India Payments

India is in a category of its own in global payments. UPI processes more real-time transactions monthly than Visa and Mastercard combined globally. Aadhaar gives 1.3 billion people a biometric digital identity usable for instant KYC. The Account Aggregator framework enables consent-based financial data sharing at a scale no other country has achieved. For payment operators, India is simultaneously one of the most sophisticated digital payment markets in the world and one of the most demanding regulatory environments to navigate.

UPI — The World’s Largest Real-Time Rail

Unified Payments Interface (UPI) is operated by NPCI (National Payments Corporation of India) and launched in 2016. It processes over 14 billion transactions per month — a number that continues to grow at 40%+ year-on-year. The architecture is interoperable: any bank account holder can send or receive via any UPI-enabled app, and the sender’s app choice is independent of the recipient’s bank.

The alias system uses VPAs (Virtual Payment Addresses) in the format handle@bankname. Users can also pay via mobile number, Aadhaar, or QR code. PhonePe (Walmart) and Google Pay together handle approximately 80% of UPI transaction volume. Paytm Payments Bank has had regulatory difficulties with RBI but remains a UPI participant. BHIM (the NPCI-operated reference app) serves as the fallback interface.

Zero MDR on UPI transactions is government policy — mandated since January 2020. Merchants pay nothing to accept UPI. The sustainability of this policy has been debated as UPI volume scales, but the government has not moved. For operators, zero MDR at 50% payment volume share means UPI acceptance is a cost reduction tool, not a cost centre.

Cross-border UPI linkages are active with Singapore (PayNow–UPI live since February 2023), UAE, UK, France, and several Southeast Asian countries. UPI One World allows international visitors to India to use UPI without an Indian bank account (via a prepaid wallet). UPI Lite enables offline small-value transactions from device storage. UPI 123PAY extends the rail to feature phones via IVR and missed-call flows.

Payment Aggregator Framework

The RBI Payment Aggregator Guidelines (2020, effective 2021) created a licensing regime that fundamentally restructured how online payment intermediation works in India. Any entity that collects payments from customers on behalf of merchants and settles those merchants — regardless of whether they call themselves a gateway, PSP, or platform — requires a PA licence.

The PA licence requirements are substantive: minimum net worth of INR 25 crore (rising to INR 100 crore for existing players by 2026), escrow account mandatory for all merchant funds, background checks on all key management, and KYC obligations on all onboarded merchants (EMI equivalent). RBI conducts audits and has revoked licences for non-compliance.

Key licensed PAs: Razorpay, PayU (Prosus), Cashfree Payments, CCAvenue, and Paytm Payments. Foreign operators have two options: partner with a licensed PA (as a technology provider to the PA’s licensed operations) or acquire a PA licence directly. Direct foreign PA licensing is possible but slow — the application process takes 12–18 months. The PA-Cross Border (PA-CB) licence is a separate authorisation required for operators handling cross-border payment aggregation.

Card Market and RuPay

Card penetration at 20% understates the velocity of growth — India has been issuing 90M+ credit cards annually, and the base is expanding rapidly. RuPay, NPCI’s domestic card network, has been aggressively promoted by the government and now accounts for approximately 40% of debit card issuance and a growing share of credit card volume, particularly through the RuPay credit card on UPI product (which enables credit card funding of UPI transactions — a significant product innovation).

Zero MDR applies to RuPay debit card transactions as well as UPI, by government mandate. Visa and Mastercard dominate the credit card segment and retain competitive strength in international and premium card products.

No-Cost EMI (equated monthly installments at 0% consumer interest) is a standard checkout option for e-commerce purchases above approximately INR 3,000. The merchant pays a fee to the lending partner, which is embedded in the product price or absorbed as a customer acquisition cost. Operators in consumer electronics, fashion, and travel who do not offer No-Cost EMI will see lower conversion in those categories.

Aadhaar eKYC and the India Stack

The India Stack — the layered digital public infrastructure built over the past decade — is the most significant competitive advantage India offers payment operators. The components:

Aadhaar: Biometric national ID for 1.3 billion people, operated by UIDAI. Licensed entities can perform OTP-based or biometric eKYC using Aadhaar in seconds. Aadhaar-based eKYC dramatically reduces onboarding cost and friction compared to document-upload flows.

DigiLocker: Secure cloud storage for government-issued documents — driving licence, PAN card, degree certificates. Licensed entities can pull verified documents from DigiLocker with user consent, eliminating the document collection step.

