How an NBFC Replaced Self-Reported Field Activity with Verified Evidence.

An RBI inspection revealed that a fast-growing NBFC's field agent activity, KYC collection records, and commission payouts were all built on self-reported data that could not be independently verified.

The NBFC had grown steadily over eleven years. Twenty-eight branches. One hundred and eighty field agents. Thousands of customer visits every month.

Every loan originated through the field network. Every repayment relationship depended on it. Field agents visited customers, collected KYC documents, photographed identity proofs, completed application forms, and uploaded everything into the company's lending system. Branch managers reviewed the submissions. Operations approved them. Commissions were calculated. The business moved on.

Until the RBI inspection.

There was no answer. The photographs could have been taken weeks earlier. Documents could have been uploaded later. The customer could have signed elsewhere. The visit report existed. The visit itself could not be independently verified.

The inspection expanded. Inspectors sampled completed customer files across multiple branches. Several issues emerged:

• Customer photographs taken on different dates appeared identical.
• KYC documents were uploaded hours after reported customer visits.
• Field visits were recorded from locations inconsistent with customer addresses.
• Commission payouts had already been processed against these activities.

The problem was larger than documentation. The company had built an incentive system around field activity that was based entirely on self-reported execution. If the visit could not be verified... Why had the commission been paid?

The inspection resulted in observations around field activity controls, KYC verification, and supervisory oversight. The board initiated a six-month remediation programme.

The management team's conclusion was uncomfortable: The business had excellent operational visibility. It simply had no way to know whether the operational data reflected reality.

The next RBI inspection produced no repeat observations.

Inspectors were able to review customer visit history, KYC evidence, GPS records, AI validation logs, and supervisory approvals directly from ZealMint. The observations that triggered the remediation programme were not repeated.