How to Set Up a Fintech Referral Program for a Bank, NBFC or Insurer

By Yamm Labs · Updated October 2026 · 14 min read

The banner is already designed: “Refer a friend, earn ₹500.” The growth team wants it in Monday’s app release. Then the compliance officer asks three questions nobody has answered. Which product does the friend buy? Who exactly receives the ₹500? And is that person allowed, under the rules for that product, to be paid for bringing in a customer? A fintech referral program in India is a question of who may be paid, for what, and with which words on the screen. The banner comes last.

What you need before you start a fintech referral program

You need four owners, two approvals and a product map before anyone designs a banner. A referral program pays an existing customer or a partner something of value when a person they introduce becomes a customer. In financial services that payment touches licensing law, so the licence owners belong in the first meeting.

• A business owner. Usually the growth or partnerships lead, who owns the target, the budget and the decision to stop.
• A compliance owner. The compliance officer for each regulated entity whose product is being referred. A fintech app that distributes a partner bank’s savings account, an NBFC’s loan and an insurer’s term plan has three sets of rules and may need three reviewers.
• A legal and data owner. Someone who drafts the referral terms and checks how the friend’s personal data is collected. Under India’s Digital Personal Data Protection (DPDP) Act, the friend is a separate person with separate consent.
• A finance and payout owner. The person who reconciles rewards against qualified referrals, holds payouts until the trigger event clears and claws back rewards paid in error.

The two approvals are budget sign-off from finance and a written compliance opinion on who may be paid. The product map is a one-page list: every product the program will touch, the licensed entity that issues it, the regulator that supervises it and the kind of person who is allowed to earn a fee for selling it. Without that page, every later step gets argued from scratch.

If your team is new to this, our page on partner and affiliate marketing for fintech sets out how referral, affiliate and distributor channels differ.

Phase 1: The regulator decides who you may pay, so map that first

The first phase answers one question per product: can this referrer legally receive this reward? The answer differs across insurance, mutual funds, broking and lending, and a single “refer and earn” scheme that spans all four will break at least one rule unless it is split by product.

1. List each product and its licence holder. A savings account belongs to the bank, a personal loan to the bank or NBFC (non-banking financial company) that lends, a fund to the asset management company, a policy to the insurer. The app that shows them may hold none of those licences.
2. List each kind of referrer. Existing customers, registered intermediaries, unregistered partner businesses, creators and your own employees are five different legal positions.
3. Check insurance first, because it is the strictest. India’s Insurance Act bars anyone from paying a reward, by commission or otherwise, for soliciting or procuring insurance business to anyone except an insurance agent or insurance intermediary. The same law bans rebates offered as an inducement to buy a policy and bans multilevel marketing schemes that use unauthorised people to procure insurance. A cash reward per policy sold, paid to a policyholder, fails that test. The current text is on IRDAI’s page of Acts.
4. Check mutual funds next. AMFI (the Association of Mutual Funds in India) requires everyone engaged in selling mutual funds, including people employed or engaged by a distributor, to register with it. Its master circular for distributors, issued in January 2026, says distributors must not rebate or pass back commission and must not attract investors through rebates, gifts or gift vouchers.
5. Check securities broking. SEBI’s 2024 rule bars SEBI-regulated firms and their agents from associating with anyone who gives securities advice, or makes claims of return or performance, without SEBI’s permission. A referrer who posts “this app made me 30 percent” puts the broker on the wrong side of that rule.
6. Check lending. RBI’s amended conduct rules for banks, issued in June 2026 and in force from 1 January 2027, treat any entity or individual a bank engages to sell, promote or influence customers as a direct selling agent (DSA), whatever the contract calls them. The bank must publish its list of DSAs on its website, take an undertaking to follow its code of conduct and make sure its incentives do not reward mis-selling.
7. Write the answer in the product map. For each product and referrer pair, record “may pay”, “may pay only a registered intermediary” or “may not pay”, with the source the compliance officer relied on.

The result often surprises the growth team. Customer-to-customer rewards tend to work for deposit and payment products, need care for loans and broking, and usually have to be dropped or rebuilt for insurance and fund distribution. Treat that as a design input.

SIGNALNewsletter by Yamm Labs

The next piece, straight to your inbox.

New writing on BFSI brands, B2B and influencer marketing, and AI search.

Email *

Subscribe

Subscription form is not available at the moment

One click to unsubscribe. Privacy policy

Phase 2: Design the reward around what each product allows

Once the map is done, the reward design follows from it. The aim is a reward that a compliance officer can approve for each product line and that pays for customers who stay.

