Bank | What Basel III Actually Changed for Indian Banks
Why disclosure is the foundation of market discipline — Basel III Pillar 3
The Basel III framework, which India adopted progressively from 2013 onwards, rests on three pillars. Pillar 1 sets minimum capital requirements. Pillar 2 gives the supervisor discretionary power to demand more capital. But Pillar 3 — market discipline — works differently. It requires banks to publish detailed information about their risk profile so that market participants, analysts, depositors, and counterparties can independently assess whether a bank is sound.
The logic is straightforward: if a bank must publicly disclose its capital adequacy ratio, its non-performing asset breakdown by sector, its exposure to sensitive industries, and its provisioning coverage, then the market can price the risk. Investors will demand higher returns from riskier banks. Depositors — at least sophisticated ones — will move their money. Counterparties will tighten credit terms. The bank's own cost of doing business becomes a function of its disclosed risk, creating an incentive to manage that risk better.
This is not theoretical. The Guidelines on Composition of Capital Disclosure Requirements RBI/2012-13/512 (since withdrawn), issued on May 28, 2013, required banks to publish a detailed reconciliation between their accounting balance sheet and their regulatory capital — forcing transparency about the instruments that counted as capital and those that did not. [Note: This notification was subsequently withdrawn and its requirements were consolidated into later Master Directions.]
"The final guidelines on composition of capital disclosure requirements, would be issued to banks in due course." — Guidelines on Composition of Capital Disclosure Requirements, May 28, 2013 RBI/2012-13/512 (since withdrawn)
Why does Pillar 3 matter more in India than in some developed markets? Because the Indian banking system includes a vast number of co-operative banks, regional rural banks, and small finance banks where retail depositors lack the tools or expertise to independently assess risk. For these depositors, the published financial statements of their bank — if accurate — are the only window into whether their money is safe. When those statements are falsified, as in PMC Bank, the market discipline mechanism fails entirely.
The November 2025 Financial Statements Directions — nine Master Directions in one day
On November 28, 2025, the RBI issued nine entity-specific Master Directions on financial statement presentation and disclosure, replacing the previous framework that had been built up over decades of individual circulars. The Commercial Banks Financial Statements Directions (RBI_MD_13143) is the flagship, at 21,259 words — a comprehensive rulebook for how commercial banks must prepare, present, and disclose their financial position.
The other eight directions cover every remaining category of regulated entity:
- Non-Banking Financial Companies Financial Statements Directions (RBI_MD_12945)
- All India Financial Institutions Financial Statements Directions (RBI_MD_12970)
- Rural Co-operative Banks Financial Statements Directions (RBI_MD_12990)
- Urban Co-operative Banks Financial Statements Directions (RBI_MD_13016)
- Regional Rural Banks Financial Statements Directions (RBI_MD_13041)
- Local Area Banks Financial Statements Directions (RBI_MD_13066)
- Payments Banks Financial Statements Directions (RBI_MD_13092)
- Small Finance Banks Financial Statements Directions (RBI_MD_13111)
"In exercise of the powers conferred by section 35A of the Banking Regulation Act, 1949, and all other provisions / laws enabling the Reserve Bank of India in this regard, RBI being satisfied that it is necessary and expedient in the public interest so to do, hereby, issues the Directions hereinafter specified." — Commercial Banks Financial Statements Directions, November 28, 2025 (RBI_MD_13143)
Why issue nine separate directions rather than one? Because the disclosure requirements differ by entity type. A commercial bank with international operations has different reporting needs than a rural co-operative bank in a single district. The capital adequacy framework for NBFCs differs from that for payments banks. By issuing entity-specific directions, the RBI ensured that each category receives requirements tailored to its risk profile, business model, and regulatory architecture — while maintaining a common conceptual framework across all of them.
The RBI had earlier released draft formats for co-operative bank financial statements (PR_59467) on January 7, 2025, inviting public comments before finalising the November 2025 directions. This consultation process reflected lessons learned: the previous financial statements framework, built through the 2021 Presentation and Disclosures Directions, had required multiple amendments as implementation challenges emerged.
