Risk Analytics Market Archives - DexLab Analytics | Credit Risk | Market Risk | SAS Python Machine Learning Modeling

PD Estimation Methods for Credit Risk

PD Estimation Methods for Credit Risk Assessment

In practice, every rupee a bank lends carries an implicit question. But what is the chance this borrower stops paying?

PD estimation turns that question into a defensible number. Naturally, it sits at the center of modern credit risk management. Specifically, it drives regulatory capital, loan loss provisions, loan pricing, credit approval cut-offs, and portfolio strategy.

Notably, the consequences of error run in both directions. On one hand, overstate risk, and the bank prices itself out of good business. On the other hand, understate it, and losses arrive faster than banks built provisions.

 

Table of Contents

  1. Why PD Estimation Matters More in 2026
  2. What Is Probability of Default?
  3. PD Estimation Methods Compared
  4. Historical Default Rate Method
  5. Logistic Regression for PD Estimation
  6. Limitations of Logistic Regression Under IFRS 9
  7. Machine Learning: Random Forest and XGBoost
  8. Survival Analysis for Lifetime PD
  9. Macroeconomic Variables and PD
  10. Validating and Backtesting a PD Model
  11. Choosing the Right PD Estimation Method
  12. Frequently Asked Questions

 

Why PD Estimation Matters More in 2026

Recently, the stakes in India have risen sharply. Nevertheless, the headline numbers look reassuring. Indeed, the RBI’s Financial Stability Report of June 2026 placed the gross NPA ratio of scheduled commercial banks at 1.8% as of March 2026. In other words, that is a multi-decadal low. Furthermore, the central bank’s baseline projects only a modest rise, to around 1.9% by March 2028. Additionally, capital ratios sit at multi-decade highs, with CRAR at 17.7% and CET1 at 15.3%.

The regulatory shift underneath the numbers

However, those benign figures mask a structural change. Specifically, on 27 April 2026, the RBI notified the Commercial Banks – Asset Classification, Provisioning and Income Recognition Directions, 2026. Subsequently, the rules take effect on 1 April 2027. A glide path then runs to 31 March 2031.

In effect, this single change moves Indian banks off the incurred-loss model. Previously, provisions followed a default event. Now, under the Expected Credit Loss framework, banks must estimate a lifetime PD term for every performing exposure that shows a significant increase in credit risk.

Consequently, PD estimation stops being a capital input that a small modelling team owns. Instead, it becomes a line item flowing straight into the profit and loss account every quarter. As a result, boards, auditors, and supervisors will all read it.

To that end, this guide covers the principal PD estimation methods used in practice. For each, it sets out what the method does well, where it fails, and finally how to validate the result.

 

What Is Probability of Default?

Put simply, probability of default is the likelihood that a borrower fails to meet contractual obligations over a defined horizon. Specifically, it runs on a 0 to 1 scale, or equivalently 0% to 100%. At the extremes, zero means default is impossible while one means default is certain. In practice, of course, a well-specified model never produces either extreme.

Before any PD estimation exercise yields a meaningful number, however, three elements must be fixed.

The default definition

As a rule, Basel and RBI’s IRACP norms both trigger default at 90 days past due. Alternatively, lenders may declare default earlier if they judge the obligor unlikely to pay without realising collateral.

However, a model trained on a 90-DPD definition is not comparable to one trained on 30-DPD. Indeed, mixing the two remains one of the most common sources of inconsistency in Indian retail portfolios.

The horizon: 12-month versus lifetime

For instance, regulatory capital under the Internal Ratings-Based approach uses a 12-month PD. By comparison, IFRS 9 and RBI’s ECL directions ask for more. Specifically, Stage 1 assets need a 12-month PD, whereas Stage 2 and Stage 3 assets need a lifetime PD.

Importantly, a 12-month PD of 2% does not imply a five-year lifetime PD of 10%. In reality, default hazard rarely stays constant over time. This is precisely why survival methods matter.

Point-in-time versus through-the-cycle

A point-in-time (PIT) PD reflects current economic conditions and moves with the cycle. By contrast, a through-the-cycle (TTC) PD averages across a full cycle and stays deliberately stable.

Basel capital wants TTC. By contrast, ECL accounting wants PIT. Most banks therefore estimate one basis and transform to the other. Consequently, a great deal of model risk hides in that transformation.

How to read a PD number

Even so, interpretation deserves care. Notably, a PD of 3% does not mean a specific borrower will default 3% of the time. Rather, it means that within a homogeneous pool of borrowers sharing that risk profile, roughly three in a hundred will default over the horizon. In short, PD describes a population, then applies that description to an individual.

Similarly, regulators recognise that estimates near zero lack credibility. Under the finalised Basel III standards in BIS Basel Framework chapter CRE36, the PD input floor for corporate and institutional exposures rose from 0.03% to 0.05%. Meanwhile, qualifying revolving retail revolvers carry a 0.1% floor. In principle, these floors offset model risk, measurement error, and thin data. Usefully, they remind us that no PD estimate is exact.

Finally, PD is one of three parameters in the expected loss identity: EL = PD × LGD × EAD. For how the other two fit in, see our comprehensive guide to credit risk modeling, which covers Loss Given Default and Exposure at Default alongside PD.

 

PD Estimation Methods Compared

Before going into each method, here is how the four principal approaches differ. Ultimately, these dimensions determine which method you can actually use.

Historical Default RateLogistic RegressionMachine LearningSurvival Analysis
OutputOne rate per segmentPD at a fixed horizonPD at a fixed horizonFull PD term structure
Ranks borrowers?✓ strongest
Lifetime PD?via bolt-on onlyvia bolt-on only✓ native
Handles censoring
Minimum data5+ yrs, ideally a full cycle~1,000+ obs, 50+ defaults10,000+ obs, 500+ defaultsLoan-level default timing
InterpretabilityCompleteHighLow without SHAPModerate
Regulatory acceptanceHigh (benchmark use)HighestConditionalGrowing under IFRS 9
Best suited toLow-default and homogeneous poolsRegulatory PD, scorecardsOrigination decisioningStage 2 lifetime ECL

 

Most banks run two or three of these together rather than choosing one. Below, the reasons become clear.

 

Historical Default Rate Method for PD Estimation

Notably, the simplest approach to PD estimation is also the oldest. First, segment the portfolio. Then count defaults and divide by the number of accounts at the start of the period.

PD(segment) = Number of accounts defaulting in period / Number of performing accounts at period start

For example, consider a small portfolio. Suppose a bank holds 12,000 performing MSME loans in a given rating grade at the start of FY25. During the year, 384 of them hit 90-DPD. The observed one-year default rate is therefore 3.2%. Average that across several years, ideally a full cycle, and you then have a serviceable TTC PD for that grade.

Where the historical method works well

Generally, this method suits homogeneous, high-volume portfolios with stable underwriting. For instance, two-wheeler loans, gold loans, and standardised consumer durable finance all qualify.

Provided that the segment is genuinely homogeneous, the empirical rate is unbiased. Moreover, it needs no statistical assumptions at all. Additionally, it is the natural starting point for a low-default portfolio, where regression simply cannot be fitted. It also benchmarks any more sophisticated model that follows.

