Editor, Author at DexLab Analytics | Credit Risk | Market Risk | SAS Python Machine Learning Modeling

PD Estimation Methods for Credit Risk: A Practical Guide

PD Estimation Methods for Credit Risk

Every loan a bank writes carries a question that has to be answered with a number. How likely is this borrower to stop paying?

PD estimation is the discipline that produces that number. It underpins regulatory capital, loan loss provisions, pricing, approval cut-offs and portfolio strategy. Consequently, an error in either direction is expensive. Overstate risk and the bank prices itself out of good business. Understate it and losses arrive before provisions do.

The number is also more visible than it used to be. Under Basel, PD fed a capital calculation reviewed quarterly. Under IFRS 9 and CECL, it feeds provisions that flow into reported earnings every reporting period. As a result, PD estimation has moved from a specialist modelling concern to something auditors, boards and analysts examine directly.

This guide covers the main estimation methods, how retail and corporate portfolios differ, what forward-looking PD requires, and how to validate the result.

 

Table of Contents

  1. What is PD estimation?
  2. How do you calculate probability of default?
  3. The historical default rate method
  4. Logistic regression for PD estimation
  5. Machine learning approaches
  6. Retail vs corporate PD estimation
  7. Forward-looking PD under IFRS 9
  8. How to validate and backtest a PD model
  9. Choosing a method
  10. Frequently asked questions

 

What is PD estimation?

PD estimation is the process of quantifying the probability that a borrower will fail to meet contractual obligations over a defined time horizon. The result is expressed between 0% and 100%. It is one of three inputs to expected loss, alongside Loss Given Default (LGD) and Exposure at Default (EAD).

The expected loss identity is straightforward:

Expected Loss = PD × LGD × EAD

Three parameters must be fixed before a PD figure means anything.

The default definition

Basel and most supervisory regimes trigger default at 90 days past due. Alternatively, a lender may declare default earlier if it judges the obligor unlikely to pay without recourse to collateral. Importantly, a model built on a 90-DPD definition is not comparable to one built on 30-DPD. Mixing definitions across portfolios is a common source of inconsistency.

The time horizon

Regulatory capital under the Internal Ratings-Based approach uses a 12-month PD. IFRS 9 and CECL, by contrast, require a lifetime PD for exposures that have deteriorated since origination. These are different quantities. A 12-month PD of 2% does not imply a five-year PD of 10%, because default hazard varies with loan age.

Point-in-time or through-the-cycle

A point-in-time (PIT) PD reflects current conditions and moves with the economic cycle. A through-the-cycle (TTC) PD averages across a full cycle and stays deliberately stable. Basel capital wants TTC; accounting provisions want PIT. Most banks estimate one and transform to the other.

Global Credit Data’s benchmarking of large corporate portfolios illustrates how stable TTC estimates are meant to be: a TTC PD of 0.22% for investment-grade exposures and 2.82% for speculative-grade, held broadly constant over time. Observed annual default rates fluctuate around those anchors.

How to read a PD figure

A PD of 3% does not mean one borrower defaults 3% of the time. Rather, it means that within a pool of borrowers sharing that risk profile, roughly three in a hundred are expected to default over the horizon. PD describes a population and applies that description to an individual.

Regulators also set floors, because estimates near zero are not credible. Under the finalised Basel III standards, the PD input floor is 0.05% for corporate and institutional exposures and 0.1% for qualifying revolving retail revolvers.

 

How do you calculate probability of default?

There are four principal methods: the historical default rate, logistic regression, machine learning models such as random forest and gradient boosting, and survival analysis. The choice depends on portfolio size, available data, the horizon required, and whether the output must satisfy a regulator.

MethodOutputRanks borrowersLifetime PDBest suited to
Historical default rateOne rate per segmentNoNoLow-default and homogeneous pools
Logistic regressionPD at fixed horizonYesBolt-on onlyRegulatory PD, scorecards
Machine learningPD at fixed horizonStrongestBolt-on onlyOrigination decisioning
Survival analysisFull PD term structureYesNativeLifetime ECL, Stage 2 assets

 

Most institutions run two or three in combination. The sections below explain why.

 

The historical default rate method

The oldest approach is also the simplest. Segment the portfolio, count defaults over the period, then divide by the number of performing accounts at the start.

The formula

PD(segment) = Defaults during period ÷ Performing accounts at period start

A worked example

Suppose a bank holds 12,000 performing small-business loans in a single rating grade at the start of the year. During that year, 384 accounts reach 90 days past due.

PD = 384 ÷ 12,000 = 0.032 = 3.2%

Averaging that figure across several years — ideally a full economic cycle — produces a serviceable through-the-cycle PD for the grade.

When to use it

This method suits homogeneous, high-volume portfolios with stable underwriting. Credit cards, auto loans and standardised consumer finance all qualify. Furthermore, it is often the only option for low-default portfolios, where regression cannot be fitted at all. It also provides a benchmark against which any more sophisticated model should be checked.

Basel’s IRB requirements expect at least five years of retail data, and for corporate exposures a period ideally spanning a full cycle.

Limitations

It is backward-looking. The rate observed last year describes last year’s conditions. Should a rate shock or sectoral downturn follow, the historical figure forecasts badly.

It cannot rank within a segment. Every borrower in the bucket receives an identical PD, so all discriminatory information goes unused.

Segmentation is unstable. Cut too coarsely and the estimate is meaningless. Cut too finely and default counts fall to single digits, where sampling error dominates.

Zero-default periods break it. A segment with no defaults yields an estimate of 0%, which is both false and inadmissible under Basel floors.

A cautionary example

The 2007–09 financial crisis demonstrated the weakness plainly. US subprime mortgage pools showed low realised default rates through 2005 and 2006, and provisioning followed those observed rates. Underwriting quality had deteriorated well before defaults surfaced, but a backward-looking estimate had no mechanism to register it. Default rates then rose by an order of magnitude within eighteen months.

Similarly, European corporate speculative-grade default rates have swung from below 3% to forecasts approaching 8.5% during stressed periods, before settling back toward 4%. Any estimate anchored solely to the preceding year would have missed both turns.

 

Logistic regression for PD estimation

Logistic regression remains the industry standard for regulatory PD, for reasons that are as much supervisory as statistical.

The formula

The model expresses log-odds of default as a linear function of borrower characteristics:

ln( PD / (1 − PD) ) = β₀ + β₁x₁ + β₂x₂ + … + βₖxₖ

Rearranged, this gives PD directly:

PD = 1 / (1 + e^−(β₀ + β₁x₁ + … + βₖxₖ))

The logistic function maps any score onto the interval between 0 and 1. Usefully, that is exactly what a probability requires, so no clipping or rescaling is needed.

Why it dominates

Coefficients are interpretable. Each β represents a change in log-odds per unit of the predictor. Exponentiate it and a credit officer has an odds ratio to reason about.

It converts to a scorecard. Weight-of-evidence binning combined with logistic regression produces the points-based scorecards underwriting systems actually run.

It is stable on modest data. A few thousand observations with a reasonable default rate estimate coefficients reliably. Tree ensembles at that sample size tend to overfit.

Supervisors accept it. Model risk expectations under Basel and IFRS 9 weight explainability and documentation heavily.

Implementation steps

  1. Define the target: 1 if the account defaulted within the horizon, 0 otherwise.
  2. Assemble candidate drivers — financial ratios, behavioural variables, bureau data.
  3. Treat outliers, then bin variables using weight of evidence.
  4. Screen candidates on information value and check for multicollinearity.
  5. Fit the model and retain variables with defensible signs and significance.
  6. Calibrate the intercept to the portfolio’s central tendency.
  7. Validate on an out-of-time sample, not merely a random hold-out.

That final point matters more than it appears. A random split shares the economic environment between training and test data, which flatters the model considerably.

 

Machine learning approaches to PD estimation

Tree ensembles have earned a place in PD estimation, particularly for retail and small-business portfolios with large data volumes and genuine non-linearity.

Random forest

Random forest grows many decision trees on bootstrapped samples with randomised feature subsets, then averages their predicted probabilities. It resists outliers, handles missing values gracefully and needs little tuning.

However, its outputs are frequently poorly calibrated. Averaged vote shares are not probabilities. Isotonic or Platt calibration is therefore close to mandatory before the figures enter a provisioning calculation.

XGBoost and gradient boosting

Gradient boosting builds trees sequentially, each correcting the residual errors of those before it. On structured credit data with rich behavioural features — utilisation trends, bureau enquiry velocity, payment patterns — it routinely delivers a 3 to 8 point Gini improvement over a well-built scorecard.

On thin-file applicants with a dozen variables, by contrast, that advantage largely disappears.

The constraints

Explainability. SHAP values provide local attributions and now appear as standard in documentation. Nevertheless, a SHAP plot explains a single prediction rather than a stable economic relationship. Supervisors will ask whether each driver relates to PD monotonically and sensibly. Monotonic constraints address this directly and should be used.

Overfitting on rare events. Default is an imbalanced outcome. Boosted trees will memorise the few defaulters in a training set unless time-series cross-validation and early stopping are applied.

Instability under distribution shift. Tree ensembles extrapolate poorly. When conditions move outside the training range, a logistic model degrades gradually while a boosted ensemble can fail abruptly.

A common architecture resolves the tension: gradient boosting powers the origination decision engine, where predictive accuracy converts into approval quality, while a logistic scorecard supplies the regulatory PD. The scorecard is then benchmarked against the ML model to confirm no material signal is being left unused.

 

Retail vs corporate PD estimation

Retail PD estimation is pooled and statistical, because portfolios contain thousands of homogeneous exposures. Corporate PD estimation is rating-based and judgement-assisted, because portfolios contain fewer, larger and more idiosyncratic exposures with too few defaults to model directly.

RetailCorporate
Unit of estimationPool or segmentIndividual obligor rating grade
Typical data volume10,000s to millionsHundreds to low thousands
Defaults observedSufficient for regressionOften single digits per grade
Dominant methodScorecards, MLRating models, shadow ratings
Key driversBehavioural, bureau, utilisationFinancial statements, sector, structure
Expert judgementMinimalFormal override process
Basel treatmentNo maturity adjustmentMaturity adjustment applies

 

What differs in practice

Retail portfolios support genuine statistical estimation. Behavioural data updates monthly, defaults are frequent enough to fit models, and segments are large enough that pooled estimates are stable. Consequently, the modelling challenge is technical: feature engineering, calibration and drift monitoring.

Corporate portfolios pose the opposite problem. A large corporate book may generate a handful of defaults across an entire cycle. Maximum likelihood estimation degrades badly at those counts, and complete separation is common.

How corporate PD gets estimated anyway

Banks generally use one of three routes. First, internal rating models score obligors on financial and qualitative factors, then map grades to a PD calibrated against external agency default studies. Second, shadow rating approaches replicate agency ratings on unrated obligors. Third, for very sparse portfolios, Bayesian methods and the “most prudent estimate” principle produce conservative PDs from limited or zero defaults.

Low-default portfolio methodology exists precisely because the standard toolkit fails here. This includes exposures to sovereigns, financial institutions, and specialised lending, where high exposure meets very low borrower counts.

 

Forward-looking PD under IFRS 9

IFRS 9 changed what a PD model must deliver. Provisions are no longer recognised when a loss is incurred; they are recognised when a loss is expected.

The three-stage model

Stage 1 covers exposures without significant deterioration since origination. These require a 12-month expected credit loss, and therefore a 12-month PD.

Stage 2 covers exposures that have shown a significant increase in credit risk (SICR). These require lifetime ECL, and therefore a lifetime PD across remaining maturity.

Stage 3 covers credit-impaired exposures, also on a lifetime basis.

What this demands of the model

Two requirements follow, and neither is satisfied by a standard 12-month scorecard.

