What an AEPS retailer ID lets your shop do
An AEPS retailer ID lets your shop act as a cash point for bank customers. AEPS (Aadhaar Enabled Payment System) is a bank-led system run by NPCI. It lets a customer of any bank transact through a Business Correspondent (BC) using Aadhaar authentication (NPCI). The customer gives their Aadhaar number and a fingerprint or iris scan, and their bank approves or declines the transaction.
In the Payonclick app, an AEPS retailer ID gives you three services:
Cash withdrawal
The customer takes cash from their own bank account. When it succeeds, the amount lands in your AEPS wallet and you pay the cash out at your counter.
Balance enquiry
The customer checks the balance in their bank account with their Aadhaar number and a biometric scan.
Mini statement
The customer sees the recent transactions on their bank account.
Know the boundaries before you promise anything to a customer. The app offers these three AEPS services only, so there is no cash deposit. Customers cannot use face authentication for transactions. And an amount inside the app's range can still be declined, because banks can apply their own limits.
Payonclick India is a technology and service provider, not a bank. AEPS transactions run on regulated banks and NPCI's network. Payonclick provides the app, onboarding and support, while the customer's bank decides each transaction.
Who can apply and the documents you need
Shop owners and retailers across India can apply, directly or through their distributor, and approval depends on your KYC. You don't need a GST registration, because GSTIN is optional in AEPS merchant onboarding. You will need your own Aadhaar and PAN, your bank account details and a phone with the Payonclick app.
| Stage | What you provide |
|---|---|
| Registration | Name, gender, mobile number (verified by OTP), email and password |
| KYC through DigiLocker | Your consent to share Aadhaar and PAN. Matching names are approved automatically; otherwise our team reviews it. |
| KYC form (instead of DigiLocker) | Aadhaar number, PAN, bank account details, photos of your Aadhaar card (front and back) and PAN card, and a passport-size photo |
| AEPS merchant onboarding | Name, mobile, a 4 to 6 digit merchant PIN, PAN, Aadhaar, shop name, shop address, bank account number, IFSC and account holder name. GSTIN is optional. |
| eKYC | Aadhaar eKYC with an OTP and your biometric, then bank eKYC |
Check that your name is spelt the same way on your Aadhaar, PAN and bank account before you start. DigiLocker KYC with matching names is approved automatically, and your settlement bank account is verified by a name match too. A mismatch at either step means waiting for our team to review it.
How onboarding works
Register
Sign up on payonclick.in or in the Payonclick app with your name, gender, mobile number, email and password. Your mobile number is verified by OTP.
Complete KYC
Share Aadhaar and PAN through DigiLocker, or fill in the KYC form with your documents and photos for our team to review.
Sign the agreement
Once your KYC is approved, sign the retailer agreement by eSign.
Activate AEPS
Activate the AEPS service on your account. Activation charges apply per service, and our team shares them with you.
Complete merchant onboarding
Enter your shop, PAN, Aadhaar and bank details, and set a 4 to 6 digit merchant PIN.
Finish eKYC
Complete Aadhaar eKYC with an OTP and your biometric, followed by bank eKYC.
If you joined through a distributor, they can support you through these steps. After onboarding, every day you transact starts with daily authentication, explained below.
RD devices that work with the Payonclick app
An RD (registered device) is a certified fingerprint or iris scanner used for Aadhaar authentication. The Payonclick app supports these models:
| Type | Supported models |
|---|---|
| Fingerprint | Mantra MFS110 and MFS100; Morpho/IDEMIA MSO 1300/1350 and MorphoSmart; Startek FM220 and FT11; Precision; Evolute; SecuGen Hamster Pro 20; NEXT Biometrics; Tatvik TMF20 |
| Iris | Mantra MIS100 and MIS100 V2 |
Before you spend money on a device:
- Already own a scanner? Check its exact model name against this table first.
- Buying a fingerprint scanner? Ask the seller for the L1 version of a listed model.
- Want a backup option? An iris scanner gives you a second way to serve customers whose fingerprints don't read well.
A phone camera can't take the place of a scanner for customers. Face authentication is not accepted for AEPS transactions in the Payonclick app; it is accepted only for your own daily authentication.
