RBI Final Norms on KYC of AePS Touchpoint Operators

28 June 20251 min read

The RBI tightened fraud risk management for Aadhaar-based payment touchpoints by setting uniform onboarding checks.

Key provisions

Due diligence: acquiring banks must complete KYC on every ATO before onboarding, per RBI’s KYC Master Direction.
Inactivity: 3 consecutive months with no financial or non-financial AePS transactions means re-verification before reactivation.
Reuse: KYC done earlier for a role such as Business Correspondent or sub-agent may be reused.
Ongoing: banks must refresh ATO KYC records periodically.

Builds trust in AePS in rural and semi-urban areas, improves fraud detection through continuous monitoring and sets a common framework.

Aadhaar Enabled Payment System: cash withdrawals, balance enquiries and fund transfers using Aadhaar authentication at micro-ATMs or correspondent points.

1. From which date do RBI's final AePS Touchpoint Operator guidelines come into force?

The guidelines apply from January 1, 2026.

2. After how many consecutive inactive months must a bank re-verify an ATO's KYC?

Three consecutive months without AePS transactions triggers re-verification.

3. What does ATO stand for in RBI's AePS guidelines?

ATO means AePS Touchpoint Operator.

3 Oct 2026 · 1 min

2 Oct 2026 · 1 min

29 Sep 2026 · 1 min

29 Sep 2026 · 1 min