A term structure is needed, not a point. Lifetime PD requires a curve across remaining maturity. Banks typically build one by chaining marginal PDs, applying rating transition matrices, or fitting survival models that produce the term structure natively. Survival methods also handle censoring correctly — loans that prepay or refinance are censored observations, not clean non-defaults, and treating them as the latter understates lifetime risk.

Conditioning must be point-in-time. The relationship between portfolio default rates and macroeconomic drivers is estimated, then applied to forecast scenarios. The Vasicek transformation is the standard vehicle:

PD(PIT) = Φ[ (Φ⁻¹(PD_TTC) − √ρ · Z) / √(1 − ρ) ]

Here Φ is the standard normal CDF, ρ is asset correlation, and Z is a systematic factor derived from macro variables.

Scenario weighting

IFRS 9 requires probability-weighted outcomes across multiple scenarios — typically a baseline, an upside and a downside, with documented weights. Because the relationship between macro conditions and PD is convex, probability-weighted ECL exceeds ECL calculated from the baseline alone. That result is a feature of the framework rather than a modelling artefact.

Macro drivers that carry signal include GDP growth, unemployment, policy rates and sector-specific indices. Notably, portfolio-relevant series consistently outperform generic aggregates: house price indices for mortgages, freight indices for transport lending.

 

How to validate and backtest a PD model

PD model validation tests three properties: discrimination (can the model separate defaulters from non-defaulters), calibration (are predicted levels accurate), and stability (has the population shifted). Each should be assessed at least annually.

Discrimination tests

MetricFormula or definitionAcceptable range
AUCArea under the ROC curve0.70–0.80 application; 0.85+ behavioural
Gini2 × AUC − 10.40–0.60 application scorecards
KS statisticMax distance between cumulative distributions of defaulters and non-defaultersAbove 30 for retail applications

 

An AUC above 0.95 warrants investigation rather than celebration. In practice, a figure that high usually indicates target leakage — a variable that encodes the outcome, such as a collections flag populated only after default was known. It will look excellent in development and fail in production.

Calibration tests

Discrimination and calibration are independent. A model can rank borrowers perfectly and still predict 2% where the true rate is 6%. That is acceptable for approval decisions and unacceptable for provisioning.

To test calibration, bin the portfolio by predicted PD, then compare predicted against observed default rates within each bin. The Hosmer-Lemeshow test and a binomial test per rating grade are standard. Persistent one-directional deviation across grades signals a calibration problem rather than noise.

Stability tests

The Population Stability Index compares the score distribution at development against the current book:

PSI = Σ (Actual% − Expected%) × ln(Actual% ÷ Expected%)

Interpretation follows conventional thresholds:

  • Below 0.10 — stable, no action required
  • 10 to 0.25 — monitor, investigate drivers
  • Above 0.25 — material shift, model review warranted

Compute PSI on individual characteristics as well as the final score. A stable overall score can conceal offsetting drifts in two underlying variables, and only the characteristic-level view reveals them.

 

Choosing a PD estimation method

No single method is correct across all portfolios. The decision rests on four considerations.

Data depth. Fewer than roughly 50 defaults makes regression unreliable, which points toward historical rates or low-default portfolio methods. Above 500 defaults, machine learning becomes viable.

Horizon required. A 12-month regulatory PD can come from logistic regression. A lifetime PD needs survival analysis or a transition matrix.

Regulatory use. Where the output feeds capital or provisions, interpretability outweighs a marginal gain in predictive accuracy.

Portfolio type. Retail supports pooled statistical estimation. Corporate generally requires rating-based approaches with a formal judgement overlay.

For most institutions the practical answer combines several: a logistic core for rank ordering and regulatory reporting, a survival or transition layer for lifetime term structure, a macro overlay for point-in-time conditioning, and machine learning where origination accuracy justifies it.

 

Frequently Asked Questions

What is a good PD model AUC?

An AUC between 0.70 and 0.80 is typical and acceptable for application scorecards, corresponding to a Gini of 0.40 to 0.60. Behavioural models incorporating repayment history commonly exceed 0.85. An AUC above 0.95 usually indicates target leakage rather than exceptional performance.

What is the difference between PD and default rate?

PD is a forward-looking estimate of default likelihood for a borrower or pool. The default rate is the backward-looking observed proportion of performing borrowers that actually defaulted within a period. PD is what the model predicts; the default rate is what happened.

How many years of data are needed for PD estimation?

Basel’s IRB minimum requirements expect at least five years of data for retail PD estimation. For corporate exposures, the observation period should ideally span a full economic cycle, since a shorter window will not capture a downturn.

Can logistic regression produce a lifetime PD?

Not directly. Logistic regression fitted on a 12-month default flag produces a single estimate at a single horizon. Lifetime PD requires chaining marginal PDs, applying a rating transition matrix, or fitting a survival model. Each route adds assumptions that must be separately documented and validated.

What is a low-default portfolio?

A low-default portfolio contains too few observed defaults for standard statistical estimation — typically sovereign, financial institution, and specialised lending exposures. Bayesian methods, external rating mapping and the most prudent estimate principle are used instead of regression.

 

Related reading

Sources

Ready to Build These Skills Hands-On?

Understanding the theory behind PD, LGD, and EAD is the first step. Building bankable, interview-ready models — in Python or SAS, on real credit datasets, aligned to Basel and IFRS 9 — is what actually moves a career forward.

Explore Dexlab Analytics’ Credit Risk Modeling certification program to build PD, LGD, and EAD models from scratch, work through IFRS 9 ECL frameworks, and learn model validation techniques used by practicing risk teams.

 


.

 

PD Estimation Methods for Credit Risk

PD Estimation Methods for Credit Risk Assessment

In practice, every rupee a bank lends carries an implicit question. But what is the chance this borrower stops paying?

PD estimation turns that question into a defensible number. Naturally, it sits at the center of modern credit risk management. Specifically, it drives regulatory capital, loan loss provisions, loan pricing, credit approval cut-offs, and portfolio strategy.

Notably, the consequences of error run in both directions. On one hand, overstate risk, and the bank prices itself out of good business. On the other hand, understate it, and losses arrive faster than banks built provisions.

 

Table of Contents

  1. Why PD Estimation Matters More in 2026
  2. What Is Probability of Default?
  3. PD Estimation Methods Compared
  4. Historical Default Rate Method
  5. Logistic Regression for PD Estimation
  6. Limitations of Logistic Regression Under IFRS 9
  7. Machine Learning: Random Forest and XGBoost
  8. Survival Analysis for Lifetime PD
  9. Macroeconomic Variables and PD
  10. Validating and Backtesting a PD Model
  11. Choosing the Right PD Estimation Method
  12. Frequently Asked Questions

 

Why PD Estimation Matters More in 2026

Recently, the stakes in India have risen sharply. Nevertheless, the headline numbers look reassuring. Indeed, the RBI’s Financial Stability Report of June 2026 placed the gross NPA ratio of scheduled commercial banks at 1.8% as of March 2026. In other words, that is a multi-decadal low. Furthermore, the central bank’s baseline projects only a modest rise, to around 1.9% by March 2028. Additionally, capital ratios sit at multi-decade highs, with CRAR at 17.7% and CET1 at 15.3%.

The regulatory shift underneath the numbers

However, those benign figures mask a structural change. Specifically, on 27 April 2026, the RBI notified the Commercial Banks – Asset Classification, Provisioning and Income Recognition Directions, 2026. Subsequently, the rules take effect on 1 April 2027. A glide path then runs to 31 March 2031.

In effect, this single change moves Indian banks off the incurred-loss model. Previously, provisions followed a default event. Now, under the Expected Credit Loss framework, banks must estimate a lifetime PD term for every performing exposure that shows a significant increase in credit risk.

Consequently, PD estimation stops being a capital input that a small modelling team owns. Instead, it becomes a line item flowing straight into the profit and loss account every quarter. As a result, boards, auditors, and supervisors will all read it.

To that end, this guide covers the principal PD estimation methods used in practice. For each, it sets out what the method does well, where it fails, and finally how to validate the result.

 

What Is Probability of Default?

Put simply, probability of default is the likelihood that a borrower fails to meet contractual obligations over a defined horizon. Specifically, it runs on a 0 to 1 scale, or equivalently 0% to 100%. At the extremes, zero means default is impossible while one means default is certain. In practice, of course, a well-specified model never produces either extreme.

Before any PD estimation exercise yields a meaningful number, however, three elements must be fixed.

The default definition

As a rule, Basel and RBI’s IRACP norms both trigger default at 90 days past due. Alternatively, lenders may declare default earlier if they judge the obligor unlikely to pay without realising collateral.

However, a model trained on a 90-DPD definition is not comparable to one trained on 30-DPD. Indeed, mixing the two remains one of the most common sources of inconsistency in Indian retail portfolios.

The horizon: 12-month versus lifetime

For instance, regulatory capital under the Internal Ratings-Based approach uses a 12-month PD. By comparison, IFRS 9 and RBI’s ECL directions ask for more. Specifically, Stage 1 assets need a 12-month PD, whereas Stage 2 and Stage 3 assets need a lifetime PD.

Importantly, a 12-month PD of 2% does not imply a five-year lifetime PD of 10%. In reality, default hazard rarely stays constant over time. This is precisely why survival methods matter.

Point-in-time versus through-the-cycle

A point-in-time (PIT) PD reflects current economic conditions and moves with the cycle. By contrast, a through-the-cycle (TTC) PD averages across a full cycle and stays deliberately stable.

Basel capital wants TTC. By contrast, ECL accounting wants PIT. Most banks therefore estimate one basis and transform to the other. Consequently, a great deal of model risk hides in that transformation.

How to read a PD number

Even so, interpretation deserves care. Notably, a PD of 3% does not mean a specific borrower will default 3% of the time. Rather, it means that within a homogeneous pool of borrowers sharing that risk profile, roughly three in a hundred will default over the horizon. In short, PD describes a population, then applies that description to an individual.

Similarly, regulators recognise that estimates near zero lack credibility. Under the finalised Basel III standards in BIS Basel Framework chapter CRE36, the PD input floor for corporate and institutional exposures rose from 0.03% to 0.05%. Meanwhile, qualifying revolving retail revolvers carry a 0.1% floor. In principle, these floors offset model risk, measurement error, and thin data. Usefully, they remind us that no PD estimate is exact.

Finally, PD is one of three parameters in the expected loss identity: EL = PD × LGD × EAD. For how the other two fit in, see our comprehensive guide to credit risk modeling, which covers Loss Given Default and Exposure at Default alongside PD.

 

PD Estimation Methods Compared

Before going into each method, here is how the four principal approaches differ. Ultimately, these dimensions determine which method you can actually use.

Historical Default RateLogistic RegressionMachine LearningSurvival Analysis
OutputOne rate per segmentPD at a fixed horizonPD at a fixed horizonFull PD term structure
Ranks borrowers?✓ strongest
Lifetime PD?via bolt-on onlyvia bolt-on only✓ native
Handles censoring
Minimum data5+ yrs, ideally a full cycle~1,000+ obs, 50+ defaults10,000+ obs, 500+ defaultsLoan-level default timing
InterpretabilityCompleteHighLow without SHAPModerate
Regulatory acceptanceHigh (benchmark use)HighestConditionalGrowing under IFRS 9
Best suited toLow-default and homogeneous poolsRegulatory PD, scorecardsOrigination decisioningStage 2 lifetime ECL

 

Most banks run two or three of these together rather than choosing one. Below, the reasons become clear.

 

Historical Default Rate Method for PD Estimation

Notably, the simplest approach to PD estimation is also the oldest. First, segment the portfolio. Then count defaults and divide by the number of accounts at the start of the period.

PD(segment) = Number of accounts defaulting in period / Number of performing accounts at period start

For example, consider a small portfolio. Suppose a bank holds 12,000 performing MSME loans in a given rating grade at the start of FY25. During the year, 384 of them hit 90-DPD. The observed one-year default rate is therefore 3.2%. Average that across several years, ideally a full cycle, and you then have a serviceable TTC PD for that grade.

