Be the first to share your thoughts!
Applying for a loan in India was once a long and frustrating process. People had to collect multiple documents such as bank statements, income…
Applying for a loan in India has always been a long and often frustrating process. Borrowers typically had to gather multiple documents like bank…
There was a time when people had gather all their financial documents just of a loan or credit card, or filing taxes. Many people still face the same problem of having multiple apps for Mutual Funds, Fixed deposits, Stocks, Insurance, Bank accounts etc. Gathering this data is a long and inconvenient process only if there was a way to streamline things.
RBI solved this exact problem with Account Aggregator (AA) India’s own financial data sharing framework where your financial data is transferred with your consent to the required party. In this article we are going to deep dive into Account Aggregator and how it can make an impact just as big as UPI if not bigger so lets see what it is all about.
| Section | What it Covers |
|---|---|
| Introduction | How AA fits into India’s digital finance stack (after Aadhaar & UPI), and why it matters for secure, consent-based data sharing. |
| Background & Evolution | Origins of AA, RBI’s Master Directions (2016), role of Sahamati, and official launch in September 2021. |
| What is an AA? | Definition, RBI regulation, role as data-blind intermediaries, and key participants (FIPs & FIUs). |
| How it Works | Step-by-step flow: request, consent, secure transfer, time-bound access, and service delivery. |
| Benefits | Advantages for individuals (faster access, privacy), institutions (fraud reduction, efficiency), and the ecosystem (inclusion, innovation). |
| Security & Consent | Safeguards like consent verification, OTP, encryption, time-bound access, and regulatory oversight. |
| Current Ecosystem | 16 licensed AAs, 200+ FIPs, 700+ FIUs, and rapid growth to 24.8 crore consents and 18.2 crore accounts linked by 2025. |
| Use Cases | Personal Finance Management, Lending, SME finance, insurance, wealth management, tax, and compliance. |
| Challenges | Limited awareness, incomplete onboarding, digital literacy gaps, technical hurdles, and perception of complexity. |
| Future Outlook | Expansion to new instruments (ITR, EPFO, bonds), integration with India Stack, wider adoption, and global potential. |
| FAQs | Common questions on safety, consent, participants, speed of approvals, small business credit, and future roadmap. |
An Account Aggregator (AA) is a secure digital system regulated by the RBI that lets people share their financial data with consent. Instead of uploading bank statements or giving login details, users can approve sharing directly through the AA platform.
In short, AA makes it faster and safer for individuals and businesses to share data for loans, insurance, and investments, similar to how UPI changed payments in India. There are 2 parties in the AA space FIPs & FIUs lets discuss more about them.
FIPs are institutions that hold financial data. They act as the source of verified information within the Account Aggregator framework. Examples include:
The role of the FIP is to securely share requested records with the consent of the individual. They never release data without explicit approval.
FIUs are institutions that request financial data for a specific purpose. They are the receivers in the framework. Examples include:
The role of the FIU is to use verified data responsibly for the service requested by the individual. They can only access the exact dataset approved through consent, and only for the time allowed.
We all know this part where you would have to spend an entire weekend or to (if you are unlucky) to just gather the data from various companies Banks, Insurance, PF, Investments etc., and don’t get me started if there was a error in any of those records then come back and check everything from scratch.
To solve this, the Reserve Bank of India introduced the Master Directions on Account Aggregators in 2016. It created a new category of licensed entities called NBFC-AA. These intermediaries were designed to transfer encrypted financial data between institutions, strictly based on user consent. This move positioned India as one of the first countries to regulate consent-driven financial data sharing.
Speed of this moment grew with the launch of Sahamati, a non-profit industry alliance, in 2019. Its goal was to promote adoption, standardize protocols, and build awareness among financial institutions and the public. Sahamati played a key role in transforming AA from a regulatory idea into a functioning ecosystem. They are the face of this sector just AMFI for Mutual Funds.
On September 2, 2021, the Account Aggregator network went live with eight major banks, which are SBI, ICICI, HDFC, Axis Bank, IDFC First, Kotak Mahindra, IndusInd and Federal Bank. At first, adoption was limited and mostly focused on pilot programs. However, this launch signaled a turning point as India’s largest banks embraced consent-based data sharing.
By 2025, the AA framework expanded to cover over 24.8 crore consents across banks, insurers, mutual funds, and pension providers. More than 18 core accounts have already linked, proving the speed of adoption in less than a decade.
Today, the AA framework stands alongside Aadhaar (identity) and UPI (payments) as a cornerstone of the India Stack. Together, these initiatives create a modern financial ecosystem that is inclusive, efficient, and built on the principle that individuals should control their own data.
Just to get a Complete idea lets walkthrough the entire AA process from the start. So we won’t have any doubts moving forward. To simplify things further lets start with an example: Jatin wants a home loan and goes to SBI for it but he has his saving account in HDFC.
This is not only a technical innovation, it also creates tangible advantages for individuals, financial institutions, and the economy as a whole.
Banks, insurers, and investment platforms gain from the ability to make faster and more accurate decisions. With verified data arriving directly from trusted sources, the risk of fraud or manipulation drops significantly. Credit assessment becomes more reliable, and underwriting in insurance becomes quicker.
