Regulatory Framework for Payment Systems in India

Payment systems form the core infrastructure of India’s financial ecosystem, enabling digital transactions, fund transfers, and commercial settlements. The Reserve Bank of India (RBI) acts as the primary regulatory and supervisory authority governing payment and settlement operations across the country. Through targeted legislative mandates, institutional bodies, and policy frameworks, India has established a centralized architecture that promotes electronic transactions, mitigates systemic risk, and ensures consumer protection across retail and wholesale payment channels.

Legislative Architecture

Payment and Settlement Systems Act, 2007 (PSS Act)

• Enacted by Parliament to provide a dedicated legal framework for the regulation and supervision of payment systems in India.
• Designates the Reserve Bank of India as the sole authority to authorize, regulate, and supervise all payment systems operating within the domestic territory.
• Defines a “payment system” as a system that enables payment to be effected between a payer and a beneficiary, involving clearing, payment, or settlement services.
• Grants RBI the power to issue operational guidelines, prescribe technical standards, order inspections, and impose monetary penalties for non-compliance.
• Establishes legal finality of settlement, protecting clearing operations and netting arrangements even during insolvency proceedings of a system participant.

Payment and Settlement Systems Regulations, 2008

• Promulgated under the authority of the PSS Act to lay down procedural requirements for system authorization and governance.
• Outlines the process for applying for an authorization certificate to initiate or operate a payment system.
• Mandates regular submission of audited financial statements, system security audit reports, and operational return filings to the central bank.

Regulatory Bodies and Institutional Framework

Board for Regulation and Supervision of Payment and Settlement Systems (BPSS)

• Functions as a specialized committee of the Central Board of Directors of the Reserve Bank of India, constituted under the PSS Act regulations.
• Serves as the highest policy-making body for payment and settlement infrastructure in the country.
• Oversees the approval of standards for existing and proposed payment systems, authorization of new service operators, and formulation of regulatory policies.

National Payments Corporation of India (NPCI)

• Established in 2008 as an umbrella organization for operating retail payment and settlement systems across India.
• Created as a guidance initiative of the RBI and the Indian Banks’ Association (IBA) under the provisions of the PSS Act, 2007.
• Functions as a Not-for-Profit company registered under Section 8 of the Companies Act, 2013 (formerly Section 25 of the Companies Act, 1956).
• Manages core retail payment platforms including Unified Payments Interface (UPI), National Automated Clearing House (NACH), Immediate Payment Service (IMPS), Aadhaar Enabled Payment System (AePS), and National Financial Switch (NFS).

Major Payment Systems and Platforms

Wholesale and Systemically Important Systems

• Real Time Gross Settlement (RTGS): Handles large-value inter-bank and customer fund transfers on a real-time, continuous, and transaction-by-transaction basis.
• National Electronic Funds Transfer (NEFT): Operates on a nationwide basis to facilitate funds transfers between bank accounts through half-hourly batch clearing processes.

Retail and Interoperable Digital Platforms

• Unified Payments Interface (UPI): An instant real-time payment system that merges multiple bank accounts into a single mobile application, enabling seamless peer-to-peer (P2P) and peer-to-merchant (P2M) transfers.
• Prepaid Payment Instruments (PPIs): Payment methods such as smart cards, magnetic stripe cards, internet wallets, and mobile wallets that store monetary value against upfront deposits.
• Bharat Bill Payment System (BBPS): An integrated, interoperable bill payment platform that offers standardized bill payment services across multi-payment channels and merchant networks.

Key Regulatory Guidelines and Safety Measures

Data Localisation Mandate

• Issued by the RBI via a directive in April 2018 under Section 10(2) read with Section 18 of the PSS Act, 2007.
• Mandates that all payment system providers ensure that end-to-end data related to payment systems operated by them is stored in systems located exclusively within India.
• Applies to complete transaction details, payment instructions, sender and receiver information, and account details.

Two-Factor and Additional Factor of Authentication (AFA)

• Requires mandatory implementation of an Additional Factor of Authentication for all card-not-present (CNP) digital transactions.
• Sets specific security parameters for card transactions, internet banking, and mobile wallet transfers to prevent digital fraud.

Tokenisation Framework

• Permits card networks and issuing banks to offer Card-on-File Tokenisation (CoFT) services.
• Replaces actual sensitive card details (such as 16-digit card numbers and CVV) with a unique alternate code called a “token” to enhance online transaction security.

Classification of Payment Systems in India

Key Facts and Data

• The Payment and Settlement Systems Act was enacted in 2007 and came into full legal effect in August 2008.
• The Board for Regulation and Supervision of Payment and Settlement Systems (BPSS) is chaired by the Governor of the Reserve Bank of India.
• Both RTGS and NEFT systems operate on a 24x7x365 availability model for retail and commercial users.
• Section 23 of the PSS Act provides statutory protection to netting processes and dynamic settlement finality in the event of a participant default.
• The Payment Infrastructure Development Fund (PIDF) scheme was operationalized by the RBI to incentivize the deployment of point-of-sale (PoS) infrastructure in Tier-3 to Tier-6 centers and North Eastern states.
• Prepaid Payment Instruments (PPIs) are categorized into two primary types: Small PPIs (with basic user details) and Full-KYC PPIs.
• The Clearing Corporation of India Limited (CCIL) acts as a Central Counterparty (CCP) for transactions in government securities, foreign exchange, and money markets.