1. Choose the reward type per product. Cash, a fee waiver, cashback on a card or account, or a voucher. Where the map says “may not pay”, the honest options are an unpaid share link or routing introductions through a registered agent or distributor who earns the regulated commission.
2. Pick the trigger event. Paying when the friend downloads the app buys downloads. Paying after KYC (know your customer) checks, a first transaction or a loan disbursal buys customers. Later triggers cost more per reward and less per real customer.
3. Decide one-sided or two-sided. A reward for the friend as well as the referrer lifts take-up, but for any product with an inducement rule, the friend’s reward is the half most likely to be read as a rebate.
4. Set caps. A ceiling per referrer per year keeps a customer from turning into an unregistered sales agent. Rewards that pay on a referrer’s referrals, in chains, are a multilevel structure and should be out of scope for every product.
5. Write clawback rules. Reverse the reward if the friend’s account is closed for fraud, the loan is cancelled within the cooling-off period or the referral turns out to be self-referral.

A hypothetical worked example shows why the trigger matters. Take a hypothetical NBFC that pays ₹100 per referred personal loan application. If one application in five is disbursed, the real cost is ₹500 per funded loan, before fraud losses. Paying ₹400 on disbursal looks more generous on the banner and costs ₹100 less per funded customer. The lesson: price the reward per customer you wanted, and the banner number takes care of itself.

Cost per funded referral = (total rewards paid + payout and fraud-check costs) ÷ referred customers who reached the trigger event

Phase 3: Build tracking and consent into the referral flow

Tracking and consent decide whether the program can be audited. Every reward should trace back to one referrer, one friend, one product and one consent record.

1. Issue unique codes or links. Each referrer gets a code tied to their customer ID. Partners get a separate code range so their results never mix with customer referrals.
2. Let the friend give their own consent. Do not ask referrers to upload contact lists. The referrer shares a link; the friend lands on your page and agrees for themselves. The DPDP Act requires consent to be free, specific, informed, unconditional and unambiguous, given by a clear affirmative action, and withdrawing it must be about as easy as giving it.
3. Set consent defaults to “no”. RBI’s 2026 conduct amendment for banks says products may be sold only with explicit consent and that the default choice on a consent prompt must be “No” or “I do not agree”. Build to that standard now, even if your entity is not a bank.
4. Add fraud checks before payout. Match device, PAN and bank account details to catch self-referral, and hold rewards until the trigger event clears.
5. Pay from the regulated entity’s side. RBI’s digital lending rules require fees owed to a lending service provider (LSP) to be paid directly by the lender and not collected from borrowers. Keep partner payouts on the lender’s books, never netted out of a customer’s loan.

Fix the attribution window before launch: how many days after a click a sign-up still counts. Whatever number you pick, put it in the terms so partners cannot dispute it later.

Phase 4: Creatives and terms need named approvers before launch

Every word a partner or customer publishes about your product is advertising someone has to approve. Phase 4 names that person for each channel and writes down what an affiliate may and may not say.

1. Route partner creatives to the product’s owner. Under IRDAI’s 2024 policyholder-protection regulations, an advertisement issued by an insurer’s distribution channel needs the insurer’s written approval before it goes out, and every insurer advertisement must show the insurer’s registered name with its trade name or logo prominently. AMFI’s code tells mutual fund distributors to use the marketing material their fund houses provide and not to design their own scheme material without the fund house’s written approval.
2. Write a message sheet for affiliates. One column of approved lines (“Open a savings account in about ten minutes on the app”, if that is true) and one of banned lines: guaranteed approval, assured returns, “free” insurance, comparisons you have not substantiated, and any personal claim of investment gains.
3. Require the disclosure label. ASCI’s guidelines for influencer advertising treat anything of value given to talk about a brand as a material connection that must be disclosed. Permitted labels include “Ad”, “Partnership” and “Affiliate”. The label must be upfront and prominent; a disclosure only in a bio, or buried in a cluster of hashtags, is likely to be missed. In videos of 15 seconds or less it should stay on screen for at least three seconds.
4. Check the creator’s credentials. ASCI expects influencers who give stock or investment advice to be registered with SEBI and to state their registration number. Read that alongside SEBI’s rule on associating with unregistered advisers, and a creator without registration should be briefed to talk about the app, not about what to buy.
5. Disclose commissions where the rules ask for it. AMFI’s code requires distributors to disclose to investors the commissions they receive across the competing schemes they recommend. On a partner’s own site, a plain line such as “We earn a fee if you open an account through this link” is the minimum.
6. Publish the referral terms. One page: eligibility, products covered, trigger events, reward, caps, attribution window, clawback, payout timing and the grievance contact.

Two regulator-driven placements are worth deciding in the design file itself. A fund advertisement that a partner shares still carries SEBI’s standard risk warning in legible type. An insurance partner’s reel still shows the insurer’s registered name. Put both in the template, and partners cannot leave them out.

Phase 5: Pilot with a capped group, then audit before you scale

A pilot exists to find the failure cheaply. Run it on one product, one referrer type and a fixed budget, and judge it on funded customers and complaints.

