The Merchant Onboarding Checklist
Peneu Editorial Team · 22 January 2026 · Updated 26 September 2026 · 7 min read

Payment providers are responsible for the merchants they serve. RBI's 2025 Master Direction on payment aggregators, for example, makes the aggregator that onboards a merchant responsible for its due diligence, and includes a security assessment during onboarding. That's why onboarding asks what it asks. Most delays aren't the provider being slow; they're a missing document or an unfinished website. This checklist is designed to get you through first time.
Before you apply
Five minutes of preparation saves days.
- Write a two-line description of what you sell, to whom, and how they pay. Reviewers compare it with your website.
- Estimate monthly volume and average order value. Be realistic; big surprises later trigger reviews.
- Check your business isn't in a prohibited category. Payments for online money games, for instance, are prohibited under the Online Gaming Act, 2025.
- Make sure the name on your bank account matches your business's legal name.
Documents, by type of business
Every provider sets its own list under its KYC rules, but this is the usual core.
Send clear, complete, current copies together. Partial submissions tend to go to the back of the queue.
| Business type | Business documents | People |
|---|---|---|
| Sole proprietorship | Proof the business exists; PAN | Proprietor's identity and address |
| Partnership or LLP | Deed or registration; firm PAN | Partners' identity |
| Company | Incorporation documents; company PAN; GST where applicable | Directors, signatories and beneficial owners |
| Trust or society | Registration and governing documents; PAN | Trustees or office-bearers |
Your website, as a reviewer sees it
For online businesses, the website is part of the application. Reviewers check that it matches what you declared, and that a customer can see what they're buying and on what terms before paying.
- Products or services with prices, visible before checkout
- Terms and conditions
- Refund and cancellation policy, with timelines
- Privacy policy
- Contact details a customer can actually use
- Shipping or delivery policy, if you ship goods
- No placeholder pages, 'coming soon' sections or broken links
Your settlement account
Money will be settled to a bank account in your business's name, and providers verify it, typically by checking that the account is active and the name matches. A mismatch between your legal name, your PAN and your bank account is the most common reason onboarding stalls at the last step.
Integration and go-live readiness
Approval isn't the finish line. Before taking real payments:
- Test success, failure, timeout and refund cases in the sandbox.
- Mark orders paid from the provider's server notice, not the customer's browser.
- Verify webhook signatures and handle duplicates.
- Store live keys on your server only, and rotate test keys out.
- Know where settlement reports come from and who reconciles them.
After you're live
Providers keep monitoring merchants and may ask for updated documents when your business changes: new products, a new website, a change in ownership or a jump in volume. Telling them first is always smoother than being asked.
Go deeper
Official sources
- RBI — Master Direction on Regulation of Payment Aggregator (PA) (15 Sep 2025)Merchant due diligence by the onboarding PA; security assessment during merchant onboarding.
- The Promotion and Regulation of Online Gaming Act, 2025 (official text via MeitY)Section 7: prohibition on facilitating payments for online money gaming services.
Last reviewed . Examples, amounts and screens marked illustrative are not Peneu figures.
Questions about your own payment setup?
Talk to PeneuRelated reading

UPI vs. Cards: What Should Merchants Prioritise?
UPI and cards solve different problems for Indian merchants. How they compare on authentication, recurring payments, disputes, customers abroad and cost, and how to decide what to offer first.

A Founder's Checklist for Choosing a Payment Gateway
Methods, money flow, reliability, integration, reporting, support and cost: the questions to ask any payment gateway or aggregator before you sign, and how to compare the answers.
