The strategic signal
India’s payment aggregator market operates under specific authorization, merchant due-diligence, settlement and risk-management requirements. For companies facilitating cross-border payments, the regulatory framework affects product design, partner selection, compliance staffing and working capital. It is inaccurate to treat the rules as a blanket capital shock that affects every fintech in the same way.
The Reserve Bank of India issued the Regulation of Payment Aggregator–Cross Border circular in October 2023 and later consolidated payment aggregator requirements in its September 2025 Payment Aggregator Directions. The 2025 directions include PA–Cross Border provisions and updates arising from consultation.
Why compliance changes the operating model
Payment aggregators operate within a regulated chain involving merchants, customers, banks, settlement processes and controls against fraud and misuse. Requirements can influence onboarding, documentation, monitoring, dispute management, escrow operations and reporting. The precise obligations depend on the entity’s role, authorization status and the applicable direction.
What fintech leaders should assess
- Regulatory scope: Determine whether the business acts as a payment aggregator, a cross-border aggregator, a technology provider or another type of participant.
- Authorization: Confirm the approvals and conditions applicable to the actual service.
- Merchant due diligence: Ensure onboarding and ongoing monitoring processes match the relevant requirements.
- Settlement and escrow: Map fund flows, reconciliation, exception handling and account controls.
- Partner dependencies: Review the roles of banks, processors and other service providers, including contractual responsibilities.
- Unit economics: Model compliance staffing, fraud losses, dispute handling and settlement timing without assuming every requirement applies identically to every company.
Compliance debt is a management choice
Deferring controls can create expensive remediation when a company scales or changes its product. Building compliance into onboarding, transaction monitoring and reconciliation is usually more robust than treating it as a last-minute checklist. But a business should not overbuild controls based on a headline; legal and compliance teams should map each requirement to the actual service.
FutureIsNow’s related analysis covers AI governance in financial services, AI transparency and accountability and enterprise data and infrastructure controls.
Bottom line
RBI’s payment aggregator directions are a material part of the operating environment for cross-border fintechs, but their impact depends on the business model and applicable requirements. Understand the rules, map the fund flows and price compliance into the product economics before scaling.