What must be disclosed — the anatomy of a bank's financial statements
The Commercial Banks Directions (RBI_MD_13143) prescribe what must appear in a bank's balance sheet, profit and loss account, and — critically — the notes to accounts. The balance sheet follows the format set out in the Third Schedule of the Banking Regulation Act, 1949, as mandated by Section 29. But the Directions go far beyond the statutory minimum.
Banks must disclose their capital adequacy ratios — both Common Equity Tier 1 and total capital adequacy — computed in accordance with the RBI's Basel III framework. They must break down their non-performing assets by sector, showing exactly where the bad loans are concentrated: agriculture, industry, services, retail. They must show their provisioning coverage ratio, revealing how much of the expected loss on bad loans has been provided for.
Exposure to sensitive sectors — real estate, capital markets, commodities — must be separately disclosed. Related party transactions must follow the disclosure requirements of Accounting Standard 18, with a prescribed tabular format showing transactions with parent entities, subsidiaries, associates, key management personnel, and their relatives. The maturity profile of assets and liabilities must be disclosed in time buckets, revealing potential liquidity mismatches.
"A bank shall disclose by way of a footnote to this schedule, the amount of deposits against which lien is marked out of the total deposits." — Commercial Banks Financial Statements Directions, November 28, 2025 (RBI_MD_13143)
Why does the maturity profile matter? Because a bank can be solvent on paper — assets exceeding liabilities — but still fail if its liabilities mature before its assets do. This is what killed Lehman Brothers: a maturity mismatch that left the firm unable to roll over short-term funding when market confidence collapsed. The maturity disclosure requirement forces banks to show whether they have this vulnerability.
The earlier approach to disclosure was piecemeal. The Enhancement of Transparency in Bank's Affairs through Disclosures circular (Enhancement of Transparency in Bank's Affairs thro), issued on September 12, 2008, expanded requirements step by step. The Disclosure of Information on Defaulters circular (Disclosure of information on defaulters), dating to November 15, 2001, required banks to report borrowal accounts classified as doubtful and loss above Rs 1 crore. Each circular added a layer. The November 2025 directions consolidated all of these layers into a single, comprehensive document.
Why the notes to accounts matter — the NPA divergence disclosure
The most consequential disclosure requirement in the Indian banking system is not in the main financial statements. It is in the notes to accounts — specifically, the requirement for banks to disclose divergence between their own NPA classification and the RBI's assessment.
This requirement, introduced in its current form through the Disclosure of Divergence in Asset Classification and Provisioning circular RBI/2022-23/130, dated October 11, 2022, forces banks to admit how much NPA they were hiding. The mechanism works through thresholds: if the additional provisioning for NPAs assessed by the RBI during its supervisory inspection exceeds 5% of the bank's reported profit before provisions and contingencies, or if the additional gross NPAs identified by the RBI exceed 5% of reported incremental gross NPAs, the bank must publish a detailed divergence table.
"Banks shall make suitable disclosures as tabulated below, if either or both of the following conditions are satisfied: (a) the additional provisioning for NPAs assessed by RBI as part of its supervisory process, exceeds five per cent of the reported profit before provisions and contingencies for the reference period." — Commercial Banks Financial Statements Directions, November 28, 2025 (RBI_MD_13143)
The divergence table requires 12 line items: gross NPAs as reported by the bank and as assessed by the RBI, net NPAs on both bases, provisions on both bases, and the resulting divergences — plus the bank's reported profit and the adjusted notional profit after incorporating the RBI's assessment. This table, published in the annual financial statements, tells the market exactly how much a bank was understating its problems.
Why was this requirement necessary? Because before it existed, banks had every incentive to underclassify their NPAs. A loan classified as "standard" requires no provisioning. A loan classified as "sub-standard" requires 15% provisioning. A "doubtful" loan requires 25-100%. A "loss" asset must be fully written off. By keeping loans in a higher classification than they deserved, banks could report higher profits, pay larger dividends, and maintain the appearance of health. The RBI would find the true position during inspections, but by the time the inspection report was finalised, months had passed.
