India (IN)

Licensing, Authorisation & Market Access

India's payment-aggregator licensing perimeter has moved from transition into full operation. The RBI (Regulation of Payment Aggregators) Directions, 2025, issued 15 September 2025 and effective immediately, require non-bank payment aggregators to obtain RBI authorisation under the PSS Act, carrying a Payment Aggregator authorisation under Section 7 with no exemption available. The prudential ladder sets net worth at INR15cr at application, rising to INR25cr by the end of the third financial year, alongside escrow-only settlement and Companies Act 2013 incorporation.

The bank-PSP versus non-bank distinction is structurally embedded: the Directions apply to both bank and non-bank entities but the authorisation gate and escrow regime separate aggregators that touch customer money — settling via escrow on a T+1 basis — from gateways that handle data only. As of June 2026 the transition period has closed, with the PA-P wind-up deadline having passed on 28 February 2026; the regime is roughly nine months operative and fully in force. It now gates market access for over 60 authorised PA entities, including Razorpay, Pine Labs, Cashfree, Stripe India, Amazon Pay and Google. A caveat applies: the standing baseline initially reads as newly-in-force, but the Directions are mature rather than new.

Outlook

The W1a trajectory is established. With the transition window closed and the authorised-entity cohort settled, the live questions shift from market entry to conduct and prudential maintenance under the adjacent W1b conduct regime. No further immediate licensing change is flagged in the horizon for this module.

Conduct, Safeguarding & Promotions

India's safeguarding model for non-bank PPI issuers and payment aggregators rests on a mandatory single-bank INR escrow account held with a scheduled commercial bank, with no co-mingling, a day-end balance floor not below outstanding PPIs plus acquirer dues, and quarterly statutory-auditor certification. The non-bank PPI issuer or PA is deemed a designated payment system under Section 23A(3) of the PSS Act, and the PPI issuer holds a perpetual, conditional Certificate of Authorisation. This escrow-based approach contrasts with the EU/UK segregation-plus-insurance models, carrying the bank versus non-bank distinction explicitly through the safeguarding mechanism.

The live development is the draft PPI Master Direction 2026, released 22 April 2026 with comments closing 22 May 2026. It adds codified fit-and-proper criteria, multilingual (English/Hindi/local) disclosure, nodal-officer grievance redress and co-branding liability rules — raising the conduct burden on non-bank wallet issuers. The comment period has now closed and the final Master Direction is pending as of late June 2026; cited provisions remain draft.

Outlook

The W1b trajectory is escalating. The final notification of the PPI Master Direction is expected in the second half of 2026 and would repeal and replace the 2021 PPI MD, codifying the conduct, disclosure and grievance architecture. Until finalisation, the cited fit-and-proper and co-branding provisions remain at draft status.

Stablecoins & Digital Money

India's digital-money posture is CBDC-led and stablecoin-sceptical. The Digital Rupee (e-Rupee) comprises wholesale e-Rupee-W, launched 1 November 2022 for G-sec settlement, and retail e-Rupee-R, launched 1 December 2022; the instrument is legal tender, bears no interest, and provides cash-like settlement finality. The retail user base is estimated at around 6-10 million by mid-2026, a range reflecting source variance and an unanchored primary count.

RBI advocates prioritising CBDCs over privately issued stablecoins, and there is no in-force stablecoin framework, though the Economic Survey 2025-26 signals possible future regulation. The bank-PSP orientation of the e-Rupee distribution model is explicit. RBI plans bilateral and multilateral cross-border CBDC pilots in 2026-27, alongside a CBDC & Asset Tokenisation Sandbox and the Unified Markets Interface (UMI). Programmable e-Rupee deployment in welfare schemes signals state-rail expansion over private stablecoins.

Outlook

The W2 trajectory is stable on the CBDC track and stable-to-watchful on stablecoins. Cross-border CBDC pilots flagged for 2026-27, wider domestic use-cases, the tokenisation sandbox and UMI for tokenised-asset settlement in wholesale CBDC define the forward agenda. Any move toward a stablecoin framework would be a notable departure from the current sceptical stance.

Operational Resilience & Critical Infrastructure

India's operational-resilience regime for payments rests on a layered set of Master Directions rather than a single statute. These comprise the Master Directions on Cyber Resilience & Digital Payment Security Controls for non-bank PSOs (July 2024), the Master Direction on IT Governance, Risk, Controls & Assurance Practices (effective 1 April 2024), the Master Direction on Outsourcing of IT Services (10 April 2023), and the RBI (Commercial Banks — Managing Risks in Outsourcing) Directions 2025. Core obligations include board-approved cyber and IT governance, BCP/DR, vendor and cloud risk management, and cyber-incident reporting to RBI within six hours of detection; existing outsourcing arrangements must comply by 10 April 2026. The framework applies to both banks and non-bank PSOs.