Where the historical method works well

Generally, this method suits homogeneous, high-volume portfolios with stable underwriting. For instance, two-wheeler loans, gold loans, and standardised consumer durable finance all qualify.

Provided that the segment is genuinely homogeneous, the empirical rate is unbiased. Moreover, it needs no statistical assumptions at all. Additionally, it is the natural starting point for a low-default portfolio, where regression simply cannot be fitted. It also benchmarks any more sophisticated model that follows.

Basel’s IRB minimum requirements expect at least five years of data for retail PD estimation. For corporate exposures, meanwhile, they want a period spanning a full economic cycle. This is not bureaucratic conservatism. Rather, it responds directly to the method’s central weakness.

Where the historical method fails

It looks entirely backward. After all, the observed default rate for FY25 tells you only what happened under FY25 conditions. Consequently, if the next year brings a rate shock or a sectoral downturn, that rate forecasts badly. Regardless, Indian banking learned this expensively.

It cannot rank within a segment. Instead, every borrower in the bucket receives the same PD. For instance, a five-year-old MSME with declining coverage ratios gets the same number as a fifteen-year-old firm with improving margins. All the discriminatory information therefore sits unused.

Segment definition is arbitrary and unstable. Cut too coarsely and the estimate means nothing. Conversely, cut too finely and default counts collapse to single digits. At that point sampling error swamps signal. A segment with three observed defaults has a confidence interval so wide it barely constrains anything.

Low default rates break it. When a portfolio produces zero defaults in a year, the naive estimate is 0%. That figure is both false and, under Basel floors, inadmissible.

Case study: the 2015 Asset Quality Review

The corporate credit cycle of the mid-2010s illustrates historical-rate failure better than any hypothetical. Initially, through the boom years, observed default rates on large infrastructure and metals exposures stayed low. Provisioning duly followed those observed rates.

Underlying credit quality, however, had already deteriorated well before defaults surfaced. Neither the incurred-loss framework nor the historical-rate PD estimates feeding it could register that deterioration ahead of the event.

The RBI’s Asset Quality Review, launched in 2015, then forced consistent recognition across the system. Consequently, reported gross NPAs of scheduled commercial banks climbed to roughly 11.5% by 2018. Clean-up, recapitalisation, and IBC-driven resolution subsequently brought them down to 2.3% by March 2025 and 1.8% by March 2026.

Importantly, the lesson is not that banks acted dishonestly. Instead, it is that PD estimation drawn purely from recent realised defaults cannot anticipate a turning point. That structural gap is exactly what the ECL framework aims to close.

 

Logistic Regression for PD Estimation

Logistic regression remains the workhorse of PD estimation across the industry. Furthermore, it holds that position for reasons that are as much regulatory as statistical.

In essence, the model estimates the log-odds of default as a linear function of borrower and facility characteristics:

ln( PD / (1 − PD) ) = β₀ + β₁x₁ + β₂x₂ + … + βₖxₖ

Rearranging then gives the PD directly:

PD = 1 / (1 + e^−(β₀ + β₁x₁ + … + βₖxₖ))

Usefully, the logistic function maps any real-valued score onto the (0, 1) interval. That is exactly what a probability requires. Consequently, no transformation, clipping, or calibration hack is needed to keep estimates in range.

Why logistic regression dominates in practice

Coefficients are interpretable. Each β is a change in log-odds per unit of the predictor. Exponentiate it, therefore, and you get an odds ratio a credit officer can reason about. So when a supervisor asks why a borrower received a 4.8% PD, the model answers.

It converts cleanly to a scorecard. In addition, weight-of-evidence binning plus logistic regression produces the points-based scorecards that underwriting systems and branch staff actually use. Our walkthrough of logistic regression for PD modelling covers WOE and information value in full.

It stays stable on modest data. Typically, a few thousand observations and a reasonable default rate estimate the coefficients well. Conversely, tree ensembles at the same sample size tend to overfit.

It meets least regulatory resistance. Model risk expectations under the Basel III regulatory framework and RBI’s ECL directions weigh explainability and documented governance heavily.

How to implement logistic regression PD estimation in Python

import pandas as pd

import numpy as np

import statsmodels.api as sm

from sklearn.model_selection import train_test_split

from sklearn.metrics import roc_auc_score

 

# 1. Define target: 1 = defaulted within 12 months (90+ DPD), 0 = otherwise

df = pd.read_csv(“loan_book.csv”)

y = df[“default_12m”]

 

# 2. Select and prepare drivers

features = [

“debt_service_coverage”, “current_ratio”, “vintage_months”,

“utilisation_pct”, “max_dpd_l12m”, “turnover_growth_yoy”

]

X = df[features].copy()

 

# 3. Treat outliers before binning; winsorise at the 1st/99th percentile

for col in features:

lo, hi = X[col].quantile([0.01, 0.99])

X[col] = X[col].clip(lo, hi)

 

# 4. Split out-of-time where possible, not just out-of-sample

X_train, X_test, y_train, y_test = train_test_split(

X, y, test_size=0.30, stratify=y, random_state=42

)

 

# 5. Fit with an intercept

X_train_c = sm.add_constant(X_train)

model = sm.Logit(y_train, X_train_c).fit(disp=0)

print(model.summary())        # coefficients, std errors, p-values

 

# 6. Score and assess discrimination

X_test_c = sm.add_constant(X_test)

pd_hat = model.predict(X_test_c)

print(“AUC:”, round(roc_auc_score(y_test, pd_hat), 4))

Two practitioner notes follow from this. First, prefer statsmodels over scikit-learn for the development build. Model documentation needs p-values and standard errors to justify each variable. Unfortunately, scikit-learn does not surface them.

Second, always hold out an out-of-time sample rather than a random split. Otherwise, a random split shares the economic environment between train and test. As a result, it flatters the model considerably.

 

Limitations of Logistic Regression in IFRS 9 PD Modelling

Historically, logistic regression earned its dominance in a Basel world. There, the deliverable was a stable 12-month through-the-cycle PD, used once a quarter for capital.

IFRS 9 and RBI’s ECL directions ask for something structurally different. Under those new demands, several limitations become visible. None of them disqualifies the method; most banks will still build on a logistic core. Each one, however, requires a bolt-on that must itself be documented and validated.

Structural gaps: term structure and censoring

It produces a point, not a term structure. As noted, IFRS 9 requires a lifetime PD for Stage 2 and Stage 3 exposures. Meanwhile, a logistic model fitted on a 12-month default flag produces exactly one number, at one horizon.

In contrast, extending it to a 30-year mortgage means chaining marginal PDs, applying a rating transition matrix, or fitting separate models at multiple horizons. Every one of those routes introduces assumptions the original model never tested. Ultimately, the extrapolation rather than the regression drives most of the lifetime ECL.

It has no mechanism for censoring. Unfortunately, a binary setup treats loans that prepay, refinance, or remain performing at the data cut-off as clean non-defaults. In Indian retail books with high prepayment rates, this bites hard. In particular, housing and personal loans suffer most.

The reason is straightforward. Essentially, accounts that exited early get counted as successes rather than as observations that simply stopped being observed. Lifetime default risk therefore comes out understated. Survival methods handle this natively; logistic regression does not.

Conditioning and scenario problems

PIT conditioning sits outside the model. Fitted on pooled multi-year data, a logistic model delivers something closer to a hybrid or TTC estimate. Converting it to the PIT basis IFRS 9 requires means applying a separate macro scalar or Vasicek shift afterwards.

Because nobody estimates the macro relationship jointly with the borrower-level coefficients, the two components can drift apart. The model owner has no single likelihood to test.

Scenario sensitivity often runs too flat. In fact, auditors raise this criticism most consistently. During fitting, idiosyncratic borrower variables absorb the bulk of the variance. Little remains for macro drivers to explain.

As a result, the downside scenario moves ECL by only a few basis points. That implies the bank believes a severe recession barely affects its credit losses. Rarely is that credible, and defending it in an audit committee proves difficult.

SICR assessment needs an origination-date PD. Staging under IFRS 9 compares lifetime PD at the reporting date against lifetime PD at initial recognition. For loans booked before the model existed, which covers most of a legacy book, someone must reconstruct that origination PD retrospectively. The underlying data may never have been retained. Logistic regression offers no help here. The problem concerns data lineage, yet it lands squarely on the PD model owner.

Statistical constraints

Linearity in log-odds is a real constraint. Fundamentally, the method assumes each predictor moves log-odds linearly. In reality, credit drivers rarely oblige. Utilisation risk rises sharply past 80%. Vintage risk is hump-shaped. DSCR effects flatten at both tails.

Admittedly, weight-of-evidence binning is the standard fix. Nevertheless, coarse-classing discards within-bin information. The bin boundaries then become an unvalidated modelling choice that tends to destabilise on refresh.

Coefficients turn unstable in low-default portfolios. Large-corporate, NBFC, and sovereign exposures may generate a handful of defaults across an entire cycle. Consequently, maximum likelihood estimation degrades badly at those counts, and complete or quasi-complete separation is common. IFRS 9 still demands an ECL number for these exposures. Consequently, banks usually turn to external ratings-based PD mapping or a shadow-rating approach instead.

What this means for model architecture

Overall, the common architecture now runs three layers. First, a logistic model handles 12-month PD and rank ordering. Next, a survival or transition-matrix layer supplies the lifetime term structure. An explicit macro overlay delivers PIT conditioning.

That means three models, three validation exercises, and three sets of assumptions. In other words, the governance load is considerably heavier than the single scorecard that satisfied Basel. Plan for it well before the April 2027 deadline.

 

Machine Learning Methods for PD Estimation

Gradient-boosted trees and random forests have earned a genuine place in PD estimation. Specifically, they perform best in retail and MSME segments, where non-linearities and interactions run strong and data volumes are large.

Random Forest

Random Forest grows many decision trees on bootstrapped samples with randomised feature subsets, then averages their predicted class probabilities. Usefully, it resists outliers, handles missing values gracefully, and requires little tuning.

Its output probabilities, however, are frequently poorly calibrated. After all, averaged vote shares are not PDs. Isotonic or Platt calibration is therefore close to mandatory before the numbers touch an ECL calculation.

XGBoost and LightGBM

By contrast, these build trees sequentially. In turn, each new tree corrects the residual errors of the ensemble so far.

On structured credit data with rich behavioural features, gradient boosting routinely delivers a 3 to 8 point Gini improvement over a well-built logistic scorecard. For instance, utilisation trends, bureau enquiry velocity, EMI bounce patterns, and GST filing regularity all help here. On thin-file applicants with a dozen variables, though, the gain frequently disappears entirely.

import xgboost as xgb

from sklearn.calibration import CalibratedClassifierCV

from sklearn.metrics import roc_auc_score

 

base = xgb.XGBClassifier(

n_estimators=400,

max_depth=4,                 # keep shallow; deep trees overfit credit data

learning_rate=0.05,

subsample=0.8,

colsample_bytree=0.8,

scale_pos_weight=(y_train == 0).sum() / (y_train == 1).sum(),

eval_metric=”auc”,

random_state=42

)

 

# Calibrate so that outputs behave as probabilities, not scores

clf = CalibratedClassifierCV(base, method=”isotonic”, cv=3)

clf.fit(X_train, y_train)

 

pd_hat_ml = clf.predict_proba(X_test)[:, 1]

print(“AUC:”, round(roc_auc_score(y_test, pd_hat_ml), 4))

Constraints in regulated PD estimation

Explainability. Certainly, SHAP values give local attributions and now appear as standard in model documentation. Still, a SHAP plot explains a prediction rather than a stable economic relationship. Supervisors reviewing an IRB or ECL model will ask whether each driver relates to PD monotonically and sensibly. Monotonic constraints (monotone_constraints in XGBoost) address this directly, so use them.

Overfitting on rare events. By definition, default is an imbalanced outcome. Otherwise, boosted trees will happily memorise the handful of defaulters in a training set. Time-series cross-validation and aggressive early stopping are therefore essential.

