How to Read a CIBIL Report: A Line-by-Line Walkthrough for Underwriters

A CIBIL consumer report has five sections — personal, contact, employment, account and enquiry — but an underwriter should not read them in that order. Read enquiries first, then account status and ownership type, then the DPD grid, then identity. The fields that actually move a decision are ownership type, account status, amount overdue and date reported.

Key facts

• The report has exactly five sections. TransUnion CIBIL describes the Credit Information Report as carrying Personal Information, Contact Information, Employment Information, Account Information and Enquiry Information, with the account section showing "a month on month record of up to 3 years of your payments" (TransUnion CIBIL, How to read your CIBIL report).
• YuSight has supported 10 Mn credit journeys, and the Bureau Analyzer parses a consumer CIR into an obligation table — lender, facility, sanctioned, outstanding, overdue, ownership, worst DPD — so the analyst starts from a table, not a 20-page PDF.
• Enquiries persist for seven years. CIBIL retains loan-application enquiries for a seven-year window (CIBIL), which means the enquiry block is a seven-year record of credit-seeking behaviour, not a recent-activity log.
• The book is currently benign, which is when file-level reading lapses. Balance-level 90+ DPD at December 2025 was 0.7% on home loans, 1.1% on personal loans, 1.9% on credit cards, 1.7% on two-wheeler loans and 0.6% on auto loans, each improved year on year (TransUnion CIBIL Credit Market Indicator, March 2026).
• The report can legitimately be almost a month stale. Credit institutions report as at the 15th and last day of each month, submit within 7 calendar days, and the CIC ingests within 5 calendar days (RBI, Credit Information Reporting Directions, 2025).

What order should an underwriter read a CIBIL report in?

The borrower-facing order is the printing order. The underwriting order is different, because you are not confirming a score — you are trying to falsify the application.

1. Enquiry section. What the borrower has been asking for, before what they have.
2. Account status and ownership type. Which rows are live, closed, settled or written off, and on which rows the borrower is actually the obligor.
3. Amounts — sanctioned, current balance, amount overdue, EMI. The obligation number that feeds FOIR.
4. The DPD grid. Thirty-six months of behaviour, read for pattern rather than count.
5. Personal, contact and employment. Last, and as a matching check rather than as data.

Read in that order and the first three minutes of the file are spent on the fields that can decline it.

How do you read the enquiry section, and what does a burst of enquiries mean?

The enquiry section records every occasion a credit institution pulled the report with a stated purpose. Each row typically carries the member name, the enquiry date, the enquiry purpose (the product applied for) and the enquiry amount.

An enquiry is not a rejection and it is not a loan. It records that the borrower applied. What it tells you depends on three things the report does not compute for you.

1. Density. Enquiries in the last 30, 60 and 90 days. One a quarter is shopping. Eleven in six weeks is distress, or a broker running one application across a panel.

2. Conversion. Cross-reference each enquiry date against "date opened" on the account rows. Enquiries with no matching account are declines — and a run of declines from lenders with tighter policy than yours is the most useful free signal in the report.

3. Composition. Nine home loan enquiries in a month is one purchase being priced. Nine personal loan and credit card enquiries in a month is something else. Unsecured, short-tenor, small-ticket clusters carry more information than secured ones.

Context: RBI's November 2023 measures raised risk weights on consumer credit exposure of commercial banks "by 25 percentage points to 125%" and on credit card receivables to 150% for banks and 125% for NBFCs, and required regulated entities to "put in place, if not already there, Board approved limits in respect of various sub-segments under consumer credit" (RBI/2023-24/85, 16 November 2023). A borrower declined four times by banks and then approached by NBFCs is a borrower whose price is being set by somebody else's board-approved limit.

The block also tells you whether the borrower knows you are looking: CICs must "send alerts through SMS/ email to customers when their CIR is accessed" (RBI, 2025 Directions).

How do you read the account information section?

This is where the credit decision lives. Each account appears as a block. The fields that change decisions, in the order they change them:

Ownership type is the field most often skipped. CIBIL reports ownership on each account, and the categories in general use are Individual, Joint, Guarantor and Authorised User (typically an add-on credit card).