A structural gap stands out: no single DORA-style critical-third-party designation regime has been identified for India. Resilience obligations sit within the outsourcing and DPSC frameworks, which under-index on third-party and cloud-concentration risk relative to an explicit CTP-designation lens.

Outlook

The W3 trajectory is stable. The six-hour incident-reporting obligation and the 10 April 2026 outsourcing-compliance deadline raise compliance cost for PSOs and banks, but the absence of a DORA-equivalent critical-third-party regime remains the key structural gap versus the EU. No CTP-designation development is currently flagged.

Scheme & Network Compliance

Scheme economics in India are dominated by the zero-MDR regime. RBI caps debit-card MDR at up to 0.90% and NPCI caps UPI P2M MDR at up to 0.30%, but since January 2020 MDR is statutorily zero for RuPay debit cards and BHIM-UPI via Section 10A of the PSS Act and Section 269SU of the Income-tax Act, funded by a government incentive scheme paid to acquiring banks. Credit cards carry no regulatory MDR cap, and a roughly 1.1% interchange applies to PPI-routed UPI merchant transactions over INR2,000. The regime applies across both bank and non-bank acquirers.

The live pressure point is funding. A 2026 parliamentary Finance Committee is pushing to reintroduce MDR on large UPI merchants, citing that the government incentive covers only around 11% of industry cost. Zero-MDR is the structural funding tension of Indian rails: PSPs and banks bear the gap, and a reintroduction of large-merchant MDR could materially reset acquiring economics.

Outlook

The W4 trajectory is escalating, and this module is assessed as the highest-probability source of material 2026-27 change. The parliamentary push to reintroduce large-merchant UPI MDR would most plausibly land in 2027 and would reset acquiring economics if adopted. The zero-MDR funding gap remains the central unresolved commercial variable across the India baseline.

Payment Corridor Dynamics

India's corridor strategy is UPI-led and run through NPCI International (NIPL) in concert with RBI. The UPI-PayNow linkage with the Monetary Authority of Singapore, launched February 2025, is the world's first cloud-based real-time cross-border remittance corridor — a bilateral India-Singapore arrangement now expanded to 19 participating Indian banks. Daily caps run at SGD1,000 / INR60,000, governed by FEMA under the LRS USD250,000/year limit.

Distinctly from that remittance corridor, UPI is accepted for merchant (P2M) payments in eight-plus countries — UAE, Singapore, Bhutan, Nepal, Maldives, Mauritius, France and Sri Lanka — backed by 23-plus DPI MoUs, and RBI has joined BIS Project Nexus. The analytical discipline here is to keep the bilateral UPI-PayNow real-time remittance corridor separate from the broader merchant-acceptance footprint; conflating the two overstates the remittance reach. The corridor framework carries both bank and non-bank participation.

Outlook

The W5 trajectory is escalating. UPI internationalisation positions India as a fast-payment-rail exporter, with corridor selection balancing remittance and tourism flows against regulatory compatibility, and Project Nexus signalling multilateral interlinkage. GCC remittance talks remain ongoing on the IN-AE axis. Cross-border AML and sanctions interaction is referred to FIM.

Industry Structure & Commercial Dynamics

The Indian payments market is structurally concentrated but eroding at the top. UPI handles around 86% of India's digital transaction volume — over 23 billion payments per month, around INR30 lakh crore. PhonePe (46.2%) and Google Pay (32.7%) combined fell to around 79% in May 2026, the first time below 80%. Challengers are gaining: Navi (from 0.21% to 3.6%), Flipkart's super.money (1.8%), BHIM and WhatsApp Pay. NPCI's proposed 30% per-app volume cap has been deferred to 31 December 2026, and Amazon and Meta have joined lobbying over duopoly dominance. UPI-enabled banks grew to 685 by December 2025. This module sits on the non-bank PI/EMI side of the market structure, with per-app share data derived from Tier-3 NPCI-sourced journalism, held at Assessed confidence.

Outlook

The W6 trajectory is escalating. The 30% per-app cap deferred to 31 December 2026 is the central structural lever, but implementation feasibility is uncertain while PhonePe and Google Pay both sit well above the threshold. Duopoly erosion and Amazon/Meta lobbying signal shifting competitive dynamics in the world's largest real-time-payments market. Per-app share signals remain under-verified against primary NPCI data.

