FRA mandates event-by-event credit reporting for non-bank lenders

Consumer-finance and MSME/microfinance providers must now report key financing events to the Egyptian Credit Bureau (I-Score) as they happen, in accordance with two new decisions from the Financial Regulatory Authority (FRA). The live feed triggers at financing approval and covers disbursement, each partial or full repayment, termination of the facility, the start of legal proceedings, and any subsequent change in status. Consumer-finance companies must also keep sending their aggregate data to I-Score within five days of each month’s end.

What actually changed: I-Score reporting itself has been mandatory for years, but it worked on a periodic cycle. Until September 2025, companies reported financing data in monthly batches — meaning a lender could check a customer’s credit file and miss recently approved facilities at other firms. The FRA closed the first gap by requiring immediate reporting of approved credit limits to I-Score. The new decisions go further: they expand real-time reporting from the limit-approved stage to every major event across the financing lifecycle. A borrower’s credit file is now meant to update as their position changes, not just when a new limit is opened.

REMEMBER- The timing is difficult to separate from the recent EGP 319 mn unauthorized-financing scandal at Global Paradigm School, where a consumer-finance company allegedly extended loans across 619 clients and 839 contracts using parents’ data without their knowledge. However, the move toward faster data-sharing was already on the FRA’s agenda before the case broke — the regulator was already working with the Consumer Finance Federation in May on stronger anti-fraud infrastructure, greater data integration, and real-time verification. The school scandal may have sharpened the urgency and put a spotlight on a complementary problem — identity verification — which the FRA addressed through a separate regulatory track.

The two controls are not the same thing. The live I-Score feed is a credit-data tool. It tells lenders what financing a customer holds, but not whether the person named on the contract actually requested it. That identity-verification layer comes from a different regulatory line: FRA Decision 186/2024 and its amendments, most recently Decision 133/2026 (pdf) (July 2026), which require lenders to verify national ID data and mobile-line ownership and send a one-time password at signing and again when the financing is used. The FRA reiterated those rules on 25 August, the day after it took enforcement action against the company involved in the Global Paradigm case.

Why they matter: The two frameworks — real-time credit reporting and identity verification — run in parallel and tighten different parts of the lending chain. One builds a faster picture of what a borrower owes; the other makes it harder for a third party to obtain financing in their name. For the former, the expansion from a single approval-time snapshot to full lifecycle reporting closes a gap. Under the September 2025 rule, a lender could see that a customer had an approved limit at another firm, but couldn’t track whether it was drawn, being repaid, or in trouble. The new feed adds those downstream events. The CBE’s April circular had already made I-Score reporting a condition for NBFIs to access bank credit, citing incomplete reporting by some institutions — the faster, denser data helps both regulators and lenders spot deterioration earlier. The FRA has also been tightening the consumer-finance regulatory floor more broadly, with greater emphasis on creditworthiness checks and risk controls as the sector expands.

What the decisions do not address is the technical plumbing — no maximum reporting latency, no required format or validation rules, no clarity on how outages or failed transmissions will be handled, and still no specification for how an approved-but-undrawn facility appears in a customer’s credit file or how lenders should factor it into repayment capacity.

What’s next: Covered lenders will have three months from the decisions taking effect — following their publication in the Official Gazette and on the FRA website — to complete their electronic integration with I-Score.