What Is Workplace Banking? Scheme-Based Lending Explained for Banks

Workplace banking explained: what scheme-based, employer-anchored lending is, how check-off repayment works, why banks build dedicated workplace-banking programmes, and what a modern origination platform must do.

Workplace banking is the practice of offering banking products, and unsecured personal loans in particular, to the employees of an approved employer scheme, with repayment collected directly from payroll through a mechanism known as check-off. It is sometimes called scheme banking or scheme-based lending, and in the Kenyan market it sits at the centre of most banks' consumer-lending books. The defining feature is the relationship triangle between the lender, the employer and the salaried borrower: because the employer agrees to deduct instalments at source and remit them to the bank, the lender is no longer relying solely on a borrower remembering to pay. That single structural change reshapes the risk profile, the documentation, the workflow and the technology needed to run the business well. This article defines the discipline, explains why it is treated as a distinct category from generic retail lending, and sets out what a dedicated origination platform such as our Workplace Banking application is built to do. For the full picture across the whole cluster, the complete guide to workplace banking is the place to start.

What workplace banking actually means

At its simplest, workplace banking is unsecured lending anchored to employment. An employer signs up to a scheme arrangement with the bank, the employer's staff become eligible to borrow under that scheme, and loan instalments are deducted from salary before the employee is paid. The loan is unsecured in the conventional sense, there is no title deed or logbook held as collateral, but it is far from unsupported. The security is the predictability of a salary plus the employer's commitment to deduct and remit.

This is why the term scheme matters. A scheme is not just a list of employees; it is a configured set of commercial terms that the bank agrees with a specific employer. Once a scheme is selected during an application, a defined set of parameters comes into play:

Because each employer can be negotiated separately, two borrowers with identical payslips may receive different offers depending on whose scheme they belong to. A generic lending system that treats every applicant the same cannot represent this; a workplace-banking platform has to hold scheme parameters per employer and apply them automatically the moment a scheme is chosen.

Why scheme lending is lower-risk, and the controls that keep it that way

Workplace banking is generally regarded as lower-risk than open-market personal lending for three connected reasons. Borrowers are salaried, so income is regular and verifiable. The employer is known to the bank and confirms the employment relationship. And repayment is collected at source, before discretionary spending, which materially reduces the chance of a missed instalment. The deeper mechanics of how deductions are instructed and remitted are covered in our dedicated piece on check-off loans in Kenya.

Lower-risk does not mean no-risk, and a serious programme layers deterministic controls over every application rather than relying on the structure alone. The key affordability and eligibility rules include:

• Minimum take-home pay. After all deductions, including the new loan, the borrower must retain a minimum net pay, configured by the bank as a policy figure of KES 50,000. This floor applies even where an existing facility is being bought off.
• Affordability driven by the actual payslip. Borrowing capacity is calculated from the employee's real allowances and deductions for the selected employer, not a generic estimate. How that calculation reads the payslip is explained in the payslip affordability check.
• Retirement-age rule. Loan maturity must not fall within three months of the borrower's retirement.
• Employment-contract-maturity rule. For contract staff, the tenure must not run within three months of the contract's expiry.
• Existing-facilities and net-pay verification. The system accounts for loans being taken over and reconciles payslip net pay against bank-statement credits.

These are business rules, deterministic and explainable, not machine-learning predictions. Every decline or referral can be traced to a specific rule, which is exactly what credit committees and auditors expect.

The product set: new loan, top-up and buy-off

Workplace-banking lending is not a single product but a small, well-defined family. A dedicated platform supports all three because they share an application journey but differ in how funds are applied.

1. New Loan. A fresh facility for a scheme member with no existing loan being refinanced. Funds are disbursed to the borrower's account once the loan is booked.
2. Top-up. Additional borrowing layered onto an existing facility for an eligible member, subject to the same affordability and take-home tests.
3. Buy-Off / Take Over. The bank settles a borrower's loan held at another institution and replaces it with its own facility. Eligible institutions are all banks licensed by the Central Bank of Kenya, all CBK-licensed microfinance banks, all SACCOs, and microfinance institutions approved by the bank. Take-overs carry their own settlement plumbing, funds move through a suspense account and settlement to another bank is routed via RTGS, and the full mechanics are set out in our loan buy-off and take-over guide.