For example, a small business seeking working capital can allow HDFC Bank to access its GST returns and current account transactions directly from the GSTN and SBI. This reduces the need for manual verification and shortens approval timelines.
Institutions also benefit from lower operational costs, since they no longer need to process physical documents or rely on lengthy back-and-forth exchanges.
At a national level, the framework supports financial inclusion. Many small businesses and individuals who struggled to prove their creditworthiness through traditional paperwork can now share digital records quickly. This helps them access loans, insurance, or investments that were earlier out of reach.
The system also lays the foundation for innovation in financial services. Fintech platforms can build new products that rely on verified data flows, from smarter budgeting tools to customized investment advice. By creating a trusted way to share information, the ecosystem becomes more open, efficient, and competitive.
This consent-based AA network has been designed with security as its foundation, ensuring that users remain in control at every step while protecting sensitive information from misuse, because any system that handles financial records must guarantee safety.
The most important safeguard is consent.
To make this step more secure, consent is often verified through a one-time password (OTP) sent to the registered mobile number. This ensures that only the rightful account holder can authorize the transfer, preventing misuse by anyone else.
When data moves between institutions, it is fully protected by encryption.
Another safeguard is that access is always limited and temporary.
Security is not only technical but also regulatory.
These safeguards ensure that:
For consumers like us, AA is the solution for problems as its much better then emailing PDFs or physical photocopies. For institutions its efficient way to get verified data straight from the source.
In reality, this combination of consent, OTP verification, encryption, time-bound access, and regulation makes the AA framework one of the most secure ways to share financial data in India today.
India currently has 16 licensed AA, a mix of startups and established legacy institutions. These players can be grouped based on their background and focus areas. Some belong to large financial services groups such as CAMS, Tally, and Digio. Others are new-age fintechs like Finvu, Setu, and Anumati. There is also a credit bureau-backed player in the form of CRIF, along with a government-supported platform like NADL. Below is the complete list of Account Aggregators in India:
Setu AA (fintech, Agya Technologies, API and infrastructure provider)
CAMSFinServ (from CAMS, India’s leading mutual fund registrar and transfer agency)
Finvu (fintech, Cookiejar Technologies, digital finance solutions)
CRIF (from CRIF, a global credit bureau and analytics company)
Cygnet AA (from Cygnet, enterprise technology and solutions provider)
Saafe (fintech, Dashboard AA Services)
Digio AA (fintech, Digio Internet, digital onboarding and verification solutions)
OneMoney (from FinSec AA Solutions, India’s first licensed Account Aggregator)
NADL (government backed, NESL Asset Data, part of National E-Governance Services Ltd.)
OMS AA (fintech, OMS Fintech)
SurakshAA (from Protean eGov Technologies, known for PAN and NSDL services)
Anumati (fintech, Perfios, financial data aggregation and analytics)
PB Financial AA (from PB Fintech group, well known for Policy Bazaar, Paisa Bazaar)
TallyEdge (from Tally Solutions, one of India’s largest accounting software providers)
INK AA (fintech, Unacores)
Scoreme AA (fintech, Scoreme Solutions, data analytics and credit scoring)
Despite their varied origins, all AAs share the same principle: they are data blind. This means they cannot read or store the information that flows through their systems. Their only role is to securely transport data from one financial institution to another, with full consent from the individual. The only details visible to them are the source of the information and the destination.
On the provider side, the number of FIPs has now crossed 180, covering almost all major public and private banks, along with insurers, pension funds, and mutual fund registrars. These institutions act as the source of verified records that individuals and businesses can choose to share.
On the user side, the growth has been even faster. The number of FIUs has already gone past 700, including banks, NBFCs, fintech lenders, life insurers, and investment platforms. While early adoption was led by lending institutions, more sectors are now coming on board, expanding the use of consent-based data flows across the financial ecosystem.
There are multiple use cases of using an AA, Some of them are listed below:
These use cases show how the framework goes beyond just banking. It provides a common channel for different financial services, reducing delays, cutting down on paperwork, and strengthening trust between consumers and institutions.
Nothing is perfect in this world and AA is not an exception to this so here are some of the challenges it faces while it grows:
Most people are still unfamiliar with the concept of consent-based data sharing. Many continue to rely on traditional methods such as email attachments and photocopies because they are unaware that a secure digital alternative exists. Building trust and awareness will be key to driving adoption.
Although a large number of banks and financial institutions are live, the network is not yet fully universal. Some providers of financial data, especially in insurance and pensions, are still in the process of integration. Until all major sectors are covered, the system cannot deliver its complete value.
For more than a decade now after listening to “Do not share OTP with anyone” it is engrained into the minds of people that if someone is asking for OTP that means they are going to loot them, to tackle this there has to be a campaign nation wide to build trust in people and solve their queries.
For financial institutions, connecting to the framework requires technical readiness and investment. Some smaller players may find it difficult to upgrade systems or maintain compliance with standards. This can slow down onboarding and create uneven adoption across the sector.
