RBI CRILC Reporting: What Lenders See When Your Account Is Red-Flagged

TL;DR

• CRILC is RBI shared ledger of large borrower exposures. When your account is red-flagged, the flag lands here, and every lender appraising you reads it.
• Two thresholds run side by side. Red-flagged accounts go to CRILC at Rs 3 crore aggregate fund plus non-fund exposure, within seven days. General large-credit reporting runs at Rs 5 crore, monthly, with a weekly Friday line for defaults.
• You cannot log into CRILC or delete your own entry. Only the reporting bank updates it. Ask in writing, keep the paper, and know which direction clause the bank is quoting.

Here is the sentence that matters most on this page. A red flag on your loan account does not stay inside your branch. It travels. Within seven days of the flagging decision, your bank reports the status to CRILC, the Central Repository of Information on Large Credits, and from that moment every lender in the system can read it while appraising you. Your next sanction, your renewal, your working-capital review: the flag is in the room before you walk in.

Most borrowers discover this in reverse. The lender asks an odd question about an old account, or the renewal stalls, and only then does the borrower learn that a flag filed months ago is sitting in a shared database. This guide flips that order. It shows you exactly what CRILC is, what lenders see about you in it, which threshold applies to your account, the clocks that move the data, and what you can and cannot get removed. The RFA definition and the week-by-week flagging playbook live in the companion guides; this one is about the ledger itself. If you need the flagging sequence, read what a red-flagged account is and what happens next first.

What is CRILC, in one paragraph?

CRILC is the Central Repository of Information on Large Credits, a database RBI set up in 2014 (circular RBI/2013-14/601, dated 22 May 2014) to collect large borrower exposures from lenders and share them back across the system. Banks report borrower exposures into it. Banks read it when they appraise, monitor, and review the same borrowers. Think of it as the shared memory of the banking system for large accounts. Your bank private knowledge about your conduct becomes system knowledge the day the report is filed.

Two things flow through CRILC, and mixing them up is the single most common mistake in online explanations. The first is exposure information: who owes how much, to whom, and whether the account is standard, SMA, or in default. The second is status information under the fraud framework: whether an account has been red-flagged, and later whether it was classified as fraud or cleared. Different thresholds. Different clocks. Different meaning for your next loan. The rest of this page keeps them separate.

What does a lender actually see about you in CRILC?

A lender pulling your CRILC record at sanction time sees a consolidated picture built from every reporting lender filings. The July 2024 fraud directions say banks shall make effective use of the CRILC database. "Shall" is direction language: mandatory on the bank. In practice the pull shows your exposure lines lender by lender, the SMA band if any overdue exists, whether any lender has reported you in default, and, at Rs 3 crore aggregate and above, whether any lender has red-flagged your account or classified it as fraud.

Here is what that means for a borrower walking into a sanction meeting. The officer already knows three things before you open your file. How much you owe across the system, not just to that bank. Whether any lender has you in SMA or default. And whether any lender has flagged your account under the fraud framework. This is why the credit appraisal process treats the bureau and CRILC checks as non-negotiable steps: the direction admits no local waiver, and no relationship with a manager skips the screen.

One boundary to hold. CRILC is a reporting database, not a credit bureau. You cannot pull your own CRILC report the way you pull a CIBIL report. There is no borrower login, no dispute window inside CRILC itself. Corrections travel only through the lender that filed the report. That asymmetry is the whole of the removal section at the end of this page.

Which CRILC threshold applies to my account: Rs 3 crore or Rs 5 crore?

Both exist, and they do different jobs. The Rs 3 crore line is the fraud-framework line: it decides whether a red-flagged account is reported to CRILC within seven days. The Rs 5 crore line is the general large-credit line: it decides whether your exposure sits in the routine CRILC reporting at all. An account can cross one without crossing the other, and the consequences are completely different.

The arithmetic that decides your row is the aggregation. The Rs 3 crore fraud line is explicitly fund-based plus non-fund-based exposure. Cash credit and term loans count. Letters of credit and bank guarantees count too. A borrower with Rs 2.10 crore of fund-based limits and Rs 1.20 crore of LC and BG lines has Rs 3.30 crore of aggregate exposure, and sits above the fraud-framework line even though neither bucket crosses it alone. The workbook below runs exactly this aggregation on your numbers.

The modal wording is worth reading precisely, because it answers the "is this mandatory" question. Para 3.3.4 of the 2024 directions: an account meeting the CRILC reporting threshold, once red-flagged, shall be reported to the Reserve Bank within seven days of being red-flagged. Footnote 11 pins the threshold: aggregate fund-based and non-fund-based exposure of Rs 3 crore and above for reporting red-flagged accounts and frauds. Para 4.1.3 repeats the clock with "immediately (not later than seven days from date of classification as red-flagged account)." Shall plus a day count is a mandate, not a suggestion.

One more distinction the table implies but deserves stating. A red flag is not a default. The direction says the decision to classify "any account, either standard or NPA" as red-flagged sits at the individual bank level. A standard account, paying on time, can be red-flagged on conduct suspicion alone. That is why the Rs 3 crore line can bite borrowers who think of themselves as clean: cleanliness of repayment does not switch off the fraud framework. The fraud directions decoder maps the full EWS-to-flag sequence if you want the mechanics.

