Responsible Lending Obligations: What Credit Providers Must Do

Updated 12 Mar 2026Content was accurate at the time of publication

Responsible lending obligations require credit providers and credit assistance providers to take steps that prevent consumers from entering into credit contracts that are unsuitable for their circumstances. This article explains the practical steps, legal basis and compliance expectations for lenders and brokers — covering inquiries, verification, affordability assessments, record-keeping and common red flags.

What are responsible lending obligations?

At their core, responsible lending obligations require you to:

make reasonable inquiries about a consumer's financial situation and needs;
verify relevant information where reasonable;
assess whether the proposed credit is suitable (affordability and suitability assessment);
avoid providing or recommending credit that is unsuitable under the National Consumer Credit Protection Act 2009 (NCCP Act) and ASIC regulatory guidance.

The duties apply to both credit providers (those who enter into credit contracts or provide credit) and persons who engage in credit assistance (including brokers). The law sets an outcome-based duty: compliance must be demonstrable in processes, evidence and decision records, not just a mechanical checklist.

For licensing context and how responsibility sits with licence-holders, see Australian Credit Licence for details.

Why these obligations exist

Responsible lending rules protect consumers from financial harm caused by unsuitable credit. The policy goals are to:

promote consumer financial resilience and stability;
reduce default and over-indebtedness from poorly assessed lending;
encourage prudent and transparent behaviour across the credit industry;
enable effective remediation and redress where harm occurs.

Protecting consumers also maintains market confidence and reduces regulatory and reputational risk for lenders and intermediaries.

Legal and regulatory framework

The primary sources and guidance include:

National Consumer Credit Protection Act 2009 (NCCP Act): principal statutory framework — https://www.legislation.gov.au/Series/C2009A00134
ASIC — Responsible lending regulatory resources: https://www.asic.gov.au/regulatory-resources/credit/responsible-lending/
ASIC Regulatory Guide RG 209 — expectations on inquiries, verification and suitability assessments: https://asic.gov.au/regulatory-resources/credit/responsible-lending/rg-209/
ASIC enforcement information: https://asic.gov.au/about-asic/what-we-do/enforcement-actions/
AFCA — dispute resolution and case summaries: https://www.afca.org.au
Financial Rights Legal Centre factsheet — https://financialrights.org.au/factsheet/responsible-lending/

Scope and parties:

A credit provider is a person who enters into a credit contract or provides credit (obligations under the NCCP Act).

A credit assistance provider (broker, intermediary) is a person who suggests, assists or enters into a credit contract on behalf of a consumer and must not engage in conduct that results in unsuitable credit being suggested or provided.

Licence-holders retain ultimate compliance responsibility for authorised representatives and brokers.

Core obligations for credit providers and credit assistance providers

The responsible lending duty consists of four central elements. Each element has practical implications and expected standards.

1. Make reasonable inquiries about financial situation and needs

Ask targeted, relevant questions to understand the consumer's income sources and amounts (payroll, benefits, rental income), living expenses (housing, utilities, child support), existing debts and repayment history, objectives for the credit (purpose, term, flexibility), and special circumstances (health, employment volatility).

Sample questions include: "What is your average monthly take-home pay?", "Do you have variable income or commission?", and "Are you expecting any material changes in income or expenses?"

For how contract terms interact with suitability, refer to credit documentation requirements.

2. Verify information where reasonable

Reasonable verification depends on the loan size, product features and risk. Typical documents include:

payslips (last 2–3), employer letter, or tax returns for self-employed borrowers;
recent bank statements (3–6 months) to confirm income and living expenses;
bills and lease agreements to verify recurring expenses.

Low-document/low-verification products are higher risk: if you rely on limited verification, document why this was reasonable and how you mitigated the risk.

3. Assess whether the contract is unsuitable

A contract is unsuitable if, at assessment time, it is likely the consumer cannot meet repayments or if the contract does not meet their requirements and objectives. Your assessment should:

model repayments against realistic expense assumptions;
test stress scenarios (interest-rate rises, income reduction);
consider product features that may make credit inappropriate (balloon payments, negative amortisation, high fees).

