The launch review is on Thursday. The new home loan page has a couple on a balcony, a rate in large type and an Apply now button that floats over everything. Your compliance reviewer opens it on a phone and asks three questions. Where is the lender’s registered name? Which screen shows the borrower the key facts before they accept? Who approved the footnote that now sits four scrolls below the rate it qualifies? Nobody has the answers on file, and the launch slips a week. Most financial website design gets decided in that meeting, by rules the designer never saw.
What does a financial website design checklist cover, and who owns it?
This checklist covers the public website and the logged-out journeys of a regulated financial brand in India: the homepage, product pages, calculators, application flows up to the point of sale, and the footer pages every template carries. Internet banking behind the login and the mobile app sit outside it, though several items apply there too. It is written for the marketing, brand or digital head who commissions the work and then has to defend it to finance and compliance.
Financial website design here means the layout, copy, components and journeys a visitor sees, plus the records that prove each one was approved. That second half is where most projects fail. A page can look right and still be unshippable because nobody can show which version compliance signed.
Ownership splits four ways. Brand and design own how the page looks and reads. Product owns the facts on it: rates, fees, eligibility and tenure. Compliance owns the regulator-driven elements and the approval. Digital or engineering owns what actually goes live, which is often not quite what was approved. Name one person per item before you start. An item with two owners usually has none.
Trust on a financial site is built from small, checkable signals, and most of them are regulatory. We cover the behavioural side in the psychology of trust in financial brand design. This checklist is the operational side: what has to be on the page, where, and who keeps the proof.
The 12-element financial website design checklist
Score each element yes or no, and write down the evidence you would show an auditor. The regulatory references below are general guidance, not legal advice; your compliance team decides how each rule applies to your licence and products.
| Element | Why it matters | Owner | How to check it | Evidence to keep | Yes / no |
|---|---|---|---|---|---|
| 1. Legal entity name beside the brand | Visitors need to know who is offering the product. IRDAI’s 2024 policyholder protection regulations require an insurer’s advertisement to show its registered name with its trade name or logo prominently. | Compliance, with brand | Open the homepage and three product pages on a phone. The registered name sits next to the logo on product pages and in the footer of every template. | Dated screenshots of each template | Yes / no |
| 2. Protection marks where they apply | DICGC has advised insured banks to display its logo and a QR code linking to the DICGC website prominently on their websites and internet banking portals. | Digital team, signed off by compliance | Scan the QR code on the live page and confirm it opens the DICGC site. | Screenshot with scan date | Yes / no |
| 3. Product facts as live text | Rates, fees and eligibility set inside an image cannot be read by screen readers, search engines or AI assistants, and they go stale when the rate changes. | Product owner | Try to select every figure on each product page. Anything you cannot select is an image. | Rate change log showing when each figure went live | Yes / no |
| 4. Risk labels on the same screen as the claim | SEBI requires fund houses to display the riskometer on their schemes and in promotional material, and every mutual fund advertisement carries the standard warning. | Compliance | Each scheme card and scheme page shows the riskometer and the warning on the same screen as the return figure. | Approved scheme template with version number | Yes / no |
| 5. Key facts before the accept step | RBI’s rules require lenders to give retail and MSME term-loan borrowers a Key Facts Statement, including the annual percentage rate, before the loan contract is executed. | Product and lending operations | Walk the loan journey end to end. The Key Facts Statement screen comes before e-sign or accept. | Dated screen recording of the full journey | Yes / no |
| 6. Lending partners named | RBI’s digital lending rules require a regulated entity to publish on its website the details of its digital lending apps and its lending service providers, with the activities they handle. | Compliance, with partnerships | Compare the partner page with the current list of signed partner contracts. | Partner list with last review date | Yes / no |
| 7. Grievance contact within one tap | RBI’s digital lending rules require the nodal grievance redressal officer’s contact details to be displayed prominently on lender and partner websites and apps. | Customer service head | From any page, reach the grievance contact in one tap from the footer or menu. | Screenshot and the name of whoever keeps the details current | Yes / no |
| 8. Consent separate from terms | India’s Digital Personal Data Protection Rules, notified in November 2025, require a separate, clear consent notice that explains the specific purpose of collection. | Data protection officer or legal | No form has a pre-ticked box. Marketing consent is its own unticked choice, apart from accepting the terms. | Notice text and screenshots of every form | Yes / no |
| 9. Readable contrast, and colour that is never the only signal | WCAG asks for at least 4.5:1 contrast for normal text and says colour must not be the only way information is shown. SEBI’s accessibility circular points its regulated entities to standards that include WCAG 2.1 or later. | Design lead | Run a contrast check on body text, disclaimers and buttons. Confirm status colours and risk colours also carry a text label. | Audit report with date and tool name | Yes / no |
| 10. Official channels and a fraud warning | Scam calls and lookalike sites borrow a financial brand’s look. A page listing official apps and domains, and what you never ask for, gives customers something to check against. | Security team, with brand | The list matches your app store listings and the domains you own. | Quarterly review note | Yes / no |
| 11. Proof cleared for the category | SEBI’s mutual fund advertisement code restricts testimonials and rankings. AMFI’s guidance stops distributors showing an AMC’s name or logo on websites without its prior written approval. | Compliance, with brand | List every testimonial, award, rating and partner logo on the site, each with its permission. | Permission emails or letters, filed by page | Yes / no |
| 12. An approval record for every live version | The page compliance approved and the page that went live can differ by one developer edit. Without a record, you cannot show which one a customer saw. | Marketing operations | Pick three live pages at random and match each to an approved file with a date and an approver. | Approval log with an archived copy of each version | Yes / no |
Elements 1 to 8 come from rules. Elements 9 to 12 come from what goes wrong in reviews and after launch. Do not drop the second group because no circular names it. Element 12 is the one an auditor or a complaint will test first, because every other element depends on being able to prove what was live on a given day.
