Prepaid Payment Instruments (PPI) in India

In the rapidly evolving Indian digital payments landscape, Prepaid Payment Instruments (PPIs) have emerged as a cornerstone of financial inclusion and cashless transactions. From mobile wallets to prepaid cards, PPIs allow individuals and businesses to store monetary value electronically and use it for a wide range of transactions — making them a powerful tool in India’s journey towards a less-cash economy.

The Reserve Bank of India (RBI) regulates PPIs under the Payment and Settlement Systems Act, 2007 (PSS Act) and the Master Directions on Prepaid Payment Instruments, which were last comprehensively updated in 2017 and have seen multiple amendments through 2025–2026. Obtaining a PPI License from RBI is mandatory for any entity wishing to issue prepaid instruments commercially in India.

Whether you are a fintech startup, a non-banking financial company (NBFC), a corporate entity, or a bank looking to launch a digital wallet or prepaid card service, this comprehensive guide covers everything you need to know about the PPI License in India as of 2026.

What is a Prepaid Payment Instrument (PPI)?

A Prepaid Payment Instrument (PPI) is a financial product that facilitates the purchase of goods and services, including financial services, remittance facilities, and fund transfers, against the value stored within it. The value stored in a PPI represents the value paid for by the holder — either in cash, by debit to a bank account, or by credit card.

Essentially, PPIs allow users to load money in advance and use it for transactions, much like a digital wallet or a prepaid card. They operate on a stored-value model, where the issuer holds funds in trust and facilitates transactions on behalf of the PPI holder.

Key Characteristics of PPIs

• Stored monetary value in electronic form
• Issued by banks or non-bank entities authorised by RBI
• Used for purchase of goods and services
• Can be used for fund transfers and remittances (subject to limits and type)
• May be in the form of smart cards, magnetic stripe cards, internet accounts, mobile accounts, or mobile wallets

Difference Between PPI and Bank Account

Feature	PPI / Wallet	Bank Account
Issuer	Bank or Authorised Non-Bank Entity	Scheduled Commercial Bank
KYC Requirement	Minimum to Full KYC based on type	Full KYC Mandatory
Transaction Limit	Up to ₹2,00,000 (Full KYC)	No upper cap generally
Interest on Balance	Not applicable	Applicable (Savings A/C)
Fund Transfer	Permitted (with limits)	Unrestricted (NEFT/RTGS/IMPS)
Regulated By	RBI (PSS Act 2007)	RBI (Banking Regulation Act)

Types of Prepaid Payment Instruments (PPIs)

RBI categorises PPIs based on the purpose they serve, the KYC compliance level, and the type of transactions they support. As of 2026, the following categories are officially recognised under the Master Directions on PPIs:

1. Small PPIs (Minimum-KYC PPIs)

Small PPIs are issued based on minimum details of the customer — primarily their mobile number verified with OTP and a self-declaration of name and unique identity number (such as Aadhaar). These instruments are designed for ease of access and financial inclusion.

• Maximum balance at any point in time: ₹10,000
• Total credits in a month: ₹10,000
• Total credits in the financial year: ₹1,20,000
• Usage: Only for purchase of goods and services; no cash withdrawal, fund transfer to bank, or credit to other PPIs
• Validity: 24 months from the date of issue or last credit, whichever is later
• Mandatory upgrade path to Full-KYC PPI within 24 months for continued use

2. Full-KYC PPIs

Full-KYC PPIs are issued to individuals who have completed the full Know Your Customer (KYC) process as per RBI guidelines. These are the most versatile and widely used PPIs in the Indian market.

• Maximum outstanding balance: ₹2,00,000 at any point in time
• Cash withdrawal allowed (subject to limits — up to ₹2,000 per transaction, ₹10,000 per month for non-bank PPIs)
• Fund transfer to bank accounts and other PPIs: Permitted
• No validity restriction — can be used as long as the account is active
• Can be used for all categories of transactions including domestic fund transfers

3. PPI for Mass Transit Systems (PPI-MTS)

These are specialised PPIs issued for use in mass transit systems such as Metro rail, buses, and other public transport networks. Due to their limited-purpose nature, they have a simplified issuance process.