Basel’s IRB minimum requirements expect at least five years of data for retail PD estimation. For corporate exposures, meanwhile, they want a period spanning a full economic cycle. This is not bureaucratic conservatism. Rather, it responds directly to the method’s central weakness.

Where the historical method fails

It looks entirely backward. After all, the observed default rate for FY25 tells you only what happened under FY25 conditions. Consequently, if the next year brings a rate shock or a sectoral downturn, that rate forecasts badly. Regardless, Indian banking learned this expensively.

It cannot rank within a segment. Instead, every borrower in the bucket receives the same PD. For instance, a five-year-old MSME with declining coverage ratios gets the same number as a fifteen-year-old firm with improving margins. All the discriminatory information therefore sits unused.

Segment definition is arbitrary and unstable. Cut too coarsely and the estimate means nothing. Conversely, cut too finely and default counts collapse to single digits. At that point sampling error swamps signal. A segment with three observed defaults has a confidence interval so wide it barely constrains anything.

Low default rates break it. When a portfolio produces zero defaults in a year, the naive estimate is 0%. That figure is both false and, under Basel floors, inadmissible.

Case study: the 2015 Asset Quality Review

The corporate credit cycle of the mid-2010s illustrates historical-rate failure better than any hypothetical. Initially, through the boom years, observed default rates on large infrastructure and metals exposures stayed low. Provisioning duly followed those observed rates.

Underlying credit quality, however, had already deteriorated well before defaults surfaced. Neither the incurred-loss framework nor the historical-rate PD estimates feeding it could register that deterioration ahead of the event.

The RBI’s Asset Quality Review, launched in 2015, then forced consistent recognition across the system. Consequently, reported gross NPAs of scheduled commercial banks climbed to roughly 11.5% by 2018. Clean-up, recapitalisation, and IBC-driven resolution subsequently brought them down to 2.3% by March 2025 and 1.8% by March 2026.

Importantly, the lesson is not that banks acted dishonestly. Instead, it is that PD estimation drawn purely from recent realised defaults cannot anticipate a turning point. That structural gap is exactly what the ECL framework aims to close.

 

Logistic Regression for PD Estimation

Logistic regression remains the workhorse of PD estimation across the industry. Furthermore, it holds that position for reasons that are as much regulatory as statistical.

In essence, the model estimates the log-odds of default as a linear function of borrower and facility characteristics:

ln( PD / (1 − PD) ) = β₀ + β₁x₁ + β₂x₂ + … + βₖxₖ

Rearranging then gives the PD directly:

PD = 1 / (1 + e^−(β₀ + β₁x₁ + … + βₖxₖ))

Usefully, the logistic function maps any real-valued score onto the (0, 1) interval. That is exactly what a probability requires. Consequently, no transformation, clipping, or calibration hack is needed to keep estimates in range.

Why logistic regression dominates in practice

Coefficients are interpretable. Each β is a change in log-odds per unit of the predictor. Exponentiate it, therefore, and you get an odds ratio a credit officer can reason about. So when a supervisor asks why a borrower received a 4.8% PD, the model answers.

It converts cleanly to a scorecard. In addition, weight-of-evidence binning plus logistic regression produces the points-based scorecards that underwriting systems and branch staff actually use. Our walkthrough of logistic regression for PD modelling covers WOE and information value in full.

It stays stable on modest data. Typically, a few thousand observations and a reasonable default rate estimate the coefficients well. Conversely, tree ensembles at the same sample size tend to overfit.

It meets least regulatory resistance. Model risk expectations under the Basel III regulatory framework and RBI’s ECL directions weigh explainability and documented governance heavily.

How to implement logistic regression PD estimation in Python

import pandas as pd

import numpy as np

import statsmodels.api as sm

from sklearn.model_selection import train_test_split

from sklearn.metrics import roc_auc_score

 

# 1. Define target: 1 = defaulted within 12 months (90+ DPD), 0 = otherwise

df = pd.read_csv(“loan_book.csv”)

y = df[“default_12m”]

 

# 2. Select and prepare drivers

features = [

“debt_service_coverage”, “current_ratio”, “vintage_months”,

“utilisation_pct”, “max_dpd_l12m”, “turnover_growth_yoy”

]

X = df[features].copy()

 

# 3. Treat outliers before binning; winsorise at the 1st/99th percentile

for col in features:

lo, hi = X[col].quantile([0.01, 0.99])

X[col] = X[col].clip(lo, hi)

 

# 4. Split out-of-time where possible, not just out-of-sample

X_train, X_test, y_train, y_test = train_test_split(

X, y, test_size=0.30, stratify=y, random_state=42

)

 

# 5. Fit with an intercept

X_train_c = sm.add_constant(X_train)

model = sm.Logit(y_train, X_train_c).fit(disp=0)

print(model.summary())        # coefficients, std errors, p-values

 

# 6. Score and assess discrimination

X_test_c = sm.add_constant(X_test)

pd_hat = model.predict(X_test_c)

print(“AUC:”, round(roc_auc_score(y_test, pd_hat), 4))

Two practitioner notes follow from this. First, prefer statsmodels over scikit-learn for the development build. Model documentation needs p-values and standard errors to justify each variable. Unfortunately, scikit-learn does not surface them.

Second, always hold out an out-of-time sample rather than a random split. Otherwise, a random split shares the economic environment between train and test. As a result, it flatters the model considerably.

 

Limitations of Logistic Regression in IFRS 9 PD Modelling

Historically, logistic regression earned its dominance in a Basel world. There, the deliverable was a stable 12-month through-the-cycle PD, used once a quarter for capital.

IFRS 9 and RBI’s ECL directions ask for something structurally different. Under those new demands, several limitations become visible. None of them disqualifies the method; most banks will still build on a logistic core. Each one, however, requires a bolt-on that must itself be documented and validated.

Structural gaps: term structure and censoring

It produces a point, not a term structure. As noted, IFRS 9 requires a lifetime PD for Stage 2 and Stage 3 exposures. Meanwhile, a logistic model fitted on a 12-month default flag produces exactly one number, at one horizon.

In contrast, extending it to a 30-year mortgage means chaining marginal PDs, applying a rating transition matrix, or fitting separate models at multiple horizons. Every one of those routes introduces assumptions the original model never tested. Ultimately, the extrapolation rather than the regression drives most of the lifetime ECL.

It has no mechanism for censoring. Unfortunately, a binary setup treats loans that prepay, refinance, or remain performing at the data cut-off as clean non-defaults. In Indian retail books with high prepayment rates, this bites hard. In particular, housing and personal loans suffer most.

The reason is straightforward. Essentially, accounts that exited early get counted as successes rather than as observations that simply stopped being observed. Lifetime default risk therefore comes out understated. Survival methods handle this natively; logistic regression does not.

Conditioning and scenario problems

PIT conditioning sits outside the model. Fitted on pooled multi-year data, a logistic model delivers something closer to a hybrid or TTC estimate. Converting it to the PIT basis IFRS 9 requires means applying a separate macro scalar or Vasicek shift afterwards.

Because nobody estimates the macro relationship jointly with the borrower-level coefficients, the two components can drift apart. The model owner has no single likelihood to test.

