Risk Containment Unit (RCU)

Risk Containment Unit (RCU): A Risk Containment Unit (RCU) is a lender's independent fraud-control team that samples loan files, usually before disbursal, to detect forged documents, misrepresented income or identity and organised fraud. RCU screens documents for tampering, verifies selected ones with their issuers, and returns an outcome — positive, negative, referred or fraud — that credit must act on before the loan is released.

Why Risk Containment Unit (RCU) matters in credit and collections

• RCU sampling picks files by rule — a share of all logins chosen at random plus every file meeting risk triggers such as high ticket size, negative-area pin codes, new sourcing channels or DSA codes with past fraud.
• Screening checks documents for tampering — fonts, alignment, salary-slip arithmetic, bank-statement running balances — and sampling verifies them at source with employers, banks, the GST portal or ITR records.
• A negative or fraud outcome usually blocks disbursal, triggers a review of other files from the same source and may lead to de-empanelment of the channel partner.
• RCU findings feed the lender's fraud risk management framework and early warning signals, and patterns are shared with CPV and Field Investigation agencies to sharpen their checks.

How RCU sampling and screening work

RCU work begins with selection. Credit policy defines a sampling rule: a minimum share of all logins chosen at random, plus mandatory sampling for files that meet risk triggers — large ticket sizes, self-employed income claims, pin codes or localities on a negative list, new or recently flagged DSA codes, and profiles that match known fraud patterns. Random sampling keeps the whole sourcing channel honest; trigger-based sampling concentrates effort where fraud is most likely.

Each sampled file goes through two layers. Screening is a desk review of the documents themselves: salary slips whose arithmetic does not add up, bank statements whose running balances break, mismatched fonts or alignment, identity or address documents that differ in detail from one submission to another, and photographs reused across applications. Sampling, in the narrow sense, verifies documents at source — confirming employment and salary with the employer, statements with the issuing bank or through Account Aggregator, ITRs and GST returns on their portals, and property papers with the registry.

The outcome is graded. Positive files proceed; referred files go back to credit with specific queries; negative or fraud files are stopped. A confirmed fraud triggers a look-back across other files from the same DSA, employer or address cluster, because document fraud is rarely a single event. RCU therefore works alongside CPV, Tele-Verification and Field Investigation: those checks confirm that the person and the place are real, while RCU tests whether the paper is.

How lenders run an effective RCU

• Keep RCU independent of sales and credit targets, with its own reporting line, so a negative outcome cannot be overridden informally.
• Combine a random sampling floor with trigger-based sampling, and revisit the triggers as fraud patterns shift.
• Verify at source rather than by look and feel; data sourced digitally through Account Aggregator, GST and ITR records shrinks the document surface fraud can exploit.
• Run a look-back on every confirmed fraud across the same channel, employer and address cluster.
• Track sampling outcomes by DSA and branch, and act on channels with repeated negatives.

Risk Containment Unit (RCU) — frequently asked questions