All Insights
RiskMay 26, 20265 min read

The real risk in lending isn't a weak scorecard. It's an institution that stopped questioning a strong one

The real risk in lending isn't a weak scorecard.

It's an institution that stopped questioning a strong one.

I've seen this pattern across three continents — in India's NBFC sector, the UK's FCA-regulated CDFIs, and global fintech ecosystems.

The model gets built. It performs well during growth. Then nobody challenges it anymore.

Here is what two decades in credit risk taught me:

A scorecard reflects the world that existed when it was built — not the one you're lending into today.

At Paisalo Digital, we maintained NPA below 0.35% on a ₹440 Cr ML-underwritten portfolio — not because the model was perfect, but because governance challenged it every single quarter.

When institutions stop doing that, three things happen silently: → Historical bias becomes forward-looking policy → Temporary market patterns get treated as permanent truths → Portfolio stress builds — invisible during growth, catastrophic at the turn

And because credit deterioration lags origination by 12–18 months, the warning signs are already inside the book before the dashboards show anything.

Regulators understand this. That's why the Fed's SR 11-7, the ECB's TRIM exercise, the FCA's model risk expectations, and now the EU's DORA framework are all tightening scrutiny around model governance, explainability, override frameworks, and ongoing validation.

Not because they oppose automation.

Because they've seen what happens when poor decisioning operates at scale.

It becomes institutional risk at scale.

The strongest risk organisations I've worked with — from Mumbai to Cardiff to Singapore — share one discipline:

They treat analytics as an input to judgment. Not a replacement for it.

That means: → Governance that actively challenges model assumptions → Override monitoring that surfaces emerging risk signals early → Risk leadership that stays commercially aware, not just technically correct → Boards that understand model limitations — not just approval rates

Credit models are powerful. But lasting portfolios are still built by institutions that know exactly where data science must end and risk judgment must begin.

That line doesn't move itself. Someone has to hold it.

—

CROs, CDOs, and Board Risk Chairs — I'd genuinely like to hear your perspective:

What does your institution's model challenge process look like today, and how often does governance actually override a model recommendation?

#CreditRisk #ModelGovernance #DigitalLending #RiskLeadership #NBFC #Fintech #CDO

Attachment · Document
Author

Dheeraj Beri

Chief Risk Officer · Founding team, Supernirman / Crefin · IIML, PMP®, MSc (Distinction)