Legal & Litigation

RBI runs an active payments-enforcement posture. It imposed monetary penalties on 353 entities totalling INR54.78cr in FY2024-25, and on 15 May 2026 penalised Appnit Technologies INR5.8 lakh for KYC/PPI non-compliance under Sections 30/31 of the PSS Act. The pivotal legal development is a 2026 RBI Ombudsman order that shifted liability onto banks whose receiving-side KYC, AML, transaction-monitoring and STR systems failed, departing from the prior contributory-negligence OTP-disclosure defence. Separately, a court held that 'payment system' under PMLA must be broadly construed to include OPGSPs, in the PayPal/Abhijit Mishra case. The enforcement reach spans both bank and non-bank entities.

These findings rest on Tier-3 secondary sources and are held at Assessed confidence; the vicarious-liability principle is the key precedent.

Outlook

The W7 trajectory is escalating. The Ombudsman vicarious-liability shift onto receiving banks for mule-account and KYC failures is a material precedent reshaping fraud-loss allocation and raising bank onboarding-diligence burden. Primary RBI confirmation of the Ombudsman order and enforcement statistics is pending, with confidence held at Assessed accordingly.

Merchant Acquiring & Risk

Merchant acquiring in India is governed by the PA Directions — escrow settlement, merchant KYC and onboarding — together with the card-scheme rulebooks of Visa, Mastercard and RuPay for the chargeback cycle. RBI mandates an Online Dispute Resolution (ODR) system under DPSS.CO.PD No.116/02.12.004/2020-21, plus card-on-file tokenisation and eMandate rules for recurring transactions. The dispute architecture diverges by rail: card chargebacks follow a 45-120 day network cycle with issuer temporary credit, while UPI disputes use a separate NPCI 3-day mechanism, escalating to the RBI Integrated Ombudsman Scheme 2021. Both bank and non-bank acquirers are in scope.

The ODR circular is Tier-1 primary, while the network chargeback-cycle detail rests partly on a Tier-4 source; the overall module confidence is High.

Outlook

The W8 trajectory is stable. Mandatory ODR, tokenisation and the UPI-versus-card dispute-cycle divergence — three-day NPCI against the 45-120-day network window — materially affect acquirer operations and merchant dispute handling. Network-rulebook primary verification of the chargeback cycle has not been obtained, leaving merchant-acquiring operations somewhat under-indexed relative to the regulatory framing.

Product Innovation & Market Development

India's product-innovation frontier layers new commerce and access patterns on top of UPI rails. The thematic build-out spans UPI 123Pay and UPI Lite, offline NFC CBDC, the CBDC & Asset Tokenisation Sandbox, and the Unified Markets Interface (UMI). The emerging product frontier includes agentic and conversational payments: a Razorpay-NPCI-OpenAI tie-up enabling ChatGPT users in India to find products and instantly purchase them with UPI illustrates AI-driven product build-out around real-time rails. This thematic product-access view is distinct from discrete commercial events; the specific Razorpay-NPCI-OpenAI launch is rendered as a W13 commercial event, while the structural UPI product-rail innovation theme sits here in the W9 standing position. The module reflects non-bank PI/EMI product activity built on state rails.

Outlook

The W9 trajectory is escalating. Agentic and conversational UPI payments mark an emerging product frontier layering AI commerce onto India's real-time rails, while UPI 123Pay/UPI Lite limit raises, offline NFC CBDC and UMI extend the access surface. The pace of AI-payment integration is the principal forward variable.

Consumer Protection & APP Fraud

India's APP-fraud compensation framework is moving toward an imminent effective date. Draft Third Amendment Directions 2026 (Responsible Business Conduct), proposed 6 March 2026 and effective 1 July 2026, provide that a customer suffering genuine fraud loss up to INR50,000 may receive 85% of net loss or up to INR25,000, whichever is lower, once per lifetime, for transactions on or after 1 July 2026 at commercial banks — excluding small finance banks, payments banks, RRBs and local area banks — reported within five days. RBI bears around 65% of cost, with the remainder split between sending and receiving banks. The scheme applies on the bank-PSP side.

This design contrasts with the UK FSMA 2023 / PSR model of full reimbursement up to GBP85,000 split 50:50 between PSPs with no central-bank role. The fraud backdrop is significant: national cyber-crime complaints rose to 24.03 lakh in 2025, and UPI fraud grew to 13.42 lakh cases (INR1,087cr) in 2023-24. Sourcing is Tier-3; confidence is High on the proposal's existence and parameters.