Scenario sensitivity often runs too flat. In fact, auditors raise this criticism most consistently. During fitting, idiosyncratic borrower variables absorb the bulk of the variance. Little remains for macro drivers to explain.

As a result, the downside scenario moves ECL by only a few basis points. That implies the bank believes a severe recession barely affects its credit losses. Rarely is that credible, and defending it in an audit committee proves difficult.

SICR assessment needs an origination-date PD. Staging under IFRS 9 compares lifetime PD at the reporting date against lifetime PD at initial recognition. For loans booked before the model existed, which covers most of a legacy book, someone must reconstruct that origination PD retrospectively. The underlying data may never have been retained. Logistic regression offers no help here. The problem concerns data lineage, yet it lands squarely on the PD model owner.

Statistical constraints

Linearity in log-odds is a real constraint. Fundamentally, the method assumes each predictor moves log-odds linearly. In reality, credit drivers rarely oblige. Utilisation risk rises sharply past 80%. Vintage risk is hump-shaped. DSCR effects flatten at both tails.

Admittedly, weight-of-evidence binning is the standard fix. Nevertheless, coarse-classing discards within-bin information. The bin boundaries then become an unvalidated modelling choice that tends to destabilise on refresh.

Coefficients turn unstable in low-default portfolios. Large-corporate, NBFC, and sovereign exposures may generate a handful of defaults across an entire cycle. Consequently, maximum likelihood estimation degrades badly at those counts, and complete or quasi-complete separation is common. IFRS 9 still demands an ECL number for these exposures. Consequently, banks usually turn to external ratings-based PD mapping or a shadow-rating approach instead.

What this means for model architecture

Overall, the common architecture now runs three layers. First, a logistic model handles 12-month PD and rank ordering. Next, a survival or transition-matrix layer supplies the lifetime term structure. An explicit macro overlay delivers PIT conditioning.

That means three models, three validation exercises, and three sets of assumptions. In other words, the governance load is considerably heavier than the single scorecard that satisfied Basel. Plan for it well before the April 2027 deadline.

 

Machine Learning Methods for PD Estimation

Gradient-boosted trees and random forests have earned a genuine place in PD estimation. Specifically, they perform best in retail and MSME segments, where non-linearities and interactions run strong and data volumes are large.

Random Forest

Random Forest grows many decision trees on bootstrapped samples with randomised feature subsets, then averages their predicted class probabilities. Usefully, it resists outliers, handles missing values gracefully, and requires little tuning.

Its output probabilities, however, are frequently poorly calibrated. After all, averaged vote shares are not PDs. Isotonic or Platt calibration is therefore close to mandatory before the numbers touch an ECL calculation.

XGBoost and LightGBM

By contrast, these build trees sequentially. In turn, each new tree corrects the residual errors of the ensemble so far.

On structured credit data with rich behavioural features, gradient boosting routinely delivers a 3 to 8 point Gini improvement over a well-built logistic scorecard. For instance, utilisation trends, bureau enquiry velocity, EMI bounce patterns, and GST filing regularity all help here. On thin-file applicants with a dozen variables, though, the gain frequently disappears entirely.

import xgboost as xgb

from sklearn.calibration import CalibratedClassifierCV

from sklearn.metrics import roc_auc_score

 

base = xgb.XGBClassifier(

n_estimators=400,

max_depth=4,                 # keep shallow; deep trees overfit credit data

learning_rate=0.05,

subsample=0.8,

colsample_bytree=0.8,

scale_pos_weight=(y_train == 0).sum() / (y_train == 1).sum(),

eval_metric=”auc”,

random_state=42

)

 

# Calibrate so that outputs behave as probabilities, not scores

clf = CalibratedClassifierCV(base, method=”isotonic”, cv=3)

clf.fit(X_train, y_train)

 

pd_hat_ml = clf.predict_proba(X_test)[:, 1]

print(“AUC:”, round(roc_auc_score(y_test, pd_hat_ml), 4))

Constraints in regulated PD estimation

Explainability. Certainly, SHAP values give local attributions and now appear as standard in model documentation. Still, a SHAP plot explains a prediction rather than a stable economic relationship. Supervisors reviewing an IRB or ECL model will ask whether each driver relates to PD monotonically and sensibly. Monotonic constraints (monotone_constraints in XGBoost) address this directly, so use them.

Overfitting on rare events. By definition, default is an imbalanced outcome. Otherwise, boosted trees will happily memorise the handful of defaulters in a training set. Time-series cross-validation and aggressive early stopping are therefore essential.

Instability under distribution shift. Unfortunately, tree ensembles extrapolate poorly. When macroeconomic conditions move outside the training range, a logistic model degrades gracefully. A boosted ensemble, by contrast, can fail abruptly.

One architecture recurs across Indian banks, and it is defensible. Gradient boosting runs the origination decision engine, where predictive power converts directly into approval quality. A logistic scorecard supplies the regulatory PD for capital and ECL. Teams then benchmark the scorecard against the ML model, confirming that no material discriminatory power goes unused.

 

Survival Analysis for Lifetime PD Estimation

As discussed, logistic regression answers a binary question over a fixed window. Default in twelve months: yes or no?

By contrast, survival analysis answers a richer one. When is default likely to occur? What is the instantaneous risk at each point in the loan’s life?

Naturally, that distinction became commercially important the moment lifetime ECL arrived. Specifically, Stage 2 assets require a PD term structure across the remaining maturity. Survival models produce exactly that, natively.

Hazard rates and survival curves

The hazard h(t) is the instantaneous default rate at time t, conditional on having survived to t. Correspondingly, S(t) — the survival function — is the probability of surviving beyond t. Cumulative PD to time t is then simply 1 − S(t). A lifetime PD therefore reads directly off the survival curve at loan maturity.

Kaplan-Meier estimation produces a non-parametric survival curve from observed default times. Critically, it handles censoring correctly. Loans that prepay, refinance, or remain performing at the data cut-off are censored, not non-defaults.

By contrast, a naive logistic setup treats a loan booked three months ago as a “non-default” observation. That choice systematically biases PD estimation downwards.

Cox proportional hazards

Accordingly, Cox regression extends the survival curve to covariates:

h(t | x) = h₀(t) · exp(β₁x₁ + … + βₖxₖ)

Here, the baseline hazard h₀(t) captures the shape of default timing across the portfolio. Covariates then shift risk multiplicatively.

from lifelines import KaplanMeierFitter, CoxPHFitter

 

kmf = KaplanMeierFitter()

kmf.fit(durations=df[“months_on_book”], event_observed=df[“defaulted”])

kmf.plot_survival_function()

 

cph = CoxPHFitter()

cph.fit(df[[“months_on_book”, “defaulted”, “ltv”, “dscr”, “vintage”]],

duration_col=”months_on_book”, event_col=”defaulted”)

cph.print_summary()

In practice, the payoff shows up in the seasoning curve. For example, Indian unsecured personal loan portfolios typically peak in hazard between months 9 and 18, then decline. A 12-month logistic PD cannot represent that shape at all. Over a five-year loan, the shape separates a defensible lifetime ECL from a guess.