• Can be issued without KYC (based on minimum information)
• Maximum balance: ₹3,000
• Usage: Restricted to transit payments and purchases at transit terminals
• Cash withdrawal and fund transfer: Not permitted

4. Gift PPIs

Gift PPIs are non-reloadable instruments issued for gifting purposes. They are akin to prepaid gift cards and are widely used in retail and corporate gifting.

• Maximum value: ₹10,000
• Non-reloadable
• No KYC required for issuance
• Cannot be used for cash withdrawal or fund transfer
• Valid for a minimum period of 1 year from the date of issuance

Who Can Apply for a PPI License in India?

Not every entity is eligible to apply for a PPI License from the Reserve Bank of India. The eligibility criteria are stringent and designed to ensure that only financially sound and technically capable organisations enter the payments ecosystem.

Eligible Entities

• Companies incorporated in India under the Companies Act, 2013
• Scheduled Commercial Banks (SCBs) — subject to separate approval requirements
• Cooperative Banks — with specific conditions and RBI approval
• Non-Banking Financial Companies (NBFCs) — subject to net worth and other criteria
• Payment Banks — as part of their core operations
• Prepaid Payment Instrument (PPI) issuers already holding RBI authorisation

Key Eligibility Criteria for Non-Bank Entities (2026)

Criteria	Requirement
Minimum Paid-Up Capital	₹5 Crore for new applicants (non-bank entities)
Minimum Net Worth	₹15 Crore at the time of application; ₹25 Crore within 3 years
Promoter Background	Minimum 10 years experience in payments/financial services preferred
Shareholding Restriction	Maximum 49% by any single entity (FDI norms apply)
Company Type	Company registered under Companies Act, 2013
Fit & Proper Criteria	Promoters/directors must satisfy RBI’s fit and proper criteria
Technology Infrastructure	Must have robust IT infrastructure and security framework
Customer Grievance	Dedicated grievance redressal mechanism mandatory

Important Note (2026 Update): RBI has reinforced that entities planning to issue Full-KYC PPIs must demonstrate readiness for interoperability with the Unified Payments Interface (UPI) ecosystem. Full-KYC PPI wallets are now required to be interoperable with UPI, allowing customers to make payments from their PPI wallet using any UPI-enabled app.

Legal Framework Governing PPI License in India

The PPI framework in India is built on a robust legal and regulatory foundation. Understanding this framework is critical for entities seeking authorisation and for maintaining compliance post-licensing.

Primary Legislation

• Payment and Settlement Systems (PSS) Act, 2007: The foundational legislation that empowers RBI to regulate payment systems in India, including the issuance of PPIs.
• Payment and Settlement Systems (Amendment) Act, 2015: Amended the PSS Act to expand its scope and strengthen the regulatory framework.

RBI Master Directions and Circulars

• RBI Master Directions on Prepaid Payment Instruments (Issued in 2017, amended multiple times up to 2025-2026)
• RBI Circular on Interoperability of Full-KYC PPIs (Mandating UPI interoperability)
• RBI Guidelines on KYC (Master Direction — Know Your Customer Direction, 2016, last updated 2024)
• RBI Framework for Authorisation of Payment Systems (2019, updated 2023)
• RBI Circular on cash withdrawal from Full-KYC PPIs (permitting limited cash withdrawals from non-bank PPIs at ATMs/merchant POS)

Other Relevant Laws

• Information Technology Act, 2000 (and IT Amendment Act, 2008): Governs cybersecurity, data protection, and digital transactions
• Prevention of Money Laundering Act (PMLA), 2002: KYC and AML compliance obligations for PPI issuers
• Foreign Exchange Management Act (FEMA), 1999: Governs cross-border PPI usage and foreign fund inflows
• Consumer Protection Act, 2019: Customer rights and grievance redressal obligations for PPI issuers
• Digital Personal Data Protection Act (DPDPA), 2023: Data privacy obligations for PPI issuers handling customer data

Step-by-Step Application Process for PPI License (2026)

Obtaining a PPI License from RBI is a multi-stage process that requires careful preparation, documentation, and regulatory engagement. Below is a detailed breakdown of the application and authorisation process as it stands in 2026.