Crucially, loans being bought off must be included in the affordability check, so the borrower's true post-consolidation position is assessed rather than a flattering snapshot that ignores the debt being cleared.

Who is involved: the actors in a scheme

Workplace banking is a multi-party, multi-role process, and understanding the actors clarifies why the workflow is more involved than a quick retail loan.

• The employer (scheme). The anchor of the arrangement. The employer authorises check-off, confirms employment, and for government ministries supplies deduction data into IPPD, the government payroll deduction system.
• The borrower. A salaried scheme member whose payslip, identity and existing obligations drive the affordability decision.
• Sales. The Direct Sales Executive originates the application and collects documents; a Sales Manager reviews it before it moves into credit.
• Compliance and credit. A Sales Centre Compliance Analyst verifies documents and runs checks, a Credit Analyst assesses affordability and risk, and a Credit Approver makes the lending decision.
• Operations. Scheme Loan Administrators handle check-off booking, and Credit Admin inputters and verifiers book and disburse the loan under dual control.

These roles map onto a defined sequence of stages, each with its own authorisation gate. The end-to-end sequence, who can do what at each stage and how decisions are recorded, is the subject of our workplace-banking loan workflow article.

Why a dedicated platform rather than a generic loan-origination system

It is tempting to assume any loan-origination system can run a workplace-banking programme. In practice, scheme lending has requirements that generic systems either cannot represent or only fake. Four stand out.

First, scheme parameters per employer. As described above, rate, limits, fees, tenure and insurance vary by employer scheme. The platform must hold these and apply them on selection.

Second, payslip-driven affordability. Capacity is not a single income figure; it is the net of a structured set of allowances (house, commuter, hardship, other) against deductions (PAYE, NSSF, NHIF, pension, SACCO contributions and loans, bank loans, other loans and more), all maintained by the bank and configurable as policy changes. The platform offers forward, reverse and affordability calculators to support this, explained in our piece on forward and reverse loan calculators.

Third, check-off booking and IPPD. Repayment is collected from payroll, so the platform must produce check-off authorisation, book the deduction, and for government schemes generate deduction data delivered to IPPD, which confirms capacity and books the deduction. Generic systems built for direct-debit retail loans have no equivalent.

Fourth, booking into core banking with workplace-specific rules. Disbursement is not simply a transfer; it involves booking the loan in the core banking system with the right scheme and employer codes, applying a one-month moratorium with the first instalment due on the 10th of the following month, and handling break-period interest where the gap to first repayment exceeds a month.

For the generic side of the lifecycle, ongoing servicing, restructures and portfolio management, our loan management product carries that depth, while the workplace-banking application focuses on origination and the scheme-specific machinery around it.

Frequently asked questions

Is workplace banking the same as a payday loan?

No. A payday loan is a short-term, high-cost advance taken on the open market, typically repaid in a single instalment and assessed with minimal underwriting. Workplace banking is structured, instalment lending offered to employees of an approved employer scheme, with repayment deducted from salary through check-off over a defined tenure. It is governed by negotiated scheme parameters, affordability tested against the borrower's actual payslip with a minimum take-home requirement, and supported by employer verification and documented credit assessment. The two products serve different purposes, carry very different risk profiles, and are originated through entirely different processes.

Which employers qualify for a workplace-banking scheme?

A workplace-banking scheme is established between the bank and a specific employer that agrees to support check-off, the deduction of loan instalments from staff salaries at source. Both government ministries and private entities can be onboarded as schemes, though the controls differ: government payrolls are handled through IPPD for deduction confirmation and booking, while private employers are subject to enhanced due diligence such as employer confirmation through an agreed recorded channel. The bank configures each scheme's commercial parameters, rate, loan limits, fees, tenure and insurance, individually, so qualification and terms are set per employer rather than applied uniformly across the market.

How is workplace-banking lending different from a normal personal loan?

A normal open-market personal loan relies on the borrower to make repayments and is underwritten largely on stated income and credit history. Workplace-banking lending is anchored to employment: the employer confirms the relationship and authorises payroll deduction, so instalments are collected at source before the borrower receives their pay. Affordability is calculated from the actual payslip against a configured set of allowances and deductions, with a minimum take-home floor and limits tied to retirement age and contract maturity. This combination of employer involvement, deduction at source and payslip-based assessment makes it a distinct discipline requiring its own origination platform.

To see how these foundations translate into a working system, explore the Workplace Banking product page or request a demo.