PART 2.1

RBI's Regulatory Powers over Payment Systems

Reading Time: 45 minutes Last Updated: January 2025

Introduction

The Reserve Bank of India (RBI) serves as the central bank and apex monetary authority of India, wielding extensive regulatory powers over the nation's financial system. Understanding the legal foundations of RBI's authority is essential for any legal professional advising cryptocurrency and blockchain businesses in India.

The regulatory framework governing payment systems in India is primarily derived from two key legislative instruments: the Reserve Bank of India Act, 1934, and the Payment and Settlement Systems Act, 2007 (PSS Act). These statutes, together with various regulations, circulars, and master directions issued thereunder, form the comprehensive regulatory architecture that affects cryptocurrency operations.

This part examines the statutory framework empowering RBI to regulate payment systems, the scope and limitations of this authority, and its specific relevance to cryptocurrency and digital asset operations. We shall analyze key provisions, judicial interpretations, and practical implications for legal practitioners advising crypto businesses.

Payment and Settlement Systems Act, 2007

The Payment and Settlement Systems Act, 2007 (hereinafter "PSS Act") came into effect on August 12, 2008, establishing a comprehensive regulatory framework for payment systems in India. The Act designates the Reserve Bank of India as the sole authority for regulation and supervision of payment systems in the country.

Legislative Background and Objectives

The PSS Act was enacted to provide a legal framework for the regulation and supervision of payment systems in India and to designate the Reserve Bank of India as the authority for that purpose. The Act was necessitated by the rapid evolution of electronic payment mechanisms and the need for a dedicated regulatory framework beyond the traditional banking legislation.

The Statement of Objects and Reasons accompanying the Bill stated that the legislation aimed to ensure safe, secure, sound, efficient, accessible, and authorized payment systems while protecting the interest of all participants in these systems.

Section 2(1)(i) - Definition of "Payment System"

"Payment system" means a system that enables payment to be effected between a payer and a beneficiary, involving clearing, payment or settlement service or all of them, but does not include a stock exchange.

Explanation: For the purposes of this clause, "payment system" includes the systems enabling credit card operations, debit card operations, smart card operations, money transfer operations or similar operations.

Key Definitions Under the PSS Act

Understanding the definitional framework of the PSS Act is crucial for determining whether cryptocurrency activities fall within its regulatory ambit. The Act provides several key definitions that are relevant to our analysis:

Term Definition (Section Reference)
Payment System System enabling payment between payer and beneficiary involving clearing, payment or settlement - Section 2(1)(i)
System Provider Person who operates an authorized payment system - Section 2(1)(n)
System Participant Bank or person participating in payment system and includes system provider - Section 2(1)(o)
Gross Settlement Settlement of transfer instructions individually - Section 2(1)(d)
Netting Determination of net settlement positions - Section 2(1)(h)

Scope of RBI's Authority Under PSS Act

Section 4 of the PSS Act empowers the Reserve Bank to authorize payment systems. No person other than the Reserve Bank can commence or operate a payment system except under and in accordance with an authorization issued by the Reserve Bank. This provision establishes RBI's exclusive gatekeeping authority over all payment systems in India.

The powers granted to RBI under the PSS Act include, but are not limited to:

  • Power to grant, refuse, or revoke authorization for payment systems (Section 7)
  • Power to determine standards for payment systems (Section 10)
  • Power to call for information, documents, and returns (Section 12)
  • Power to carry out inspection (Section 13)
  • Power to give directions (Section 18)
  • Power to impose penalties (Section 26)

Payment Systems Requiring Authorization

The RBI has clarified through various circulars which payment systems require authorization. The types of payment systems that typically require RBI authorization include:

  • Prepaid Payment Instruments (PPIs) including mobile wallets
  • Card payment networks
  • White Label ATM operators
  • Instant money transfer services
  • Trade Receivables Discounting System (TReDS)
  • Bharat Bill Payment System (BBPS)
  • Cross-border money transfer services

RBI Act, 1934 Provisions

The Reserve Bank of India Act, 1934 is the foundational statute establishing the central bank and defining its primary functions. While the PSS Act specifically addresses payment systems, the RBI Act provides broader regulatory powers that can impact cryptocurrency activities, particularly in relation to currency, banking, and monetary policy.

Relevant Provisions

Section 3 - Establishment and Capital of the Bank

This section establishes the Reserve Bank of India as a body corporate with perpetual succession. The institutional permanence of RBI is significant for understanding its long-term regulatory approach to emerging technologies like cryptocurrency.

Section 22 - Right to Issue Bank Notes

Section 22 grants RBI the sole right to issue bank notes in India. This provision becomes particularly relevant when analyzing whether cryptocurrencies can function as currency or legal tender in India. The monopoly over currency issuance has been a key argument used by RBI in expressing concerns about cryptocurrencies.