Stage 1: Pre-Application Preparation

1. Incorporate a company under the Companies Act, 2013 and ensure the memorandum of association includes payments/fintech activities.
2. Achieve the minimum paid-up capital of ₹5 Crore and maintain adequate net worth.
3. Develop a detailed business plan covering the type of PPI, target market, technology infrastructure, security framework, and financial projections.
4. Identify and onboard experienced promoters and directors who satisfy RBI’s fit and proper criteria.
5. Build or procure the required IT infrastructure including servers, encryption, fraud detection systems, and customer service platform.

Stage 2: Online Application Submission

6. Submit the application through RBI’s Centralised Receipt and Processing Centre (CRPC) or the official RBI portal as directed in the latest guidelines.
7. Fill the prescribed application form with complete and accurate details of the company, promoters, directors, and proposed business model.
8. Pay the non-refundable application processing fee as specified by RBI (currently nominal, but subject to RBI revisions).

 

Stage 3: Documentation Submission

The following documents must be submitted along with the application form:

• Certificate of Incorporation of the company
• Memorandum of Association (MOA) and Articles of Association (AOA)
• Audited financial statements for the last 3 years (or projections for new companies)
• Net worth certificate from a Chartered Accountant (CA)
• Details of promoters/directors — PAN, Aadhaar, educational qualifications, work experience, and fit & proper declaration
• Business plan and financial projections for 5 years
• Technology and security audit report from a CERT-IN empanelled auditor
• Board resolution authorising the application
• Undertaking for compliance with RBI guidelines
• Details of proposed PPI type (Small PPI / Full-KYC PPI / PPI-MTS / Gift PPI)
• Details of customer onboarding process and KYC framework
• Details of AML/CFT framework and nodal officer for PMLA compliance
• Escrow account arrangement details (as required for float funds management)

Stage 4: RBI Scrutiny and Due Diligence

9. RBI conducts a thorough scrutiny of the application, documents, and business plan.
10. RBI may seek additional information, clarifications, or documents from the applicant.
11. Background checks are conducted on promoters, directors, and key management personnel.
12. Site visits or meetings with the applicant’s team may be arranged by RBI.

Stage 5: In-Principle Approval

If RBI is satisfied with the application, it grants an In-Principle Approval (IPA). The IPA is typically valid for 6 months (extendable in some cases) and allows the entity to:

• Set up the required technology and operational infrastructure
• Engage with other ecosystem players (banks, payment networks, merchants)
• Complete hiring of key personnel
• Undertake a limited pilot of the PPI service

Stage 6: Final Authorisation

13. After fulfilling all conditions of the IPA, the entity submits a compliance report and evidence of readiness to RBI.
14. RBI conducts a final review and may conduct an on-site inspection.
15. Upon satisfaction, RBI grants the Certificate of Authorisation (COA) under Section 7 of the PSS Act, 2007.
16. The COA is the final PPI License — it is valid as long as the entity complies with all RBI directions and conditions.

Regulatory Compliance Requirements for PPI Issuers

Obtaining the PPI License is just the beginning. PPI issuers must maintain strict ongoing compliance with a wide array of RBI regulations and other applicable laws. Non-compliance can result in penalties, suspension of operations, or cancellation of the COA.

