RBI fines Amazon Pay India Rs 3.07 crore for PPI and KYC lapses

What the Record Shows

The Reserve Bank of India imposed a monetary penalty of Rs 3,06,66,000 on Amazon Pay (India) Private Limited on 3 March 2023, according to the RBI press release of that date. The regulator said the penalty was levied in exercise of powers under Section 30 of the Payment and Settlement Systems Act, 2007, for non-compliance with certain directions issued by the RBI.

Per the order, the deficiencies related to two sets of rules: the Master Directions on Prepaid Payment Instruments dated 27 August 2021 and the Master Direction on Know Your Customer dated 25 February 2016. In plain terms, the RBI found shortcomings in how one of India's largest non-bank wallet issuers met the customer-identification and prepaid-instrument requirements that sit beneath every wallet transaction.

The RBI followed its standard enforcement process. It issued a show-cause notice asking Amazon Pay to explain why a penalty should not be imposed, considered the entity's written reply, and concluded that the charge of non-compliance was substantiated and warranted a monetary penalty. The action is civil and regulatory in nature.

The RBI attached its usual caveat. The regulator said the penalty is "based on deficiencies in regulatory compliance" and is not intended to pronounce upon the validity of any transaction or agreement Amazon Pay had entered into with its customers. In its public response, Amazon Pay said it remained committed to operating in line with regulatory guidelines and would continue to work with the authorities.

How It Worked

A prepaid payment instrument is the regulatory name for a wallet or a prepaid card: a stored-value account that a customer loads with money and then spends. Because these instruments move money at scale and can be topped up and cashed out, the RBI requires issuers to verify who their customers are, to the standard set out in its KYC direction, and to run the instruments within the limits of the PPI master directions.

The RBI's enforcement note does not allege that Amazon Pay stole or misdirected any money. What the regulator recorded, per the order, is non-compliance with the process rules: gaps in the customer-identification and prepaid-instrument controls the directions require an issuer of this size to maintain. That layer answers a simple supervisory question, namely whether the issuer can reliably say who is behind each funded account.

The sequence that produced the penalty is the ordinary supervisory one. The RBI examines a regulated entity, identifies where its compliance falls short of the master directions, and issues a show-cause notice setting out the charge. The entity replies. If the regulator is satisfied that the shortcoming is made out, it passes an order quantifying the penalty. That is what happened here: show-cause notice, reply, finding of non-compliance, and a penalty fixed at Rs 3.07 crore.

It is worth separating this penalty from a wider rule change that reshaped the same market at almost the same time. On 20 June 2022 the RBI issued a circular barring non-bank PPI issuers from loading prepaid instruments with credit lines. That circular ended the practice of running buy-now-pay-later credit through prepaid cards, a model then used by several fintech lenders. It was a market-wide rule for every non-bank PPI issuer; it was not a finding against Amazon Pay or any single named entity, and should not be read as one.

Who Lost Money

On the record, no customer is identified as having lost money. The RBI framed the matter as a compliance deficiency, not as a case of investor or depositor loss, and it made no allegation that any Amazon Pay user was defrauded or short-changed. The regulator's own caveat is explicit that the penalty does not touch the validity of any customer transaction.

The detriment the RBI is protecting against is different from a direct financial loss to a named victim. When customer-identification controls at a mass-market wallet fall short of the standard, the harm is to the integrity of the identification layer itself: the assurance that every funded account can be tied to a properly verified customer. That assurance is what allows the wider payments system to trust wallet-funded transactions, and it is what the KYC and PPI directions exist to guarantee.

The Rs 3.07 crore is a penalty paid to the exchequer, not a recovery distributed to victims, because there is no pool of identified victims here. For users, the practical position after the order was unchanged: the RBI's caveat confirmed that their existing transactions and balances were unaffected by the enforcement action.