Outlook

The W10 trajectory is escalating. The scheme takes effect 1 July 2026. India's central-bank-funded, capped, once-per-lifetime model is structurally distinct from the UK PSP-funded full-reimbursement regime — a key comparative datapoint for global APP-fraud policy design.

AML/CFT & Financial Crime

This module is carried from the Sentinel.gi feed; no original illicit-finance analysis is performed here. Per the FATF September 2024 Mutual Evaluation Report, India rated compliant or largely compliant on 37 of 40 Recommendations — partial on R.8 (NPOs), R.12 (PEPs) and R.28 (DNFBP supervision) — with 'substantial' effectiveness in six areas but only 'moderate' on AML/CFT supervision (IO.3). FATF found monetary penalties on financial institutions generally not proportionate or dissuasive. India was placed in 'regular follow-up', the highest category, alongside the UK, France and Italy among G20 members. FIU-IND fined a VDA service provider USD2.16m (INR18.2cr) in June 2024 for STR-monitoring failures, and a payments bank was fined and wound down for AML/CFT violations. The intelligence is attributed to the Sentinel feed; see Sentinel.gi for the underlying analysis.

Outlook

The W11 trajectory is stable. FATF 'regular follow-up' status supports India's cross-border DPI ambitions, while the 'moderate' supervision-effectiveness and non-dissuasive-penalties findings constitute the residual risk surface for payments. Cross-border UPI corridor AML and sanctions interaction is routed to FIM rather than concluded here.

Correspondent Banking, Settlement & Access

The analytical spine of this module is the bank versus non-bank settlement-access asymmetry. Central settlement runs on RBI-owned Centralised Payment Systems — RTGS (large-value, real-time, 24x7x365 since December 2020) and NEFT (batch, 24x7 since December 2019), both on the e-Kuber core banking system. Since July 2021 RBI has opened direct CPS membership to authorised non-bank PSPs — PPI issuers, card networks and white-label ATM operators — under Section 10(2) read with Section 18 of the PSS Act, requiring INR25cr net worth, Indian incorporation, data-localisation, a separate IFSC, an RBI current account and INFINET/SFMS membership.

The access, however, is capped: non-banks are excluded from intra-day liquidity and cannot sponsor sub-members. An LEI is required for RTGS/NEFT transactions of INR50cr or more. Direct non-bank CPS access materially advances PSP settlement independence from sponsor banks, but the intra-day-liquidity exclusion and no-sub-member rule are the structural limits on access depth.

Outlook

The W12 trajectory is stable. Non-bank CPS access since 2021 is an India-distinctive settlement-access feature, with the intra-day-liquidity exclusion as the key remaining structural limit. No change to the liquidity-exclusion or sub-member rules is currently flagged.

Commercial Intelligence (M&A, Investment & Product)

Three discrete commercial events define this cycle's W13 entries. First, Razorpay confidentially filed for a roughly USD600m IPO in June 2026, targeting a year-end debut (last valued at around USD7.5bn in its 2021 round); it separately obtained shareholder approval in May 2026 to raise INR2,700cr (~USD283m) via the fresh-issue component plus an undisclosed offer-for-sale, with a pre-IPO placement planned before filing its RHP with SEBI. This anchors India's fintech listing pipeline and signals public-market appetite for licensed payments platforms with merchant networks.

Second, the sector funding trend shows consolidation: Indian fintech funding stood at USD513m in Q1 2026 with a sharply falling deal count, indicating investors backing fewer, stronger players and favouring mature platforms with licences and merchant networks. PhonePe filed in late 2025 and received listing approval in January 2026 at a USD9-10.5bn target valuation, and Pine Labs progressed toward its IPO.

Third, Razorpay partnered with NPCI and OpenAI to launch an AI-powered 'conversational payment experience' ('Agentic Payments') enabling ChatGPT users in India to purchase products instantly via UPI; this partnership's value is not publicly disclosed. All three events sit on the non-bank PI/EMI side and are held at Assessed confidence, rendered as commercial events distinct from W6 structural market analysis and the W9 thematic product view.

Outlook

The W13 trajectory is escalating. The Razorpay, PhonePe and Pine Labs IPO pipeline amid funding consolidation toward licensed scale players is the dominant signal. Some adjacent M&A detail rests on a Tier-4 source with undisclosed values and is not asserted as a structured commercial event.