Quick answer: An online payment gateway lets a business accept card, UPI, net banking and wallet payments on its website or app. The main advantages are faster checkout, more payment options, wider reach and automated recurring billing. The main challenges are failed transactions, fraud and data security, technical downtime, cross-border costs and checkout drop-offs. In India, the companies that handle merchants’ money (payment aggregators) must be authorised by the Reserve Bank of India (RBI).
Payment gateway vs payment aggregator: what is the difference?
People often use the two terms for the same thing, but the RBI separates them:
- Payment gateway (PG): the technology that carries payment details securely between the customer, the merchant’s website and the banks and card networks, without handling the money itself.
- Payment aggregator (PA): a company that collects customers’ payments on behalf of many merchants and then settles the money to each merchant’s account.
Most providers that small businesses sign up with act as both. Under the RBI’s Regulation of Payment Aggregators Directions, issued on 15 September 2025, non-bank payment aggregators need RBI authorisation. They must have a net worth of at least ₹15 crore when they apply and ₹25 crore by the end of the third financial year after authorisation. The directions cover online aggregators (PA-O), physical point-of-sale aggregators (PA-P) and cross-border aggregators (PA-CB), and they replaced the RBI’s earlier 2020 guidelines on payment aggregators and gateways.
Nine advantages of using an online payment gateway
1. Better customer experience
A well-designed gateway lets shoppers pay in a few taps, from anywhere and at any time, without visiting a store. Returning customers can also check out faster. In India, saved cards now work through tokenisation: since 1 October 2022, merchants and gateways other than card issuers and networks may not store customers’ full card numbers, so a “saved card” is held as a token instead. An earlier version of this article said gateways save card data for future purchases; that is no longer allowed in India.
2. Faster transactions
Online payments are authorised in seconds, which saves time for both the shopper and the merchant. How quickly the money reaches your bank account depends on your agreement with the aggregator. RBI’s 2025 directions require that agreement to state settlement timelines transparently, so compare them before you sign. The original version of this article said payments take 2–3 days to reach the merchant; today the timeline is whatever your contract sets.
3. Instant payment confirmation
Each time a customer pays, the gateway sends the merchant a success or failure status, so the business can confirm, hold or cancel the order straight away and keep cleaner records.
4. Security
Cash and cheques carry risks such as theft and bounced cheques. Reputable gateways comply with the Payment Card Industry Data Security Standard (PCI DSS), whose current version is 4.0.1, and use encryption and tokenisation so that card details are not exposed to the merchant. RBI’s 2025 directions also state that customer card credentials must not be stored in a database or server accessed by the merchant. Compliance builds shoppers’ trust in your business.
5. Wider reach
Online payments let a business sell beyond its city or country. A physical shop can only serve people who walk in; a website with a payment gateway can take orders from anywhere the provider supports. For international sales, use a provider authorised for cross-border payments.
6. Lower overhead costs
A physical store needs space, staff and cash handling. Online payments reduce these costs because collection, receipts and much of the reconciliation are automated. You still pay transaction fees to the provider and someone still needs to review settlements, refunds and disputes.
7. More payment options for customers
A gateway can offer UPI, debit and credit cards, net banking, wallets, gift cards and EMIs through one integration. Offering the methods your customers already use is one of the simplest ways to reduce abandoned payments.
8. More spontaneous purchases
Because customers can browse and buy in their spare time, without travelling to a store, a quick and simple checkout makes it easier for them to complete a purchase when they decide. Keep it honest: clear prices, delivery charges and return terms prevent disputes and chargebacks later.
9. Payment automation for recurring bills
Subscriptions, loan EMIs, insurance premiums and credit card bills are recurring payments that customers can forget. Gateways support e-mandates, so the amount is debited automatically on the due date. Under RBI’s e-mandate rules, the customer authenticates the mandate once when registering it. Later debits up to ₹15,000 can then go through without a fresh one-time password (OTP); for mutual fund subscriptions, insurance premiums and credit card bill payments, that limit is ₹1 lakh. The customer must get a notification before each debit and can withdraw the mandate.
