{"id":12712,"date":"2026-04-22T17:36:01","date_gmt":"2026-04-22T17:36:01","guid":{"rendered":"https:\/\/srv1603485.hstgr.cloud\/pa-compliance-checklist-for-new-brands\/"},"modified":"2026-04-22T17:36:01","modified_gmt":"2026-04-22T17:36:01","slug":"pa-compliance-checklist-for-new-brands","status":"publish","type":"post","link":"https:\/\/accelaronix.in\/blogs\/pa-compliance-checklist-for-new-brands\/","title":{"rendered":"PA Compliance Checklist for New Brands"},"content":{"rendered":"<h2 id='what-a-payment-aggregator-licence-means-in-2025'><b>What a Payment Aggregator Licence Means in 2025<\/b><\/h2>\n<p>In India\u2019s fast-growing digital payments space, any business that collects online payments for merchants or itself must comply with RBI\u2019s <b>Payment Aggregator (PA)<\/b> framework. Under <a href=\"https:\/\/taxguru.in\/rbi\/rbi-regulation-payment-aggregators-directions-2025.html\" target=\"_blank\" rel=\"noopener\">rbi pa guidelines 2025<\/a>, all new brands facilitating checkout, subscriptions, or invoice payments need a valid PA licence or a tie-up with a licensed aggregator.<\/p>\n<p>RBI introduced the PA model to ensure customer funds, refunds, and merchant settlements happen transparently through regulated channels. For startups, this means stricter KYC norms, escrow maintenance, and system audits \u2014 but also credibility and user trust.<\/p>\n<p>By 2025, RBI has further tightened rules for PA onboarding, data storage, and fraud detection, making compliance a business advantage rather than a burden.<\/p>\n<p><i style=\"background-color:#f0f8ff;border-left:4px solid #007BFF;\n\npadding:14px;border-radius:6px;font-size:1.05rem;display:block;margin:12px 0;\"><\/p>\n<p><b>Insight:<\/b> Without a PA licence or partnership, new brands cannot legally accept digital payments from customers in India.<\/p>\n<p><\/i><\/p>\n<h2 id='core-rbi-rules-every-new-brand-must-follow'><b>Core RBI Rules Every New Brand Must Follow<\/b><\/h2>\n<p>Before applying, brands should understand what the RBI expects. Under <a href=\"https:\/\/enterslice.com\/learning\/rbi-2025-guidelines-for-payment-aggregators\/\" target=\"_blank\" rel=\"noopener\">pa licence application process<\/a>, the regulator categorizes applicants as \u201cstandalone aggregators\u201d or \u201cmerchant platforms\u201d that handle funds for others.<\/p>\n<p><b>Key RBI requirements as of 2025:<\/b><\/p>\n<ul>\n<li><b>Net worth:<\/b> Minimum \u20b925 crore for existing PAs, \u20b915 crore for new ones (to be reached within 3 years).<\/li>\n<li><b>Escrow account:<\/b> All customer payments must pass through a nodal or escrow account with a scheduled commercial bank.<\/li>\n<li><b>Settlement timelines:<\/b> T+1 day for merchants after receipt of funds.<\/li>\n<li><b>KYC and merchant due diligence:<\/b> Mandatory verification of all onboarded merchants, including directors and UBOs.<\/li>\n<li><b>Data storage:<\/b> Transaction data must be stored only in India, under <a href=\"https:\/\/castler.com\/learning-hub\/rbi-guidelines-for-payment-aggregators-and-escrow-accounts-explained-%282025-update%29\" target=\"_blank\" rel=\"noopener\">pa data security framework<\/a>.<\/li>\n<li><b>Cyber audit:<\/b> Annual system audit by a CERT-In empanelled auditor.<\/li>\n<\/ul>\n<p>These norms apply to all aggregators \u2014 from fintechs like Razorpay and Cashfree to new retail or service platforms offering digital checkout flows.<\/p>\n<p><i style=\"background-color:#f0f8ff;border-left:4px solid #007BFF;\n\npadding:14px;border-radius:6px;font-size:1.05rem;display:block;margin:12px 0;\"><\/p>\n<p><b>Tip:<\/b> Keep your compliance dashboard live \u2014 RBI audits often happen with just 7 days\u2019 notice.<\/p>\n<p><\/i><\/p>\n<h2 id='your-step-by-step-pa-compliance-checklist'><b>Your Step-by-Step PA Compliance Checklist<\/b><\/h2>\n<p>Getting PA approval can feel daunting, but breaking it down helps. Here\u2019s a simple compliance roadmap for new entrants planning to file applications in 2025.<\/p>\n<ol>\n<li><b>Legal entity setup:<\/b> Register as a company under the Companies Act, 2013 \u2014 sole proprietorships aren\u2019t eligible.<\/li>\n<li><b>Capital verification:<\/b> Submit CA-certified net worth statement meeting the \u20b915\u201325 crore requirement.<\/li>\n<li><b>Escrow arrangement:<\/b> Open an escrow or nodal account with an RBI-approved bank.<\/li>\n<li><b>Merchant KYC & due diligence:<\/b> Design a standard onboarding policy and internal fraud-check list.<\/li>\n<li><b>Technology readiness:<\/b> Implement secure APIs, two-factor authentication, and transaction logging.<\/li>\n<li><b>Data localisation compliance:<\/b> Host all UPI, card, and wallet data within India.<\/li>\n<li><b>Customer grievance cell:<\/b> Appoint a nodal officer and publish contact details on your website.