What is PAPG? Meaning, Benefits, Eligibility and How to Apply for RBI Payment Aggregator Licence

If you run a fintech, a marketplace, a SaaS platform or any business that collects payments on behalf of other merchants, you will keep running into the term PAPG. It is one of the most important regulatory frameworks in Indian digital payments, and understanding it is essential before you build or scale a payments business. This guide explains what PAPG is, who needs a Payment Aggregator licence from the RBI, what the benefits are, and how to apply.

What is PAPG?

PAPG stands for Payment Aggregator and Payment Gateway. The term comes from the Reserve Bank of India's Guidelines on Regulation of Payment Aggregators and Payment Gateways, first issued on 17 March 2020 under the Payment and Settlement Systems Act, 2007. These guidelines brought entities that collect and settle customer payments for merchants under direct RBI supervision.

The framework covers two different kinds of entities:

• Payment Aggregator (PA): An entity that onboards merchants, receives payments from customers on their behalf, pools the money in an escrow account and settles it to the merchants after a defined period. Because a PA actually handles funds, it needs an authorisation (licence) from the RBI.
• Payment Gateway (PG): A technology provider that offers the infrastructure to route and process a transaction between the customer, the merchant and the bank. A pure PG does not touch the money, so it does not need a licence, but it must follow RBI's baseline technology and security recommendations.

In everyday usage, when people say "PAPG licence" or "PAPG registration", they almost always mean the RBI Payment Aggregator authorisation. That is the part that requires an application, capital and compliance.

Types of Payment Aggregators regulated by RBI

Over time the RBI has widened the framework to cover every mode in which a merchant can collect payments:

Type	What it covers
PA-Online (PA-O)	E-commerce and app-based payments: cards, UPI, net banking, wallets collected through a website or app.
PA-Physical (PA-P)	Face-to-face payments at shops via POS machines, QR codes and soundbox devices (offline aggregation).
PA-Cross Border (PA-CB)	Import and export payments for online cross-border trade in goods and services.

An entity can apply for one or more categories depending on its business model.

Why did RBI introduce PAPG regulation?

Before 2020, aggregators were largely unregulated even though they held large amounts of merchant money. The guidelines were introduced to:

• Protect merchant funds by mandating a ring-fenced escrow account with a scheduled commercial bank.
• Ensure only well-capitalised, properly governed companies handle customer payments.
• Standardise merchant KYC, settlement timelines, refund handling and dispute resolution.
• Enforce data security standards such as PCI-DSS and restrict storage of card data.

Who needs a PAPG (Payment Aggregator) licence?

You need RBI authorisation as a Payment Aggregator if your business collects payments from customers for other merchants and settles the money to them. Typical examples include:

• Payment gateway and aggregator companies that offer a checkout to thousands of online merchants.
• Marketplaces and e-commerce platforms that collect payments from buyers and pay out to third-party sellers.
• SaaS, ERP and billing software companies that embed payment collection for their business customers.
• B2B fintech and API platforms offering recharge, bill payment, travel booking or other services to retailers and agents where funds are pooled and settled.
• POS, QR and soundbox providers that aggregate offline payments for shops (PA-P).
• Cross-border collection platforms serving exporters, freelancers and importers (PA-CB).

Who does not need it: A merchant collecting payments only for its own goods or services, and a pure technology provider that never handles funds, do not need a PA licence. Banks are already covered under their banking licence and do not need separate authorisation.

Eligibility criteria for a Payment Aggregator licence

The key conditions laid down by the RBI are:

• Entity type: Must be a company incorporated in India under the Companies Act (Private or Public Limited).
• Object clause: The Memorandum of Association must clearly cover payment aggregation / payment gateway activities.
• Net worth: A minimum net worth of ₹15 crore at the time of application, which must be increased to ₹25 crore by the end of the third financial year after authorisation and maintained thereafter. Net worth is certified by a Chartered Accountant.
• Fit and proper promoters and directors: Promoters, directors and key managerial persons must satisfy RBI's fit-and-proper criteria (no defaults, fraud or adverse regulatory history).
• Escrow account: An escrow account with a scheduled commercial bank in which all merchant collections are kept, with no other business funds mixed in.
• Governance and risk framework: Board-approved policies for merchant onboarding and KYC, information security, fraud prevention, customer grievance redressal and a nodal officer.
• Technology and security: PCI-DSS compliance, no storage of card data outside the card network or issuer (tokenisation), regular security audits and a disaster-recovery setup.
• Settlement discipline: Merchant settlements within the RBI-prescribed timelines (typically T+1 from the day the funds are received or the service is confirmed).