Challenges of online payment gateways and how to overcome them
1. Failed transactions and poor connectivity
A slow connection or an unresponsive server can make a payment fail. Sometimes the customer’s account is debited but the merchant does not receive the money, which causes stress and mistrust.
RBI rules set deadlines for these cases. Under its 2019 framework for failed transactions, a UPI payment to a merchant where the account is debited but the merchant does not get confirmation must be auto-reversed within five days of the transaction (T+5). A failed UPI transfer to another person must be reversed by the next day (T+1). If the bank misses the deadline, it must pay the customer ₹100 for each day of delay. Choose a gateway with lightweight, mobile-friendly payment pages, clear failure messages and a fast refund process, and show customers how to raise a complaint.
2. Fraud and data security
Phishing, account takeovers, fake payment links and stolen card details are common online. Use a PCI DSS-compliant provider, never store card numbers yourself, turn on the provider’s fraud checks and two-factor login for your merchant dashboard, and train staff not to share OTPs or dashboard access. Our guide to improving cybersecurity in a growing business covers the basics.
3. Technical issues and downtime
Slow processing, server errors and slow page loads all cost sales. Before you choose a provider, check its published uptime and status page, how quickly support responds, and whether it offers a test (sandbox) mode for your developers. Your e-commerce software should integrate with it cleanly.
4. International and multi-currency payments
The internet lets small businesses reach customers abroad, but international payments can be slower and more expensive because of banking rules, fraud checks and currency conversion. In India, cross-border collections should go through an RBI-authorised cross-border payment aggregator (PA-CB), which must keep inward and outward payment flows separate. Compare conversion rates, fees and settlement times before you enable international payments.
5. Checkout drop-offs
Cart abandonment is a major problem for any online store. Long forms, slow pages, surprise charges and too many steps all push shoppers away. Keep checkout short, show the full price early, offer guest checkout and the payment methods your customers prefer, and test the flow on a basic mobile phone. A good shopping cart tool makes this easier.
How to choose a payment gateway in India
- Check authorisation. Confirm the provider is an RBI-authorised payment aggregator, or is backed by a bank, by checking the RBI’s list of authorised payment system operators on rbi.org.in.
- Compare all costs. Look at set-up fees, per-transaction charges by payment method, international card charges, refund and chargeback fees, and any annual fee.
- Read the settlement terms. Check when money reaches your account and what is held back for refunds or disputes.
- Check payment methods. Make sure the provider supports UPI, cards, net banking, EMIs and recurring mandates if you need them.
- Test support and integration. Use the sandbox, read the documentation and contact support before going live.
Rules for payments change often, so check the RBI website and your provider’s current terms before you sign up.
Frequently asked questions
Is a payment gateway the same as a payment aggregator?
No. In RBI’s terms, a payment gateway provides the technology to process payments without handling funds, while a payment aggregator collects funds from customers and settles them to merchants. Many providers offer both services together.
Does a payment aggregator need an RBI licence?
Yes. Non-bank payment aggregators need RBI authorisation under the 2025 directions. Banks can run payment aggregation without separate authorisation.
Can my website store customers’ card details for faster checkout?
No. Since 1 October 2022, only card issuers and card networks may store card data in India. Faster repeat checkout works through card tokens instead.
What happens if money is debited but the payment fails?
For a UPI payment to a merchant, the amount must be auto-reversed within T+5 days; a failed UPI transfer to another person must be reversed by T+1. If the deadline is missed, the bank must pay ₹100 per day of delay under RBI’s failed-transaction rules.
Do customers need an OTP for every subscription payment?
No. After the mandate is registered with authentication, later debits up to ₹15,000 (₹1 lakh for mutual funds, insurance premiums and credit card bills) can go through without an OTP. Customers are notified before each debit.
This guide was checked in October 2026 against the RBI’s Regulation of Payment Aggregators Directions (15 September 2025), its card-on-file tokenisation and e-mandate rules, its 2019 framework for failed transactions and the PCI Security Standards Council’s current standard. It is general information, not legal or financial advice.