Which regulator-driven decisions change the layout of a financial site?
Three rules change the layout itself, and in financial website design the team that learns them late redraws the page. Each one fixes where something sits or when it appears, so it has to be in the brief before the first wireframe.
SIGNALNewsletter by Yamm Labs
The next piece, straight to your inbox.
New writing on BFSI brands, B2B and influencer marketing, and AI search.
One click to unsubscribe. Privacy policy
The first is screen sequence in a loan journey. Because RBI’s rules require the Key Facts Statement before the loan contract is executed, the application flow needs a dedicated key facts screen between the offer and the accept or e-sign step. That screen cannot be a collapsed accordion the borrower can skip past. It changes the step count, the progress bar and the copy on the final button. A designer who has already promised a three-step journey has to find room for it, so put the step in the brief.
The second is disclaimer placement on a fund page. A riskometer and a standard warning in the footer are technically present and practically invisible. The decision we push for is to treat them as part of the scheme card: the riskometer sits beside the scheme name and the warning sits under the return figure, on the same screen at phone width. That forces a taller card and a smaller return number. It also ends the most common review comment on fund pages, which is that the warning is too far from the claim.
The third is identity on every template. An insurer’s site often carries a product brand, a group brand and the registered company name. IRDAI’s regulations ask for the registered name with the trade name or logo, shown prominently. So the header lockup has to be designed with room for the legal name, in a size that reads on a phone. Leaving it to the footer is the shortcut reviewers reject.
None of these is a creative constraint you can argue away later. Settle them in the first workshop, and the design rounds that follow will spend their time on the idea.
How do you score the financial website design checklist?
Score yes only when the evidence in the fifth column exists and someone can open it today. A yes without evidence counts as a no. That one rule turns the checklist from a feelings exercise into something an auditor would accept.
Then apply three plain rules.
- Three or more no answers means stop and fix before launch. Do not ship with a promise to tidy up later.
- Any no on elements 4, 5, 7 or 8 holds the affected page, whatever the total. Those are the elements a regulator, a complaint or a consumer group would test first.
- Ten or more yes answers, with no hold from rule 2, means launch with a dated fix list for the rest, each line with an owner.
Take a hypothetical NBFC relaunching its personal loan site. Its team scores nine yes and three no. Two of the no answers are design: disclaimers fail the contrast check, and the fraud page is missing. The third is paperwork. The key facts screen exists and works, but nobody saved a recording of the approved journey, so element 5 scores no. Under rule 2 that holds the loan application page, even though the screen itself is fine. The lesson is that the launch-blocking failure came from the filing cabinet. Fixing it took an afternoon, and it would have taken a week to explain to a reviewer after launch.
Run the score twice. The first pass, at design sign-off, catches structural gaps while they are cheap to fix. The second, on the staging site the week before go-live, catches what changed in build. Keep both score sheets. Together they show the gap closing, which is the evidence finance and compliance want when they ask whether the agency did its job.
How do you adapt the checklist for a bank, insurer, AMC, lender or fintech?
Keep all 12 elements for every segment and change what each one tests. The structure stays the same, so a group with a bank, an insurer and a fund house can compare scores across sites.
- Banks. Element 2 carries the most weight: the DICGC logo and QR code on the website and the internet banking portal. Element 10 matters more than on most sites, because fraudsters often copy bank brands.
- Insurers. Element 1 is the heavy one: registered name with the trade name or logo, on every product page. Element 11 changes too, because ads issued through distributors need the insurer’s written approval before issue under IRDAI’s 2024 regulations, so partner pages need a record.
- Fund houses. Element 4 decides the scheme card design, and element 11 rules out most testimonials. Check distributor and partner pages for AMC logos used without written approval.