Section 22(1) - Sole Right of Note Issue

"The Reserve Bank shall have the sole right to issue bank notes in India, and may, for a period which shall be fixed by the Central Government on the recommendation of the Central Board, issue currency notes of the Government of India supplied to it by the Central Government, and the provisions of this Act applicable to bank notes shall, unless a contrary intention appears, apply to all currency notes of the Government of India issued either by the Central Government or by the Reserve Bank in like manner as if such currency notes were bank notes."

Section 35A - Power of Reserve Bank to Issue Directions

This is one of the most significant provisions from a regulatory perspective. Section 35A empowers RBI to issue directions to banking companies in the public interest, in the interest of banking policy, or to prevent the affairs of the banking company being conducted in a manner detrimental to the interests of depositors or the banking company itself.

It was under this provision, read with Section 36(1)(a), that RBI issued the controversial circular dated April 6, 2018, directing banks not to deal with entities engaged in cryptocurrency transactions.

Section 45L - Power to Collect Information from Non-Banking Institutions

This section allows RBI to collect information from non-banking institutions receiving deposits, which can extend to certain cryptocurrency platforms that may hold customer funds in fiat currency.

Relationship Between RBI Act and PSS Act

The RBI Act and PSS Act operate complementarily. While the RBI Act provides broad regulatory powers over banking and financial institutions, the PSS Act provides specific authority over payment systems. A cryptocurrency platform may fall under the jurisdiction of either or both statutes depending on its specific activities:

  • If it operates a payment system, PSS Act applies
  • If it deals with banks or is classified as an NBFC, RBI Act applies
  • If it handles foreign exchange, FEMA becomes relevant

Scope of Regulatory Authority

The scope of RBI's regulatory authority over payment systems is extensive but not unlimited. Understanding the boundaries of this authority is crucial for legal practitioners advising cryptocurrency businesses on compliance requirements.

Territorial Jurisdiction

RBI's regulatory authority extends to all payment systems operating within the territory of India. However, the application of Indian regulations to cross-border cryptocurrency transactions presents complex jurisdictional questions that remain largely unresolved.

Section 38 of the PSS Act provides for the Act's application to payment systems situated outside India in certain circumstances. Specifically, if a payment system located outside India is used for payments in India, RBI may require such system to comply with Indian regulations.

Subject Matter Jurisdiction

RBI's authority under the PSS Act is limited to "payment systems" as defined under the Act. Whether cryptocurrency exchanges and trading platforms constitute "payment systems" is a question of significant legal importance. The answer depends on the specific activities undertaken by the platform:

Activity Likely Classification Applicable Regulation
Crypto-to-fiat exchange May involve payment system operations PSS Act potentially applicable
Crypto-to-crypto trading Not a payment system PSS Act likely not applicable
Crypto payment gateway Likely a payment system PSS Act applicable
Crypto custody services Not a payment system per se Other regulations may apply

Limitations on RBI's Authority

While RBI enjoys wide regulatory powers, these powers are not absolute. The Supreme Court in IAMAI v. RBI (2020) 10 SCC 274 clarified that RBI's powers must be exercised in a manner that is proportionate and not arbitrary. The Court applied the doctrine of proportionality to assess whether RBI's actions met constitutional standards.

IAMAI v. Reserve Bank of India

(2020) 10 SCC 274 / 2020 SCC OnLine SC 275

The Supreme Court held that while RBI has the power to take preemptive action to protect the financial system, such power must be exercised within constitutional limits. The Court found that the blanket prohibition imposed by the April 2018 circular was disproportionate as it failed the test of proportionality.

The judgment established that RBI cannot issue directions that disproportionately affect fundamental rights, even in the exercise of its regulatory powers under the RBI Act or PSS Act.

Payment Systems Classification

RBI classifies payment systems into various categories based on their nature, risk profile, and systemic importance. Understanding this classification is important for determining the applicable regulatory requirements.

Financial Market Infrastructure (FMI)

These are systemically important payment systems whose failure could have cascading effects on the entire financial system. Examples include:

  • Real Time Gross Settlement (RTGS)
  • National Electronic Funds Transfer (NEFT)
  • Clearing Corporation of India Limited (CCIL)

Retail Payment Systems

These cater to individual and small business transactions. They include:

  • Unified Payments Interface (UPI)
  • Immediate Payment Service (IMPS)
  • Card payment systems (Visa, Mastercard, RuPay)
  • Prepaid Payment Instruments (wallets)
  • Aadhaar Enabled Payment System (AePS)

Relevance to Cryptocurrency

The classification of cryptocurrency-based payment systems remains unclear under the current framework. If a platform enables payments in cryptocurrency that ultimately settles in fiat currency, it may be argued to fall within the definition of a payment system. However, a pure cryptocurrency-to-cryptocurrency transfer on a blockchain does not involve any entity that clears, settles, or processes payments in the traditional sense.