Instability under distribution shift. Unfortunately, tree ensembles extrapolate poorly. When macroeconomic conditions move outside the training range, a logistic model degrades gracefully. A boosted ensemble, by contrast, can fail abruptly.

One architecture recurs across Indian banks, and it is defensible. Gradient boosting runs the origination decision engine, where predictive power converts directly into approval quality. A logistic scorecard supplies the regulatory PD for capital and ECL. Teams then benchmark the scorecard against the ML model, confirming that no material discriminatory power goes unused.

 

Survival Analysis for Lifetime PD Estimation

As discussed, logistic regression answers a binary question over a fixed window. Default in twelve months: yes or no?

By contrast, survival analysis answers a richer one. When is default likely to occur? What is the instantaneous risk at each point in the loan’s life?

Naturally, that distinction became commercially important the moment lifetime ECL arrived. Specifically, Stage 2 assets require a PD term structure across the remaining maturity. Survival models produce exactly that, natively.

Hazard rates and survival curves

The hazard h(t) is the instantaneous default rate at time t, conditional on having survived to t. Correspondingly, S(t) — the survival function — is the probability of surviving beyond t. Cumulative PD to time t is then simply 1 − S(t). A lifetime PD therefore reads directly off the survival curve at loan maturity.

Kaplan-Meier estimation produces a non-parametric survival curve from observed default times. Critically, it handles censoring correctly. Loans that prepay, refinance, or remain performing at the data cut-off are censored, not non-defaults.

By contrast, a naive logistic setup treats a loan booked three months ago as a “non-default” observation. That choice systematically biases PD estimation downwards.

Cox proportional hazards

Accordingly, Cox regression extends the survival curve to covariates:

h(t | x) = h₀(t) · exp(β₁x₁ + … + βₖxₖ)

Here, the baseline hazard h₀(t) captures the shape of default timing across the portfolio. Covariates then shift risk multiplicatively.

from lifelines import KaplanMeierFitter, CoxPHFitter

 

kmf = KaplanMeierFitter()

kmf.fit(durations=df[“months_on_book”], event_observed=df[“defaulted”])

kmf.plot_survival_function()

 

cph = CoxPHFitter()

cph.fit(df[[“months_on_book”, “defaulted”, “ltv”, “dscr”, “vintage”]],

duration_col=”months_on_book”, event_col=”defaulted”)

cph.print_summary()

In practice, the payoff shows up in the seasoning curve. For example, Indian unsecured personal loan portfolios typically peak in hazard between months 9 and 18, then decline. A 12-month logistic PD cannot represent that shape at all. Over a five-year loan, the shape separates a defensible lifetime ECL from a guess.

 

How Macroeconomic Variables Affect PD Estimation

A PD model built on borrower characteristics alone assumes the economy of the training period repeats. In reality, it will not. Indeed, ECL under RBI’s directions and IFRS 9 explicitly requires forward-looking information. Macroeconomic conditioning is therefore no longer optional.

The Vasicek transformation

The standard approach links the portfolio’s observed default rate to macro drivers, then applies that relationship to forecast scenarios. Of the available vehicles, the Vasicek/Merton transformation is by far the most common:

PD(PIT, t) = Φ[ (Φ⁻¹(PD_TTC) − √ρ · Z_t) / √(1 − ρ) ]

Here Φ is the standard normal CDF, ρ is asset correlation, and Z_t is a systematic factor estimated from macro variables. A favourable macro environment, meaning positive Z, pulls PIT PD below the TTC level. Conversely, a downturn pushes it above.

Macro drivers that carry signal in Indian portfolios

  • Real GDP growth — the broadest indicator. It typically enters with a lag of two to four quarters, since credit stress follows activity rather than coinciding with it.
  • Policy rate and lending rate spreads — these matter most for floating-rate retail and MSME exposures. Here, a repo increase transmits directly to EMI burden.
  • CPI inflation — this compresses household surplus and drives unsecured retail delinquency.
  • Sector-specific series — IIP for manufacturing, residential price indices for mortgages, freight indices for commercial vehicle finance. Portfolio-relevant series consistently outperform generic aggregates.

Notably, the June 2026 FSR reinforces that last point. Despite a system average of just 1.8%, agriculture carried the highest sectoral GNPA ratio at 5.1%. An aggregate macro variable would miss exactly that kind of dispersion.

Two disciplines that matter more than variable choice

First, every coefficient must point in an economically defensible direction. For example, a model where higher GDP growth increases PD has found a spurious correlation. Therefore, drop the variable, regardless of its statistical significance.

Second, RBI’s ECL directions require probability-weighted scenarios: a baseline, an upside, and a downside, with documented weights. Because the relationship between macro factors and PD is convex, the probability-weighted ECL will exceed the ECL computed from the baseline alone. That convexity is a feature of the framework rather than an artefact.

 

How to Validate and Backtest a PD Model

A PD model is a regulated artefact. Accordingly, it needs evidence of discrimination, calibration, and stability, refreshed at least annually.

Discrimination: can the model separate defaulters from non-defaulters?

ROC and AUC. The ROC curve plots the true positive rate against the false positive rate across all cut-offs. In turn, AUC is the area beneath it.

At the floor, an AUC of 0.5 is random. Meanwhile, application scorecards typically land between 0.70 and 0.80. Meanwhile, behavioural models with repayment history commonly exceed 0.85. Anything above 0.95, however, should prompt a hunt for target leakage rather than celebration.

Gini coefficient. The industry’s preferred expression is simply Gini = 2 × AUC − 1.

Kolmogorov-Smirnov statistic. KS is the maximum vertical distance between the cumulative distributions of defaulters and non-defaulters. It answers a slightly different question from AUC: where in the score range does separation run strongest?

That question is operationally useful, since the answer often marks where the approval cut-off should sit. Generally, KS above 30 is acceptable for retail application models.

from scipy.stats import ks_2samp

ks = ks_2samp(pd_hat[y_test == 1], pd_hat[y_test == 0]).statistic

print(“KS:”, round(ks * 100, 2))

Calibration: are the predicted PD levels right?

Importantly, discrimination and calibration are independent properties. For example, a model can rank perfectly and still predict 2% where the true rate is 6%. That is fine for approval decisions, yet disastrous for ECL.

To test this, bin the portfolio by predicted PD. Compare predicted against observed default rates in each bin, then test the difference. The Hosmer-Lemeshow test and the binomial test per rating grade are the standard tools. Ultimately, persistent one-directional deviation across grades indicates a calibration problem rather than noise.

Stability: has the population moved?

Population Stability Index (PSI) compares the score distribution at development against the current book:

PSI = Σ (Actual% − Expected%) × ln(Actual% / Expected%)

Conventional thresholds run as follows. Below 0.10 is stable. Between 0.10 and 0.25 warrants monitoring. Above 0.25 signals a material shift requiring investigation.

Also compute PSI on individual drivers, not just the final score. After all, a stable overall score can conceal offsetting drifts in two underlying variables. Fortunately, the characteristic-level view catches them.

 

Choosing the Right PD Estimation Method

On the whole, no single approach to PD estimation is correct. Instead, the right choice depends on portfolio size, data depth, the horizon required, and the regulatory use the number will serve.

Matching method to portfolio

Broadly, historical default rates remain the sensible baseline for homogeneous portfolios. They are also the only viable route where defaults are too scarce to model.

Meanwhile, logistic regression is the default choice for regulatory PD. In a supervised environment, interpretability and stability are worth more than a marginal lift in Gini. Under IFRS 9, though, it is a starting point rather than a complete answer. Lifetime term structure, censoring, and PIT conditioning all sit outside what the regression itself estimates.

Similarly, machine learning earns its place where data is rich and non-linearity is real, provided outputs stay calibrated and monotonicity constrained. Survival analysis is less an alternative than a necessary complement, because lifetime PD term structures cannot be built from a 12-month binary model. Macroeconomic conditioning, meanwhile, is what turns any of them into a forward-looking estimate.

The road to April 2027

RBI’s ECL framework takes effect on 1 April 2027, with a glide path running to March 2031. Indian banks and NBFCs are therefore mid-way through a data and modelling build-out that will define credit risk practice for the next decade.

Unfortunately, institutions that treat this as a compliance exercise will produce models that pass validation and inform nothing. Conversely, those that treat it as a chance to understand their loan books properly will get both.

For the wider context in which PD sits, see our comprehensive guide to credit risk modeling, which sets out PD’s role alongside LGD and EAD. For the regulatory side, our Advanced Certificate in IFRS 9 Modeling covers ECL staging and provisioning in depth, while A Beginner’s Guide to Credit Risk Modelling is the right starting point for anyone newer to the subject.

 

Frequently Asked Questions About PD Estimation

What is PD estimation in credit risk?

In short, PD estimation quantifies the probability that a borrower will default over a defined horizon. The result is expressed between 0% and 100%. It is one of three inputs to expected loss, alongside Loss Given Default and Exposure at Default. In practice, it drives regulatory capital, loan pricing, credit approval decisions, and provisioning under IFRS 9 and RBI’s ECL directions.

Which PD estimation method is most accurate?

In practice, no single method wins across all portfolios. Admittedly, gradient boosting delivers the strongest discrimination on large retail books with rich behavioural data, often 3 to 8 Gini points above a logistic scorecard.

However, rank ordering is not the only requirement. Equally, regulatory PD must stay interpretable, stable, and calibrated. On balance, logistic regression usually wins on that combined test. That is why it remains the industry standard for capital and ECL despite lower raw predictive power.

What is the difference between 12-month PD and lifetime PD?

A 12-month PD is the probability of default within one year from the reporting date. Notably, Basel capital and IFRS 9 Stage 1 assets both use it.

A lifetime PD is the cumulative probability of default over the remaining contractual life of the exposure. Conversely, Stage 2 and Stage 3 assets require it. Importantly, you cannot derive lifetime PD by scaling the 12-month figure, because default hazard varies with loan seasoning.

What is a good AUC or Gini for a PD model?

For application scorecards, an AUC between 0.70 and 0.80 is typical and acceptable. Equivalently, that corresponds to a Gini of 0.40 to 0.60. Behavioural models with repayment history routinely exceed 0.85.

However, an AUC above 0.95 usually signals target leakage, meaning a variable in the model encodes the outcome. Investigate before deployment rather than celebrating.

How often should a PD model be validated?

At minimum, annually. Specifically, validation should cover discrimination (AUC, Gini, KS), calibration (predicted versus observed default rates by grade), and stability (PSI on the score and on individual characteristics).

Additionally, more frequent monitoring is warranted after material changes to underwriting policy, product mix, or macroeconomic conditions. Under RBI’s ECL directions, model validation sits within a three-tier model risk management structure spanning business, risk, and audit functions.

 

Ready to Build These Skills Hands-On?

Understanding the theory behind PD, LGD, and EAD is the first step. Building bankable, interview-ready models — in Python or SAS, on real credit datasets, aligned to Basel and IFRS 9 — is what actually moves a career forward.

Explore Dexlab Analytics’ Credit Risk Modeling certification program to build PD, LGD, and EAD models from scratch, work through IFRS 9 ECL frameworks, and learn model validation techniques used by practicing risk teams.

 


.

Credit Risk in Indian Banking: RBI Data Analysis

Credit Risk in Indian Banking: What RBI’s Data Actually Shows

Every risk professional in Indian banking eventually asks the same question: is credit risk actually improving, or does it just look that way in aggregate numbers? Based on the Reserve Bank of India’s own published data, the answer is both. System-wide asset quality has genuinely strengthened over the past five years. But the composition of that risk is shifting in a direction that deserves closer attention.

This piece works through RBI’s Financial Stability Reports (FSR), sectoral credit data, and the newly finalized Expected Credit Loss (ECL) framework. Together they show what’s really happening with credit risk in Indian banking between 2020 and 2025. It does not rely on a proprietary survey or projected estimates dressed up as findings. In fact, every figure below is sourced directly to a named RBI report. That distinction matters: in a domain where regulators, auditors, and rating agencies check your numbers, credibility is the entire product.