 

How Macroeconomic Variables Affect PD Estimation

A PD model built on borrower characteristics alone assumes the economy of the training period repeats. In reality, it will not. Indeed, ECL under RBI’s directions and IFRS 9 explicitly requires forward-looking information. Macroeconomic conditioning is therefore no longer optional.

The Vasicek transformation

The standard approach links the portfolio’s observed default rate to macro drivers, then applies that relationship to forecast scenarios. Of the available vehicles, the Vasicek/Merton transformation is by far the most common:

PD(PIT, t) = Φ[ (Φ⁻¹(PD_TTC) − √ρ · Z_t) / √(1 − ρ) ]

Here Φ is the standard normal CDF, ρ is asset correlation, and Z_t is a systematic factor estimated from macro variables. A favourable macro environment, meaning positive Z, pulls PIT PD below the TTC level. Conversely, a downturn pushes it above.

Macro drivers that carry signal in Indian portfolios

  • Real GDP growth — the broadest indicator. It typically enters with a lag of two to four quarters, since credit stress follows activity rather than coinciding with it.
  • Policy rate and lending rate spreads — these matter most for floating-rate retail and MSME exposures. Here, a repo increase transmits directly to EMI burden.
  • CPI inflation — this compresses household surplus and drives unsecured retail delinquency.
  • Sector-specific series — IIP for manufacturing, residential price indices for mortgages, freight indices for commercial vehicle finance. Portfolio-relevant series consistently outperform generic aggregates.

Notably, the June 2026 FSR reinforces that last point. Despite a system average of just 1.8%, agriculture carried the highest sectoral GNPA ratio at 5.1%. An aggregate macro variable would miss exactly that kind of dispersion.

Two disciplines that matter more than variable choice

First, every coefficient must point in an economically defensible direction. For example, a model where higher GDP growth increases PD has found a spurious correlation. Therefore, drop the variable, regardless of its statistical significance.

Second, RBI’s ECL directions require probability-weighted scenarios: a baseline, an upside, and a downside, with documented weights. Because the relationship between macro factors and PD is convex, the probability-weighted ECL will exceed the ECL computed from the baseline alone. That convexity is a feature of the framework rather than an artefact.

 

How to Validate and Backtest a PD Model

A PD model is a regulated artefact. Accordingly, it needs evidence of discrimination, calibration, and stability, refreshed at least annually.

Discrimination: can the model separate defaulters from non-defaulters?

ROC and AUC. The ROC curve plots the true positive rate against the false positive rate across all cut-offs. In turn, AUC is the area beneath it.

At the floor, an AUC of 0.5 is random. Meanwhile, application scorecards typically land between 0.70 and 0.80. Meanwhile, behavioural models with repayment history commonly exceed 0.85. Anything above 0.95, however, should prompt a hunt for target leakage rather than celebration.

Gini coefficient. The industry’s preferred expression is simply Gini = 2 × AUC − 1.

Kolmogorov-Smirnov statistic. KS is the maximum vertical distance between the cumulative distributions of defaulters and non-defaulters. It answers a slightly different question from AUC: where in the score range does separation run strongest?

That question is operationally useful, since the answer often marks where the approval cut-off should sit. Generally, KS above 30 is acceptable for retail application models.

from scipy.stats import ks_2samp

ks = ks_2samp(pd_hat[y_test == 1], pd_hat[y_test == 0]).statistic

print(“KS:”, round(ks * 100, 2))

Calibration: are the predicted PD levels right?

Importantly, discrimination and calibration are independent properties. For example, a model can rank perfectly and still predict 2% where the true rate is 6%. That is fine for approval decisions, yet disastrous for ECL.

To test this, bin the portfolio by predicted PD. Compare predicted against observed default rates in each bin, then test the difference. The Hosmer-Lemeshow test and the binomial test per rating grade are the standard tools. Ultimately, persistent one-directional deviation across grades indicates a calibration problem rather than noise.

Stability: has the population moved?

Population Stability Index (PSI) compares the score distribution at development against the current book:

PSI = Σ (Actual% − Expected%) × ln(Actual% / Expected%)

Conventional thresholds run as follows. Below 0.10 is stable. Between 0.10 and 0.25 warrants monitoring. Above 0.25 signals a material shift requiring investigation.

Also compute PSI on individual drivers, not just the final score. After all, a stable overall score can conceal offsetting drifts in two underlying variables. Fortunately, the characteristic-level view catches them.

 

Choosing the Right PD Estimation Method

On the whole, no single approach to PD estimation is correct. Instead, the right choice depends on portfolio size, data depth, the horizon required, and the regulatory use the number will serve.

Matching method to portfolio

Broadly, historical default rates remain the sensible baseline for homogeneous portfolios. They are also the only viable route where defaults are too scarce to model.

Meanwhile, logistic regression is the default choice for regulatory PD. In a supervised environment, interpretability and stability are worth more than a marginal lift in Gini. Under IFRS 9, though, it is a starting point rather than a complete answer. Lifetime term structure, censoring, and PIT conditioning all sit outside what the regression itself estimates.

Similarly, machine learning earns its place where data is rich and non-linearity is real, provided outputs stay calibrated and monotonicity constrained. Survival analysis is less an alternative than a necessary complement, because lifetime PD term structures cannot be built from a 12-month binary model. Macroeconomic conditioning, meanwhile, is what turns any of them into a forward-looking estimate.

The road to April 2027

RBI’s ECL framework takes effect on 1 April 2027, with a glide path running to March 2031. Indian banks and NBFCs are therefore mid-way through a data and modelling build-out that will define credit risk practice for the next decade.

Unfortunately, institutions that treat this as a compliance exercise will produce models that pass validation and inform nothing. Conversely, those that treat it as a chance to understand their loan books properly will get both.

For the wider context in which PD sits, see our comprehensive guide to credit risk modeling, which sets out PD’s role alongside LGD and EAD. For the regulatory side, our Advanced Certificate in IFRS 9 Modeling covers ECL staging and provisioning in depth, while A Beginner’s Guide to Credit Risk Modelling is the right starting point for anyone newer to the subject.

 

Frequently Asked Questions About PD Estimation

What is PD estimation in credit risk?

In short, PD estimation quantifies the probability that a borrower will default over a defined horizon. The result is expressed between 0% and 100%. It is one of three inputs to expected loss, alongside Loss Given Default and Exposure at Default. In practice, it drives regulatory capital, loan pricing, credit approval decisions, and provisioning under IFRS 9 and RBI’s ECL directions.

Which PD estimation method is most accurate?

In practice, no single method wins across all portfolios. Admittedly, gradient boosting delivers the strongest discrimination on large retail books with rich behavioural data, often 3 to 8 Gini points above a logistic scorecard.

However, rank ordering is not the only requirement. Equally, regulatory PD must stay interpretable, stable, and calibrated. On balance, logistic regression usually wins on that combined test. That is why it remains the industry standard for capital and ECL despite lower raw predictive power.

What is the difference between 12-month PD and lifetime PD?

A 12-month PD is the probability of default within one year from the reporting date. Notably, Basel capital and IFRS 9 Stage 1 assets both use it.