The October 2022 circular tightened the thresholds. Earlier, divergence disclosure was triggered only when additional provisioning exceeded 15% of reported profit or additional gross NPAs exceeded 15% of incremental gross NPAs. The revision brought both thresholds down to 5% for commercial banks, starting from the financial year ending March 31, 2024. For Urban Co-operative Banks, the initial threshold was set at 15% for incremental gross NPAs, to be reduced progressively.
The disclosure chain — from the RBI's inspection to the published balance sheet
The divergence disclosure requirement creates a regulatory chain that connects the RBI's supervisory process to the public financial statements. Here is how it works:
First, the RBI conducts an inspection of the bank under Section 35 of the Banking Regulation Act, 1949. During the inspection, the RBI's team independently classifies the bank's loan portfolio, identifying accounts that should be classified as NPAs but have not been. This produces a Risk Assessment Report with the RBI's assessment of gross NPAs and required provisioning.
Second, the bank receives the report and may make representations. After the process concludes, the bank must compare the RBI's assessed NPAs with its own reported figures. If the divergence exceeds the threshold, the bank must disclose it in the notes to its next annual financial statements.
Third, the published divergence table becomes public information. Analysts, rating agencies, and depositors can see exactly how much the bank was underreporting its bad loans. Stock prices adjust. Credit ratings are reviewed. The market discipline mechanism of Pillar 3 kicks in.
This chain was tested spectacularly with Yes Bank. The RBI imposed monetary penalties on Yes Bank Limited for non-compliance with regulatory directions on multiple occasions (PR_42050), including for failing to make adequate disclosures. When Yes Bank was eventually placed under moratorium on March 5, 2020 (PR_49476), the RBI noted that the bank's "financial position had undergone a steady decline largely due to inability of the bank to raise capital to address potential loan losses and resultant downgrades." The divergence disclosures in Yes Bank's earlier financial statements had signalled trouble — for those who read the notes to accounts.
The ILFS moment — when systemic exposure must be disclosed
The disclosure framework extends beyond individual bank health to systemic risk events. When Infrastructure Leasing & Financial Services Limited (ILFS) defaulted in September 2018, the RBI recognised that multiple banks and NBFCs had significant exposure to the group. The Disclosure on Exposure to ILFS circular RBI/2018-19/181 (since withdrawn), issued on May 8, 2019, required all scheduled commercial banks and All India Financial Institutions to disclose their total exposure to ILFS and its group entities in their financial statements. [Note: This notification was subsequently withdrawn as its requirements were absorbed into the ongoing supervisory framework.]
Why mandate specific entity disclosure? Because ILFS was not a single company but a labyrinth of over 300 subsidiaries, associates, and special purpose vehicles. A bank might have exposure through multiple channels — direct lending to the holding company, lending to subsidiaries, investment in bonds issued by group entities, guarantees. Without a specific disclosure requirement, this total exposure might be scattered across different line items in the financial statements, invisible in aggregate. The circular forced banks to add it up and report it in one place.
XBRL reporting — from paper returns to machine-readable data
The shift from paper-based regulatory returns to eXtensible Business Reporting Language (XBRL) represents a fundamental change in how disclosure data is collected and used. Under the previous system, banks submitted returns in prescribed formats — paper or PDF — that required manual processing by the RBI. Patterns across the system were difficult to spot because the data was locked in individual reports.
XBRL changes this. Each data element is tagged with a machine-readable identifier, allowing automated aggregation, comparison, and analysis. The RBI mandated XBRL submission for multiple return types, including the submission of statutory SLR returns in XBRL format RBI/2016-17/302 from May 11, 2017 [Note: This notification was subsequently withdrawn as XBRL reporting was mainstreamed through updated return formats.], and extended it to other areas including import of gold statements under XBRL RBI/2014-15/231 and money transfer service submissions under XBRL RBI/2015-16/401.
