Payment Aggregator License

A Payment Aggregator license is a formal authorization granted by the Reserve Bank of India (RBI) under the Payment and Settlement Systems Act, 2007. It permits non-bank entities to pool funds from customers and channel them to e-commerce merchants to settle online transactions.

Any non-bank entity that intends to provide payment aggregation services, onboard online merchants, and handle customer funds through an escrow account to facilitate digital payments must obtain this license.

A Payment Gateway provides the technical infrastructure (software) to route transaction data without handling the money. A Payment Aggregator not only provides the technology but also collects, pools, and processes the actual transaction funds before transferring them to the merchant.

Introduced by the RBI to streamline international transactions, the PA-CB license allows entities to facilitate payments for import and export goods and services online. It is mandatory for platforms processing cross-border digital payments.

An applicant company must have a minimum net worth of ₹15 Crore at the time of submitting its application to the RBI. It must then scale up and maintain a minimum net worth of ₹25 Crore by the end of the third financial year after authorization.

No. Only a company incorporated in India under the Companies Act, 2013 (or previously under the Companies Act, 1956) is eligible to apply for an RBI Payment Aggregator license.

A Payment Aggregator must maintain customer funds in a dedicated, non-interest-bearing Escrow Account with a Scheduled Commercial Bank. This ensures that merchant settlements are completely segregated from the aggregator’s own operational funds, protecting public money.

Applicants must implement robust IT architecture, clear strict cybersecurity norms, and maintain mandatory PCI-DSS (Payment Card Industry Data Security Standard) and PA-DSS compliance to secure cardholder data.

In alignment with the RBI’s data localization directives, all transaction data, customer credentials, and payment logs processed by the Payment Aggregator must be stored strictly on servers located within India.

The RBI evaluates the integrity, financial track record, competence, and legal background of the company’s promoters and directors. Anyone with a history of bankruptcy, regulatory blacklisting, or criminal convictions will disqualify the application.

The approval timeline typically ranges from 6 to 12 months. It depends extensively on the completeness of the documentation, the results of background checks on promoters, and the technical audit evaluation by the RBI.

Licensed PAs must perform strict Customer Due Diligence (CDO) and Know Your Customer (KYC) compliance on all merchants they onboard. They must ensure that the merchants are not involved in selling illegal goods, money laundering, or fraudulent activities.

No. E-commerce marketplaces that collect funds from consumers and settle them to third-party vendors selling on their platform are considered payment aggregators. They must either obtain an RBI license or route their payments entirely through an authorized bank/third-party PA.

PAs must submit regular periodic returns to the RBI. These include audited annual financial statements, net worth certificates, cybersecurity audit reports (SAR), transaction volume statistics, and details of customer grievances.

Yes. For cross-border transactions facilitated under a PA-CB license, the RBI caps the maximum value per transaction for import/export of goods and services at ₹25 Lakh.

Operating a payment aggregation business without explicit RBI authorization is a punishable offense under the Payment and Settlement Systems Act, 2007. It can result in severe financial penalties, the shutting down of operations, and criminal prosecution of management.

Every licensed PA must establish a robust, board-approved Customer Grievance Redressal Policy. This must include a designated Nodal Officer, an automated dispute tracking system, and a clearly defined matrix to resolve merchant and consumer issues within RBI-stipulated timelines.

Yes. A company can apply for a combined authorization to handle both domestic payment aggregation and cross-border (PA-CB) transactions, provided they meet the maximum threshold financial and security compliances required for both frameworks.