Discuss the regulatory framework for Prepaid Payment Instruments in India. How does the RBI balance fintech innovation with consumer protection and KYC compliance?

Prepaid Payment Instruments (PPIs) are digital wallets and cards that hold money paid in advance. Users spend that balance on purchases, fund transfers and remittances [1]. The RBI's in-principle approval to One97 Communications (Paytm) in November 2026 shows how this happens in practice [1]. The RBI lets new firms in but makes them earn their place through compliance.

Regulatory Framework

• Statutory base: PPIs are regulated as payment systems under the Payment and Settlement Systems Act, 2007, not under banking law. The Master Directions are issued under Section 18 read with Section 10(2) [2].
• Prior authorisation: No entity may set up or operate a PPI system without RBI approval [2].
• Evolution of rules: The 2017 Directions sorted PPIs into closed, semi-closed and open systems [3]. The 2021 Master Directions brought the rules together, and they were reissued with changes in December 2024 [2].
• Tiered KYC: Small PPIs need only minimal KYC and come with lower limits. Full-KYC PPIs get more features [2].

Balancing Innovation with Protection

Enabling innovation

• Non-bank entry: Fintechs can issue wallets without a banking licence, which widens access to small digital payments [2].
• Graded licensing: Firms get in-principle approval first and final authorisation only after meeting set conditions. Even a firm that was penalised can come back [1].

Ensuring compliance and consumer safety

• Enforcement: In 2024 the RBI found persistent non-compliance at Paytm Payments Bank. It used Section 35A, BR Act, 1949 to stop new deposits, wallet top-ups and FASTag reloads [4].
• Customer safeguards: Users could still withdraw their existing balances. The deadline was extended from 29 February to 15 March 2024, which reduced disruption [4].
• Ring-fencing: Action against the bank did not block the separate payment-systems licence route for the parent company. Penalties fall on the entity that broke the rules [1][4].

Entry (PSS Act authorisation) → Tiered KYC limits → Supervision
        ↑                                              ↓
Re-entry via conditional licence ← Graded penalty (Sec 35A / PSS Act)

Fig: RBI's regulatory cycle for PPI issuers

India's PPI rules combine a clear legal base, tiered KYC and firm enforcement. This lets fintech grow without risking users' money. Going forward, the RBI could add clearer timelines for licences and better grievance redress through the Integrated Ombudsman Scheme. It could also apply KYC and AML norms consistently to all issuers. Growth that rests on trust will advance financial inclusion and SDG 8.10.