<\/li>\n<li><b>Auditor empanelment:<\/b> Hire a CERT-In-approved IT auditor to conduct annual compliance checks.<\/li>\n<li><b>Application submission:<\/b> File your PA application via RBI\u2019s COSMOS portal with full documentation.<\/li>\n<\/ol>\n<p>RBI typically takes 3\u20136 months to review an application. New brands can operate under \u201cin-principle\u201d approval during review but must submit quarterly progress reports.<\/p>\n<p><i style=\"background-color:#f0f8ff;border-left:4px solid #007BFF;\n\npadding:14px;border-radius:6px;font-size:1.05rem;display:block;margin:12px 0;\"><\/p>\n<p><b>Insight:<\/b> Treat your RBI application like an investor pitch \u2014 clarity and documentation matter more than size.<\/p>\n<p><\/i><\/p>\n<h2 id='audit-risk-and-user-trust-staying-licence-ready'><b>Audit, Risk and User Trust: Staying Licence-Ready<\/b><\/h2>\n<p>Even after approval, compliance doesn\u2019t stop. RBI\u2019s 2025 updates emphasize ongoing monitoring \u2014 not one-time paperwork. As covered under <a href=\"https:\/\/www.frslabs.com\/frsblog\/2025\/09\/17\/payment-aggregator-due-diligence-in-india-rbi-rules-explained\/\" target=\"_blank\" rel=\"noopener\">merchant onboarding rules<\/a>, every PA must maintain real-time visibility into merchant activity and transaction patterns.<\/p>\n<p><b>Checklist for ongoing compliance:<\/b><\/p>\n<ul>\n<li>Conduct semi-annual security and data audits.<\/li>\n<li>Review merchant KYC every 12 months.<\/li>\n<li>Automate risk alerts for unusual payment behaviour.<\/li>\n<li>Ensure refund SLAs match your merchant contracts.<\/li>\n<li>Maintain a clear audit trail for every transaction.<\/li>\n<\/ul>\n<p>RBI also now mandates public disclosure of refund and dispute redressal timelines on PA websites. For users, this transparency builds trust; for regulators, it shows operational maturity.<\/p>\n<p><i style=\"background-color:#f0f8ff;border-left:4px solid #007BFF;\n\npadding:14px;border-radius:6px;font-size:1.05rem;display:block;margin:12px 0;\"><\/p>\n<p><b>Tip:<\/b> A transparent refund and dispute policy is now a key RBI compliance indicator \u2014 not just good customer service.<\/p>\n<p><\/i><\/p>\n<p>As fintechs mature, RBI\u2019s PA framework is shifting from \u201clicence and forget\u201d to \u201clicence and verify.\u201d For startups, that means the real compliance test begins <b>after<\/b> getting the licence \u2014 in how safely, swiftly, and fairly they handle user money.<\/p>\n<h3>Frequently Asked Questions<\/h3>\n<h4>1. Who needs a Payment Aggregator licence?<\/h4>\n<p>Any brand that collects or processes payments for merchants online in India needs a PA licence from RBI or must partner with an existing one.<\/p>\n<h4>2. What is the net worth requirement?<\/h4>\n<p>New PAs must have at least \u20b915 crore at application time and reach \u20b925 crore within three years.<\/p>\n<h4>3. Can startups apply for a PA licence?<\/h4>\n<p>Yes, if registered as a company and meeting RBI\u2019s capital, governance, and audit norms.<\/p>\n<h4>4. How long does the PA approval process take?<\/h4>\n<p>Typically 3\u20136 months, depending on documentation completeness and audit readiness.<\/p>\n<h4>5. What happens if a brand operates without a licence?<\/h4>\n<p>RBI can issue cease-and-desist orders and restrict all payment collection activity until compliance is achieved.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Before your fintech or brand can collect payments, you need RBI\u2019s Payment Aggregator approval. Here\u2019s the essential compliance checklist for 2025.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1379],"tags":[1380],"class_list":["post-12712","post","type-post","status-publish","format-standard","hentry","category-payments-compliance-licensing","tag-payment-aggregator-compliance-checklist-india"],"_links":{"self":[{"href":"https:\/\/accelaronix.in\/blogs\/wp-json\/wp\/v2\/posts\/12712","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/accelaronix.in\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/accelaronix.in\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/accelaronix.in\/blogs\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/accelaronix.in\/blogs\/wp-json\/wp\/v2\/comments?post=12712"}],"version-history":[{"count":0,"href":"https:\/\/accelaronix.in\/blogs\/wp-json\/wp\/v2\/posts\/12712\/revisions"}],"wp:attachment":[{"href":"https:\/\/accelaronix.in\/blogs\/wp-json\/wp\/v2\/media?parent=12712"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/accelaronix.in\/blogs\/wp-json\/wp\/v2\/categories?post=12712"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/accelaronix.in\/blogs\/wp-json\/wp\/v2\/tags?post=12712"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}