Three questions structure the analysis. How has aggregate asset quality moved since the 2020 pandemic shock? Where is risk concentrating today, even as headline numbers improve? And what does the incoming ECL regime signal about how Indian banks will need to manage credit risk going forward?

Methodology and Data Sources

This analysis draws on primary RBI publications, cross-checked across multiple reporting periods for consistency.

RBI Financial Stability Reports (FSR): Published twice yearly. They consolidate Gross NPA (GNPA) and Net NPA (NNPA) ratios of Scheduled Commercial Banks (SCBs), capital adequacy (CRAR), bank-group-wise asset quality, and stress test results. Specifically, this piece uses FSR editions from January 2021 through December 2025.

RBI Sectoral Deployment of Bank Credit data: Monthly data on credit growth to industry, services, agriculture, and personal loans. It’s sourced from 41 banks representing roughly 95% of non-food credit.

RBI’s ECL framework releases: The draft ECL directions (October 2025) and final directions (April 2026). These describe the shift from incurred-loss to forward-looking PD/LGD/EAD-based provisioning, effective April 1, 2027.

One scope note: RBI does not publish a standardized “default rate by loan product” table. Where this article cites loan-category or bank-group figures, they are GNPA ratios: the share of gross advances classified as non-performing. It’s the metric RBI itself uses, and the one directly comparable across periods.

Finding 1: Asset Quality Has Improved for Five Consecutive Years

SCB GNPA: from 8% to 2.1% in five years

 

PeriodGNPA RatioNNPA RatioSource
March 20208.4%RBI FSR, Jan 2021
September 20207.5%RBI FSR, Jan 2021
March 20242.8%0.6%RBI FSR, Jun 2024
March 20252.3%0.5%RBI FSR, Jun 2025
September 20252.1%–2.2%RBI FSR, Dec 2025
March 2027 (projected, baseline)1.9%RBI FSR, Dec 2025

 

RBI’s January 2021 report recorded a September 2020 GNPA ratio of 7.5%, down from 8.4% in March 2020. That was a system still absorbing the pandemic shock. GNPA had fallen to 2.8% by June 2024, then to 2.3% by March 2025. It touched a multi-decade low of 2.1% by September 2025, and RBI projects further improvement to 1.9% by March 2027 under its baseline scenario.

In practice, this reflects five years of balance sheet cleanup: post-IBC resolution of legacy corporate stress, tighter underwriting after the 2018–2020 NBFC stress episode, and stronger capital buffers overall. Meanwhile, system-wide CRAR remains comfortably above regulatory minimums, with public sector banks at 16% and private banks at 18.1% as of September 2025.

In short, aggregate GNPA is a lagging confirmation of underwriting discipline, not a leading indicator. A PD model trained mainly on 2020–2022 stressed data will overstate current default risk. One trained only on 2023–2025 benign data risks understating tail risk in the next downturn.

Explore our Credit Risk Modeling Certification Training for a structured approach to PD estimation across credit cycles.

Finding 2: Improvement Isn’t Even Across Bank Groups

PSBs are catching up fast

For instance, PSB GNPA fell sharply from 3.7% in March 2024 to 2.8% in March 2025. Meanwhile, private bank GNPA held roughly stable at 2.8% over the same period, and foreign banks improved from 1.2% to 0.9%.

Even so, this convergence matters. For most of the post-2015 asset-quality-review era, PSB asset quality lagged private banks significantly, largely on corporate exposures. That gap has now nearly closed at the aggregate level. However, remaining risk differs by bank group, which leads to the more consequential finding below.

Finding 3: Unsecured Retail Is Where New Risk Concentrates

The retail risk hiding inside a good headline number

This is the most important finding for practitioners, because it sits underneath the reassuring headline number. According to RBI’s December 2025 FSR, roughly 53.1% of retail loan slippages now originate from unsecured products like personal loans and credit cards. At private banks, unsecured loans account for nearly 76% of fresh slippages. GNPA on unsecured retail loans stood at 1.8%, versus 1.1% for overall retail advances.

In other words, the 2.1% aggregate GNPA figure blends a very clean secured/corporate book with a smaller, faster-deteriorating unsecured retail book. RBI flagged this as a fintech-adjacent risk, tied to fast credit growth in small-ticket personal loans to borrowers under 35 through digital lending channels.

This pattern, in fact, tracks with operational experience. Unsecured lending has weaker recovery mechanics (no collateral to liquidate, higher LGD), shorter behavioral history on new-to-credit borrowers, and faster origination cycles that compress underwriting review. Moreover, it is the segment where forward-looking provisioning matters most, since unsecured risk builds up quietly between formal NPA recognition points.

As a result, portfolio-level GNPA alone is no longer sufficient. Overall, segment-level GNPA and vintage curves for unsecured retail belong alongside the aggregate number in any board-level risk dashboard.

Finding 4: ECL Will Formalize This Shift

Why the 2027 ECL shift matters here

RBI has issued directions introducing forward-looking ECL provisioning, replacing the incurred-loss model. It takes effect April 1, 2027, for scheduled commercial banks excluding RRBs, Small Finance Banks, and payments banks. ECL provisioning must be based on a bank’s own historical PD and LGD data spanning at least five years, subject to RBI-specified floors. Accounts 30–90 days past due move into Stage 2, a materially earlier trigger than the current framework.

Overall, the shift aligns India’s prudential norms with global IFRS 9 standards. In addition, it requires closer integration between finance and risk functions, as forward-looking macroeconomic scenarios become a formal input to provisioning.

Indeed, this is a direct regulatory response to Finding 3. An incurred-loss model recognizes impairment only after default has effectively occurred. ECL requires estimating expected loss, via PD, LGD, and EAD, well before that point, catching unsecured deterioration earlier in the cycle.

Even so, for banks building this capability, it isn’t a compliance task to fully outsource. RBI has explicitly made a bank’s board and senior management responsible for the adequacy of the ECL framework. Consequently, internal teams need working fluency in PD/LGD/EAD construction, not just the ability to read vendor output. However, it’s worth noting that the standard formula, Expected Loss = PD × LGD × EAD, assumes independence between the three components. In practice they’re correlated: LGD tends to rise in the same downturns that push PD higher. That’s why RBI’s stress tests apply adverse scenarios jointly rather than multiplying baseline figures in isolation.

What This Means for Banks and Risk Teams

  • First, aggregate GNPA improvement is real but incomplete. Segment-level monitoring, especially for unsecured retail, deserves as much attention as the headline ratio.
  • PD/LGD model recency matters. RBI’s own five-year minimum spans both a stressed period (2020–2021) and a benign one (2023–2025). Models need to represent both.
  • Collateral still matters, but isn’t the whole story. Unsecured products drive a disproportionate share of new slippages. In turn, this argues for tighter underwriting in that segment, not a wholesale retreat from unsecured lending.
  • Finally, the 2027 ECL deadline is closer than it looks. In practice, building five years of clean PD/LGD data and validation capability is a multi-year undertaking. Banks starting in 2026 are already behind institutions that began in 2024–2025.
  • Recovery rate discipline matters for LGD. LGD = 1 − Recovery Rate only holds up when ‘recovery rate’ is the economic, discounted, net-of-cost rate, not the nominal amount eventually collected.

Explore our Credit Risk Modeling Certification Training to build PD, LGD, and EAD modeling skills ahead of the 2027 ECL transition, or see Understanding Credit Risk: Definition and Types for foundational concepts referenced throughout.

FAQ

What is the current GNPA ratio of Indian banks?

As of September 2025, SCB GNPA stood at 2.1%, a multi-decade low, per RBI’s December 2025 Financial Stability Report.

Is unsecured lending riskier than secured lending right now?

Yes, and the gap is widening. Unsecured retail GNPA was 1.8% versus 1.1% for overall retail advances, and unsecured products drove over half of all retail slippages.

When does RBI’s ECL framework take effect?

RBI’s ECL Directions were issued 27 April 2026 and take effect April 1, 2027. They apply to commercial banks, excluding small finance banks, payments banks, and local area banks.

Does EL = PD × LGD × EAD fully capture expected loss?

It’s the standard starting formula, but it assumes PD, LGD, and EAD move independently. In stress, they’re correlated — which is why RBI applies adverse scenarios jointly rather than multiplying baseline values.

Conclusion

The data supports a measured conclusion, not a triumphant one. Indeed, Indian banking’s asset quality genuinely improved for five straight years, and RBI’s own numbers back that up without embellishment. However, the same data shows risk isn’t disappearing. Instead, it’s relocating toward unsecured retail lending, addressed through a regulatory shift that will demand more rigorous PD, LGD, and EAD modeling capability than most institutions currently have in-house. For risk analysts, credit officers, and model validators, that combination is telling: improving headline numbers alongside a harder compliance mandate. It’s exactly why 2025–2027 is a build-capability window, not a wait-and-see one.

This analysis is based on RBI’s Financial Stability Reports, Sectoral Deployment of Bank Credit data, and RBI’s ECL Directions (2025–2026). Figures are reported as published at the cited dates; readers should consult original RBI releases for the most current data.

 

Ready to Build These Skills Hands-On?

Understanding the theory behind PD, LGD, and EAD is the first step. Building bankable, interview-ready models — in Python or SAS, on real credit datasets, aligned to Basel and IFRS 9 — is what actually moves a career forward.

Explore Dexlab Analytics’ Credit Risk Modeling certification program to build PD, LGD, and EAD models from scratch, work through IFRS 9 ECL frameworks, and learn model validation techniques used by practicing risk teams.

 


.

What is Credit Risk? Understanding Credit Risk Definition and Types

Understanding Credit Risk: Definition and Types

Introduction

In March 2021, a little-known family office called Archegos Capital Management defaulted on margin calls from its banks. Within days, Credit Suisse lost $5.5 billion. Nomura lost close to $2.5 billion. Morgan Stanley and UBS lost roughly $1 billion and $774 million. Combined, global banks lost more than $10 billion — not because of a market crash, but because of one counterparty’s concentrated, hidden leverage.

That’s credit risk in its purest form. It’s the possibility that someone you’ve extended money or exposure to won’t pay it back, and the cascading damage that follows when large exposures go bad at once.

Most people equate credit risk with loan defaults. That’s only part of the picture. Credit risk shows up in derivatives, trade settlements, corporate bonds, and interbank lending. It appears anywhere one party depends on another to deliver.

This guide breaks down what credit risk actually means. It covers the distinct types every risk professional needs to recognize, and how banks measure and manage it in practice, in India and globally.

What is Credit Risk?

Credit risk is the possibility that a borrower or counterparty fails to meet a financial obligation, causing a loss to the lender. That’s the formal definition. In plain terms: it’s the risk that you lend money, extend credit, or enter a contract with someone, and they don’t hold up their end.
The Reserve Bank of India’s Guidance Note on Credit Risk Management frames it more precisely. Credit risk can be an individual transaction risk — the chance that one specific loan goes bad. Or it can be a portfolio risk, which looks at how credit losses behave in aggregate across a bank’s book. A single bad loan is a manageable, expected cost of doing business. Thousands of correlated bad loans, going bad at once because they share a common vulnerability, is a solvency event.

Credit risk isn’t limited to banks lending to individuals or businesses. It appears in:

  • Loans and advances — the most familiar form, where a borrower fails to repay principal or interest
  • Bonds and fixed-income securities — where an issuer defaults on coupon payments or principal at maturity
  • Derivatives contracts — where a counterparty can’t meet its obligations under a swap, option, or forward
  • Trade finance and settlement — where one party in a transaction fails to deliver cash or securities as agreed
  • Guarantees and letters of credit — where a bank stands behind another party’s obligation and gets called on to pay

Under the Basel framework, credit risk-weighted assets typically make up the largest share of the capital a bank must hold. That’s larger than market risk or operational risk combined, for most commercial banks. This is why understanding credit risk isn’t a niche specialty. It’s the foundation most of banking risk management sits on.