1. Launch to a small group. A few thousand existing customers, or ten to twenty partners, is enough in typical practice to see whether the flow works.
2. Audit partner posts weekly. Search for your brand name and referral codes. Check every post against the message sheet and the disclosure rule, and take down what fails.
3. Reconcile payouts weekly. Match each reward to a trigger event and a consent record. Any reward without both is a finding.
4. Tag complaints. Add a “came through referral” field to the complaints system, so you can tell whether referred customers complain more than others.
5. Hold a go or no-go review. Finance, compliance and the business owner sign the decision to scale, change or stop. Write the reason down.

Our partner and affiliate marketing articles cover partner and referral programmes for fintechs, insurers and lenders in more depth.

The fintech referral program setup, step by step

The table below collects the steps, their usual owner, a typical duration and the record to keep. Durations are typical practice from programs of this kind, not regulator timelines; your own approval queues set the real pace.

How long it takes and who signs off

From the first meeting to launch, a single-product program usually takes eight to twelve weeks in typical practice, with the pilot on top. A program spanning several regulated products takes longer, because each product’s compliance owner reviews separately and an insurer or fund house may need to approve partner material too.

Sign-off sits with four people: the business owner for the target, finance for the budget and payout rules, compliance for each regulated product, and legal for the terms and data handling. For insurance partner ads, the insurer’s written approval is a separate step outside your own company. Plan for it.

If you need to brief compliance in writing, this paragraph can go into the email as it stands. “The program pays existing customers a capped reward when a referred friend completes the trigger event for the products listed in the attached map. No reward is paid for insurance or fund products. Partners use only approved templates carrying the required disclosures and labels. Every reward is linked to a consent record and reconciled weekly. Approvals and logs are stored in the shared compliance folder.” This is general guidance, not legal advice; your compliance team decides.

How to tell your fintech referral program worked

A referral program has worked when it brings in customers who cost less and stay longer than the ones from paid media, without a rise in complaints. Measure these five numbers from the first pilot week.

• Cost per funded referral, using the formula in Phase 2. Compare it with the cost per funded customer from paid search and social for the same product.
• Referral share of new customers: funded referred customers divided by all funded new customers in the period. It shows whether the channel is large enough to bother with.
• Ninety-day activity: the share of referred customers still transacting or repaying after three months, against the same figure for other channels.
• Complaint rate: complaints from referred customers per 1,000 referred customers. A rising rate is the earliest sign that someone is overselling.
• Fraud rejection rate: rewards blocked by fraud checks as a share of rewards claimed. A sudden jump usually means a code has leaked to a coupon site.

Attribution will never be perfect, because some friends would have joined anyway. Holding back the reward from a small random group of referrers for a month, then comparing sign-ups, gives a rough read on what the reward itself created.

Pay for the customer you wanted, not for the click you can count.

What to do when a step of a fintech referral program fails

Most failures show up in the first month, and each has a known fix.

• Compliance rejects the reward. Go back to the product map. Either swap cash for a fee waiver on a bank product, or route paid introductions for that product through a registered intermediary.
• Fraud spikes. Move the trigger later, from sign-up to first transaction or disbursal, and lengthen the payout hold.
• A partner posts a return claim or skips the label. Take the post down, log it, and invoke the clause in the partner agreement. Repeat offenders lose their code. For a broker, SEBI’s association rule makes this a regulatory issue as well as a brand one.
• Approvals stall. Send the whole pack at once, with the product map first, and agree a review date in the kickoff meeting.
• Referred customers churn faster. The reward is attracting reward-hunters. Make the reward depend on the friend staying active, such as a second payment after three months.

Yamm Labs works from Gurugram with clients in India and the Gulf, and runs work for international clients remotely. You can read more about the team on our About page.

People also ask

Can an insurer run a refer-and-earn program for policyholders?

Not with cash per policy. India’s Insurance Act bars paying any reward for soliciting or procuring insurance business to anyone other than an insurance agent or intermediary, and bans rebates offered as an inducement. Insurers usually offer an unpaid share link or route paid introductions through a registered intermediary; check the design with your compliance team.

Can a mutual fund app give rewards for referrals?

It depends on the app’s registration. AMFI’s code bars mutual fund distributors from passing back commission or attracting investors with gifts or vouchers, and requires anyone engaged in selling funds to be registered. A platform under a different registration should get a written compliance view before it offers any reward.

Do referral partners have to disclose that they are paid?

Yes. ASCI’s influencer guidelines treat any payment or reward as a material connection that needs an upfront label such as “Ad” or “Affiliate”. A disclosure hidden in a bio or among hashtags is likely to be missed, so put it in the post itself.

How much should a fintech pay per referral?

No regulator or industry body publishes a benchmark for India that we have found. Work backwards from the cost per funded customer in your paid channels, set the referral reward below it, and pay on a trigger event that proves a real customer.