When does the 7-day clock actually start?

The clock starts on the date of the flagging decision, not on the day the bank first noticed something odd. The direction runs the seven days from the date of classification as a red-flagged account, and separately from the date of being red-flagged. In practice that means the internal approval that says "this account is now an RFA" starts the count. Everything before that, the EWS alert, the examination, the internal discussion, runs on the bank preferably-30-day turnaround for alert examination. Those are different clocks for different stages, and the seven-day one is the shortest and the most binding.

Work it backwards from a calendar. If the bank competent authority classifies the account as red-flagged on 4 March, the CRILC report must be filed by 11 March. Not the next monthly cycle. Not when the audit finishes. The direction says "immediately (not later than seven days)", which means filing on day two is compliant and filing on day eight is not. The workbook computes this date from any flagging date you enter, plus the 180-day decision deadline that starts from the first CRILC report.

Borrower move, and it costs nothing. Ask your bank, in writing, for two dates: the date of classification as red-flagged, and the date of the CRILC report. Those two dates fix the entire downstream calendar, including the 180-day outer clock for the fraud-or-removal decision. A bank that cannot produce them has a process problem you can use.

What are the other CRILC reporting clocks?

Three rhythms share the database. The weekly rhythm: lenders report every borrower entity in default with aggregate exposure of Rs 5 crore and above at the close of business on every Friday, or the preceding working day if Friday is a holiday. The monthly rhythm: the CRILC-Main Report, covering all borrower entities at Rs 5 crore and above, including SMA classification, filed every month since 1 April 2018. The event rhythm: the seven-day RFA and fraud-status report, which fires on the flagging decision regardless of where the week or month stands.

Notice what this means for visibility. A default at Rs 5 crore is visible system-wide within a week through the Friday line. An SMA-2 tag rides the monthly report. A red flag at Rs 3 crore arrives in seven days through the event line. Your lender does not wait for a reporting cycle to tell the system about a flag. The system learns fast, which is exactly why the EWS pillar treats the first thirty days after an alert as the decisive window.

Does an SMA tag or a default automatically red-flag my account?

No. These are separate axes that happen to share a database. SMA tracks repayment delay: SMA-0 for 1 to 30 days overdue, SMA-1 for 31 to 60, SMA-2 for 61 to 90. Default and SMA flow into CRILC through the Rs 5 crore monthly and weekly lines. A red flag tracks suspicion of fraud, and flows through the Rs 3 crore seven-day line. One axis measures whether you paid. The other measures whether the bank suspects how you behaved.

The practical overlap is where borrowers get hurt. A borrower in SMA-2 at Rs 4 crore aggregate is on CRILC through the monthly report, but below the Rs 5 crore line and, absent a flag, invisible to the fraud line. The same borrower at Rs 3.30 crore aggregate with an RFA is on CRILC through the seven-day line with a fraud-suspicion tag attached, which reads far worse at the next sanction. Repayment stress is ordinary business risk. A flag is suspicion of wrongdoing. Lenders price them differently, and the IRAC decoder explains why the SMA side alone already decides your asset classification.

My lender is an NBFC or a cooperative bank. Does CRILC reporting apply?

It depends on which lender and which line. For NBFCs, including housing finance companies, the answer on the fraud line is no. RBI 2024 fraud directions for NBFCs (RBI/DOS/2024-25/120, same date as the bank directions) build an EWS-only framework with no red-flagged-account concept and no CRILC reporting line at all. I checked the full text for the word CRILC. It appears zero times. NBFCs report fraud through Fraud Monitoring Returns and to law enforcement, not through CRILC status flags. Your NBFC loan does not put an RFA tag into the shared database, because the instrument gives NBFCs no such tag to file.

For cooperative banks, the exposure line does apply at scale. Large urban cooperative banks, those with total assets of Rs 500 crore and above, report exposures of Rs 5 crore and above to CRILC on a quarterly basis. The RBI 2026 fraud directions for urban cooperative banks, issued 31 July 2026, run an EWS framework without a CRILC red-flag line in the text. So a UCB borrower crosses the Rs 5 crore exposure line quarterly, but the seven-day Rs 3 crore fraud line as written belongs to the commercial-bank directions.

And one carve-out inside the commercial-bank directions themselves. CRILC and the Central Fraud Registry are expressly not applicable to Regional Rural Banks. RRBs report fraud incidents to NABARD, as they always have. If your lender is an RRB, your flag travels through the NABARD channel, not CRILC. Ask the bank which channel carries your status; the answer changes where the next lender looks.

How long does a red-flagged status stay on CRILC?

The direction gives the flag an ordinary lifespan. Once an account is red-flagged, the entire process, classification as fraud or removal of the red-flagged status, shall ordinarily be completed within 180 days from the date of first reporting on CRILC. "Ordinarily" is doing real work in that sentence. It is a norm, not a guillotine. Cases still flagged beyond 180 days go to the Special Committee of the Board for review with recorded reasons, and face RBI supervisory review. If your case crosses 180 days, that committee review is a fact you can ask about in writing. The bank must have a reason on record.