Authorization Requirements

Any entity seeking to operate a payment system in India must obtain prior authorization from RBI. The authorization process involves several stages and requirements that practitioners must understand.

Application Process

Section 5 of the PSS Act prescribes the procedure for applying for authorization. The application must be made in such form and manner as may be prescribed by regulations and must contain the following particulars:

  1. Name and address of the applicant
  2. Details of the payment system proposed to be operated
  3. Technical standards to be adopted
  4. Risk management framework
  5. Financial statements of the applicant
  6. Details of directors and key personnel
  7. Any other information as specified by RBI

Criteria for Grant of Authorization

Under Section 7 of the PSS Act, RBI may grant authorization after satisfying itself about the following:

  • The applicant is a fit and proper person to operate a payment system
  • The operation of the payment system will not be detrimental to public interest
  • The applicant has adequate safeguards to prevent the system from being used for money laundering or financing of terrorism
  • The applicant has a robust risk management framework
  • The applicant meets the minimum capital requirements

Conditions of Authorization

Section 8 empowers RBI to impose conditions on authorization. These may include:

  • Maintenance of minimum capital
  • Submission of periodic returns
  • Maintenance of customer grievance redressal mechanism
  • Compliance with information security standards
  • Implementation of specific risk management measures
Practice Tip: Authorization Due Diligence

When advising clients on authorization requirements, counsel should:

  • Conduct a thorough analysis of whether the proposed activity constitutes a "payment system" under Section 2(1)(i)
  • Review all RBI circulars and master directions relevant to the specific type of payment system
  • Assess the client's ability to meet capital requirements and other conditions
  • Prepare comprehensive documentation addressing all regulatory concerns
  • Consider obtaining a legal opinion on the applicability of PSS Act to the specific business model

Applicability to Cryptocurrency

The application of the PSS Act and RBI Act to cryptocurrency operations is one of the most debated questions in Indian fintech law. While there is no explicit provision addressing cryptocurrency, certain activities may fall within the regulatory ambit.

When PSS Act May Apply

The PSS Act may apply to cryptocurrency activities in the following scenarios:

  • Crypto payment gateways: Services enabling merchants to accept cryptocurrency payments that are converted to fiat currency
  • Crypto-backed payment cards: Cards that allow spending of cryptocurrency converted to fiat at point of sale
  • Stablecoin issuance: If stablecoins are used as a payment mechanism
  • Cross-border remittance: Using cryptocurrency as a rail for international money transfer

When PSS Act May Not Apply

The following activities may fall outside the scope of the PSS Act:

  • Pure cryptocurrency trading: Exchange of one cryptocurrency for another without fiat involvement
  • Cryptocurrency mining: Creation of new cryptocurrency through computational processes
  • Wallet services: Mere custody of private keys without payment processing
  • DeFi protocols: Automated smart contracts facilitating cryptocurrency transactions

Grey Areas

Several cryptocurrency activities fall into grey areas where regulatory applicability is unclear:

Enforcement Powers

RBI possesses comprehensive enforcement powers under both the PSS Act and the RBI Act to ensure compliance with payment system regulations.

Power to Issue Directions

Under Section 18 of the PSS Act, RBI may, in public interest, give directions to any system provider or system participant. These directions may relate to the conduct of business, prohibition of certain activities, or any other matter that RBI considers necessary.

It was under this power that RBI issued several directions affecting cryptocurrency businesses, including:

  • Warning to customers about risks of virtual currencies (December 24, 2013)
  • Statement on Development and Regulatory Policies regarding virtual currencies (February 1, 2017)
  • Circular prohibiting regulated entities from dealing with virtual currencies (April 6, 2018)

Power of Inspection

Section 13 of the PSS Act empowers RBI to carry out inspection of the books, accounts, and records of any system provider or system participant. The inspection may be conducted:

  • At the premises of the entity
  • By requiring production of documents
  • By examination of persons connected with the business

Power to Revoke Authorization

Section 7(3) of the PSS Act empowers RBI to revoke authorization granted to a payment system provider on grounds including:

  • Public interest considerations
  • Contravention of provisions of the Act or regulations
  • Non-compliance with conditions of authorization
  • Failure to submit required information or returns

Penalties and Sanctions

The PSS Act provides for stringent penalties for violations of its provisions. Legal practitioners must be aware of these penalties when advising clients on compliance.

