RBI’s New PPI Rules 2026: What Paytm, PhonePe, and Every Digital Wallet Must Do Before the Deadline

India’s digital wallet industry just got its most sweeping regulatory overhaul in five years — and the clock to respond is ticking. On April 22, 2026, the Reserve Bank of India released its draft Master Direction on Prepaid Payment Instruments (PPIs), 2026, replacing the 2021 master directions with a tighter, more structured framework that affects every player in the ecosystem: wallet companies, prepaid card issuers, gift card providers, transit payment systems, and even fintech startups that haven’t launched yet. The comment deadline is May 22, 2026. What happens after that will reshape how India’s ₹2 lakh wallets work — and who gets to run them.

Why RBI Overhauled the Rules Now

The 2021 PPI framework served India through a period of explosive growth. UPI crossed 18 billion monthly transactions. Wallet penetration deepened. New use cases emerged from transit cards to gift instruments to cross-border tourism payments. But with scale came new risks: fund co-mingling, dormant balance accumulation, inadequate grievance systems, and a growing concern that smaller, undercapitalized issuers could fail while holding customer money.

The RBI’s Payments Vision 2025 had flagged a comprehensive PPI review as a priority. The 2026 draft is the result — a safety-first rewrite that simultaneously expands the scope of what PPIs can do while dramatically raising the bar on who gets to issue them and how they must be run.

The New PPI Classification: What’s In, What’s Out

The most fundamental change in the 2026 draft is a sharper classification system. PPIs are no longer treated as a single category with minor variations. The new framework creates five distinct instrument types, each with its own rules, limits, and compliance obligations.

Full-KYC PPI: The Workhorse Wallet

Full-KYC PPIs — the standard digital wallets offered by Paytm, PhonePe, Amazon Pay, and similar platforms — are retained largely intact but with tighter operational guardrails. These are issued only after complete customer due diligence (CDD) in line with RBI’s KYC master directions.

Key limits for Full-KYC PPIs:

  • Maximum outstanding balance: ₹2,00,000
  • Maximum monthly debit: ₹2,00,000
  • Person-to-Person (P2P) transfer cap: ₹25,000 per month
  • Cash loading limit: ₹10,000 per month
  • Only one full-KYC PPI per customer at any point in time
  • Minimum validity: one year from date of issuance

The P2P and cash loading caps are significant. They signal that the RBI views Full-KYC PPIs primarily as spending instruments, not transfer infrastructure — a role it has clearly reserved for UPI bank accounts.

Small PPI: Tightly Ring-Fenced

Small PPIs — wallets issued with minimal KYC (just a mobile number verified via OTP and a self-declared ID number) — face the most restrictive treatment in the new framework. The RBI has made clear these instruments are intended only for low-value merchant payments, with no room for expansion.

Limit Value
Outstanding balance cap ₹10,000
Monthly debit limit ₹10,000
P2P transfers Not permitted
Cash withdrawal Not permitted
Maximum validity 2 years
Instruments per customer 1 at any time

Importantly, no new small PPI can be issued to a customer after their existing one expires — unless they upgrade to full-KYC. The conversion path remains available during the instrument’s validity period, giving issuers an incentive to push users toward full onboarding.

Transit PPI: Built for Metro and Bus

Transit wallets — used on metro rails, buses, and toll systems — now have a dedicated category with a ₹3,000 balance cap. This formalizes a category that was previously operating under ad hoc approvals and sets clear limits for infrastructure providers running closed-loop payment systems.

Gift PPI: ₹10,000 Cap, Clean Rules

Gift cards and corporate gifting instruments are capped at ₹10,000 per instrument. The framework clarifies their scope: they are for one-way spending only, with no P2P transfers and no cash-out provisions.

UPI One World: India Opens Its Wallet to Foreign Visitors

Perhaps the most forward-looking element of the 2026 draft is the formal framework for PPIs issued to foreign nationals and NRIs visiting India — what the RBI calls “UPI One World” wallets. These instruments can be loaded with foreign exchange after physical verification of passport and visa, and used for Person-to-Merchant (P2M) payments during the holder’s stay in India.

The monthly usage cap is set at ₹5,00,000 — significantly higher than domestic small PPIs, reflecting the higher-value spending patterns of international visitors and the strategic importance of India’s inbound tourism payments infrastructure. This directly targets the friction international travellers face in accessing UPI-based merchants.

The Capital Crunch: Who Can Still Run a Wallet

The most consequential change for the industry’s competitive structure is the capital requirement update. Non-bank PPI issuers face a two-stage net worth hurdle:

Stage Requirement
At time of authorisation (entry) Minimum ₹5 crore
By end of third financial year Minimum ₹15 crore
Ongoing (post-third year) ₹15 crore maintained continuously

The ₹15 crore floor — roughly $1.8 million — isn’t prohibitive for established players like Paytm Payments Bank, Ola Money, or Mobikwik. But for smaller fintech startups hoping to enter the PPI space with lean capital structures, it creates a meaningful barrier. Smaller firms will either need to raise capital faster, partner with bank issuers, or exit the category.

The draft also introduces “fit and proper” criteria for promoters and directors — a standard applied to banking entities now extended to wallet companies. Authorisation will be granted on a perpetual basis, but remains subject to ongoing compliance reviews.

Escrow: Customer Money Gets Locked Down

The escrow provisions are among the most operationally significant in the draft, and many issuers will need to restructure their treasury operations to comply.