- NBFCs and digital lenders. Elements 5, 6 and 7 are the core. Test the journey on the partner apps as well as your own site, because the lender stays responsible for what its partners show.
- Payments and fintech apps. Element 8 does most of the work, since sign-up forms collect the most data. If you show regulated products from partners, the partner’s elements apply to your page as well.
For a site serving the Gulf, add a market column to the table and test each element against that regulator. Outside the free zones, the Central Bank of the UAE’s consumer protection standards ask for advertisements in Arabic and English across websites and apps, legible disclaimers at a minimum font size, the institution’s name, logo and contact details shown prominently, and acronyms such as APR spelled out.
In the Dubai International Financial Centre, the DFSA’s rulebook asks that a financial promotion be clear, fair and not misleading and include the firm’s name, address and regulatory status, with a prominent warning where a retail promotion cites past performance. In Saudi Arabia, check SAMA’s rulebook for the licence type before you design the disclosure line. Yamm Labs works from Gurugram and serves Gulf clients remotely; we design for these rules and leave the legal reading to your local counsel.
The Arabic requirement changes more than translation. Right-to-left layout flips the reading order of the scheme card, the progress bar and the form fields, so build both directions into the component library from the start. A disclaimer that fits in English often runs longer in Arabic, which breaks fixed-height cards.
For a view of how Indian fintechs handle these choices visually, see our ranking of India’s 50 best fintech brands by design.
What should you do with a failed item?
Sort every failed item by what it puts at risk, then fix the template behind it, because financial website design runs on shared components. A single faulty component can sit on dozens of pages, so a page-by-page fix leaves the fault in place.
- Does the failure touch a rule, in elements 1, 2, 4, 5, 6, 7 or 8? If yes, revert the page to its last approved version or take it down, and go to question 3. If no, go to question 2.
- Does it stop a customer reading key information or finishing a task, as in elements 3 and 9? If yes, fix it in the current sprint. If no, add it to the fix list with an owner and a date.
- Which template or component caused it? Fix that component, then re-check every page that uses it.
- Send the fixed component to compliance for approval, and file the approved version with its date before it goes live.
- Re-score the whole checklist, not only the failed element. Fixes have a habit of breaking a neighbouring item, usually contrast or the approval record.
Keep a short failure log: element, page, cause, fix, approver, date. After two or three launches it shows which elements your team fails by habit. That pattern is more useful than any single score, because it tells you where the next brief needs a line about the fix.
When a failure keeps returning, the cause is usually ownership. If the rate on the home loan page goes stale every quarter, the product owner is not being told when rates change, and the fix is a process step. A design change will not hold.
What should you tell your compliance team before the review?
Send compliance the checklist and the evidence folder before the review meeting, so the meeting is about decisions and nobody spends it hunting for screenshots. A short note in this form works:
The new site has passed our 12-element financial website design checklist, with an owner and filed evidence for each element. The legal entity name appears on every template, risk labels sit on the same screen as each return figure, and the loan journey shows the Key Facts Statement before the accept step. Consent is collected separately from the terms, with no pre-ticked boxes. Each live page version has an approval record and an archived copy in the shared folder. Please review the three items marked no and the fix dates against them.
This is general guidance, not legal advice; your compliance team decides how each rule applies. What the note does is show that the design team did its own checking before asking for sign-off, which tends to shorten the review. For how these review habits sit within wider changes in the category, see fintech marketing trends.
If you cannot show which version compliance approved, you cannot show which version your customer saw.
People also ask
What should a bank website include?
At minimum: the bank’s registered name on every template, the DICGC logo and QR code where the bank is insured, product facts as live text, a grievance contact reachable in one tap, a separate consent notice on forms and a page listing official channels. The 12-element checklist above adds the approval record that proves each page was signed off.
Who should approve a financial website before launch?
Compliance approves the regulated elements and the final page versions. Product confirms every rate, fee and eligibility figure, and the data protection officer or legal approves consent wording. The digital or brand head owns the checklist and makes sure each approval is filed with a date.
Do fintech websites have to follow SEBI or RBI rules?
It depends on the licence and on the products shown. A lender’s partner app falls under RBI’s digital lending rules, and a platform showing mutual funds falls under SEBI and AMFI rules on fund promotion. This is general guidance, not legal advice, so ask your compliance team which rules attach to each product page.
How often should you re-run the checklist?
Run the financial website design checklist at design sign-off and on staging before every launch, then again whenever a rule, a rate or a partner changes. A quarterly pass on the live site catches drift, such as stale rates or partner logos whose permissions have lapsed.
Want to know which of the 12 your site would fail today?
Get a free Fintech Brand Audit across 8 dimensions, plus 3 fixes. No pitch. Run the free Brand Audit →