A lifetime PD is the cumulative probability of default over the remaining contractual life of the exposure. Conversely, Stage 2 and Stage 3 assets require it. Importantly, you cannot derive lifetime PD by scaling the 12-month figure, because default hazard varies with loan seasoning.

What is a good AUC or Gini for a PD model?

For application scorecards, an AUC between 0.70 and 0.80 is typical and acceptable. Equivalently, that corresponds to a Gini of 0.40 to 0.60. Behavioural models with repayment history routinely exceed 0.85.

However, an AUC above 0.95 usually signals target leakage, meaning a variable in the model encodes the outcome. Investigate before deployment rather than celebrating.

How often should a PD model be validated?

At minimum, annually. Specifically, validation should cover discrimination (AUC, Gini, KS), calibration (predicted versus observed default rates by grade), and stability (PSI on the score and on individual characteristics).

Additionally, more frequent monitoring is warranted after material changes to underwriting policy, product mix, or macroeconomic conditions. Under RBI’s ECL directions, model validation sits within a three-tier model risk management structure spanning business, risk, and audit functions.

 

Ready to Build These Skills Hands-On?

Understanding the theory behind PD, LGD, and EAD is the first step. Building bankable, interview-ready models — in Python or SAS, on real credit datasets, aligned to Basel and IFRS 9 — is what actually moves a career forward.

Explore Dexlab Analytics’ Credit Risk Modeling certification program to build PD, LGD, and EAD models from scratch, work through IFRS 9 ECL frameworks, and learn model validation techniques used by practicing risk teams.

 


.

Credit Risk in Indian Banking: RBI Data Analysis

Credit Risk in Indian Banking: What RBI’s Data Actually Shows

Every risk professional in Indian banking eventually asks the same question: is credit risk actually improving, or does it just look that way in aggregate numbers? Based on the Reserve Bank of India’s own published data, the answer is both. System-wide asset quality has genuinely strengthened over the past five years. But the composition of that risk is shifting in a direction that deserves closer attention.

This piece works through RBI’s Financial Stability Reports (FSR), sectoral credit data, and the newly finalized Expected Credit Loss (ECL) framework. Together they show what’s really happening with credit risk in Indian banking between 2020 and 2025. It does not rely on a proprietary survey or projected estimates dressed up as findings. In fact, every figure below is sourced directly to a named RBI report. That distinction matters: in a domain where regulators, auditors, and rating agencies check your numbers, credibility is the entire product.

Three questions structure the analysis. How has aggregate asset quality moved since the 2020 pandemic shock? Where is risk concentrating today, even as headline numbers improve? And what does the incoming ECL regime signal about how Indian banks will need to manage credit risk going forward?

Methodology and Data Sources

This analysis draws on primary RBI publications, cross-checked across multiple reporting periods for consistency.

RBI Financial Stability Reports (FSR): Published twice yearly. They consolidate Gross NPA (GNPA) and Net NPA (NNPA) ratios of Scheduled Commercial Banks (SCBs), capital adequacy (CRAR), bank-group-wise asset quality, and stress test results. Specifically, this piece uses FSR editions from January 2021 through December 2025.

RBI Sectoral Deployment of Bank Credit data: Monthly data on credit growth to industry, services, agriculture, and personal loans. It’s sourced from 41 banks representing roughly 95% of non-food credit.

RBI’s ECL framework releases: The draft ECL directions (October 2025) and final directions (April 2026). These describe the shift from incurred-loss to forward-looking PD/LGD/EAD-based provisioning, effective April 1, 2027.

One scope note: RBI does not publish a standardized “default rate by loan product” table. Where this article cites loan-category or bank-group figures, they are GNPA ratios: the share of gross advances classified as non-performing. It’s the metric RBI itself uses, and the one directly comparable across periods.

Finding 1: Asset Quality Has Improved for Five Consecutive Years

SCB GNPA: from 8% to 2.1% in five years

 

PeriodGNPA RatioNNPA RatioSource
March 20208.4%RBI FSR, Jan 2021
September 20207.5%RBI FSR, Jan 2021
March 20242.8%0.6%RBI FSR, Jun 2024
March 20252.3%0.5%RBI FSR, Jun 2025
September 20252.1%–2.2%RBI FSR, Dec 2025
March 2027 (projected, baseline)1.9%RBI FSR, Dec 2025

 

RBI’s January 2021 report recorded a September 2020 GNPA ratio of 7.5%, down from 8.4% in March 2020. That was a system still absorbing the pandemic shock. GNPA had fallen to 2.8% by June 2024, then to 2.3% by March 2025. It touched a multi-decade low of 2.1% by September 2025, and RBI projects further improvement to 1.9% by March 2027 under its baseline scenario.

In practice, this reflects five years of balance sheet cleanup: post-IBC resolution of legacy corporate stress, tighter underwriting after the 2018–2020 NBFC stress episode, and stronger capital buffers overall. Meanwhile, system-wide CRAR remains comfortably above regulatory minimums, with public sector banks at 16% and private banks at 18.1% as of September 2025.

In short, aggregate GNPA is a lagging confirmation of underwriting discipline, not a leading indicator. A PD model trained mainly on 2020–2022 stressed data will overstate current default risk. One trained only on 2023–2025 benign data risks understating tail risk in the next downturn.

Explore our Credit Risk Modeling Certification Training for a structured approach to PD estimation across credit cycles.

Finding 2: Improvement Isn’t Even Across Bank Groups

PSBs are catching up fast

For instance, PSB GNPA fell sharply from 3.7% in March 2024 to 2.8% in March 2025. Meanwhile, private bank GNPA held roughly stable at 2.8% over the same period, and foreign banks improved from 1.2% to 0.9%.

Even so, this convergence matters. For most of the post-2015 asset-quality-review era, PSB asset quality lagged private banks significantly, largely on corporate exposures. That gap has now nearly closed at the aggregate level. However, remaining risk differs by bank group, which leads to the more consequential finding below.

Finding 3: Unsecured Retail Is Where New Risk Concentrates

The retail risk hiding inside a good headline number

This is the most important finding for practitioners, because it sits underneath the reassuring headline number. According to RBI’s December 2025 FSR, roughly 53.1% of retail loan slippages now originate from unsecured products like personal loans and credit cards. At private banks, unsecured loans account for nearly 76% of fresh slippages. GNPA on unsecured retail loans stood at 1.8%, versus 1.1% for overall retail advances.

In other words, the 2.1% aggregate GNPA figure blends a very clean secured/corporate book with a smaller, faster-deteriorating unsecured retail book. RBI flagged this as a fintech-adjacent risk, tied to fast credit growth in small-ticket personal loans to borrowers under 35 through digital lending channels.

This pattern, in fact, tracks with operational experience. Unsecured lending has weaker recovery mechanics (no collateral to liquidate, higher LGD), shorter behavioral history on new-to-credit borrowers, and faster origination cycles that compress underwriting review. Moreover, it is the segment where forward-looking provisioning matters most, since unsecured risk builds up quietly between formal NPA recognition points.

As a result, portfolio-level GNPA alone is no longer sufficient. Overall, segment-level GNPA and vintage curves for unsecured retail belong alongside the aggregate number in any board-level risk dashboard.

