Validity of the Prepaid Wallet License
The validity of all Prepaid Payment Instruments (PPIs) in India is a minimum of one year from the date of the last loading or reloading. PPI issuers may choose to provide PPIs with a longer validity period.
If the PPI is issued as a physical card, the consumer can request a new card, and the validity period will be noted on the card.
When the PPI expires, any outstanding balance is not immediately cancelled. A maximum of 10% of the outstanding value can be deducted monthly until it reaches its limit. Additionally, PPI holders will be notified in advance before the expiry of the instrument.
Unless otherwise stated, the Prepaid Wallet License is typically valid for five years. However, the license may be canceled subject to review.
Measures to Prevent Money Laundering
To combat money laundering, the Reserve Bank of India (RBI) has issued guidelines under its "Master Direction - KYC (Know Your Customer)", which apply to all entities involved in issuing Prepaid Payment Instruments (PPIs). These rules encompass Anti-Money Laundering (AML), Know Your Customer (KYC), and Combating the Financing of Terrorism (CFT).
Prevention of Fraud and Security Standards
To reduce the risk of fraud and ensure customer protection, PPI issuers must establish a robust risk management system. They are required to implement the following:
- If a PPI issuer provides the same login credentials for both PPI and other services, the customer must be informed via SMS, email, or other means. Customers must also have the ability to log out of their mobile account at any time.
- PPI issuers must ensure secure login and authentication procedures to prevent multiple failed login attempts. This may include timeout features or other security measures.
- All physical and virtual PPI cards must have Additional Factor Authentication (AFA), as required for debit cards.
- Issuers must provide customers with options to set transaction limits, such as on the transaction value and the number of transactions allowed. There should also be a cap on the number of beneficiaries that can be added in a day, with further verification.
- Customers must be notified whenever a beneficiary is added to the PPI.
- After completing a transaction, issuers must send notifications that include the available balance in the wallet.
- PPI issuers should monitor the number of transactions conducted daily, both per beneficiary and for the wallet as a whole.
- Appropriate fraud detection and prevention mechanisms must be in place, along with systems for escalating suspicious activities.
Consumer Protection and Grievance Redressal Framework
PPI issuers must provide clear and concise terms and conditions regarding the following:
- Any fees associated with the use of prepaid wallets.
- The expiration date of the prepaid instrument, and any conditions regarding its renewal or replacement.
- Customer assistance contact details, including the issuer’s website.
A formal and accessible grievance redressal mechanism must be set up, including the appointment of a Nodal Officer to manage complaints, escalations, and response times. If complaints are filed via mobile or website platforms, the registration process must be easy to use.
Additional points for consumer protection:
- PPI issuers must ensure the grievance redressal process is publicly accessible and available in multiple languages, including Hindi, English, and the local language.
- Contact details for the Nodal Officer must be prominently displayed on mobile apps, websites, and physical cards.
- Separate complaint numbers should be provided for registering and following up on grievances.
- PPI issuers must address customer complaints promptly, ideally within 48 hours of receipt, and respond within 30 days.
PPI issuers must also raise awareness about:
- Password security.
- Safe usage of PPIs.
- Procedures for handling card or authentication data loss, fraud detection, and abuse.
Transactions Across Borders
As per RBI guidelines, entities permitted to issue PPIs in foreign currency under the Foreign Exchange Management Act (FEMA) are exempt from standard PPI rules. These entities are allowed to transact in foreign currency, with a maximum limit of Rs. 5,000 per transaction.
Interoperability
Interoperability refers to the technical compatibility of payment systems, allowing them to work together seamlessly. PPI issuers must follow the technical standards set by the National Payments Corporation of India (NPCI) and relevant card networks to ensure interoperability with Unified Payments Interface (UPI) and card networks. The NPCI and card networks will facilitate PPI issuer participation in these systems.