Why does machine-readable data matter for fraud prevention? Because it lets the RBI run system-wide analytics. If one bank's NPA ratio in the real estate sector is dramatically lower than the system average, that anomaly becomes visible in a database query rather than requiring a team of inspectors to find it during a manual review. If multiple banks have concentrated exposure to the same corporate group, the system-level risk becomes apparent. XBRL reporting turns disclosure from a transparency exercise into a surveillance tool.
"Banks are required to prepare a Balance Sheet and profit and loss account as on the last working day of the year in the Forms set out in the Third Schedule of the Banking Regulation Act, 1949." — Commercial Banks Financial Statements Directions, November 28, 2025 (RBI_MD_13143)
Window dressing — the practice the directions explicitly prohibit
Chapter V of the Commercial Banks Directions includes a section titled "Window dressing" — a direct acknowledgement that banks engage in practices designed to make their financial position look better at reporting dates than it actually is. This might involve temporarily reducing exposure to certain sectors just before the balance sheet date, or inflating deposit figures by offering special rates for very short periods around March 31.
The Directions prohibit this explicitly. The inclusion of "window dressing" as a named section in a Master Direction — not buried in a circular, but featured in the chapter structure — signals that the RBI considers this a significant enough problem to address at the level of binding regulation.
Why does window dressing persist despite being prohibited? Because the incentives are powerful. A bank that shows better ratios at the reporting date gets better credit ratings, lower cost of funds, and fewer regulatory questions. The temptation to manage the numbers around the balance sheet date is embedded in the structure of periodic reporting. The RBI's response has been to combine the explicit prohibition with increasingly granular data collection — including higher-frequency reporting that makes temporary adjustments at quarter-end or year-end more visible.
The consolidated financial statements requirement
Chapter IV of the Directions requires banks that are part of a group to prepare consolidated financial statements. This is not merely an accounting exercise. It prevents a bank from hiding risky activities in subsidiaries. If a bank's subsidiary has significant NPAs or capital adequacy problems, the consolidated statements will reflect that — even if the bank's standalone statements look healthy.
The Consolidated Financial Statement circular RBI/2007-08/325, issued on May 21, 2008, had earlier established the framework for group-level reporting. The November 2025 Directions consolidate and update this requirement, ensuring that the disclosure regime covers both standalone and group-level positions.
Why is consolidation particularly important in India? Because several Indian banking groups have subsidiaries in insurance, asset management, broking, and housing finance — businesses with different risk profiles than traditional banking. A bank's standalone balance sheet might show conservative lending, while its housing finance subsidiary carries significant real estate concentration risk. Without consolidated reporting, the group's true risk profile remains hidden.
What this means — disclosure as infrastructure
Bank disclosure regulation is not about compliance for its own sake. It is infrastructure — the information infrastructure on which market discipline, supervisory oversight, and public confidence all depend. Every number in a bank's financial statements represents a regulatory decision about what should be visible and what can remain internal.
The November 2025 directions represent the most comprehensive statement of that regulatory philosophy in Indian banking history. Nine directions. Every entity type. Thousands of individual data points prescribed across balance sheet formats, notes to accounts, and supplementary disclosures. The Provisions and Contingencies disclosure requirement (Disclosure in Balance Sheets – Provisions and Cont) of 2006, the transparency enhancements of 2008 (Enhancement of Transparency in Bank's Affairs thro), the capital disclosure guidelines of 2013 RBI/2012-13/512 (since withdrawn) — all of these evolutionary steps have been consolidated into a single framework.
The question is whether it works. PMC Bank's fraud was not caused by a gap in disclosure rules — the rules existed. It was caused by the deliberate circumvention of those rules by the bank's management, abetted by audit failures. Disclosure regulation can make hidden risk visible, but only if the data is honest. The RBI's enforcement architecture — inspections, penalties, divergence disclosures — exists to create consequences for dishonesty. The November 2025 directions are the latest iteration of a framework built on a simple premise: banks hold other people's money, and those people have a right to know what is being done with it.