Two exits close the flag, and they look nothing alike. The clean exit is removal: the bank passes its order, the red-flagged status ends, and the status flows out through the bank reporting. The hard exit is fraud classification: the case moves to the Central Fraud Registry, Fraud Monitoring Returns are filed within 14 days, and the five-year debarment starts running from the date of full repayment of the defrauded amount. One exit restores you. The other follows you for five years after you have paid everything back.

There is also a side door borrowers miss. If any bank identifies an account as fraud, the borrowal accounts of other group companies with common promoters or whole-time directors are also examined from the fraud angle. Your flag can pull your sister company into examination. When the flag lands, map every entity that shares your promoter or director names, and prepare those files too. The direction examines the network, not just the account.

Can I get my name removed from CRILC?

Not by yourself, and not directly. There is no borrower login, no self-service correction, no dispute button inside CRILC. Only the lender that filed the report can update it. What you can do is force the update through paper. Write to the bank asking for the current status reported against your account, the date of the last report, and, after a removal order, written confirmation that the CRILC status has been updated. Keep every letter. If the bank reporting is wrong, the correction starts with the bank records, because CRILC only mirrors what lenders file.

What you cannot do is equally important. You cannot pay a third party to "clean" your CRILC record. Anybody offering that is selling you a problem, because the only edit path runs through the reporting lender compliance desk. You also cannot get a fraud classification removed by settlement alone: the five-year debarment runs from full repayment or the agreed settlement amount, and the classification stands until the bank own process removes it. The honest sequence is removal order first, updated reporting second, written confirmation third. Chase all three, in that order.

For the removal case, timing is the lever. The 180-day ordinary clock is your calendar. Well before it runs out, ask in writing which stage the case is at: audit, show-cause, or order. Silence from the bank past the clock strengthens your position, because the direction expects a reasoned closure and puts overdue cases before the Board committee. You are not asking for a favour. You are asking for the process the direction promises.

Where does Rs 3.30 crore sit in the CRILC framework?

Take a borrower with a cash credit limit of Rs 1.40 crore, a term loan outstanding of Rs 0.70 crore, an LC line of Rs 0.80 crore, and a bank guarantee line of Rs 0.40 crore. Fund-based exposure is Rs 2.10 crore. Non-fund-based is Rs 1.20 crore. Aggregate is Rs 3.30 crore. That crosses the Rs 3 crore fraud-framework line, so a red flag on this account is reportable to CRILC within seven days. It stays below the Rs 5 crore general line, so the same account does not appear in the monthly CRILC-Main Report on exposure alone, and the weekly Friday line touches it only if it is in default.

Now the clocks. Suppose the bank competent authority classifies the account as red-flagged on 4 March 2026 and files the CRILC report the same day. The filing deadline is 11 March 2026. The 180-day decision clock, measured from the first CRILC report, closes on 31 August 2026. The next weekly Friday default report after flagging falls on 6 March 2026, and it carries this account only if it is in default. Four clocks, one file, each computed from a different start date. The workbook below computes all of them from two inputs: your exposures and your flagging date.

Run the same arithmetic on your own limits before your renewal meeting. Most borrowers who discover the Rs 3 crore line do so after crossing it. The aggregation is the part nobody warns you about: LC and BG lines you barely use count the same as the cash credit you live on. Add them up, compare against both lines, and walk into the bank knowing exactly which database rows carry your name. That is what this page, and the workbook, are for.

Sources

• RBI Master Directions on Fraud Risk Management in Commercial Banks (including RRBs) and AIFIs, full text: RBI/2024-25/118, DOS.CO.FMG.SEC.No.5/23.04.001/2024-25, 15 July 2024. Primary source for para 3.3.4 and footnote 11 (Rs 3 crore aggregate fund plus non-fund line, seven-day clock), para 4.1.3 (immediately, not later than seven days), and para 4.1.5 (180-day ordinary completion).
• SCC Times: RBI revises Master Directions on Fraud Risk Management, 17 July 2024: the three parallel directions (commercial banks/AIFIs, cooperative banks, NBFCs incl HFCs) issued 15 July 2024.
• Business Standard: RBI rolls out new stressed assets framework, 12 February 2018: monthly CRILC-Main Report from 1 April 2018 at Rs 5 crore, weekly Friday default reporting at Rs 5 crore, SMA reporting to CRILC.
• Economic Times: RBI directs large co-op banks to report exposures above Rs 5 cr, December 2019: UCBs with assets Rs 500 crore and above report Rs 5 crore-plus exposures to CRILC quarterly from 31 December 2019.

Rupee thresholds for monitoring or reporting that lenders cite in practice come from bank policy and CRILC practice unless a direction paragraph states them. This article states that limit wherever a threshold appears.

Frequently Asked Questions

Last updated: October 2026. Direction wording is from the 15 July 2024 instruments cited above. Your sanction letter and your bank fraud policy decide your file.