Finding 4: ECL Will Formalize This Shift

Why the 2027 ECL shift matters here

RBI has issued directions introducing forward-looking ECL provisioning, replacing the incurred-loss model. It takes effect April 1, 2027, for scheduled commercial banks excluding RRBs, Small Finance Banks, and payments banks. ECL provisioning must be based on a bank’s own historical PD and LGD data spanning at least five years, subject to RBI-specified floors. Accounts 30–90 days past due move into Stage 2, a materially earlier trigger than the current framework.

Overall, the shift aligns India’s prudential norms with global IFRS 9 standards. In addition, it requires closer integration between finance and risk functions, as forward-looking macroeconomic scenarios become a formal input to provisioning.

Indeed, this is a direct regulatory response to Finding 3. An incurred-loss model recognizes impairment only after default has effectively occurred. ECL requires estimating expected loss, via PD, LGD, and EAD, well before that point, catching unsecured deterioration earlier in the cycle.

Even so, for banks building this capability, it isn’t a compliance task to fully outsource. RBI has explicitly made a bank’s board and senior management responsible for the adequacy of the ECL framework. Consequently, internal teams need working fluency in PD/LGD/EAD construction, not just the ability to read vendor output. However, it’s worth noting that the standard formula, Expected Loss = PD × LGD × EAD, assumes independence between the three components. In practice they’re correlated: LGD tends to rise in the same downturns that push PD higher. That’s why RBI’s stress tests apply adverse scenarios jointly rather than multiplying baseline figures in isolation.

What This Means for Banks and Risk Teams

  • First, aggregate GNPA improvement is real but incomplete. Segment-level monitoring, especially for unsecured retail, deserves as much attention as the headline ratio.
  • PD/LGD model recency matters. RBI’s own five-year minimum spans both a stressed period (2020–2021) and a benign one (2023–2025). Models need to represent both.
  • Collateral still matters, but isn’t the whole story. Unsecured products drive a disproportionate share of new slippages. In turn, this argues for tighter underwriting in that segment, not a wholesale retreat from unsecured lending.
  • Finally, the 2027 ECL deadline is closer than it looks. In practice, building five years of clean PD/LGD data and validation capability is a multi-year undertaking. Banks starting in 2026 are already behind institutions that began in 2024–2025.
  • Recovery rate discipline matters for LGD. LGD = 1 − Recovery Rate only holds up when ‘recovery rate’ is the economic, discounted, net-of-cost rate, not the nominal amount eventually collected.

Explore our Credit Risk Modeling Certification Training to build PD, LGD, and EAD modeling skills ahead of the 2027 ECL transition, or see Understanding Credit Risk: Definition and Types for foundational concepts referenced throughout.

FAQ

What is the current GNPA ratio of Indian banks?

As of September 2025, SCB GNPA stood at 2.1%, a multi-decade low, per RBI’s December 2025 Financial Stability Report.

Is unsecured lending riskier than secured lending right now?

Yes, and the gap is widening. Unsecured retail GNPA was 1.8% versus 1.1% for overall retail advances, and unsecured products drove over half of all retail slippages.

When does RBI’s ECL framework take effect?

RBI’s ECL Directions were issued 27 April 2026 and take effect April 1, 2027. They apply to commercial banks, excluding small finance banks, payments banks, and local area banks.

Does EL = PD × LGD × EAD fully capture expected loss?

It’s the standard starting formula, but it assumes PD, LGD, and EAD move independently. In stress, they’re correlated — which is why RBI applies adverse scenarios jointly rather than multiplying baseline values.

Conclusion

The data supports a measured conclusion, not a triumphant one. Indeed, Indian banking’s asset quality genuinely improved for five straight years, and RBI’s own numbers back that up without embellishment. However, the same data shows risk isn’t disappearing. Instead, it’s relocating toward unsecured retail lending, addressed through a regulatory shift that will demand more rigorous PD, LGD, and EAD modeling capability than most institutions currently have in-house. For risk analysts, credit officers, and model validators, that combination is telling: improving headline numbers alongside a harder compliance mandate. It’s exactly why 2025–2027 is a build-capability window, not a wait-and-see one.

This analysis is based on RBI’s Financial Stability Reports, Sectoral Deployment of Bank Credit data, and RBI’s ECL Directions (2025–2026). Figures are reported as published at the cited dates; readers should consult original RBI releases for the most current data.

 

Ready to Build These Skills Hands-On?

Understanding the theory behind PD, LGD, and EAD is the first step. Building bankable, interview-ready models — in Python or SAS, on real credit datasets, aligned to Basel and IFRS 9 — is what actually moves a career forward.

Explore Dexlab Analytics’ Credit Risk Modeling certification program to build PD, LGD, and EAD models from scratch, work through IFRS 9 ECL frameworks, and learn model validation techniques used by practicing risk teams.

 


.

What is Credit Risk? Understanding Credit Risk Definition and Types

Understanding Credit Risk: Definition and Types

Introduction

In March 2021, a little-known family office called Archegos Capital Management defaulted on margin calls from its banks. Within days, Credit Suisse lost $5.5 billion. Nomura lost close to $2.5 billion. Morgan Stanley and UBS lost roughly $1 billion and $774 million. Combined, global banks lost more than $10 billion — not because of a market crash, but because of one counterparty’s concentrated, hidden leverage.

That’s credit risk in its purest form. It’s the possibility that someone you’ve extended money or exposure to won’t pay it back, and the cascading damage that follows when large exposures go bad at once.

Most people equate credit risk with loan defaults. That’s only part of the picture. Credit risk shows up in derivatives, trade settlements, corporate bonds, and interbank lending. It appears anywhere one party depends on another to deliver.

This guide breaks down what credit risk actually means. It covers the distinct types every risk professional needs to recognize, and how banks measure and manage it in practice, in India and globally.

What is Credit Risk?

Credit risk is the possibility that a borrower or counterparty fails to meet a financial obligation, causing a loss to the lender. That’s the formal definition. In plain terms: it’s the risk that you lend money, extend credit, or enter a contract with someone, and they don’t hold up their end.
The Reserve Bank of India’s Guidance Note on Credit Risk Management frames it more precisely. Credit risk can be an individual transaction risk — the chance that one specific loan goes bad. Or it can be a portfolio risk, which looks at how credit losses behave in aggregate across a bank’s book. A single bad loan is a manageable, expected cost of doing business. Thousands of correlated bad loans, going bad at once because they share a common vulnerability, is a solvency event.

Credit risk isn’t limited to banks lending to individuals or businesses. It appears in:

  • Loans and advances — the most familiar form, where a borrower fails to repay principal or interest
  • Bonds and fixed-income securities — where an issuer defaults on coupon payments or principal at maturity
  • Derivatives contracts — where a counterparty can’t meet its obligations under a swap, option, or forward
  • Trade finance and settlement — where one party in a transaction fails to deliver cash or securities as agreed
  • Guarantees and letters of credit — where a bank stands behind another party’s obligation and gets called on to pay

Under the Basel framework, credit risk-weighted assets typically make up the largest share of the capital a bank must hold. That’s larger than market risk or operational risk combined, for most commercial banks. This is why understanding credit risk isn’t a niche specialty. It’s the foundation most of banking risk management sits on.

