Skip to main content

Due Diligence of AePS Touchpoint Operators

Reserve Bank of India (RBI) has issued directions on due diligence of Aadhaar Enabled Payment System (AePS) touchpoint operators.

What is Aadhaar Enabled Payment System (AePS)?

Aadhaar Enabled Payment System (AePS) is a payment system in which transactions are enabled through Aadhaar number and biometrics / OTP authentication providing financial services such as cash withdrawal, cash deposit, fund transfer, and non-financial services such as mini statement and balance enquiry, etc.

AePS is a payment system operated by National Payment Corporation of India (NPCI) that facilitates interoperable transactions using Aadhaar enabled authentication. 

What is AePS touchpoint?

AePS touchpoint is the terminal deployed by acquirer banks to facilitate AePS transactions, which shall include both mobile and fixed points.

Who is AePS Touchpoint Operator (ATO)?

AePS Touchpoint Operator (ATO) is the individual onboarded by the acquiring bank who operates the AePS touchpoint.

What is the rationale behind the directions?

There have been reports of frauds perpetuated through AePS due to identity theft or compromise of customer credentials. To protect bank customers from such frauds, the directions have been issued streamlining the process for onboarding of AePS touchpoint operators and strengthening fraud risk management. 

What are the directions for onboarding and due diligence of AePS touchpoint operators?

  • The acquiring bank shall carry out due diligence of all ATOs before onboarding them. 
  • The acquiring bank shall also carry out periodic updation of KYC of ATOs.
  • In cases where an ATO has remained inactive, i.e. has not performed any financial / non-financial transaction for a customer for a continuous period of 3 months, acquiring bank shall carry out KYC of ATO before enabling him / her to transact further.
  • The acquiring bank shall monitor the activities of ATOs through their transaction monitoring systems on an ongoing basis and set operational parameters, based on business risk profile of the ATOs. 
  • Aspects such as location and type of the ATO, volume and velocity of transactions, etc. shall form part of bank’s fraud risk management framework.
  • The operational parameters regarding ATOs shall be reviewed on a periodic basis, reflecting emerging fraud trends.
  • The acquiring bank shall put in place adequate system level controls to ensure that any technological integrations like APIs are used only for enabling AePS operations.

From when shall the directions be applicable?

The directions shall come into effect from January 01, 2026.


References

Reserve Bank of India. (2025, June 27). 'Aadhaar Enabled Payment System – Due Diligence of AePS Touchpoint Operators'. Retrieved from https://website.rbi.org.in/web/rbi/-/notifications/aadhaar-enabled-payment-system-due-diligence-of-aeps-touchpoint-operators

Reserve Bank of India. (2025, June 27). 'RBI issues directions on Due Diligence of Aadhaar Enabled Payment System (AePS) Touchpoint Operators'. Retrieved from https://website.rbi.org.in/web/rbi/-/press-releases/rbi-issues-directions-on-due-diligence-of-aadhaar-enabled-payment-system-aeps-touchpoint-operators


Follow at - Telegram   Instagram   LinkedIn   X   Facebook

Comments

Popular Posts

Highlights of RBI Annual Report 2023-24 – Chapter 7 to 12

Reserve Bank of India (RBI) has published its annual report for the financial year 2023-24. In a series of articles, we will go through the highlights of the report. This is the fifth and last article in the series.  Chapter 7 – Public Debt Management Ways And Means Advances (WMA) limit for the Government of India (GoI) for H1:2023-24 (April to September 2023) was fixed at ₹1,50,000 crore and for H2:2023-24 (October 2023 to March 2024) was fixed at ₹50,000 crore. RBI issued an ultra-long security of 50-year tenor aggregating ₹30,000 crore to cater to the growing needs of long-term institutional players. Issuance of Sovereign Green Bonds (SGrBs) for an aggregate amount of ₹20,000 crore included maiden issuance of 30-year (₹10,000 crore) SGrB in addition to 5-year (₹5,000 crore) and 10-year (₹5,000 crore) SGrBs. A new 3-year benchmark security was introduced as part of government market borrowing programme during H1:2023-24.  The basket of products offered through the ‘Retail ...