Daily authentication and the OTP above ₹5,000
Daily authentication. Once each day, before AEPS transactions, you authenticate your own Aadhaar biometrically in the Payonclick app. Fingerprint, iris or face are accepted for this check. The app needs location (GPS) permission, so keep location on.
Aadhaar OTP for larger withdrawals. In the Payonclick app, a cash withdrawal above ₹5,000 also needs an OTP sent to the customer's Aadhaar-linked mobile number. A withdrawal of exactly ₹5,000 does not. If the OTP is delayed, it can be resent after 30 seconds.
At the counter, this means:
- Before you enter an amount above ₹5,000, check that the customer has the phone with their Aadhaar-linked number. The OTP goes to their phone, not yours.
- The OTP is an extra step, not a replacement. The customer's fingerprint or iris is still needed.
- A customer whose Aadhaar is linked to an old number won't receive the OTP. They need to update it with UIDAI.
Don't split one large withdrawal into several smaller ones to skip the OTP. Under RBI's rules, acquiring banks must monitor AEPS operators by location, volume and velocity, and back-to-back withdrawals push up both volume and velocity on your ID.
AEPS limits in the Payonclick app
| Item | In the Payonclick app |
|---|---|
| Cash withdrawal per transaction | ₹100 to ₹10,000 |
| Amount steps | Multiples of ₹50 |
| Aadhaar OTP | Needed above ₹5,000, not at exactly ₹5,000 |
| OTP resend | After 30 seconds |
| Customer authentication | Aadhaar number plus fingerprint or iris on a certified RD device |
| Your daily authentication | Once a day by fingerprint, iris or face, with location permission |
Banks can apply their own limits on top of these. NPCI also recommends that banks cap a customer's AEPS cash withdrawals, together with Aadhaar-based merchant payments, at ₹50,000 over a rolling 30 days (NPCI/2023-24/AePS/087). A withdrawal refused under that cap is declined with response code 61, so it is a bank-side limit, not a fault in your device.
Every service's limits, with the official source beside each rule, are on our rules and limits page. You can also read our Hindi guide to AEPS limits.
Getting your money to your bank (settlement)
Each successful cash withdrawal adds the amount to your AEPS wallet, while the cash itself has left your drawer. Settlement is how you move that balance on:
| From your AEPS wallet to | How it works |
|---|---|
| Your Main wallet | Completes immediately |
| Your own bank account | Sent by IMPS and processed in the background. It is not instant: the status updates when the bank confirms. |
For bank settlement:
- You can save up to 5 bank accounts.
- Each account is verified before use by a penny-drop name match, a small test credit that returns the account holder's name. If the name doesn't match, our team reviews it.
- Every settlement needs your TPIN, which locks for 15 minutes after 5 wrong attempts.
- The daily settlement limit is ₹5,00,000 per retailer.
Add and verify your bank account before your first busy day. If the name check needs a review, you won't be waiting on it while your cash drawer is empty.
The RBI operator KYC rules from 1 January 2026 and what they mean for you
RBI's directions on due diligence of AePS touchpoint operators (RBI/2025-26/63), dated 27 June 2025, apply from 1 January 2026. When RBI published the draft on 31 July 2024, it pointed to AePS frauds caused by identity theft or compromised customer credentials (RBI press release). The directions require acquiring banks to:
- do KYC on every operator, including sub-agents
- redo KYC after 3 consecutive months of inactivity
- allow AePS APIs to be used only for AePS
- monitor operators by risk, including location, volume and velocity
What this means for you:
- Bank eKYC is part of onboarding. The Payonclick app enforces bank eKYC for new merchants because of these rules.
- Keep your ID active. After 3 consecutive months without AEPS activity, expect to complete KYC again.
- Your ID is yours alone. KYC is done on you as the operator, so never let anyone else transact on your ID or use your fingerprint.
- Work from your shop. Banks monitor where transactions happen, so serve customers from the shop address you registered.
For the full picture, read our guide to the AEPS operator KYC rules.
Payonclick staff never ask for your OTP, TPIN, password or a remote fingerprint scan. If a caller asks for any of these, hang up and contact us on +91 99926 88080 (phone and WhatsApp), Monday to Saturday, 10:00 AM to 7:00 PM IST.