Types of Credit Risk

Credit risk isn’t one uniform threat. RBI’s own framework splits transaction-level credit risk into default risk and rating migration risk. It splits portfolio-level risk into intrinsic risk and concentration risk. Layered on top of that, banking practice recognizes several distinct sub-types worth understanding individually. Three matter most for anyone building a working knowledge of the field: counterparty risk, concentration risk, and settlement risk.

The distinction isn’t academic. Each type demands a different measurement approach, a different mitigation strategy, and often a different team within a bank’s risk function. A credit officer underwriting a retail loan thinks primarily about default risk on that single borrower. A treasury desk trading derivatives thinks primarily about counterparty risk and daily mark-to-market exposure. A chief risk officer reviewing the whole institution thinks about concentration across the entire book. Does the bank have too much riding on one sector, one region, or one large group of related borrowers? Confusing these categories, or managing them with a single generic framework, is exactly how risks that look small individually compound into something systemic.

Counterparty Risk

Counterparty risk is the risk that the other party in a financial contract fails to fulfill their side of the deal. This isn’t a traditional borrower — it’s a trading or derivatives counterparty. It’s especially relevant in derivatives, securities lending, and prime brokerage relationships. There, exposure isn’t a fixed loan amount. It’s a fluctuating mark-to-market value.

The Archegos collapse is the clearest recent illustration. Archegos used total return swaps to build enormous, concentrated positions in a small number of stocks. It never owned the shares directly, and never disclosed the size of its bets. Its prime brokers — Credit Suisse, Nomura, Morgan Stanley, Goldman Sachs, and UBS — each saw only their own slice of Archegos’s exposure. None had visibility into the full picture. When the fund’s portfolio value fell roughly 30% in four days in March 2021, it couldn’t meet margin calls. Its brokers had to liquidate billions of dollars in positions simultaneously. Those unable to exit fast enough absorbed massive losses.

Analysts who studied the collapse point to a specific, technical failure mode: wrong-way risk. This occurs when a bank’s exposure to a counterparty grows precisely as that counterparty’s ability to pay deteriorates. Archegos’s swap exposure ballooned in tandem with its portfolio’s decline. The worse things got, the more the banks were owed, and the less able Archegos was to cover it. The European Central Bank later reviewed 23 major banks’ derivatives exposures. It found “material shortcomings” in how counterparty credit risk was governed across the industry.

Concentration Risk

Concentration risk arises when a bank’s credit exposure clusters too heavily around a single borrower, sector, geography, or risk factor. Diversification is supposed to protect a lender. If one borrower fails, the loss should be a small fraction of the total book. Concentration undermines that protection entirely.

Archegos illustrates this too, in a second way. The fund’s own portfolio was concentrated in a handful of technology and media stocks. When those specific names fell, there was no offsetting position to cushion the blow. The losses hit every position at once. Banks face the mirror image of this problem in lending. Heavy exposure to one industry, real estate for instance, or one large corporate group, means a single sector downturn can impair a disproportionate share of the loan book. RBI’s prudential framework directly addresses this. It sets single-borrower and group-borrower exposure limits specifically to prevent Indian banks from building the kind of concentrated exposure that made Archegos so dangerous to its lenders.

Settlement Risk

Settlement risk is sometimes called Herstatt risk, after the 1974 collapse of Bankhaus Herstatt. It’s the risk that one party in a transaction delivers its side — cash or securities — while the counterparty fails to deliver theirs. This typically happens because of timing gaps, or the counterparty’s failure between trade execution and final settlement. Herstatt was shut down by German regulators mid-day. By then it had already received Deutsche Mark payments from counterparties, but it hadn’t yet sent back the US dollars it owed in return. Banks on the other side of those foreign exchange trades lost their payments outright.

That single event reshaped global payments infrastructure. It led directly to the creation of CLS Bank, a settlement system designed specifically to eliminate this timing gap in foreign exchange transactions. CLS does this by settling both legs of a trade simultaneously. Settlement risk remains a live concern anywhere payment and delivery aren’t simultaneous. It’s a reminder that credit risk isn’t only about long-term loans — it can materialize in a transaction that’s supposed to finish within hours.

Default Risk Explained

Default risk sits at the center of every credit risk framework. It’s the risk that a borrower simply stops paying. Understanding what causes defaults, and how professionals frame the probability of one occurring, is foundational to everything else in credit risk modeling.

It’s also the oldest form of credit risk banks have grappled with. Long before derivatives, prime brokerage, or cross-border settlement systems existed, lenders were already trying to predict which borrowers would repay and which wouldn’t. Every other risk type covered in this guide is, in some sense, a more specialized variant of the same underlying question: will the party on the other side of this transaction deliver what they owe? Default risk asks that question in its most direct form, applied to a straightforward loan or credit exposure.

What Causes Defaults

Defaults rarely happen for one isolated reason. They typically result from a mix of factors:

  1. Cash flow deterioration. A borrower’s income or business revenue falls below what’s needed to service debt. For individuals, this might mean job loss. For corporates, it might mean a demand shock or margin compression.
  2. Over-leverage. A borrower takes on more debt than their income can realistically support, leaving no buffer when conditions turn even mildly unfavorable.
  3. Macroeconomic shocks. Recessions, interest rate spikes, or sector-wide downturns push otherwise healthy borrowers into distress simultaneously — the mechanism behind concentration risk turning into realized losses.
  4. Governance and fraud. Misrepresented financials, diverted funds, or outright fraud can turn an apparently strong borrower into a default risk overnight. Archegos itself is a governance case as much as a market one — Bill Hwang was later convicted on fraud and racketeering charges tied to how the fund misled its own counterparties about position size and concentration.
  5. Willful default. Occasionally, a borrower who can pay simply chooses not to, usually when the cost of default (reputational or legal) is judged lower than the cost of repayment.

The Probability Framework

Rather than treating default as a binary surprise, credit risk professionals model it as a probability. A Probability of Default (PD) is expressed as a percentage likelihood that a borrower defaults within a defined time horizon, typically 12 months for regulatory purposes. A PD of 2% doesn’t mean a specific borrower is “slightly risky.” It means that, across a large pool of similar borrowers, roughly 2 in 100 are expected to default within that window.

This probabilistic framing matters. It converts an unpredictable individual event into something a bank can price, provision for, and manage at portfolio scale. Building a reliable PD estimate is a discipline in its own right — deciding which borrower characteristics matter, which statistical technique to use, and how to validate the result. We cover the full methodology, including logistic regression and survival analysis, in our detailed guide to PD estimation.

What matters at this stage is the underlying logic: default isn’t modeled as a yes/no outcome for an individual borrower. It’s modeled as a rate across a population, calibrated against historical data and adjusted for current conditions.

Credit Risk in International Banking

Credit risk doesn’t stop at national borders, and neither does its regulation. Two frameworks matter most for anyone working in or around Indian banking. One is the International Accounting Standards Board’s approach to credit loss recognition. The other is RBI’s domestic prudential framework.

