Payment Gateway vs Payment Aggregator: What's the Difference, and What RBI Rules Mean for Your Business
People use "payment gateway" and "payment aggregator" as if they mean the same thing. For most online sellers, the company they sign up with is actually both.
But the difference matters. RBI regulates payment aggregators, not gateways, and the rules decide who holds your customers' money, how your KYC is checked and what happens if something goes wrong.
This explainer clears up the confusion in plain language.
The Simple Version: A Courier Analogy
Imagine sending a parcel.
- The payment gateway is the road and the van. It's the technology that carries payment details securely from your customer's phone to the banks and card networks, and brings back "approved" or "declined".
- The payment aggregator is the courier company. It signs you up as a customer, collects the money from many buyers, holds it safely for a short time and then delivers it to your bank account.
A courier company can own its vans or hire someone else's. In the same way, an aggregator can run its own gateway technology or use another provider's.
The Technical Definitions
Payment Gateway
A payment gateway is a technology provider. It routes and processes online payment transactions securely, connecting the merchant's checkout to banks, card networks and UPI. It doesn't hold the merchant's money.
Payment Aggregator
RBI defines a payment aggregator as an entity that brings together payments made by customers to merchants, through one or more payment channels, using the merchant's interface (physical or online). The aggregator receives these funds, pools them and then pays them out to the merchant. (Saraf and Partners summary of RBI Directions)
The key word is funds. An aggregator touches the money. A pure gateway only touches the data.
Side-by-Side Comparison
| * | Payment Gateway | Payment Aggregator |
| What it does | Moves payment data securely | Collects, holds and settles merchants' money |
| Handles your funds? | No | Yes, through an escrow account |
| Onboards merchants? | Usually not directly | Yes, with full KYC |
| RBI authorisation needed? | Not as a gateway alone | Yes, for non-bank aggregators |
| Do you need your own merchant bank account? | Often yes, if you use a gateway on its own | No. The aggregator's setup is enough |
| Examples | Technology layer behind checkouts | Razorpay, PayU, Cashfree, PhonePe PG, CCAvenue |
So Which One Do You Actually Sign Up With?
If you open an account with Razorpay, Cashfree, PayU or PhonePe PG, you're signing up with a payment aggregator that also provides gateway technology. That's why the industry calls them "payment gateways" in everyday language.
The alternative is to get a payment gateway directly through your bank and link it to your own merchant account. Large businesses sometimes do this for lower rates, but it involves more paperwork and bank approval.
For most startups and MSMEs, an aggregator is simpler. You get onboarded in hours or days, accept every major payment method and don't need a separate merchant account.
Three Myths, Cleared Up
Myth 1: "A gateway and an aggregator are competitors."
Mostly false. Most well-known Indian providers do both. The terms describe two roles, not two rival types of company.
Myth 2: "My money sits with the gateway company and could be used for anything."
False for authorised aggregators. RBI requires customer money to be kept in an escrow account with a bank, to be used only for authorised payment business. (Saraf and Partners)
Myth 3: "RBI rules only affect the payment companies, not me."
False. The rules change your onboarding, because aggregators must do full KYC and due diligence on merchants and keep monitoring them. That's why gateways ask for more documents than they did a few years ago.
RBI's 2025 Payment Aggregator Rules
On 15 September 2025, RBI issued the Reserve Bank of India (Regulation of Payment Aggregators) Directions, 2025, which took effect immediately except where specific provisions say otherwise. (RBI)
These directions replace the earlier 2020–21 guidelines and the 2023 cross-border rules with one framework.
The Three Categories
| Category | What it covers | Example use |
| PA-O (Online) | Online payments through websites and apps | An e-commerce checkout |
| PA-P (Physical) | In-person payments, such as card machines and POS | A shop's card terminal or Soft POS |
| PA-CB (Cross-Border) | Inward and outward cross-border payments for permitted current-account transactions | An Indian exporter collecting from a US customer |
Who Needs Authorisation
Banks can run aggregator business without separate authorisation under these directions. Non-bank aggregators need RBI authorisation. (Outlook Business)
Non-bank entities had to apply by 31 December 2025, including those doing only physical (PA-P) business.
What Changed for Merchants
- Stronger KYC: aggregators must verify merchants according to RBI's KYC rules, with ongoing monitoring and background checks.
- One year to comply for older accounts: for merchants onboarded on or before 31 December 2025, aggregators had one year from the date of the directions to complete full compliance. (Mondaq)
- Escrow protection: your money is held in a bank escrow account until it's settled to you.
- Dispute handling: aggregators must have a process for disputes, with clear timelines for refunds.
Practical impact: if your gateway asks you to update KYC, re-upload documents or confirm your business details, it's likely because of these rules. Respond quickly so your settlements aren't held.
How to Check Whether Your Gateway Is Authorised
- Check the RBI website. RBI publishes lists of authorised payment system operators, including payment aggregators.
- Check the gateway's own website. Authorised aggregators usually mention their RBI authorisation, often in the footer or a "regulatory" page.
- Ask for it in writing, especially for cross-border payments, where PA-CB authorisation is specific.
For exporters, this matters most. Not every gateway that accepts international cards holds PA-CB authorisation. Cashfree, for example, states that it is PA-CB authorised, while Stripe India holds domestic aggregator authorisation and has kept new sign-ups invite-only since 2024.
Which Should a Small Business Use?
| Your situation | Best fit |
| New online store or service business | A payment aggregator (Razorpay, Cashfree, PayU, PhonePe PG) |
| Large business with high volume and its own bank relationship | Direct bank gateway with a merchant account, or a negotiated aggregator deal |
| Exporter or seller to foreign customers | An aggregator with PA-CB authorisation |
| Shop that also needs card machines | An aggregator authorised for physical payments (PA-P), or your bank |
To compare specific providers, read our guide to the best payment gateway in India.
FAQs
Is Razorpay a payment gateway or a payment aggregator?
Both. Razorpay provides gateway technology and acts as a payment aggregator, collecting and settling payments for merchants.
Do I need an RBI licence to accept online payments?
No. Merchants don't need an RBI licence to accept payments. The aggregator you sign up with is the one that needs RBI authorisation.
Do I need a merchant bank account to use a payment aggregator?
No. You only need a regular current or savings account (depending on your business type) to receive settlements. The aggregator handles the merchant setup.
What is PA-CB?
PA-CB stands for Payment Aggregator – Cross Border. It's RBI's category for aggregators that handle permitted cross-border payments, such as Indian exporters collecting from overseas customers.
Why is my payment gateway asking for KYC again?
RBI's 2025 directions require aggregators to complete full KYC and keep monitoring merchants. Older accounts may need updated documents.
Is my money safe with a payment aggregator?
With an RBI-authorised aggregator, your funds are held in a bank escrow account until settlement and can only be used for authorised payment business.
Key Takeaway
A payment gateway moves payment data. A payment aggregator moves your money. Most providers you'll consider do both, so the real question is whether the company is an RBI-authorised aggregator in the category you need, especially if you sell abroad.
If you're getting your business documents in order for gateway KYC, read our documents checklist for payment gateways, or ask the StartupFlora team for help.
Disclaimer: StartupFlora is a consultancy service provider specializing in startup consultation. We are not associated or in collaboration with any Government/Non-Government Agency / Institutions / Organisation / Department. For service payments, please ensure all transactions are made directly to our official company account.