Types of Credit Risk

Credit risk isn’t one uniform threat. RBI’s own framework splits transaction-level credit risk into default risk and rating migration risk. It splits portfolio-level risk into intrinsic risk and concentration risk. Layered on top of that, banking practice recognizes several distinct sub-types worth understanding individually. Three matter most for anyone building a working knowledge of the field: counterparty risk, concentration risk, and settlement risk.

The distinction isn’t academic. Each type demands a different measurement approach, a different mitigation strategy, and often a different team within a bank’s risk function. A credit officer underwriting a retail loan thinks primarily about default risk on that single borrower. A treasury desk trading derivatives thinks primarily about counterparty risk and daily mark-to-market exposure. A chief risk officer reviewing the whole institution thinks about concentration across the entire book. Does the bank have too much riding on one sector, one region, or one large group of related borrowers? Confusing these categories, or managing them with a single generic framework, is exactly how risks that look small individually compound into something systemic.

Counterparty Risk

Counterparty risk is the risk that the other party in a financial contract fails to fulfill their side of the deal. This isn’t a traditional borrower — it’s a trading or derivatives counterparty. It’s especially relevant in derivatives, securities lending, and prime brokerage relationships. There, exposure isn’t a fixed loan amount. It’s a fluctuating mark-to-market value.

The Archegos collapse is the clearest recent illustration. Archegos used total return swaps to build enormous, concentrated positions in a small number of stocks. It never owned the shares directly, and never disclosed the size of its bets. Its prime brokers — Credit Suisse, Nomura, Morgan Stanley, Goldman Sachs, and UBS — each saw only their own slice of Archegos’s exposure. None had visibility into the full picture. When the fund’s portfolio value fell roughly 30% in four days in March 2021, it couldn’t meet margin calls. Its brokers had to liquidate billions of dollars in positions simultaneously. Those unable to exit fast enough absorbed massive losses.

Analysts who studied the collapse point to a specific, technical failure mode: wrong-way risk. This occurs when a bank’s exposure to a counterparty grows precisely as that counterparty’s ability to pay deteriorates. Archegos’s swap exposure ballooned in tandem with its portfolio’s decline. The worse things got, the more the banks were owed, and the less able Archegos was to cover it. The European Central Bank later reviewed 23 major banks’ derivatives exposures. It found “material shortcomings” in how counterparty credit risk was governed across the industry.

Concentration Risk

Concentration risk arises when a bank’s credit exposure clusters too heavily around a single borrower, sector, geography, or risk factor. Diversification is supposed to protect a lender. If one borrower fails, the loss should be a small fraction of the total book. Concentration undermines that protection entirely.

Archegos illustrates this too, in a second way. The fund’s own portfolio was concentrated in a handful of technology and media stocks. When those specific names fell, there was no offsetting position to cushion the blow. The losses hit every position at once. Banks face the mirror image of this problem in lending. Heavy exposure to one industry, real estate for instance, or one large corporate group, means a single sector downturn can impair a disproportionate share of the loan book. RBI’s prudential framework directly addresses this. It sets single-borrower and group-borrower exposure limits specifically to prevent Indian banks from building the kind of concentrated exposure that made Archegos so dangerous to its lenders.

Settlement Risk

Settlement risk is sometimes called Herstatt risk, after the 1974 collapse of Bankhaus Herstatt. It’s the risk that one party in a transaction delivers its side — cash or securities — while the counterparty fails to deliver theirs. This typically happens because of timing gaps, or the counterparty’s failure between trade execution and final settlement. Herstatt was shut down by German regulators mid-day. By then it had already received Deutsche Mark payments from counterparties, but it hadn’t yet sent back the US dollars it owed in return. Banks on the other side of those foreign exchange trades lost their payments outright.

That single event reshaped global payments infrastructure. It led directly to the creation of CLS Bank, a settlement system designed specifically to eliminate this timing gap in foreign exchange transactions. CLS does this by settling both legs of a trade simultaneously. Settlement risk remains a live concern anywhere payment and delivery aren’t simultaneous. It’s a reminder that credit risk isn’t only about long-term loans — it can materialize in a transaction that’s supposed to finish within hours.

Default Risk Explained

Default risk sits at the center of every credit risk framework. It’s the risk that a borrower simply stops paying. Understanding what causes defaults, and how professionals frame the probability of one occurring, is foundational to everything else in credit risk modeling.

It’s also the oldest form of credit risk banks have grappled with. Long before derivatives, prime brokerage, or cross-border settlement systems existed, lenders were already trying to predict which borrowers would repay and which wouldn’t. Every other risk type covered in this guide is, in some sense, a more specialized variant of the same underlying question: will the party on the other side of this transaction deliver what they owe? Default risk asks that question in its most direct form, applied to a straightforward loan or credit exposure.

What Causes Defaults

Defaults rarely happen for one isolated reason. They typically result from a mix of factors:

  1. Cash flow deterioration. A borrower’s income or business revenue falls below what’s needed to service debt. For individuals, this might mean job loss. For corporates, it might mean a demand shock or margin compression.
  2. Over-leverage. A borrower takes on more debt than their income can realistically support, leaving no buffer when conditions turn even mildly unfavorable.
  3. Macroeconomic shocks. Recessions, interest rate spikes, or sector-wide downturns push otherwise healthy borrowers into distress simultaneously — the mechanism behind concentration risk turning into realized losses.
  4. Governance and fraud. Misrepresented financials, diverted funds, or outright fraud can turn an apparently strong borrower into a default risk overnight. Archegos itself is a governance case as much as a market one — Bill Hwang was later convicted on fraud and racketeering charges tied to how the fund misled its own counterparties about position size and concentration.
  5. Willful default. Occasionally, a borrower who can pay simply chooses not to, usually when the cost of default (reputational or legal) is judged lower than the cost of repayment.

The Probability Framework

Rather than treating default as a binary surprise, credit risk professionals model it as a probability. A Probability of Default (PD) is expressed as a percentage likelihood that a borrower defaults within a defined time horizon, typically 12 months for regulatory purposes. A PD of 2% doesn’t mean a specific borrower is “slightly risky.” It means that, across a large pool of similar borrowers, roughly 2 in 100 are expected to default within that window.

This probabilistic framing matters. It converts an unpredictable individual event into something a bank can price, provision for, and manage at portfolio scale. Building a reliable PD estimate is a discipline in its own right — deciding which borrower characteristics matter, which statistical technique to use, and how to validate the result. We cover the full methodology, including logistic regression and survival analysis, in our detailed guide to PD estimation.

What matters at this stage is the underlying logic: default isn’t modeled as a yes/no outcome for an individual borrower. It’s modeled as a rate across a population, calibrated against historical data and adjusted for current conditions.

Credit Risk in International Banking

Credit risk doesn’t stop at national borders, and neither does its regulation. Two frameworks matter most for anyone working in or around Indian banking. One is the International Accounting Standards Board’s approach to credit loss recognition. The other is RBI’s domestic prudential framework.

Why does a domestic Indian bank need to care about an international accounting standard? Because capital markets are global, even when a bank’s loan book isn’t. Foreign investors, rating agencies, and cross-border lenders all benchmark a bank’s provisioning and capital adequacy against international norms, whether or not that bank operates outside India. A framework that looks conservative by domestic standards can still look under-provisioned by global standards. That gap shows up directly in borrowing costs, credit ratings, and investor confidence.

The IASB and IFRS 9

The International Accounting Standards Board (IASB) issued IFRS 9 specifically to fix a weakness exposed by the 2008 financial crisis. The old “incurred loss” model only recognized credit losses after a default had already happened — by which point it was too late for provisions to cushion the blow. IFRS 9 replaced that with an Expected Credit Loss (ECL) model. It requires banks to recognize losses based on forward-looking estimates, before default occurs. IFRS 9 has been adopted across more than 140 jurisdictions worldwide, making it one of the most widely applied accounting standards in global banking.

RBI’s Framework and India’s ECL Transition

India has historically run on a different system: the Income Recognition and Asset Classification (IRAC) norms. These classify loans as standard, sub-standard, doubtful, or loss, based on how many days they’re overdue, and provision accordingly. That’s closer to the old “incurred loss” approach IFRS 9 was designed to replace.

That’s now changing. RBI has confirmed that an ECL-based provisioning framework, with prudential floors, will apply to all Scheduled Commercial Banks from April 1, 2027. Under the new norms, banks will classify financial assets into Stage 1, Stage 2, or Stage 3. That classification depends on assessed credit losses at initial recognition, and at each subsequent reporting date — directly mirroring the IFRS 9 structure used globally.

RBI has also been actively updating its credit risk rules to align with Basel Committee on Banking Supervision (BCBS) standards. In 2026, it revised its counterparty credit risk framework specifically to bring India’s derivatives exposure measurement closer to global norms. That’s a change regulators internationally have prioritized in the years following the Archegos collapse. India’s Capital-to-Risk-Weighted-Assets Ratio (CRAR) requirement of 9% for scheduled commercial banks also exceeds the 8% global Basel III minimum. That reflects RBI’s consistently more conservative capital stance relative to international baselines.

Measuring Credit Risk

Defining and categorizing credit risk only gets a risk team so far. Managing it requires quantifying it — turning a qualitative concern into numbers that inform pricing, provisioning, and capital decisions. Four metrics form the core toolkit.

Probability of Default (PD)

As covered above, PD is the percentage likelihood that a borrower defaults within a set time horizon. It’s typically estimated through logistic regression or survival analysis, using historical repayment data, bureau scores, and financial ratios as inputs. PD is the starting point for nearly every downstream credit risk calculation.

Loss Given Default (LGD)

Default doesn’t automatically mean total loss. LGD measures the proportion of exposure a lender expects to actually lose after accounting for recoveries — collateral liquidation, guarantees, or restructuring. Getting LGD right requires more care than it first appears. It has to reflect the economic recovery rate, discounted for the time value of money and net of recovery costs — not just the raw cash eventually collected. A recovery that takes three years to materialize is worth meaningfully less than the same amount recovered immediately.

Credit Ratings

Credit ratings translate a borrower’s creditworthiness into a standardized letter grade, from investment-grade (AAA down to BBB-) to speculative or junk grades below that. In India, these come from agencies like CRISIL, ICRA, and CARE; internationally, from S&P, Moody’s, and Fitch. Ratings aren’t a substitute for internal PD modeling. But they serve two practical purposes. They give banks an independent, externally validated view of risk. And they directly feed into regulatory risk-weighting under the Basel Standardised Approach, where a lower rating translates into a higher capital charge against that exposure.

Expected Loss and Exposure at Default (EAD)

Exposure at Default (EAD) measures how much a lender is actually on the hook for at the moment a default happens. For revolving credit like credit cards, this can run higher than the current outstanding balance, since distressed borrowers often draw down more of their available limit before defaulting. Combining EAD with PD and LGD produces Expected Loss (EL) — the amount a bank should provision for a given exposure on average. It’s worth noting this combined figure is a standard industry simplification. It assumes PD, LGD, and EAD move independently, which understates risk in downturns, when all three tend to move against the lender simultaneously. Regulators address this specific gap by requiring “downturn” LGD and EAD estimates, rather than accepting benign-cycle averages alone.

Used together, these four metrics let a bank move from “this borrower feels risky” to a specific number. That number can be priced into a loan, provisioned for on the balance sheet, and reported to regulators with a defensible methodology behind it.

Conclusion

Credit risk is broader and more structured than “will this loan get repaid.” It spans counterparty exposure in derivatives, concentration across a portfolio, settlement timing in payments, and default at the level of an individual borrower. Each has distinct causes, distinct historical failures, and distinct measurement approaches. Understanding what is credit risk at this level of detail is the foundation every subsequent risk modeling technique builds on, from PD estimation through to full expected-loss calculation.