Why does a domestic Indian bank need to care about an international accounting standard? Because capital markets are global, even when a bank’s loan book isn’t. Foreign investors, rating agencies, and cross-border lenders all benchmark a bank’s provisioning and capital adequacy against international norms, whether or not that bank operates outside India. A framework that looks conservative by domestic standards can still look under-provisioned by global standards. That gap shows up directly in borrowing costs, credit ratings, and investor confidence.

The IASB and IFRS 9

The International Accounting Standards Board (IASB) issued IFRS 9 specifically to fix a weakness exposed by the 2008 financial crisis. The old “incurred loss” model only recognized credit losses after a default had already happened — by which point it was too late for provisions to cushion the blow. IFRS 9 replaced that with an Expected Credit Loss (ECL) model. It requires banks to recognize losses based on forward-looking estimates, before default occurs. IFRS 9 has been adopted across more than 140 jurisdictions worldwide, making it one of the most widely applied accounting standards in global banking.

RBI’s Framework and India’s ECL Transition

India has historically run on a different system: the Income Recognition and Asset Classification (IRAC) norms. These classify loans as standard, sub-standard, doubtful, or loss, based on how many days they’re overdue, and provision accordingly. That’s closer to the old “incurred loss” approach IFRS 9 was designed to replace.

That’s now changing. RBI has confirmed that an ECL-based provisioning framework, with prudential floors, will apply to all Scheduled Commercial Banks from April 1, 2027. Under the new norms, banks will classify financial assets into Stage 1, Stage 2, or Stage 3. That classification depends on assessed credit losses at initial recognition, and at each subsequent reporting date — directly mirroring the IFRS 9 structure used globally.

RBI has also been actively updating its credit risk rules to align with Basel Committee on Banking Supervision (BCBS) standards. In 2026, it revised its counterparty credit risk framework specifically to bring India’s derivatives exposure measurement closer to global norms. That’s a change regulators internationally have prioritized in the years following the Archegos collapse. India’s Capital-to-Risk-Weighted-Assets Ratio (CRAR) requirement of 9% for scheduled commercial banks also exceeds the 8% global Basel III minimum. That reflects RBI’s consistently more conservative capital stance relative to international baselines.

Measuring Credit Risk

Defining and categorizing credit risk only gets a risk team so far. Managing it requires quantifying it — turning a qualitative concern into numbers that inform pricing, provisioning, and capital decisions. Four metrics form the core toolkit.

Probability of Default (PD)

As covered above, PD is the percentage likelihood that a borrower defaults within a set time horizon. It’s typically estimated through logistic regression or survival analysis, using historical repayment data, bureau scores, and financial ratios as inputs. PD is the starting point for nearly every downstream credit risk calculation.

Loss Given Default (LGD)

Default doesn’t automatically mean total loss. LGD measures the proportion of exposure a lender expects to actually lose after accounting for recoveries — collateral liquidation, guarantees, or restructuring. Getting LGD right requires more care than it first appears. It has to reflect the economic recovery rate, discounted for the time value of money and net of recovery costs — not just the raw cash eventually collected. A recovery that takes three years to materialize is worth meaningfully less than the same amount recovered immediately.

Credit Ratings

Credit ratings translate a borrower’s creditworthiness into a standardized letter grade, from investment-grade (AAA down to BBB-) to speculative or junk grades below that. In India, these come from agencies like CRISIL, ICRA, and CARE; internationally, from S&P, Moody’s, and Fitch. Ratings aren’t a substitute for internal PD modeling. But they serve two practical purposes. They give banks an independent, externally validated view of risk. And they directly feed into regulatory risk-weighting under the Basel Standardised Approach, where a lower rating translates into a higher capital charge against that exposure.

Expected Loss and Exposure at Default (EAD)

Exposure at Default (EAD) measures how much a lender is actually on the hook for at the moment a default happens. For revolving credit like credit cards, this can run higher than the current outstanding balance, since distressed borrowers often draw down more of their available limit before defaulting. Combining EAD with PD and LGD produces Expected Loss (EL) — the amount a bank should provision for a given exposure on average. It’s worth noting this combined figure is a standard industry simplification. It assumes PD, LGD, and EAD move independently, which understates risk in downturns, when all three tend to move against the lender simultaneously. Regulators address this specific gap by requiring “downturn” LGD and EAD estimates, rather than accepting benign-cycle averages alone.

Used together, these four metrics let a bank move from “this borrower feels risky” to a specific number. That number can be priced into a loan, provisioned for on the balance sheet, and reported to regulators with a defensible methodology behind it.

Conclusion

Credit risk is broader and more structured than “will this loan get repaid.” It spans counterparty exposure in derivatives, concentration across a portfolio, settlement timing in payments, and default at the level of an individual borrower. Each has distinct causes, distinct historical failures, and distinct measurement approaches. Understanding what is credit risk at this level of detail is the foundation every subsequent risk modeling technique builds on, from PD estimation through to full expected-loss calculation.

The Archegos collapse, the 2027 shift to ECL-based provisioning in India, and RBI’s ongoing alignment with Basel counterparty risk standards all point to the same conclusion. Credit risk management is not static. It evolves in direct response to the failures that expose its gaps.

Explore our Credit Risk Modeling Certification Training to master Risk Analytics. Build the PD, LGD, and EAD models covered here from scratch. Work through India’s transition to ECL provisioning, and learn the model validation techniques practicing risk teams use every day.

 


.

How Data Analytics Influences Holiday Retail Experience [Video]

Thanksgiving was right here! Half of the globe witnessed some crazy shopping kicking off the entire holiday season, and retailers had a whale of a time, offering luscious discounts and consumer gifts at half the prices.

 
How Data Analytics Influences Holiday Retail Experience
 

Before the weekend Thanksgiving sale, 69% of Americans, close to 164 million people across the US were estimated to shop– and they had planned to shell out up to 3.4% more money as compared to last year’s Black Friday and Cyber Monday sale. The forecasts came from National Retail Federation’s annual survey, headed by Prosper Insights & Analytics.

Continue reading “How Data Analytics Influences Holiday Retail Experience [Video]”

Risk Analytics Market: Serious Growth Rate Projection for 2017-2021

Want to get to the core of understanding risk within various business frameworks? The answer is Risk Analytics. This new breed of data analytics facilitates organizations in precisely defining, recognizing and managing their risk, and its need is going to increase in the coming few years. New developments in risk analytics are gaining limelight and bringing a notable transformation in the market, while enhancing its overall capability.

 
Risk Analytics Market: Serious Growth Rate Projection for 2017-2021
 

Recently, a team of analysts had eureka moment – they introduced a new concept of real-time risk analytics – it is nothing but a modern, more advanced version of traditional risk analytics methods. Here, the prediction is based on real-time data – it processes, examines and determines risk all on a real-time basis – hence top notch financial institutions are putting real-time risk analytics to best use to manage and mitigate associated risks. Several asset management, portfolio management and hedge fund firms, and investment banks are relying on this mode of risk analytics to modify their operating principles to play in accordance with investment and market shifts.

Continue reading “Risk Analytics Market: Serious Growth Rate Projection for 2017-2021”

Call us to know more