Even among institutions that are already live, not all have systems that run smoothly. Some banks are slow in updating their own digital infrastructure, which can delay daily processes (SBI with its lunchtime). In certain cases, users experience errors when data is being fetched, or find that real-time monitoring features in personal finance management apps do not work consistently. These technical bottlenecks reduce the reliability of the framework in practice and highlight the need for stronger backend upgrades by all participants.
Since the framework involves new terms such as FIP, FIU, and NBFC-AA, many people see it as complicated. Unless explained in simple language and demonstrated with clear use cases, there is a risk that consumers may view it as just another layer rather than a convenience.
Despite these challenges, the growth remains strong. With more institutions joining, awareness campaigns expanding, and user interfaces improving, many of these limitations are likely to ease over time. The system is still evolving, but the foundations suggest it is well placed to overcome these hurdles.
The Account Aggregator framework is still young, yet its trajectory suggests that it could become as important to financial data as UPI has become to payments. The foundations have been laid, and the coming years will likely bring broader participation, deeper use cases, and stronger integration with India’s growing digital infrastructure.
At present, all major banks are already live on the network, but the future will see near-universal coverage. Insurance companies, pension funds, securities platforms, and mutual funds are gradually joining in, and their full participation will create a complete picture of an individual’s financial life. Once every major sector is onboard, individuals and businesses will be able to share almost any financial record digitally through a single consent framework.
The scope of the framework is set to expand with several new categories of financial data, including:
Beyond investments, other important data sources are also on the roadmap. Income Tax Return (ITR) data and Provident Fund balances from EPFO are proposed to be integrated, creating a stronger foundation for credit assessments and long-term financial planning. There are also efforts to bring joint accounts and corporate accounts into the ecosystem, which would expand usage beyond individuals to businesses and households managing shared finances.
When these instruments go live, the framework will no longer be limited to savings accounts and simple transactions. Instead, it will cover almost the entire financial spectrum, from short-term money market instruments to long-term retirement savings, giving users a single, secure channel to manage consent across all types of records.
The AA system is part of the larger India Stack vision. Over time, it is expected to integrate more tightly with other public digital infrastructures such as UPI for payments, Aadhaar for identity, and ONDC for commerce. Together, these layers can provide a seamless experience where identity, payments, and data sharing all work in sync. For example, a small business could receive a loan based on verified account data, repay it instantly through UPI, and expand its trade through ONDC, all on connected rails.
Fintechs and startups are expected to build new services on top of the consent-based data layer. Personal finance management apps can provide real-time insights, wealth platforms can offer more customized advice, and insurers can design products tailored to verified income patterns. The presence of a trusted, secure, and standardized channel makes innovation easier and safer.
India is among the first countries to implement a nationwide framework for consent-based financial data sharing. If the system continues to succeed, it could serve as a model for other emerging economies just like what UPI did in many other countries. The combination of regulatory oversight, strong adoption, and integration with digital public infrastructure makes the framework an example with global relevance.
The future of the Account Aggregator framework lies not just in scaling numbers but in how it reshapes financial services. By creating a trusted digital highway for data, it promises to make finance more inclusive, efficient, and innovative in the years ahead.
What is an Account Aggregator?
A regulated system that enables consent-based sharing of financial records between institutions without storing the data.
How does an Account Aggregator keep data safe?
Data transfers are encrypted, consent is verified often by OTP, access is time-bound, and all participants are regulated entities.
Who are FIPs and FIUs in the Account Aggregator framework?
FIPs are providers of financial records such as banks, insurers, mutual fund registrars and pension funds. FIUs are requesters such as lenders, insurers, wealth platforms and tax services.
Which institutions operate Account Aggregators in India?
16 licensed AAs operate in India, including product names such as Setu AA, CAMSFinServ, Finvu, CRIF, Digio AA, OneMoney and NADL among others.
How does Account Aggregator speed up loan approvals?
Verified records flow directly from the source to the lender after consent, removing manual document collection and reducing processing time from days to hours.
How many Account Aggregators are there in India?
As of now there are 16 Account Aggregator in India and one more is in line which will push the number to 17.
What kinds of financial data will join Account Aggregator in future?
Planned additions include Commercial Paper, Certificates of Deposit, Government Securities, corporate bonds and debentures, income tax data, EPFO balances, and joint or corporate accounts.
What happens if I do not give consent?
No data is shared. The individual retains full control over whether a request is approved.
What are the disadvantages of account aggregator?
Sometimes it takes time to fetch data as FIPs can be slow at times, not all types of Financial data is available on the Account Aggregator.
How is consent verified?
Consent is typically confirmed through a digital request and verified with an OTP sent to the registered mobile number.
The Account Aggregator framework is more than just a new layer in finance. It marks a shift where people finally gain control over their own financial data. By making sharing secure, simple, and consent-driven, it reduces paperwork, speeds up access to services, and strengthens trust across the system.
The journey is still early, but the direction is clear. As more institutions and instruments join, this network will stand alongside UPI and Aadhaar as one of the pillars of India’s digital finance. Its promise is simple yet powerful: your data, your choice, your benefit.