On-boarding process FAQs
Whether without certification fees payment / LOA letter for auto debit, certification can be started?
No, LOA/ NACH Mandate has to be provided while initiating the request.
What documents required for cluster approach?
Along with risk & legal documents, waiver letter from bank & ASP is required.
Whether ASPs can have user access to initiate / track the request for respective banks
Yes, ASP user login can be provided to view / initiate requests of particular bank requests.
If Bank coming as Direct member what is basic documents to submit?
Letter of Authority/RBI Mandate – Should be in Rs 100 stamp paper with RBI DAD sign & seal to be submitted with on boarding documents; Further, Rs 5 lakh need to be paid for collateral deposit.
Whether UDIR request to be raised separately?
Yes, Separately UDIR & UDIR (ACC+IFSC) is mandate to raise request.
Whether RBI mobile license is required for UPI?
Yes, for UPI product Mobile license from RBI is mandatory.
What is amount of UPI agreements execute in stamp paper?
For Non- Disclosure Agreement – Rs 100 stamp paper, Tripartite Agreement – Rs 600 Stamp paper, and SLA’s – Rs 600 Stamp paper.
What all Info-sec documents to submit for UPI?
Security Assessment Report - Compliance Letter. Scope of Assessment: 1. Vulnerability Assessment and Pen test for UPI Server/ Devices: (ASP) 2. Configuration Audit Report for UPI Server/ Devices: (ASP) 3. App-sec Report for the PSP/ UPI APP (ASP) 4. ...
Is any validity for risk documents?
Yes, it should be within the 90 days’ validity from authorized signatory. If the document submitted is signed more than 90 days ago, then it will not be accepted.
Where to upload risk and Legal documents?
Risk docs need to be uploaded under Documents – AML/Risk field, and legal agreements to upload under Documents – Agreements/reports
Whether On-boarding documents are required after certification testing?
No, all On-boarding documents need to be uploaded in C-flow while initiating the request itself.
What is Member Type?
Depending on whether the bank is applying as issuer or acquirer, value bank has to select the same in this field in C-flow.
What is LOA status?
Letter of Authority is required for certification fee's Auto debit process. Alternatively, NACH mandate can be submitted to NPCI.
What is Business detailed requirement for this request field in C-flow for UPI?
If your bank is applying for first time for UPI, then you should select the "Business detailed requirement" as New bank; In case you are raising a request for additional scopes - please select "Business detailed requirement" as Existing bank.
What is basic scope for UPI?
Basic scope for UPI is 2.0 Fresh bank (issuer / Acquirer - to be raised as separate requests, depending on Bank's requirements). Further, the Bank needs to be live in IMPS product first - only then it will be eligible to raise for UPI
Can we download the UAT script post sign off is given?
Yes, if certification status shows completed - click on the request, then the UAT Script field will be visible and you can download the UAT script using the download option.
What is IIN?
Issuer identification number and it is 6-digit unique numbers issued by NPCI.
What are the sheets to be filled in Compliance form for IMPS?
Sheets to be filled General sheet, IMPS, IS-KYC- AML, Annexure -II
What are the legal and Risk documents to be uploaded for IMPS?
KYC/AML Declaration & Questionnaire, Compliance form, Board Resolution, RBI License, Letter of Authority/RBI Mandate, Non -Disclosure Agreement, Tri-partite agreement, Wavier letter Bank/ASP
What are the additional Risk documents required for mobile channel in IMPS?
RBI mobile banking license.
What are the types of channels applicable for IMPS?
Branch, Mobile, Internet, Micro ATM.
Whether requirement of new IIN and acquirer ID can be raised by existing bank?
Yes
What is NBIN?
Production team will share the NBIN - unique identity number - to Customer at the first time.
What are the documents to be shared in hardcopy for IMPS legal agreements?
Only TPA and NDA can be shared as hardcopies with the On-boarding team to verify, and the Maharashtra state should be mentioned in the stamp papers to push for legal approval.
What is a common reason to reject the request if bank raised a request for certification? (Non-cluster request)
One of the common reason for rejection is submission of incorrect Bank Public IP in Cflow For example, the following ranges are incorrect: 192.168 or 10.1 or 10.0 or 10.255.
What is the TAT for the request after it was rejected from requirement verification to resolve from bank on hold?
The TAT is one day to resolve the request from bank side, if TAT breached the request will be auto terminated.
In which cases of business requirement, Risk is applicable?
• Switch migration • Additional switch vendor • New bank (applying for that product for the first time) • Sub-member to Direct member • Sponsor bank change
In which scenarios bank must do recertification fee payment?
• If the Bank completed certification, but the request is terminated in C-flow as the Bank did not Go live within 50 days - and the Bank is re-applying for the same Product and Scope, then re-certification is applicable. • Switch migration- any ...
What are the documents required for cluster approach?
• Bank Waiver letter – In bank letter head with Bank seal and sign. • ASP waiver letter – In ASP letter head with ASP seal and sign.
What is new / existing bank option in Cflow?
1) If the bank coming for first time in IMPS product even though already live in NFS or Rupay product, then bank should select the option as new bank when raising a request in IMPS. 2) If the bank coming for new scope or additional scope in the same ...
Whether bank can use same switch keys for switch migration request?
No switch keys need to be re-initiated.
Can same BIN be used for International and Domestic for Testing?
No, the bank needs to provide separate BINs
Is there a separate request for BEPG international scope?
No, if the bank is already live on international ATM and POS same can be used for BEPG.
Can we raise RuPay Contactless – Host to Host request for ATM and POS channel in a single request?
For Domestic requests - You cannot; for International scope yes.
In case of Termination of request while testing process will the fees be refunded?
No
If a Bank applying for RuPay Contactless Host to Host has a PPI license, what are additional test cases for certification?
In case of a PPI Licenced Bank applying for RuPay Contactless Host to Host certification, the bank needs to test for NCMC test cases also.
When can bank use existing production keys?
If the bank is already live on EMV and coming for RuPay Contactless with same switch, then they can use the existing Production keys.
What is expiry date for Production keys?
Within 90 days the bank need to complete production activity after key generation.
Whether we need to raise separate request for BIN addition in C-flow?
No. Respective Business Team have to take it up with operation team
What is next process after WPC Certification sign off?
Banks need to share complete IPKC form for Production CAIPK generation.
Next page