Account Aggregator (AA): Consent-based financial data sharing framework. Users can authorise financial institutions to share their transaction history, account information, and credit data with other FIs or platforms. The AA framework enables instant underwriting, credit scoring, and financial product personalisation at a scale not available in any other market.

UPI: As described above — the payment execution layer.

Operators building consumer fintech in India who do not leverage the India Stack are leaving substantial efficiency and conversion advantages on the table.

BNPL

India’s BNPL market reached USD 21.95B in 2025, growing 13.4% YoY (ResearchAndMarkets, Oct 2025). The pure-play providers — Simpl (strong in D2C and food delivery) and LazyPay (PayU-owned) — operate at checkout but command no publicly disclosed market share figures. The dominant BNPL mechanism by transaction value is No-Cost EMI via bank credit cards: merchants pay a subvention fee to the issuing bank, and the product is surfaced natively through Razorpay, Cashfree, and PayU checkout for transactions above approximately ₹3,000.

Regulatory overhead increased materially following RBI’s 2022 digital lending guidelines. BNPL operators must route credit through a regulated NBFC lending partner — operating a direct BNPL product without that structure is non-compliant. For operators integrating BNPL in India, validate that your provider has a confirmed NBFC partnership and that No-Cost EMI via major issuers (HDFC, ICICI, SBI) is enabled at checkout — this is the higher-volume, lower-risk path.

Crypto and Digital Assets

Crypto is legal in India but operates under a punitive tax structure: a flat 30% tax on Virtual Digital Asset gains and 1% TDS on transactions above the reporting threshold. India ranked first globally in crypto adoption (Chainalysis, 2025) with 107M+ users by late 2025. Dominant on-ramps are CoinDCX, WazirX, and Zebpay; Coinbase’s INR ramp is planned for 2026. SEBI assumed oversight of crypto tokens classified as securities from April 2025, while the RBI remains officially cautious and crypto legislation has been actively delayed as of April 2026. Banks may support crypto firms with strict due diligence but cannot hold crypto directly.

For operators, crypto payment acceptance is not a viable checkout option in India. The 30% gains tax plus TDS creates compliance overhead that effectively eliminates merchant and consumer appetite for POS crypto settlement. The market’s size reflects investment and speculative holding — not payments infrastructure. Operators should treat India’s crypto exposure as irrelevant to checkout conversion and monitor legislation before allocating any integration resources.

Regulatory Environment

RBI is the primary regulator for payments. The Payment and Settlement Systems Act (PSSA) 2007 governs licensing. The data localisation directive (2018 circular, still enforced) requires all payment data related to Indian transactions to be stored exclusively in India. This applies to all payment system operators including international card networks, which must store Indian transaction data locally.

DPDP (Digital Personal Data Protection Act) 2023 introduces GDPR-style data protection obligations. It is still being implemented via rules, but operators should assume obligations similar to GDPR for personal data of Indian residents.

Crypto and Virtual Digital Assets (VDAs) are regulated: 30% flat tax on crypto gains, 1% TDS on transactions above threshold. SEBI has jurisdiction over VDA trading platforms. RBI has not issued a blanket ban on crypto (the 2018 circular was overturned by Supreme Court in 2020) but maintains a cautious posture.

Practical Notes for Operators

PSPs. Razorpay is the developer-preferred option for startups and mid-market. Cashfree Payments for disbursement-heavy use cases (payroll, marketplace payouts). PayU for enterprise. CCAvenue for traditional merchant acquiring. Stripe India exists but with limited functionality compared to other markets — verify current payment method coverage before committing.

Settlement. T+1 is standard for cards and UPI. T+0 is available on some UPI flows via direct bank API integration.

Tax. GST 18% applies to payment processing fees. Transfer pricing rules apply to intra-group cross-border fee payments. Engage a Big Four firm or specialist Indian tax counsel — the tax stack is complex.

Banking. Opening a corporate bank account for a foreign subsidiary takes 4–8 weeks. HDFC Bank, ICICI Bank, and Kotak Mahindra are the standard merchant banking relationships for payment operators. INR is not fully convertible — repatriation of profits requires compliance with FEMA (Foreign Exchange Management Act) and RBI filings.

Language. English is the language of business and B2B. Hindi localisation is important for mass-market consumer products in North India. Regional language support (Tamil, Telugu, Bengali, Marathi) materially expands addressable population in respective states.