Where consolidation or revolving credit is involved, consider the cumulative cost and whether refinancing improves or worsens the borrower's position. See Debt Consolidation Loan and credit card for implications of these products.

4. Do not enter into or suggest unsuitable credit contracts

If the credit is unsuitable, decline to proceed or recommend appropriate alternatives. This duty applies equally to recommendations by brokers. Record the reasons for refusal and the alternatives discussed.

5. Record-keeping and training

Maintain a clear decision record showing inquiries, verification, analysis, and the rationale for approval or decline. Provide regular training on responsible lending and updates to ASIC guidance.

6. Ongoing obligations and variations

Responsible lending continues after origination. Significant variations (limit increases, hardship arrangements) require reassessment — see hardship arrangements. Guarantors, reverse mortgages, limit increases and debt consolidation typically require enhanced verification and record-keeping.

Practical steps to meet obligations

A stepwise operational approach to embed responsible lending into front-line and back-office routines.

Pre-application:

Provide clear product information and key fact sheets.
Train staff and brokers on inquiry scripts and verification standards.
Implement decision-support tools calibrated to your risk appetite and regulatory expectations.

Application stage:

Use a structured interview script covering income, expenses, assets, liabilities and objectives.
Request and log verification documents; if not provided, record why and what alternative checks were used.
Perform affordability modelling with conservative assumptions and stress-tests.
For brokers: obtain and record all lender quotes, comparisons and reasons for product recommendations.

Decision record:

Capture: date, assessor identity, summary of enquiries, documents verified, affordability calculations, decision rationale and communications.
Use a standard template and store in a searchable record system.

Post-decision:

Provide clear outcomes and explanations to the consumer (approval, decline or conditions).
Ensure contract terms match what was assessed and explained.
For variations (limit increases, restructuring) repeat suitability checks.

Ongoing monitoring:

Periodic reviews for high-risk products (interest-only, low-doc, revolving credit).
Exception reporting for approvals outside policy or where verification was limited.

Compliance checklist:

Use a standard inquiry script for every application.
Obtain payslips/bank statements/tax returns as appropriate.
Run affordability model with stress tests (e.g., +3% interest or 25% income fall).
Record decision rationale and attach supporting docs.
Reassess suitability on limit increases or variations.
Conduct annual refresher training for staff and brokers.

See broker responsibilities sections for broker-specific items.

Record-keeping and evidence

Good record-keeping demonstrates compliance and supports remediation.

What to keep:

Inquiry notes (interview scripts), verification documents, affordability calculations, decision rationale, communications, credit contracts and variations, and file notes on material conversations.

Retention periods:

Keep records for a minimum consistent with licence obligations and internal policy (commonly 7 years). Confirm retention with NCCP licence conditions and ASIC guidance.

Format and accessibility:

Store digital copies in a secure, searchable system with auditable access logs and backups.

Audit trail:

Link decision records to the responsible assessor's identity and time-stamped actions. Maintain evidence of staff training (attendance, materials) and monitoring activities.

Special considerations for brokers and intermediaries

Brokers and intermediaries must:

Base recommendations on verified, reasonable inquiries and assessments.
Ensure licence-holder oversight (audits, exception reporting, approval thresholds).
Disclose remuneration, conflicts of interest and the basis for product comparisons.
Capture the provenance of information (consumer-supplied vs third-party checks).

For more detail see broker responsibility sections.

Common pitfalls and red flags

Red flags for non-compliance:

Limited or no verification for higher-risk loans (low-doc without justification).
Reliance on unverified income when verification is reasonable.
Automated approvals with no manual review for borderline affordability.
Incentives that reward volume over suitability.
Repeated refinancing or consolidation that increases borrower cost.
Pressure on consumers to sign without time to review documents.

Consumer warning signs:

You are not asked detailed questions about living expenses.
The lender or broker accepts verbal income estimates without documents.
You are encouraged to omit liabilities or understate expenses.
You are offered products with large balloon payments or undisclosed features.