Where It Stands Now

The penalty order dated 3 March 2023 is a completed regulatory action. It was a final order of the RBI's Enforcement Department, not an interim or ex-parte direction, and it followed the full show-cause and reply process. A penalised entity can in principle challenge such an order in the courts, but the public record shows the penalty as imposed, and re-checking the RBI's enforcement releases discloses no reported reversal, stay, or reduction of this particular penalty.

Amazon Pay's operations were not suspended or restricted by this order. Unlike a business-restriction direction, a monetary penalty under Section 30 does not stop the entity from onboarding customers or issuing wallets; it fixes a financial consequence for the compliance gaps the RBI found. The company continued to operate its wallet and payments services.

The order sits within a broader pattern of RBI enforcement against regulated payment and lending entities over the same period, alongside penalties and business restrictions the regulator has imposed elsewhere in the sector, which readers can follow through the enforcement archive.

What It Means

The value of this case for an ordinary wallet user is in understanding what a KYC-and-PPI penalty is, and what it is not. It is not a finding that a wallet stole money, and it is not a warning to close your account. It is the RBI holding a large issuer to the identification and prepaid-instrument standards that make the whole system trustworthy, and pricing the shortfall so that compliance is not optional.

The concrete takeaway is about how to verify the entities you trust with your money. Every authorised PPI issuer and payment operator is licensed by the RBI, and the list of authorised payment system operators is published on the RBI website. Before loading a wallet or linking a prepaid card, a user can confirm that the operator holds a valid authorisation, which is the same registration whose upkeep the KYC and PPI directions govern. RBI enforcement releases are public, so the compliance history of a regulated entity can be read directly.

Read alongside the June 2022 credit-line circular, the penalty shows how the RBI regulates the fast-moving wallet market on two tracks at once: entity-specific enforcement for compliance failures, and market-wide rules that redraw what every issuer may do. For related RBI actions in the same period, see the reports on how the RBI barred JM Financial Products from parts of its business and how the RBI halted IIFL Finance gold loans over documented breaches.

FAQ

What exactly did the RBI order against Amazon Pay?

Per the RBI press release of 3 March 2023, the regulator imposed a monetary penalty of Rs 3,06,66,000 on Amazon Pay (India) Private Limited under Section 30 of the Payment and Settlement Systems Act, 2007. The RBI found non-compliance with its Master Directions on Prepaid Payment Instruments and its Know Your Customer direction, following a show-cause notice and the entity's reply.

Does this mean Amazon Pay defrauded its customers?

No. The RBI made no such allegation. The penalty relates to deficiencies in regulatory compliance, specifically customer-identification and prepaid-instrument controls, and the RBI expressly stated the action is not intended to pronounce upon the validity of any transaction or agreement between Amazon Pay and its customers. No customer loss was alleged on the record.

Were customer wallets or balances affected?

No. A monetary penalty under Section 30 does not restrict the entity's operations or touch customer accounts. The RBI's own caveat confirms the action does not affect the validity of transactions users had already carried out. Amazon Pay continued to run its wallet and payment services after the order.

Can the penalty be challenged?

A regulated entity can challenge an RBI penalty order through the available legal remedies. The public record, however, shows the penalty as imposed on 3 March 2023, and RBI enforcement releases disclose no reported stay, reversal, or reduction of this particular penalty.

How can I check whether a wallet or payment app is authorised?

The RBI publishes the list of authorised payment system operators, including prepaid instrument issuers, on its website. Before you load a wallet or prepaid card, you can confirm the operator holds a valid RBI authorisation. RBI enforcement press releases are also public, so a regulated entity's compliance actions can be read directly.

What was the June 2022 credit-line circular about?

Separately from this penalty, the RBI issued a circular on 20 June 2022 barring non-bank prepaid instrument issuers from loading their instruments with credit lines. That was a market-wide prohibition affecting every non-bank PPI issuer, not a finding against Amazon Pay or any single named entity, and it ended the buy-now-pay-later-on-prepaid-card model then used by several fintech lenders.

This report is based on the Reserve Bank of India press release dated 3 March 2023 imposing a monetary penalty on Amazon Pay (India) Private Limited, reviewed on 31 July 2026.