The underwriting treatment of each is a policy decision your credit policy should already have made, and if it has not, this is the gap:

• Individual — full obligation, no argument.
• Joint — liability is joint and several, for the whole EMI, not half of it. Halving it because there are two names is a policy shortcut, not an entitlement.
• Guarantor — a contingent obligation that becomes real the day the primary defaults. Read the DPD grid on that row before deciding on a haircut. A guarantor row clean at 000 for 36 months is a different exposure from one at SMA-1.
• Authorised User — able to spend, generally not the contracting obligor. Excluding it is defensible; excluding it silently is not.

Closed is not settled, and settled is not written off. These four statuses sit next to each other in the report and are three different credit facts.

CIBIL's own illustration is unambiguous: a borrower who paid less than the full amount had the loan "reported as 'settled'", where paying in full would have had it "reported as 'closed'" (CIBIL, Impact of settled status). The status can later be updated to closed once the balance is paid and a no-objection certificate obtained — which is why a "settled" row with a very recent date reported deserves a question, not an assumption.

The rule that follows: read the written-off principal, not the written-off total. The total carries accrued interest and charges. A ₹4,80,000 total on a ₹90,000 principal is a small loan that went bad and compounded. A ₹4,80,000 total on a ₹4,10,000 principal is a borrower who walked away from real money.

Worked example: reading a consumer CIR line by line

Illustrative extract for R. Meenakshi Sundaram, sole proprietor, applying for a ₹25,00,000 secured business loan. CIR pulled 20 August 2026; data as at the fortnight ended 31 July 2026. Constructed example, not a real borrower.

Account information

Enquiry information (last 6 months): 12 enquiries — 1 housing loan (Feb), 4 personal loan (Apr–May), 3 credit card (May), 4 business loan (Jun–Aug).

Step 1 — obligations the borrower does not dispute. 38,400 + 14,200 + 19,800 + 13,500 = ₹85,900 per month

Step 2 — add the guarantor row at full value. 85,900 + 41,000 = ₹1,26,900 per month

Step 3 — enquiry conversion. 12 enquiries in 6 months. Accounts opened in the same window: row 4 only (May 2026). Conversion = 1 ÷ 12 = 8.3%. Eleven applications produced nothing.

Step 4 — new unsecured money in 9 months. Row 3 (Nov 2025) + row 4 (May 2026) = 6,00,000 + 4,00,000 = ₹10,00,000 of unsecured sanctions, against a card balance of ₹2,84,000 that has not reduced.

Step 5 — card utilisation. 2,84,000 ÷ 3,00,000 = 94.67%

Step 6 — the judgement.

The score on this file will look acceptable. Every live row shows zero overdue except row 6. Worst DPD on the borrower's own accounts in 36 months is 030, once.

Four findings say otherwise.

• Row 6 is the file. ₹62,000 overdue at 47 days on a guaranteed business loan. The borrower is guarantor, not obligor, so the exposure is absent from the ITR, the balance sheet and probably the application form. It adds ₹41,000 to monthly obligations and a live SMA-1 to the credit history.
• Eleven declines. An 8.3% conversion rate across twelve applications means the market has been saying no since April. You would be the twelfth lender to look and the first to say yes. That needs an explanation in the memo, not a footnote.
• Row 5 is settled, not closed. Worst DPD 090, settled September 2023. Small money, but it establishes that this borrower has previously negotiated a haircut rather than paid.
• Row 4 is unverified. Sanctioned May 2026, XXX for the most recent month. No data reported is not paid on time.

The recommendation the file supports is not an immediate decline. It is: get the sanction letter and repayment schedule for row 6 plus a written explanation of the ₹62,000 overdue; pull the CIR of the entity behind row 6; reconcile twelve months of bank statements against rows 1–4; and re-pull within seven days of the committee date. That reconciliation is what finds the debt only one source knows about.

How is the consumer CIBIL report different from the commercial CIR?

For a proprietorship, a partnership or a closely held private limited company, one report is never enough. Borrowing on the proprietor's PAN sits on the consumer form; borrowing in the firm's name sits on the commercial form; and neither report knows about the other.