The Archegos collapse, the 2027 shift to ECL-based provisioning in India, and RBI’s ongoing alignment with Basel counterparty risk standards all point to the same conclusion. Credit risk management is not static. It evolves in direct response to the failures that expose its gaps.

Explore our Credit Risk Modeling Certification Training to master Risk Analytics. Build the PD, LGD, and EAD models covered here from scratch. Work through India’s transition to ECL provisioning, and learn the model validation techniques practicing risk teams use every day.

 


.

Complete Guide to Credit Risk Modeling Techniques

Complete Guide to Credit Risk Modeling Techniques

A practical framework for PD, LGD, EAD and expected loss modeling in banking

Introduction

Between March 2018 and March 2021, gross non-performing assets at India’s public sector banks fell from a peak of 14.58% to 9.11% of advances. By September 2025, the system-wide gross NPA ratio for all scheduled commercial banks had dropped further, to a multi-decade low of 2.15%. That turnaround wasn’t accidental. Tighter underwriting, RBI’s Asset Quality Review, the Insolvency and Bankruptcy Code, and — underlying all of it — better credit risk models drove it.

The lesson for anyone building a career in banking analytics is straightforward. Credit risk is the single largest risk category banks carry on their balance sheets. How well a bank measures it directly determines capital adequacy, profitability, and long-term survival. A bank that underestimates default risk lends into losses it didn’t provision for. A bank that overestimates it prices good borrowers out of the market and loses share to competitors.

This guide walks through the complete framework professionals use to model credit risk. It covers the regulatory logic that makes credit risk modeling non-negotiable. It covers the three parameters that quantify it — PD, LGD, EAD. And it covers the statistical and machine learning techniques used to estimate each one. Maybe you’re a risk analyst preparing for an FRM exam. Maybe you’re a data scientist moving into banking analytics. Maybe you’re evaluating a credit risk modeling certification. Either way, this article builds the structured foundation technical interviews and real project work both expect.

By the end, you’ll understand the formulas. You’ll understand why each one exists, how professionals estimate it in practice, and where Indian banks apply it today.

What is Credit Risk and Why It Matters

Credit risk is the possibility that a borrower fails to meet a contractual debt obligation. The borrower could be an individual, a company, or a counterparty. Either way, it results in a financial loss for the lender. It is the risk that repayment doesn’t happen as agreed: a missed EMI, a defaulted corporate bond, a counterparty that can’t settle a derivative contract.

For a bank, credit risk isn’t one risk among many — it’s usually the dominant one. Loans and advances typically make up the largest share of a bank’s assets. Under the Basel framework, credit risk-weighted assets (RWA) form the biggest component of the capital a bank must hold. When credit risk is mismeasured, everything built on top of that measurement goes wrong too: capital adequacy ratios, loan pricing, provisioning, dividend capacity.

Why Credit Risk Modeling Matters to a Bank’s Survival

Three consequences flow directly from how well a bank models credit risk:

  1. Capital adequacy. Under Basel III, banks must hold capital proportional to the risk-weighted value of their assets. The Capital-to-Risk-Weighted-Assets Ratio (CRAR) for India’s scheduled commercial banks stood at a strong 17.2% as of September 2025 — well above the regulatory minimum. Risk measurement and provisioning discipline improved sharply after 2015, and it shows.
  2. Provisioning under IFRS 9. IFRS 9 replaced the incurred-loss model with an expected credit loss (ECL) model. Banks must now recognize losses before a default happens, based on modeled probabilities. That makes credit risk models a direct input into the profit and loss statement, not just a back-office risk tool.
  3. Pricing and portfolio strategy. A bank that can accurately rank borrowers by risk can price loans correctly, set appropriate limits, and choose which segments to grow or shrink. A bank that can’t ends up either losing good customers to competitors with sharper pricing, or accumulating bad loans that eventually show up as NPAs.

The RBI Regulatory Backdrop

The Reserve Bank of India has steadily tightened the credit risk framework banks operate under. Its 2015 Asset Quality Review forced transparent recognition of stressed assets that restructuring had previously hidden. More recently, in November 2023, the RBI raised risk weights on unsecured consumer credit — from 100% to 125% for banks. NBFC exposures saw a further increase. The goal: curb underpriced risk-taking in retail lending. The RBI has also begun articulating principle-based guidance for AI use in credit decisioning through its evolving regulatory framework. Model governance, not just model accuracy, is now squarely on the regulator’s radar.

This regulatory environment is precisely why credit risk modeling has become a core competency banks and NBFCs actively hire for — not an optional analytics add-on.

Core Components of Credit Risk Modeling

Every credit risk model, regardless of the statistical technique behind it, answers one question: how much money could the bank lose on this exposure, and how likely is that loss?

The industry-standard approach breaks “expected loss” into three independently modeled components:

1. Probability of Default (PD)

PD is the likelihood that a borrower will fail to meet their obligations within a defined time horizon. That’s typically 12 months for regulatory capital purposes, or lifetime PD under IFRS 9 for certain asset stages. PD is expressed as a percentage. A PD of 3% means a 3% chance of default within the horizon, based on the borrower’s characteristics.

2. Loss Given Default (LGD)

Default doesn’t always mean total loss. If a borrower defaults, the bank usually recovers something — through collateral liquidation, guarantees, or restructuring. LGD is the proportion of the exposure the bank expects to actually lose after recoveries. It’s expressed as a percentage of the exposure. An LGD of 40% means that, on average, the bank recovers 60% of what it’s owed after a default.

3. Exposure at Default (EAD)

EAD is the total value the bank carries at the moment of default — not the sanctioned limit, but the amount actually outstanding. For a term loan, this is close to the outstanding balance. Revolving facilities like credit cards or cash credit limits work differently. There, EAD must account for the possibility that the borrower draws down more of the limit before defaulting.

Putting It Together: Expected Loss

These three parameters combine into the foundational credit risk formula:

Expected Loss (EL) = PD × LGD × EAD

Consider a simple example: a bank has an outstanding exposure (EAD) of ₹1 crore to a borrower with a PD of 4% and an LGD of 45%.

Expected Loss = 0.04 × 0.45 × ₹1,00,00,000 = ₹1,80,000

This ₹1.8 lakh isn’t a one-off loss estimate for a single account. It’s the amount the bank should provision for, on average, across a portfolio of similar loans. Multiply this calculation across thousands of accounts, segmented by product, geography, and borrower type. The result is a portfolio-level expected loss figure that feeds directly into provisioning, pricing, and capital planning.

Why This Formula Is a Simplification

EL = PD × LGD × EAD is the standard, industry-wide formula — it’s not wrong. But it rests on an assumption worth naming explicitly: that PD, LGD, and EAD are independent of one another. In reality they aren’t. Recoveries tend to get worse exactly when default rates spike, because both track the same macroeconomic cycle. A recession depresses collateral values and pushes more borrowers into default at the same time. Multiplying three independent point estimates understates loss in exactly the scenarios that matter most. That’s why regulators require downturn LGD and downturn EAD/CCF add-ons rather than accepting benign-cycle averages.

From Single-Period EL to Lifetime ECL

The formula above is also a single-period number, typically 12 months. Under IFRS 9, lifetime ECL for Stage 2 and Stage 3 assets isn’t one multiplication. It’s a discounted sum of marginal expected losses across every remaining period of the loan’s life:

Lifetime ECL = Σₜ (marginal PDₜ × LGDₜ × EADₜ) × discount factorₜ

That distinction matters in practice. A 12-month EL figure and a lifetime ECL figure for the same loan can differ substantially. Conflating the two is a common — and consequential — modeling error.

Each of the three components — probability of default, loss given default, and EAD — demands its own data, statistical techniques, and validation standards. Getting the overall expected loss number right depends entirely on getting each of these three right individually. It also depends on staying honest about where the simplifying assumptions break down.

Probability of Default (PD) Estimation

PD estimation is where most credit risk modeling careers begin, because it has the richest data history and the most mature statistical toolkit.

The Data Foundation

PD models draw on historical loan performance data: borrower demographics, financial ratios, repayment history, bureau scores (like CIBIL in India), and macroeconomic variables. The target variable is binary. Did the borrower default within the observation window, typically defined as 90 days past due (DPD), or not?

Method 1: Logistic Regression

Logistic regression remains the industry workhorse for PD modeling, and for good reason. It’s interpretable, regulator-friendly, and produces a probability output directly — exactly what PD requires.

The logistic regression model estimates:

PD = 1 / (1 + e^-(β₀ + β₁X₁ + β₂X₂ + … + βₙXₙ))

X₁ through Xₙ are borrower characteristics: debt-to-income ratio, bureau score, vintage, loan-to-value ratio, and so on. Analysts estimate the β coefficients from historical default data.

Worked example: Suppose a simplified model uses two variables — bureau score and debt-to-income (DTI) ratio — and produces this equation:

Logit(PD) = -3.5 + (-0.02 × Bureau Score) + (2.1 × DTI)

For a borrower with a bureau score of 720 and a DTI of 0.35:

Logit(PD) = -3.5 + (-0.02 × 720) + (2.1 × 0.35) = -3.5 − 14.4 + 0.735 = -17.165

PD = 1 / (1 + e^17.165) ≈ 0.00003, or effectively near-zero risk — consistent with a strong bureau score and moderate leverage.

In practice, banks convert these raw PD outputs into a credit scorecard. It’s a points-based system: each variable band — score range, income bracket, tenure — contributes points that sum to a final score. That score maps back to a PD and a risk grade, AAA to D for instance. Most retail lending decision engines run on exactly this system.

Method 2: Survival Analysis

Logistic regression answers “will this borrower default within 12 months?” It doesn’t naturally answer “when.” Survival analysis models the time to default instead, using techniques like the Cox Proportional Hazards model or Kaplan-Meier estimation. It treats default as an “event.” It treats non-defaulted, still-active loans as “censored” observations.

This matters for two practical reasons. First, it lets banks estimate lifetime PD curves, which IFRS 9 requires for Stage 2 and Stage 3 assets. Second, it naturally handles loans that are still performing at the end of the observation period. It doesn’t treat them as “non-defaults” the way a simple logistic model would. That subtlety matters a great deal in mortgage and long-tenure corporate lending portfolios.

Machine Learning Extensions

Random forests, gradient boosting (XGBoost, LightGBM), and neural networks increasingly supplement — not always replace — logistic regression. This works particularly well where alternative data is available: transaction behavior, digital footprint, utility payment history. Industry research on large Indian banks backs this up. ML models can improve default prediction accuracy over ratio-based or bureau-only assessments, particularly for thin-file borrowers without a long credit history. The trade-off is interpretability. Regulators and internal model validation teams expect PD models to be explainable. That’s why techniques like SHAP (SHapley Additive exPlanations) have become standard for justifying ML-based PD outputs to auditors and regulators.

Common Mistakes in PD Modeling

  • Treating bureau score as a sufficient standalone predictor without controlling for portfolio-specific behavior
  • Ignoring population stability — a PD model trained on pre-pandemic data can be badly miscalibrated for a post-pandemic portfolio
  • Failing to account for right-censoring when using a fixed observation window
  • Overfitting on a small default sample, which is common in low-default portfolios like corporate or sovereign lending

Loss Given Default (LGD) and Recovery

PD tells you whether a loss will happen. LGD tells you how big it will be once it does. Most practitioners consider it the harder of the two to model well. Default events are relatively rare, and recovery processes can take years to conclude.