Lending against Gold and Silver collateral

Reserve Bank of India (RBI) has issued directions on lending against the collateral of gold and silver. To whom are the directions applicable? The directions are applicable to the following regulated entities (REs) – Commercial Banks (including Small Finance Banks, Local Area Banks and Regional Rural Banks, but excluding Payments Banks). Primary (Urban) Co-operative Banks (UCBs) & Rural Co-operative Banks (RCBs), i.e., State Co-operative Banks (StCBs) and Central Co-operative Banks (CCBs). Non-Banking Financial Companies (NBFCs), including Housing Finance Companies (HFCs). Which loans are covered under the directions? The directions shall apply to all loans offered by an RE for the purpose of consumption or income generation (including farm credit) where eligible gold or silver collateral is accepted as a collateral security. What is eligible collateral? Eligible collateral means the collateral of jewellery, ornaments or coins made of gold or silver. A lender shall not grant any ad...

Prior approvals from or intimations / reporting to RBI by NBFC-BL

Non-Banking Financial Companies (NBFCs) are required to obtain prior approvals from Reserve Bank of India (RBI) or intimate / report to RBI various events. This article lists out some of such important events where prior approvals or intimations / reporting is required for Base Layer NBFCs (NBFC-BL). Events requiring prior approval from RBI  Master Direction – Reserve Bank of India (Non-Banking Financial Company – Scale Based Regulation) Directions, 2023 dated October 19, 2023 Para 30 – NBFCs shall prepare its balance sheet and profit and loss account as on March 31 every year. Whenever an NBFC intends to extend the date of its balance sheet as per provisions of the Companies Act, 2013, it shall take prior approval of RBI before approaching the Registrar of Companies for this purpose. Even in cases where RBI and the Registrar of Companies grant extension of time, the NBFC shall furnish to RBI a proforma balance sheet (unaudited) as on March 31 of the year and the statutory returns ...

RBI’s Monetary Policy (June 06, 2025): In A Nutshell

The bi-monthly monetary policy of Reserve Bank of India (RBI) was announced on June 06, 2025. Here are some of the highlights of the monetary policy announcement. Rates   Change Rate Policy repo rate Reduced by 0.50% 5.50% Standing deposit facility (SDF) rate 5.25% Marginal standing facility (MSF) rate 5.75% Bank rate 5.75% Monetary policy stance Monetary policy stance was changed from ‘accommodative’ to ‘neutral’. Domestic Economy  The Indian economy presents a picture of strength, stability, and opportunity. The 5x3x3 matrix of fundamentals provides the necessary core strength to cushion the Indian economy against global spillovers and propel it to grow at a faster pace.  First, strength comes from the strong balance sheets of the 5 major sectors - corporates, banks, households, government, and the external sector.  Second, there is stability on all 3 fronts – price, financial, and political – providing policy and economic certainty.  Third, the Indian ec...

What is KYC?

Be it opening a new bank account, applying for a new credit card, registering for new e-wallet, or any other account or facility involving financial matters, the application process is incomplete until KYC is done.  What is KYC? KYC or Know Your Customer is a process of customer identification and verification while opening an account or undertaking a financial transaction. Why is KYC process needed? To prevent money laundering To combat financing of terrorism What is verified under KYC? The banks / financial institutions collect the relevant documents from the customers to verify the following – Proof of identity Proof of address Which documents can be collected for KYC? As per RBI’s Master Direction - Know Your Customer (KYC) Direction, 2016 (Updated as on May 10, 2021), “Officially Valid Document” (OVD) means – Passport Driving licence Proof of possession of Aadhaar number Voter's Identity Card issued by the Election Commission of India Job card issued by NREGA duly signed by an...