Fintech is the inversion of the IT story: the FDI door is wide open (100% automatic for regulator-supervised financial services), but nothing moves without the right RBI authorisation. Payments, wallets, lending, data aggregation – each has its own licence, net-worth track and timeline, and the rulebook was heavily consolidated in 2025 (new Payment Aggregator Directions, Digital Lending Directions). Here is the 2026 licence map a foreign-owned fintech needs before touching Indian money flows.
The licence matrix
| Activity | Authorisation | Net worth | Key 2026 notes |
|---|---|---|---|
| Merchant payment collection (online/offline/cross-border) | Payment Aggregator – RBI PA Directions, Sept 2025 (consolidating PA-O/PA-P/PA-CB) | ₹15 crore at application → ₹25 crore by end of year 3 | Existing players had to apply by Dec 2025 or wind down by Feb 2026; escrow with a scheduled bank; full merchant KYC; PA-CB adds separate import/export collection accounts |
| Wallets / prepaid cards | PPI licence (2021 Master Directions; draft replacement issued April 2026) | ₹5 crore → ₹15 crore by year 3 | Full-KYC wallet cap ₹2 lakh; small PPIs ₹10,000 |
| Lending on own book | NBFC registration (s.45-IA) | NOF ₹10 crore for new registrations | 100% FDI automatic; expect 6–12 months to certificate in practice |
| Lending marketplace (P2P) | NBFC-P2P | ₹2 crore | Tightened Aug 2024: ₹50 lakh aggregate lender cap, T+1 escrow, no credit enhancement or DLG |
| Financial-data aggregation | NBFC-Account Aggregator | ₹2 crore | Sahamati recognised as the ecosystem SRO |
| UPI consumer app | NPCI TPAP onboarding (via sponsor bank – no RBI licence) | – | 30% market-share cap per app – enforcement deadline extended to end-2026 |
| Insurance / insurtech carrier | IRDAI registration | ₹100 crore (insurer) | 100% FDI automatic since May 2026 for insurers and intermediaries |
Lending without an NBFC – the LSP lane
- The Digital Lending Directions 2025 (May 2025, consolidating the 2022 guidelines) govern any tech platform serving regulated lenders as a Lending Service Provider;
- Money flows only between borrower and the regulated lender – no pooling in the platform’s accounts;
- Default loss guarantees capped at 5% of the portfolio; Key Fact Statement + APR disclosure mandatory;
- Lenders must report their digital lending apps to RBI’s public directory – unlisted apps are effectively dead;
- For a foreign fintech, LSP + bank/NBFC partnerships is the fastest India entry – the licence can come later.
The non-negotiables before launch
| # | Requirement |
|---|---|
| 1 | Payments data localisation (RBI, April 2018): payment-system data stored only in India; foreign leg of cross-border transactions excepted; processed-abroad data repatriated within 24 hours; a CERT-In-empanelled system audit precedes launch |
| 2 | An Indian-incorporated company for any RBI authorisation – the standard WOS, capitalised for the net-worth track (via FC-GPR; top-ups need the same reporting) |
| 3 | Fit-and-proper scrutiny of promoters and directors – foreign ownership is fine, opacity is not |
| 4 | KYC Master Directions (video-KYC), outsourcing directions, IT/cyber-resilience directions |
| 5 | The downstream rules if structuring through an Indian holdco – each regulated subsidiary’s capitalisation counts as indirect FDI |
What changed recently – the 2025-26 consolidation
- PA Directions 2025 (September 2025) merged the online, physical and cross-border frameworks – one rulebook, one authorisation architecture;
- Digital Lending Directions 2025 (May 2025) consolidated lending conduct, DLG and app-reporting rules;
- Draft PPI Directions (April 2026) will replace the 2021 wallet framework – watch finalisation;
- Insurance at 100% automatic FDI (May 2026) – the biggest ownership liberalisation in the sector’s history;
- SRO layer forming: FACE (fintech SRO, 2024), Sahamati (account aggregators).
Planning an India fintech entry?
We map the licence path, capitalise the entity FEMA-clean, and manage the RBI application – or structure the LSP partnership that gets you live first.
Talk to My Cloud AccountantFrequently asked questions
Can a foreign company own an Indian fintech 100%?
Yes – financial services regulated by RBI, SEBI, IRDAI or PFRDA carry 100% FDI under the automatic route, including NBFCs, payment aggregators and (since May 2026) insurers. The licence, not the ownership, is the gate.
What is the net worth required for a payment aggregator licence?
₹15 crore at the time of application, rising to ₹25 crore by the end of the third financial year and maintained thereafter – under the consolidated Payment Aggregator Directions of September 2025.
Can a foreign fintech lend in India without an NBFC licence?
Not on its own book – but it can operate as a Lending Service Provider to banks and NBFCs under the Digital Lending Directions 2025, with default loss guarantees capped at 5% and funds flowing only between borrower and lender.
Does payments data have to stay in India?
Yes – since RBI’s April 2018 circular, payment-system data must be stored only in India (the foreign leg of cross-border transactions excepted). Processing abroad is allowed if the data returns within 24 hours, and a system audit certifies compliance before launch.
Based on the RBI Payment Aggregator Directions 2025, Digital Lending Directions 2025, PPI Master Directions 2021 (and April 2026 draft), NBFC SBR framework and the FEM (NDI) Rules as amended May 2026. Last reviewed: July 2026.