If you see these signs, request the decision rationale and copies of verification and affordability calculations.

Enforcement, penalties and remedies

ASIC enforcement tools and potential outcomes include:

Directions and notices requiring remediation.
Infringement notices for certain contraventions.
Civil penalty proceedings and pecuniary penalties for NCCP Act breaches.
Enforceable undertakings and, in serious cases, prosecutions.

Consumer remedies:

AFCA can award compensation, vary contracts or require remediation for unsuitable lending. Internal dispute resolution may lead to negotiated remedies (refunds, fee waivers, contract variations). Court action is available but can be costly; AFCA is often the primary avenue for individual complaints.

How ASIC approaches compliance:

ASIC targets systemic failings, weak governance, misaligned incentives and poor verification practices. Enforcement often follows consumer harm, media exposure or industry-wide audits — proactive remediation and reporting are best practice.

What to do if you think a loan was unsuitable

Steps to take:

Gather evidence: Collect payslips, tax returns, bank statements around the application period, application forms, emails, SMS and the credit contract.

Request internal information: Ask the lender or broker for the decision record, verification documents they used and the affordability assessment.

Lodge an internal complaint: Follow the lender's complaint procedure and record the complaint ID and deadlines.

Escalate to AFCA: If internal dispute resolution is unsatisfactory, lodge a complaint with AFCA — https://www.afca.org.au.

Notify ASIC (for systemic concerns): Report patterns of misconduct or inadequate procedures to ASIC.

Consider legal advice: For complex disputes or large sums, obtain legal advice to explore options such as contract variation, rescission or compensation claims.

For guidance on lodging complaints more generally see complaint procedures.

Suggested compliance program template

A robust compliance program should include the following elements:

Policies and procedures:

Written responsible lending policy aligned to the NCCP Act and ASIC regulatory guides. Procedures for inquiries, verification, affordability modelling and exceptions.

Training and competency:

Induction and refresher modules for staff and brokers, with assessments. Record training completion and assessment results.

Monitoring and testing:

Transaction-level audits, file reviews and mystery shopping focused on inquiry quality and verification. Key risk indicators such as percentage of low-doc approvals and exception rates.

Incident management and remediation:

Defined processes to investigate suspected unsuitable lending and remediate affected consumers. Timelines for remediation and reporting to senior management and the regulator where required.

Governance and reporting:

Board and senior management oversight, regular reporting on compliance metrics and investigations.

Continuous improvement:

Update scripts, calculators and policies after audits, AFCA determinations and ASIC guidance changes.

Maintain document templates including inquiry script and consent form, verification checklist, affordability calculator output template, and decision record template (attach supporting docs). Review the program regularly (at least annually) and after regulatory updates or enforcement outcomes.

FAQ

What is an unsuitable loan?

A loan is unsuitable if, at the time it was entered into or recommended, it was likely the consumer could not comply with repayment obligations or the loan did not meet their needs and objectives.

Who enforces responsible lending obligations?

ASIC enforces the NCCP Act; consumers can seek redress via AFCA. Licence-holders are responsible for authorised representatives.

How long do I have to complain?

Timeframes vary. Lodge internal complaints promptly and escalate to AFCA if unresolved. AFCA considers fairness and timing of harm rather than strict statutory limitation alone.

What counts as reasonable verification?

It depends on loan type and risk. For salaried employees: payslips and bank statements. For self-employed: tax returns, BAS or certified financial statements. Document the basis for the chosen level of verification.

Are brokers treated differently?

Brokers must make the same reasonable inquiries and ensure recommendations are suitable. Licence-holders must demonstrate oversight.

Can you rely on consumer-supplied information?

Yes, but only where reasonable to do so and where the reliance is documented. High-risk lending generally requires independent verification.

Key takeaways

Responsible lending obligations are outcome-focused duties requiring robust inquiries, proportionate verification, clear affordability assessments and strong record-keeping. Embedding these practices across policies, training and monitoring reduces consumer harm and regulatory risk while providing a defensible audit trail if disputes or enforcement arise.