Penalties Under PSS Act

Offense Section Penalty
Operating payment system without authorization Section 26 Fine up to Rs. 10 lakh or twice the sum involved, whichever is more
Contravention of directions Section 26 Fine up to Rs. 1 crore for each contravention, plus continuing penalty
Failure to produce documents Section 27 Fine up to Rs. 5 lakh
Furnishing false information Section 28 Imprisonment up to 3 years or fine up to Rs. 25 lakh or both

Monetary Penalties and Compounding

RBI has the power to impose monetary penalties under Section 30 of the PSS Act. The penalty may be imposed after giving the person a reasonable opportunity of being heard. Certain offenses may be compounded under Section 31, providing an alternative to prosecution.

Practice Tip: Penalty Mitigation

When representing clients facing penalties:

  • Assess whether the offense is compoundable under Section 31
  • Prepare representations demonstrating good faith compliance efforts
  • Document any mitigating circumstances
  • Consider challenging the penalty through judicial review if arbitrary
  • Evaluate whether the alleged activity actually falls within PSS Act jurisdiction

Judicial Interpretation

Courts have played a significant role in interpreting the scope and limits of RBI's regulatory powers. Several judgments provide valuable guidance for practitioners.

Key Judicial Pronouncements

Internet and Mobile Association of India v. RBI

(2020) 10 SCC 274

This landmark judgment by the Supreme Court addressed the validity of RBI's circular dated April 6, 2018. The Court held that:

  • RBI has legitimate authority to take preemptive action against perceived risks
  • However, such action must pass the test of proportionality
  • A complete prohibition, without any evidence of actual harm to regulated entities, was disproportionate
  • Cryptocurrency is not banned in India; only the banking restriction was struck down

Implications of IAMAI Judgment

The IAMAI judgment has several important implications for understanding RBI's regulatory powers:

  1. Proportionality requirement: RBI's regulatory actions must be proportionate to the perceived risk or harm being addressed
  2. Evidence-based regulation: RBI must demonstrate actual or imminent harm to justify restrictive measures
  3. Fundamental rights consideration: RBI must consider the impact of its regulations on fundamental rights, particularly Article 19(1)(g)
  4. Not a blanket validation: The judgment did not approve of cryptocurrency or declare it legal; it merely struck down a disproportionate regulation
December 24, 2013
RBI issues first press release warning about virtual currencies
February 1, 2017
RBI reiterates concerns in Statement on Development and Regulatory Policies
April 6, 2018
RBI issues circular DBR.No.BP.BC.104/08.13.102/2017-18 prohibiting banks from dealing with crypto entities
July 3, 2018
Circular takes effect; banks begin closing accounts of crypto businesses
March 4, 2020
Supreme Court strikes down the 2018 circular in IAMAI v. RBI

Practice Tips for Banking Lawyers

Due Diligence Checklist

When advising cryptocurrency clients on PSS Act compliance:

  • Map all activities to determine which fall under "payment system" definition
  • Review the technical architecture to understand fund flows
  • Identify all touchpoints with the traditional banking system
  • Assess cross-border implications under FEMA
  • Document the rationale for regulatory classification
Regulatory Engagement Strategy

Best practices for engaging with RBI:

  • Proactively seek clarification on regulatory applicability
  • Participate in consultation processes for new regulations
  • Maintain comprehensive compliance documentation
  • Build relationships with RBI officials through industry associations
  • Stay updated on international regulatory developments that may influence RBI policy
Litigation Strategy

When challenging RBI actions:

  • Invoke the IAMAI precedent on proportionality
  • Demonstrate lack of actual harm to banking system
  • Highlight fundamental rights implications
  • Present international best practices as evidence of workable alternatives
  • Consider interim relief to prevent irreparable harm during litigation

Conclusion

The Reserve Bank of India wields extensive regulatory powers over payment systems through the combined framework of the RBI Act, 1934 and the Payment and Settlement Systems Act, 2007. These powers extend to authorization, supervision, inspection, direction, and enforcement against any entity operating a payment system in India.

For cryptocurrency businesses, the applicability of these regulatory frameworks depends on the specific nature of activities undertaken. While pure cryptocurrency trading and custody may fall outside the scope of the PSS Act, activities involving payment processing, fiat settlement, or money transfer likely require consideration of these regulations.

The IAMAI judgment serves as an important reminder that RBI's powers, while extensive, are not absolute. Any regulatory action must satisfy constitutional requirements of proportionality and cannot arbitrarily infringe upon fundamental rights. Legal practitioners advising cryptocurrency clients must be well-versed in both the regulatory framework and the constitutional limitations on regulatory power.

As the cryptocurrency and blockchain ecosystem continues to evolve, practitioners can expect further regulatory developments. Staying abreast of RBI communications, participating in policy consultations, and understanding international regulatory trends will be essential for providing effective legal advice in this dynamic field.