The section-by-section commercial equivalent is covered in CIBIL Commercial Report Explained, and the rank that sits on top of it in CIBIL Rank and CMR for MSMEs. The method that generalises across both — and across Experian, Equifax and CRIF High Mark — is in the end-to-end commercial bureau guide.

What is easy to misread in a consumer CIBIL report?

1. Reading the score instead of the report. The score is a model output; the account rows are the evidence. A memo that quotes 761 and stops has quoted a conclusion.

2. Treating the employment section as verified income. It is member-reported, updated only when a member reports it, and frequently years old. Verify against Form 26AS or the ITR, never against this field.

3. Netting a joint account to 50%. Halving joint-and-several liability needs a policy basis and a verified co-borrower.

4. Ignoring the date reported. A row last reported two fortnights before your pull date is stale by definition, and under the 2025 Directions a missed payment can be roughly 27 days old before it can legitimately appear.

5. Assuming no adverse row means no adverse history. Not every lender is a CIC member for every product, and small-ticket digital lending reporting is uneven.

FAQ

How do you read a CIBIL report?

Start with the enquiry section, then account status and ownership type, then the amounts, then the 36-month DPD grid, and read the personal and employment sections last as a matching check. Reading in that order puts the decision-changing fields in front of you first.

What is the account information section?

It is the part of the report that lists every credit facility a member has reported against the borrower — lender, account type, ownership, dates opened and reported, sanctioned amount, current balance, amount overdue, status and a month-by-month payment record going back up to three years.

How long do closed accounts stay on a CIBIL report?

Closed accounts do not vanish the day they close; they remain on the report as history, and the payment record on them is still visible. RBI's 2025 Directions do not fix a purge period for consumer records, so treat any specific number you see quoted as unverified.

What is the difference between a settled and a closed account?

Closed means the borrower paid everything owed. Settled means the lender agreed to accept less. They sit one column apart in the report and are completely different facts about how this borrower behaves when repayment gets hard.

Do hard enquiries by themselves indicate a bad borrower?

No. An enquiry only records that somebody applied. What matters is the density, the composition and, above all, how many enquiries produced no account — because unconverted enquiries are declines by other lenders.

Should a guarantor account be counted in the borrower's obligations?

Count it unless your credit policy says otherwise in writing, and always look at its DPD grid before deciding on a haircut. A guarantee on a clean 36-month account is a different exposure from a guarantee on an account running at 47 days past due.

How current is the data in a CIBIL report?

Reporting is fortnightly, as at the 15th and last day of the month, with seven days to submit and five days for the bureau to ingest. So a fresh default can be up to about 27 days old before it can legitimately appear on the report.

Why does a facility my borrower says is closed still show a balance?

Because closure is reported by the lender, and the fortnightly file that carries it may not have gone yet. Ask for the no-dues certificate, keep the bureau row as it stands, and note the discrepancy in the memo.

Does the borrower know I pulled their report?

Yes. CICs are required to send an SMS or email alert to the customer when a specified user accesses their CIR, and lenders must alert customers when they report a default or DPD to the bureau.

What should I check first if the identity details look wrong?

Stop and check whether you are reading a merged record. A PAN mismatch, an unexplained address or an account that pre-dates the borrower's earliest plausible credit life means the file may contain somebody else's tradelines, and every number after that is unreliable.

Key takeaways

• Read enquiries first. Unconverted enquiries are declines by other lenders and cost you nothing to count.
• Ownership type is the field most often skipped and the one that most often changes the obligation number.
• Closed, settled, written off and post-write-off settled are four different facts. Read the written-off principal, not the total.
• XXX is unknown, not clean. A row last reported before your pull date is stale by definition.
• One report is never enough for a proprietor or a small firm. Pull the consumer CIR and the commercial CIR, and reconcile both against bank statements.

Run one borrower through the analyzer — bring a real consumer CIR and see the account rows, ownership types, enquiry cluster and 36-month grids parsed into a table you can check field by field.

Related: how the 36-month DPD grid is read, turning 36 months of history into a credit judgement, and where the bureau reading lands in the memo.