What Drives LGD

LGD is shaped primarily by three factors:

  1. Collateral coverage and quality. A secured home loan with a well-documented, liquid property as collateral typically carries a far lower LGD than an unsecured personal loan. The reason: the bank has a tangible asset to recover value from.
  2. Seniority of claim. In corporate lending, senior secured lenders recover more than subordinated or unsecured creditors in a resolution or liquidation.
  3. Recovery mechanism and timeline. In India, recovery routes include SARFAESI Act enforcement, Debt Recovery Tribunals, and the Insolvency and Bankruptcy Code (IBC). These matter enormously for LGD estimation. IBC-driven recoveries have averaged around 94% of the fair value of resolved businesses, though considerably less against the original claim amount. System-wide NPA recovery rates for scheduled commercial banks have roughly doubled, from 13.2% in FY18 to 26.2% in FY25, reflecting stronger legal recovery infrastructure.

The Recovery Rate Relationship

LGD and recovery rate are two sides of the same coin:

LGD = 1 − Recovery Rate

That relationship is correct. But it’s easy to misapply, because “recovery rate” is doing a lot of work in that equation. It has to mean the economic recovery rate: the present value of net recoveries, after two adjustments. First, discount every recovered cash flow back to the default date, to account for the time value of money. Second, subtract the direct and indirect costs of recovery — legal fees, collateral liquidation costs, workout team overhead. A workout can take two to three years in India, even under IBC timelines. A rupee recovered in year three is worth meaningfully less than a rupee recovered on day one.

The common mistake: using the nominal recovery rate instead. That’s raw cash eventually recovered, divided by exposure, with no discounting and no cost deduction. It overstates the recovery rate and, by direct consequence, understates LGD. Say a bank nominally recovers 65% of exposure post-default, but that recovery arrives over three years and costs 8% of exposure in legal and liquidation expenses. The economic recovery rate falls well below 65%. The resulting LGD lands correspondingly higher than the naive “35%” the nominal figure would suggest.

Collateral Valuation

For secured lending, LGD modeling starts with realistic collateral valuation — not the value at origination, but the expected value at the time of liquidation, discounted for:

  • Market depreciation of the asset class (property, equipment, vehicles)
  • Haircut for forced-sale conditions versus fair market value
  • Time-to-recovery, since a three-year legal process erodes present value even if the nominal recovery is high
  • Direct recovery costs (legal fees, auctioneer fees, administrative costs)

Statistical Methods for LGD

  1. Workout LGD (the standard approach): Banks track every actual default in their historical data. They record all cash flows recovered post-default: collateral sale proceeds, settlement payments, guarantee invocations. Then they discount those cash flows back to the default date, using an appropriate discount rate, and net off recovery costs. This produces an empirical, account-level LGD. Analysts then average and segment it by product, collateral type, and vintage.
  2. Regression-based LGD models: Raw workout LGD is bounded between 0 and 1. It can occasionally exceed 1, when recovery costs surpass recoveries. Banks often use techniques suited to bounded outcomes instead. One option is beta regression. Another is a two-stage model: first predict whether any recovery occurs at all, then model the recovery amount conditional on recovery happening.
  3. Downturn LGD: Basel requires banks to estimate LGD under economic downturn conditions, not just average conditions, because collateral values and recovery rates both tend to fall exactly when default rates rise. This is a critical, frequently underestimated requirement. An LGD model calibrated only on benign-cycle data will understate loss severity in a stress scenario.

A Practical Note on LGD in Indian Retail Lending

For Indian home loans, LGD modeling relies heavily on loan-to-value (LTV) ratio at origination and current LTV, adjusted for property price movements. Property is the dominant recovery source here. Unsecured personal loans and credit cards work differently — they carry substantially higher and more volatile LGD, since recovery depends almost entirely on borrower cooperation, collection agency effectiveness, or write-off. That’s part of why the RBI’s 2023 risk-weight increase on unsecured credit targeted loss severity concerns explicitly.
<h2id=”exposure-at-default”>Exposure at Default (EAD) Calculation

EAD often gets treated as the “simple” component of the PD × LGD × EAD formula, but any product with a revolving or undrawn component needs its own careful modeling.

Why EAD Isn’t Just the Current Balance

For a fully drawn term loan, EAD is straightforward. It stays close to the outstanding principal balance at any point in time, adjusted for scheduled amortization. Products like credit cards, overdrafts, and cash credit facilities work differently. A borrower can draw down additional funds between the assessment date and the moment of default. A borrower approaching financial distress often draws their credit line closer to the limit right before defaulting. That means EAD tends to run higher than the current outstanding balance, for exactly the accounts where it matters most.

The Credit Conversion Factor (CCF)

To capture this, banks use the Credit Conversion Factor (CCF) — the proportion of the currently undrawn commitment they expect to see drawn down before default.

EAD = Current Outstanding Balance + (CCF × Undrawn Commitment)

Worked example: A borrower has a credit card with a sanctioned limit of ₹5,00,000. The current outstanding balance is ₹2,00,000, leaving an undrawn commitment of ₹3,00,000. Historical data shows that, on average, borrowers who eventually default draw down 60% of their remaining undrawn limit before the default event (CCF = 0.60).

EAD = ₹2,00,000 + (0.60 × ₹3,00,000) = ₹2,00,000 + ₹1,80,000 = ₹3,80,000

This runs meaningfully higher than the ₹2,00,000 current balance. The expected loss calculation should use the ₹3,80,000 figure, not the current balance.

How CCF Is Estimated

Banks typically estimate CCF empirically, using a cohort approach. They identify accounts that defaulted. They look back at each account’s utilization level 12 months before default. Then they measure how much of the then-undrawn limit got drawn down by the time of default. Averaging this ratio across the portfolio — segmented by product type and current utilization band — produces the CCF estimates that feed EAD models.

CCF runs highest for revolving retail products like credit cards and overdrafts. It runs near-zero for term loans with no undrawn component. Corporate revolving credit facilities and working capital limits also require dedicated CCF modeling. Distressed corporate borrowers frequently draw down committed but unused credit lines as a liquidity buffer before default becomes evident.

EAD Under Basel and IFRS 9

Under the Basel Internal Ratings-Based (IRB) approach, EAD estimation follows the same downturn-conditioning logic as LGD. CCFs should reflect what happens under stressed conditions, since utilization tends to spike precisely when the broader environment deteriorates. Under IFRS 9, EAD projections also need to extend across the lifetime of the facility for Stage 2 and Stage 3 exposures, not just a fixed 12-month window.

Real-World Implementation in Banking

The theory behind PD, LGD, and EAD only matters if it translates into disciplined implementation. India’s banking sector over the past decade offers a clear illustration of what that looks like at scale.

The Turnaround in Numbers

Following the RBI’s 2015 Asset Quality Review, public sector banks’ gross NPA ratio rose sharply, as transparent recognition brought hidden stress to light. It peaked at 14.58% in March 2018. What followed was a sustained, model-driven cleanup. Recapitalization, tighter underwriting standards, and the Insolvency and Bankruptcy Code combined to bring the PSB gross NPA ratio down to 9.11% by March 2021, and further to 2.58% by March 2025. System-wide, across all scheduled commercial banks, the gross NPA ratio reached a multi-decade low of around 1.8%–2.15% through late 2025 and into 2026, per the RBI’s Financial Stability Report.

At the institution level, this shows up clearly in individual bank results. For the quarter ended March 2026, State Bank of India — India’s largest lender — reported a gross NPA ratio of 1.49% and a net NPA ratio of 0.39%. HDFC Bank reported a gross NPA ratio of 1.15% and net NPA ratio of 0.38%. These aren’t accidents of a benign credit cycle alone. They reflect years of investment: early warning systems, scorecard-based underwriting, stressed-asset monitoring infrastructure.

What Changed Operationally

Three implementation shifts are consistently cited across the sector:

  1. Early Warning Systems (EWS). Public sector banks have rolled out automated EWS frameworks with roughly 80 distinct triggers. These pull in third-party data to flag stress in borrowing accounts before they slip into NPA status. This shifts credit risk management from reactive classification to proactive monitoring.
  2. Machine learning-augmented scorecards. Industry research examining major Indian banks — SBI, HDFC, ICICI, Kotak Mahindra — found that machine learning techniques consistently outperform pure ratio-based or bureau-score-only assessments. The winning combination: logistic regression alongside random forests and neural networks, incorporating alternative data like transaction behavior and digital usage patterns. It works especially well for borrowers with thin credit files.
  3. Faster, more granular underwriting. The same research found loan approval times at many Indian banks have compressed, from several days to a matter of minutes for eligible segments. Automated, model-based decisioning drives this, rather than manual file review. That shift only became possible once PD and exposure models earned enough validated trust to run with minimal manual override.

The Governance Layer

None of this works without governance. The RBI’s ongoing regulatory review — including its recently articulated principle-based framework for AI use in banking — signals something important. As banks lean further into ML-driven credit risk models, model validation, explainability, and monitoring will matter as much as raw predictive accuracy. A model that can’t be explained to an auditor or regulator can’t be deployed at scale in a regulated balance sheet, no matter how well it performs statistically.

Interview Questions to Test Your Understanding

  1. Write out the expected loss formula and explain what each component represents.
  2. Why is logistic regression still preferred over more complex ML models for regulatory PD models?
  3. What’s the difference between workout LGD and downturn LGD, and why does Basel require the latter?
  4. Explain why EAD for a credit card is typically higher than the current outstanding balance.
  5. How would you validate a PD model’s performance? (Hint: think Gini coefficient, KS statistic, and calibration testing.)

Summary

Credit risk modeling breaks down a complex question: how much could a bank lose, and how likely is it? It splits that question into three independently estimated, rigorously validated components — Probability of Default, Loss Given Default, and Exposure at Default — combined through EL = PD × LGD × EAD. Analysts typically estimate PD through logistic regression and survival analysis, increasingly supplemented by explainable machine learning. LGD depends on collateral quality, recovery mechanisms, and downturn conditions. EAD requires modeling credit conversion factors for any revolving exposure. Together, these three parameters drive capital adequacy, IFRS 9 provisioning, and loan pricing. India’s banking sector’s asset quality turnaround over the past decade proves the point: disciplined credit risk modeling delivers at scale.

Frequently Asked Questions

Q1. What is the difference between credit risk and credit risk modeling?

Credit risk is the underlying possibility of borrower default. Credit risk modeling is the quantitative discipline of measuring that risk. It uses statistical and machine learning techniques to estimate PD, LGD, and EAD, so a bank can price, provision for, and manage the risk.

Q2. Is credit risk modeling the same as credit scoring?

Credit scoring is a subset of credit risk modeling, focused specifically on PD estimation for underwriting decisions. Full credit risk modeling also covers LGD, EAD, portfolio-level expected loss, stress testing, and regulatory capital calculation.

Q3. Which technique is better for PD modeling: logistic regression or machine learning?

Neither wins universally. Logistic regression remains preferred for regulatory capital models, thanks to its interpretability and regulator familiarity. Machine learning models can improve accuracy, particularly with alternative data. But they require additional explainability tooling — like SHAP — to meet governance and audit requirements.

Q4. What skills do I need to build a career in credit risk modeling?

You need statistics (logistic regression, survival analysis), proficiency in Python or SAS, familiarity with Basel and IFRS 9, and hands-on exposure to real credit datasets. Structured training that pairs regulatory context with practical model-building is generally the fastest path in.

Q5. How is credit risk modeling connected to IFRS 9?

IFRS 9 requires banks to recognize expected credit losses using forward-looking PD, LGD, and EAD estimates, rather than waiting for an actual default. Stage 1 assets use a 12-month figure, close to the standard EL = PD × LGD × EAD calculation. Stage 2 and 3 assets use lifetime ECL instead — a discounted sum of marginal expected losses across the loan’s remaining life, not a single multiplication.

Ready to Build These Skills Hands-On?

Understanding the theory behind PD, LGD, and EAD is the first step. Building bankable, interview-ready models — in Python or SAS, on real credit datasets, aligned to Basel and IFRS 9 — is what actually moves a career forward.

Explore Dexlab Analytics’ Credit Risk Modeling certification program to build PD, LGD, and EAD models from scratch, work through IFRS 9 ECL frameworks, and learn model validation techniques used by practicing risk teams.

 


.

Call us to know more