Benefits of holding a PAPG licence

• Legal right to operate: Only authorised PAs can lawfully collect and settle payments for merchants. Without it, your business is at risk of being shut down and banks will not open escrow or nodal accounts for you.
• Trust with banks, networks and merchants: An RBI licence makes it far easier to get card-acquiring tie-ups, UPI PSP partnerships, and enterprise merchants who insist on working only with regulated entities.
• Control over your payments stack: You can build your own checkout, set your own MDR and settlement cycles, and are not dependent on another aggregator's margins or downtime.
• Higher revenue and valuation: Licensed PAs earn transaction fees directly and command a premium in funding rounds because the licence is a scarce regulatory asset.
• Ability to expand into new lines: Once authorised, you can add PA-P (offline), PA-CB (cross-border), recurring payments, BNPL and value-added services on top of the same licence.
• Lower fraud and chargeback risk: The compliance framework (KYC, monitoring, escrow) that the licence demands also protects your business from bad merchants and disputes.

How to apply for a PAPG (Payment Aggregator) licence

The application is made to the Department of Payment and Settlement Systems (DPSS), Reserve Bank of India. The process broadly works as follows:

Step 1: Set up the right company structure

Incorporate (or restructure) a Private or Public Limited company with payment aggregation in its main objects. If payments are one of several activities, RBI expects the PA business to be run through a separate entity.

Step 2: Meet the net worth requirement

Bring in equity so that the audited net worth is at least ₹15 crore, and obtain a net worth certificate from a Chartered Accountant. Prepare a plan to reach ₹25 crore within three financial years.

Step 3: Prepare the documentation

• Certificate of incorporation, MoA and AoA
• Audited financial statements and net worth certificate
• Shareholding pattern and details of beneficial owners
• KYC and fit-and-proper declarations of promoters, directors and KMPs
• Detailed business plan, projected volumes and revenue model
• Board-approved policies: merchant onboarding & KYC, information security, fraud risk management, customer grievance redressal, escrow management
• Technology architecture, PCI-DSS certificate and system audit report from a CERT-In empanelled auditor
• Escrow bank arrangement / letter from the sponsor bank

Step 4: File the application with RBI

Submit the prescribed application form (Form A under the PSS Regulations) along with the documents and the application fee to DPSS, RBI, Central Office, Mumbai. Applications are also filed through RBI's online portal where enabled.

Step 5: RBI scrutiny and queries

RBI examines the application, runs background checks on promoters and may issue queries or call for a presentation. Responding promptly and accurately is critical; incomplete or evasive replies are the most common reason for rejection.

Step 6: In-principle approval and system audit

If satisfied, RBI grants an in-principle authorisation. The applicant then completes the remaining conditions, typically a full system audit and go-live readiness, within the time RBI specifies.

Step 7: Final Certificate of Authorisation

After the conditions are met, RBI issues the Certificate of Authorisation and lists the entity on its website as an authorised Payment Aggregator. From this point the PA must comply with all ongoing reporting, escrow reconciliation and audit requirements.

Timeline: The end-to-end process usually takes anywhere from 9 to 18 months depending on the completeness of the application and RBI's queries.

Ongoing compliance after getting the licence

• Daily reconciliation of the escrow account and settlements to merchants on time
• Quarterly and annual returns to RBI, including net worth certification
• Annual system audit and PCI-DSS re-certification
• Merchant KYC, transaction monitoring and reporting of suspicious activity
• Prompt customer grievance handling and integration with the RBI Ombudsman scheme

PA vs PG vs TPAP: quick comparison

Parameter	Payment Aggregator (PA)	Payment Gateway (PG)	TPAP (UPI)
Regulator	RBI (authorisation required)	RBI guidelines (no licence, tech standards)	NPCI (via a sponsor bank)
Handles funds?	Yes, via escrow	No	No
Net worth	₹15 cr → ₹25 cr	Not prescribed	As per NPCI norms
Best for	Merchant payment collection & settlement	Technology / routing providers	Building a UPI app

Conclusion

PAPG is the RBI framework that decides who can lawfully collect and settle payments for merchants in India. If your business pools customer money and pays it out to other merchants, whether online, offline or cross-border, you need a Payment Aggregator authorisation. The licence demands real capital, strong governance and robust technology, but it also unlocks trust, direct revenue and the freedom to build a full payments stack of your own.

Not every business needs to take the licence route. Many fintechs, software companies and retailer networks start by integrating with an already-authorised aggregator and move to their own licence once volumes justify it. Pay2All works with fintechs and enterprises on both paths: ready-to-integrate payment, recharge, BBPS and payout APIs today, and white-label technology and advisory support when you are ready to apply for your own PAPG authorisation.

Frequently Asked Questions

What is the full form of PAPG?

PAPG stands for Payment Aggregator and Payment Gateway, the RBI framework regulating entities that collect and process online and offline payments for merchants.

Is a Payment Gateway licence mandatory in India?

A pure Payment Gateway (technology only, no handling of funds) does not need an RBI licence. A Payment Aggregator that receives and settles money for merchants must obtain RBI authorisation.

What is the minimum net worth for a PA licence?

₹15 crore at the time of application, rising to ₹25 crore by the end of the third financial year after authorisation.

How long does it take to get a PAPG licence?

Typically 9 to 18 months from filing, depending on the quality of the application and RBI's review.

Can a startup apply for a PA licence?

Yes, provided it is an Indian company, meets the net worth requirement, has fit-and-proper promoters and can demonstrate a compliant technology and governance setup.