KYC and AML Compliance

• Maintain full KYC records for all Full-KYC PPI holders as per RBI KYC Master Directions
• Implement a robust Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD) framework
• Report suspicious transactions to the Financial Intelligence Unit — India (FIU-IND) under PMLA
• Maintain records of all transactions for a minimum of 5 years
• Appoint a Principal Officer (PO) under PMLA and report to FIU-IND

Escrow Account and Float Management

• All outstanding PPI liabilities (balances in customer PPIs) must be fully backed by funds kept in an Escrow Account with a Scheduled Commercial Bank
• The escrow account must be maintained at all times — the PPI issuer cannot use float funds for its own business operations
• The balance in the escrow must equal at least 100% of the total outstanding balance across all PPIs issued
• Any surplus beyond outstanding balance can be invested in government securities or fixed deposits with scheduled commercial banks

Interoperability Requirements (2026)

• All Full-KYC PPIs issued by non-bank entities must be interoperable via UPI by 2026 as mandated by RBI
• PPI issuers must enable their customers to use the PPI balance via any UPI-enabled third-party app
• Card-based Full-KYC PPIs must be issued on authorised card networks (Visa, Mastercard, RuPay) for interoperability
• PPI issuers must participate in the NPCI’s complaint and dispute resolution framework

Reporting Requirements

Report Type	Frequency	Submitted To
System Audit Report (SAR)	Annual	RBI (DPSS)
Cyber Security Incident Report	Within 6 hours of incident	RBI CSITE / CERT-In
Suspicious Transaction Reports (STR)	As applicable	FIU-IND
Cash Transaction Reports (CTR)	Monthly	FIU-IND
Outstanding PPI Liabilities Statement	Monthly	RBI
Large Value Transaction Report	As applicable	FIU-IND
Annual Return (Form A)	Annually	RBI (DPSS)
Fraud Reporting	Immediately / Weekly	RBI (DPSS)

Customer Grievance Redressal

• Mandatory Nodal Officer for complaint resolution
• Complaints to be resolved within 30 days of receipt
• Customers can escalate to RBI Ombudsman for Digital Transactions if unresolved within 30 days
• PPI issuer must display grievance contact information prominently on app, website, and physical points

Capital Requirements, Fees, and Financial Obligations

Financial readiness is one of the most critical aspects of obtaining and maintaining a PPI License. Here is a comprehensive overview of the financial requirements as applicable in 2026:

Capital and Net Worth Requirements

Financial Requirement	Amount / Condition
Minimum Paid-Up Capital (at application)	₹5,00,00,000 (₹5 Crore)
Minimum Net Worth (at application)	₹15,00,00,000 (₹15 Crore)
Minimum Net Worth (within 3 years of authorisation)	₹25,00,00,000 (₹25 Crore)
Ongoing Net Worth Maintenance	Must be maintained at ₹25 Crore at all times after 3 years
Application Processing Fee	As notified by RBI (typically nominal / administrative)
Escrow Account Requirement	100% of outstanding PPI liabilities at all times

Transaction and Balance Limits (2026)

PPI Type	Maximum Balance	Monthly Load Limit	Cash Withdrawal
Small PPI (Min KYC)	₹10,000	₹10,000	Not Permitted
Full-KYC PPI	₹2,00,000	No Cap (subject to annual review)	Up to ₹10,000/month (non-bank issuers)
PPI-MTS	₹3,000	₹3,000	Not Permitted
Gift PPI	₹10,000	Non-Reloadable	Not Permitted

Penalties and Enforcement Actions by RBI

RBI has strong enforcement powers under the PSS Act, 2007 and exercises them actively to maintain the integrity of the payments ecosystem. PPI issuers must be aware of the consequences of non-compliance.

Types of Penalties

• Monetary Penalty: RBI can impose fines of up to ₹10,00,000 (₹10 Lakh) for non-compliance. For continuing violations, an additional penalty of ₹25,000 per day may be levied.
• Suspension of Authorisation: RBI can suspend the PPI issuer’s COA for a specified period, during which the entity cannot issue new PPIs or onboard new customers.
• Cancellation of Authorisation: In cases of serious or repeated violations, RBI can permanently cancel the COA, effectively shutting down the PPI business.
• Directions for Refund: RBI can direct the PPI issuer to refund customer balances in the event of business wind-down or cancellation of COA.

