IFSCA PSP Rules Explained: How to Become a Payment Provider

Why Did IFSCA Bring Out These Regulations?

Think of these regulations as a sort of guidebook for anyone who wants to become a Payment Service Provider (PSP) in the IFSC. The goal? To lay down a clear path for getting authorized, running your business, and making sure you’re ticking all the right regulatory boxes. It’s all about making payments smooth and safe—both inside and outside the IFSC.

Payment Services vs. Payment Systems—What’s the Difference?

Here’s where folks often get tripped up. A payment system is like the plumbing behind the scenes: all the rules, processes, and tech that move money between banks and payment companies. A payment service, on the other hand, is what you see at the front—your bank account, your e-wallet, or the app you use to pay for coffee. PSPs handle the customer-facing side, while payment system operators (PSOs) keep the back end humming.

How Do You Get Authorized as a PSP?

So, you want to be a PSP? Here’s the drill:

Apply: You’ll need to submit an application (don’t worry, you don’t have to have your company set up just yet).
In-Principle Approval: If you check all the right boxes, the Authority gives you a thumbs-up.
Get Incorporated: Before you get the final go-ahead, you must set up your company in the IFSC and make sure you’ve got enough capital.
Certificate of Authorization: Once you’re all set, you’re officially in business.

If your business grows big enough, you might get tagged as a “Significant Payment Service Provider” (SPSP)—but you don’t need to apply separately for that. It happens automatically when you meet the criteria.

Are All Payment Activities Covered?

Not quite. Only activities that involve providing accounts, payment initiation methods, or channels connecting payers and payees are covered. Things like transactions between related parties or technical services (think payment gateways) aren’t regulated under these rules. Also, if you’re a bank already licensed for payments, these regs don’t add extra hoops for you.

When Do You Need to Form a Company?

You can apply before you’ve set up your company, but before you get the final authorization, you’ll need to be incorporated in the IFSC and meet the net worth requirements. So, don’t rush to register your company until you’ve got that in-principle nod from IFSCA.

Who Needs Authorization?

If you want to offer payment services in or from the IFSC, you need to be authorized. That means having a business presence in the IFSC and providing services listed in the regulations.

What’s Included in “Merchant Acquisition Services”?

This is about helping merchants accept payments from customers, offering multiple payment options. But just to be clear, payment gateways are considered technical services, not merchant acquisition.

Cross-Border Money Transfers—What Counts?

If you’re moving money into or out of the IFSC, or between accounts in different countries (even if they belong to the same person), you’re in the cross-border money transfer business according to these rules.

How Do PSPs Safeguard Customer Funds?

There are strict rules (see regulation 23(1)) about keeping customer money safe for any ongoing transactions. Basically, PSPs need to make sure funds are protected until the transaction is done.

What Kind of Accounts Can PSPs Issue?

Both physical and virtual accounts are fair game, as long as they let users initiate payments. But topping up an e-wallet by third parties (not PSP agents) doesn’t count as issuing an account.

Can PSP E-Wallets Hold Crypto or INR?

Nope—cryptocurrencies and stablecoins are off limits. As for currencies, e-wallets can hold major international currencies like USD, EUR, JPY, GBP, CAD, AUD, CHF, HKD, SGD, AED, and RUB. Indian Rupees (INR) are a no-go, in any form.

What About Foreign Exchange Laws?

If your parent company is outside India, make sure you’re familiar with the Foreign Exchange Management Act (FEMA), 1999. Both the applicant and any subsidiary must qualify as non-residents before applying for authorization.

Do PSPs Need to Follow AML/CFT Rules?

Absolutely. PSPs have to comply with all the anti-money laundering, counter-terrorist financing, and know-your-customer guidelines set by IFSCA.

What’s the Deal with Security Deposits?

The security deposit isn’t insurance for customers. Instead, it’s there to help settle outstanding claims if the PSP’s authorization is revoked or surrendered. The required amount depends on your business model and volume. Security deposits aren’t meant to pay back customers or suppliers if your business goes under; safeguarding rules cover that.

Why All the Fuss Over Third-Party Providers?

IFSCA wants to make sure PSPs keep a close eye on any third-party services they use—monitoring quality, financial health, and having backup plans if something goes wrong.

Why Can’t PSPs Lend Money or Allow Cash Withdrawals?

The idea is to keep PSPs focused on payments, not lending—which comes with its own risks. As for cash withdrawals, IFSCA wants to encourage electronic transactions and keep cash out of the IFSC, which lines up with global best practices.

Why No Cap on E-Wallet Amounts?

Since cash withdrawals aren’t allowed, IFSCA hasn’t set a cap on how much you can keep in your e-wallet. They prefer a principle-based approach, trusting PSPs to manage risks responsibly.

Currency Fluctuations and E-Money Thresholds

If currency swings push you over e-money thresholds, IFSCA will look at what you did to prevent it before deciding if you’ve breached the rules.

Why Do PSPs Need a Nodal Bank?

A nodal bank helps with regulatory oversight and handles things like escrow and security deposits. PSPs can have other accounts for operations, but they’ll need to explain why they need more than one.