Core requirements:

  • All funds collected from PPI issuance must be held in a dedicated escrow account with a Scheduled Commercial Bank (SCB) in India
  • Strictly no co-mingling with funds from any other business activity the PPI issuer operates
  • One additional escrow account is permitted at a different SCB, but inter-escrow transfers require an auditor’s certificate
  • The total day-end balance in all escrow accounts combined must never fall below the value of outstanding PPIs and payments due to acquirers
  • Statutory auditors must certify escrow compliance quarterly

On interest:

The draft introduces a formal “Core Portion” concept for calculating which escrow balances are eligible to earn interest. The formula: take the lowest daily outstanding balance for each of the past 12 months, then average those 12 figures. Only this core portion earns interest. Everything else sits without return — a cost of safety that larger issuers will absorb more easily than smaller ones.

Customer Protection: The New Floor

The 2026 framework significantly raises the minimum standard for how PPI issuers must treat customers.

Mandatory protections include:

  • Multilingual disclosure of all fees, charges, validity periods, and terms — in plain language
  • A formal complaint resolution framework with designated nodal officers and defined escalation paths
  • Mandatory integration with RBI’s Ombudsman scheme for unresolved complaints
  • Immediate crediting of refunds for failed or cancelled transactions — even if doing so temporarily pushes the wallet above its balance limit
  • Unauthorised transaction protection for customers, aligned with the RBI’s existing limited-liability framework

On dormancy:

The draft introduces lifecycle management rules that require issuers to proactively manage idle wallets. A PPI with no transactions for 12 months is classified as inactive. If the customer does not reactivate it within the following 12 months, the account must be closed. Issuers must give 45 days’ notice before closure, and any outstanding balance must be returned to the source account or a verified bank account.

Interoperability: Wallets Must Talk to UPI

The RBI has made interoperability mandatory — not optional — for Full-KYC PPIs. Issuers must enable their wallets to work seamlessly across card networks (Visa, Mastercard, RuPay) and UPI. The draft goes further by allowing issuers to make their wallets discoverable on third-party UPI applications, meaning a Paytm wallet could theoretically be visible within the PhonePe or Google Pay interface.

This is a structural push to move PPIs from closed ecosystems to open infrastructure — potentially unlocking significantly more transaction volume for wallet issuers while simultaneously intensifying competition.

What Companies Must Do Before May 22

The comment deadline is May 22, 2026. Final directions will follow — likely in Q3 2026. But compliance preparation should begin now, not after finalization. Here’s what every PPI issuer and applicant should be doing:

1. Audit your current PPI product portfolio — Map every instrument you issue against the new five-category framework. Identify which products need to be reclassified, reconfigured, or sunset.
2. Assess your capital position — Non-banks should verify their current net worth against the ₹5 crore entry floor and model a path to ₹15 crore by Year 3 of authorisation.
3. Review your escrow structure — Check whether your escrow accounts are at an SCB, whether any co-mingling exists, and whether your day-end balances consistently cover outstanding PPI values.
4. Map your P2P and cash-loading flows — Ensure your systems can enforce the ₹25,000/month P2P cap and ₹10,000/month cash loading cap per Full-KYC customer.
5. Prepare for one-PPI-per-customer enforcement — If you have customers holding multiple PPIs of the same type, you need a remediation plan.
6. Upgrade your grievance system — Review whether your complaint framework meets the new disclosure, nodal officer, ombudsman integration, and escalation path requirements.
7. Implement dormancy monitoring — Build systems to flag accounts that have been inactive for 12 months and automate the 45-day pre-closure notification workflow.
8. Evaluate your UPI interoperability status — Full-KYC PPI issuers should confirm that their instruments work across card networks and UPI, and consider whether third-party discoverability creates a distribution opportunity.

Who’s Affected and How

Player Type Key Impact
Large wallet issuers (Paytm, PhonePe, Mobikwik) Escrow restructuring, dormancy management, UPI interoperability investment
Small fintech PPI startups Capital pressure — ₹15 crore by Year 3 is a real hurdle
Prepaid card companies Gift PPI cap at ₹10,000; transit PPI category creates clarity
Co-branded wallet programmes Partner roles limited to marketing/distribution only
Inbound travel/tourism fintechs UPI One World framework creates a formal launch pad
New applicants Must now meet “fit and proper” director criteria alongside capital norms

The Bigger Picture: Safety vs. Scale

The 2026 PPI Direction is a deliberate trade-off. The RBI is choosing safety, governance, and consumer protection over frictionless growth. That’s defensible — India’s digital payments infrastructure is now systemically important, and a failure at a major wallet issuer would have genuine macroeconomic consequences.

But the trade-offs are real. The ₹15 crore net worth requirement will likely consolidate the issuer market further. The tight Small PPI limits constrain a category that was genuinely serving India’s underbanked population. And the lack of a cross-border PPI framework — beyond the narrow UPI One World carve-out — leaves India’s ambition to export its payments stack to the rest of the world largely unaddressed.

The RBI’s comment window closes May 22. For any player with a stake in India’s digital payments future, that window is an opportunity to shape the final rules — not just comply with them.

References


*Disclaimer: This article is for informational purposes only and does not constitute legal, financial, or compliance advice. The RBI’s draft Master Direction is open for public comment until May 22, 2026, and the final rules may differ from the draft. Regulated entities should consult their legal and compliance advisors for guidance specific to their situation.*

About the Author

InsightPulseHub Editorial Team creates research-driven content across finance, technology, digital policy, and emerging trends. Our articles focus on practical insights and simplified explanations to help readers make informed decisions.

Related Reading

About the Author

InsightPulseHub Editorial Team creates research-driven content across finance, technology, digital policy, and emerging trends. Our articles focus on practical insights and simplified explanations to help readers make informed decisions.