Common Compliance Violations

• Failure to maintain 100% escrow coverage of outstanding PPI liabilities
• Non-compliance with KYC/AML requirements
• Failure to report incidents, fraud, or suspicious transactions within prescribed timelines
• Breach of transaction or balance limits
• Failure to implement UPI interoperability for Full-KYC PPIs
• Inadequate customer grievance redressal mechanism
• Misrepresentation in application or regulatory submissions

Advantages of Obtaining a PPI License

Despite the rigorous requirements, obtaining a PPI License offers significant strategic advantages for fintech companies and financial institutions operating in India:

Business and Commercial Advantages

• Access to India’s massive and growing digital payments market — India processed over 15,000 crore digital payment transactions in 2024-25
• Ability to offer branded digital wallets, prepaid cards, and payment solutions to millions of customers
• Revenue from interchange fees, transaction fees, float income, and value-added services
• Build a large, loyal customer base with recurring engagement through wallet-based loyalty programs
• Enablement of lending-linked PPIs (buy-now-pay-later / credit line based PPIs) subject to separate RBI guidelines

Strategic and Ecosystem Advantages

• Participation in the NPCI-led UPI and BBPS (Bharat Bill Payment System) ecosystems
• Ability to partner with banks, merchants, and NBFCs to offer co-branded PPI products
• Positioning as a regulated payments entity — enhances trust, brand credibility, and investor attractiveness
• Gateway to other RBI-regulated activities (PPI issuers can later apply for PA/PG license, Payment Bank license, etc.)
• Eligibility for government empanelment and participation in digital India initiatives

Challenges in Obtaining and Operating a PPI License

While the PPI license offers compelling opportunities, applicants must be prepared for several challenges throughout the process:

Application and Regulatory Challenges

• High capital and net worth requirements may be a barrier for early-stage startups
• Lengthy and complex application process — can take 6 to 24 months from submission to final authorisation
• RBI’s discretionary powers mean there is no absolute right to obtain a PPI License even if all conditions are met
• Frequent regulatory changes require constant monitoring and adaptation of compliance frameworks

Operational Challenges

• Maintaining 100% escrow coverage at all times is capital-intensive and constrains cash flow
• Implementing full UPI interoperability requires significant technical investment and coordination with NPCI
• Building a robust cyber security infrastructure to meet RBI’s information security guidelines is expensive
• Customer acquisition costs in a highly competitive market (with UPI now dominant) are very high
• Regulatory reporting burden requires dedicated compliance teams and systems

Key RBI Updates and Developments in 2025–2026

The PPI landscape in India has seen significant regulatory developments in 2025 and 2026. Staying updated on these changes is critical for existing licensees and new applicants alike.

Major Developments

• UPI Interoperability Mandate Fully Enforced (2025): All Full-KYC PPI issuers were required to achieve UPI interoperability by a prescribed deadline in 2025. As of 2026, full interoperability is the norm, and non-compliant issuers face regulatory action.
• Enhanced Cash Withdrawal Facility: RBI expanded cash withdrawal from Full-KYC PPIs issued by non-bank entities at ATMs and merchant POS terminals — currently permitted up to ₹2,000 per transaction.
• Credit Line-Linked PPIs — Clarity Provided: RBI issued detailed guidelines on the use of pre-sanctioned credit lines from banks to load PPIs, establishing a clear framework for credit-linked PPI products.
• Digital Personal Data Protection Act (DPDPA) Compliance: PPI issuers are now obligated to comply with the DPDPA, 2023, including appointment of Data Protection Officers, consent-based data processing, and data breach reporting.
• Stronger Cybersecurity Mandates: RBI’s updated information security guidelines (Master Direction on IT Risk and Cyber Security) impose enhanced security requirements including real-time fraud detection, tokenization, and mandatory security audits.
• Increased Focus on PPI for Financial Inclusion: RBI has encouraged PPI issuers to develop products targeting unbanked and under-banked populations, particularly in rural India.

PPI License vs. Payment Aggregator (PA) License vs. Payment Bank

Many fintech entities often get confused between the PPI License, Payment Aggregator (PA) License, and Payment Bank License. Here is a concise comparison to help understand their differences:

Parameter	PPI License	PA License	Payment Bank License
Primary Activity	Issue prepaid wallets/cards to customers	Aggregate payments for merchants	Accept deposits, issue PPIs, remittances
Customers Served	Retail consumers and businesses	Online merchants	Retail depositors and consumers
Deposit Taking	No (only stored-value/escrow)	No	Yes (up to ₹2 Lakh per customer)
Lending Activity	Not directly permitted	Not permitted	Not permitted (as of 2026)
Minimum Capital	₹15 Crore net worth	₹25 Crore net worth	₹100 Crore
Regulator	RBI (PSS Act)	RBI (PSS Act)	RBI (Banking Regulation Act)
Complexity	High	Moderate to High	Very High

How to Choose the Right PPI Model for Your Business

With multiple PPI types and various business use cases, selecting the right PPI model is a critical strategic decision. Here are some guiding questions and scenarios:

Scenario-Based Selection Guide

• If your target is retail consumers for day-to-day digital payments and UPI-based transactions: Full-KYC PPI Wallet is the right choice. This gives the widest functionality and the highest balance limits.
• If you want to serve a semi-urban/rural market quickly with minimal onboarding friction: Small PPI (Minimum-KYC) with a clear upgrade path to Full-KYC is the ideal entry point.
• If you are a mass transit operator (metro, bus): PPI-MTS is specifically designed for you and has a simplified regulatory framework.
• If your business is in corporate gifting, employee benefits, or retail loyalty programs: Gift PPI or co-branded prepaid cards on Visa/Mastercard/RuPay are the most appropriate options.
• If you want to serve merchants and enable digital collections: Consider whether a PA License combined with a PPI License better serves your model.

Frequently Asked Questions (FAQs) on PPI License

Q1: Can a startup apply for a PPI License directly from RBI?

Yes, a startup incorporated as a company under the Companies Act, 2013 can apply for a PPI License from RBI, provided it meets all the eligibility criteria including minimum capital, net worth, and fit & proper norms for promoters and directors.

Q2: How long does it take to obtain a PPI License in India?

The timeline varies, but typically ranges from 6 to 24 months from the date of submission of the complete application. The process includes RBI scrutiny, due diligence, In-Principle Approval (IPA), and final Certificate of Authorisation (COA).

Q3: Can a foreign company obtain a PPI License in India?

A foreign company cannot directly apply for a PPI License in India. However, a foreign entity can incorporate a subsidiary or joint venture company in India and apply through that Indian entity, subject to FDI norms for the payments sector.

Q4: What happens to customer funds if a PPI issuer shuts down?

All outstanding PPI liabilities are backed 100% by the escrow account maintained with a scheduled commercial bank. In the event of a shutdown or cancellation of authorisation, RBI ensures that customers are refunded their outstanding balances from the escrow funds.

Q5: Is a PPI License required to offer UPI payments?

No. A PPI License is required to issue prepaid wallets or cards. To offer UPI payment services as a Third-Party Application Provider (TPAP), entities must tie up with a member bank and comply with NPCI’s TPAP guidelines — a PPI License is not mandatory for this purpose.

Q6: What is the validity of a PPI License?

The Certificate of Authorisation (COA) issued by RBI does not have a fixed expiry date. It remains valid as long as the PPI issuer complies with all RBI guidelines, directions, and conditions attached to the authorisation.