March 8, 2026
10 min read
Account Aggregator in India: How the AA Framework Works (2026 Guide)
March 8, 2026
10 min read
Account aggregator is a new class of RBI-licensed NBFC that enables consent-based sharing of financial data between institutions in India. In simple terms, it lets borrowers share their bank statements, tax records, and investment data directly with lenders—without downloading, uploading, or handling any documents.
In fact, the growth has been remarkable. As of September 2025, the AA ecosystem had processed over 269 million customer consents. Moreover, 780+ financial institutions are now live on the framework. Additionally, loans worth ₹1.6 lakh crore have been disbursed using AA data across 1.8 crore loan accounts.
This guide explains how the account aggregator framework works in India. It covers the three key participants (FIP, AA, FIU), the consent flow, use cases in lending, and why AA adoption matters for NBFCs and fintech lenders building modern credit underwriting workflows.
An account aggregator is a consent manager for financial data. The RBI created this category through its Master Directions in 2016. Specifically, AAs operate as a new class of NBFC licensed to facilitate data sharing between financial institutions.
Here is the critical distinction. An account aggregator does not store, read, or process user data. Instead, it is “data-blind.” It acts as a secure pipe that transfers encrypted financial information from one institution to another—but only after the customer gives explicit consent.
Notably, the framework emerged from an inter-regulatory decision involving the RBI, SEBI, IRDAI, and PFRDA through the Financial Stability and Development Council (FSDC). As a result, the AA framework covers not just banking data. It also includes investments, insurance, pensions, and tax information.
Currently, 16 RBI-licensed account aggregators hold operating licenses in India. For example, these include entities like CAMS Finserv, Anumati, Setu, OneMoney, and Finvu. Each AA must meet strict technical and compliance requirements before going live.
The AA framework has three participants. Therefore, understanding each role clarifies how data flows through the system.
The FIP is the institution that holds the customer’s data. For instance, the customer’s bank holds their transaction history. Similarly, their mutual fund depository holds investment data. Their insurance company also holds policy details. As of 2025, over 155 FIPs participate in the AA ecosystem. This includes all major public and private banks.
The AA sits in the middle. Specifically, it receives the consent request from the FIU, presents it to the customer, captures explicit consent, and then facilitates the encrypted data transfer from FIP to FIU. Importantly, the AA never sees or stores the actual data. It only manages the consent and the data flow.
The FIU is the institution that needs the data. In lending, for example, this is typically the bank or NBFC processing a loan application. The FIU sends a consent request through the AA. Once the customer approves, the FIU receives the data directly from the FIP. Currently, over 475 FIUs are live on the framework.
The consent flow is the backbone of the entire account aggregator framework. Here is how it works step by step:
The entire process takes seconds. Moreover, the customer can revoke consent at any time through the AA app. This gives borrowers full control over their financial data.
The RBI has defined 16 categories of financial information that can flow through the AA framework. These include:
For lenders, the most relevant data types are bank transaction history and GST returns. Together, these provide a comprehensive view of the borrower’s income, cash flow, and tax compliance. Additionally, the data arrives in structured JSON format. This eliminates the need for OCR-based extraction from PDFs.
For lending institutions, the account aggregator framework solves three problems at once: specifically, data authenticity, processing speed, and customer experience.
Data shared through an account aggregator carries a digital signature from the FIP (the bank). This signature cryptographically verifies that the data has not changed after generation. Therefore, the risk of tampered or fake bank statements drops to near zero.
Traditional loan processing requires borrowers to download bank statements, upload them to the lender’s portal, and wait for manual extraction and review. This takes days. With AA, the same data flows directly from the bank to the lender in seconds. A bank statement analyser then processes the structured JSON data instantly. As a result, loan approval timelines drop from days to under 48 hours for many MSMEs.
Millions of Indian borrowers lack formal credit histories. However, they do have bank accounts with transaction data that demonstrates their repayment capacity. The account aggregator framework lets lenders access this data with consent. Consequently, borrowers who were previously excluded from formal credit can now qualify based on their actual financial behaviour.
Many lenders still rely on manual bank statement uploads. Here is how the two approaches compare:
| Factor | Manual Upload | Account Aggregator |
| Data authenticity | Risk of tampered PDFs | Digitally signed by the bank |
| Processing time | 20–40 min per statement | Under 60 seconds |
| Data format | Unstructured PDF (needs OCR) | Structured JSON (ready to analyze) |
| Customer effort | Download, upload, wait | One-tap consent |
| Fraud detection | Requires separate tamper checks | Forgery risk eliminated at source |
| Scalability | Proportional to headcount | Unlimited via API |
The operational advantage is clear. Specifically, AA-sourced data eliminates three major risks: document fraud, OCR extraction errors, and processing delays. For lenders processing high volumes, these gains compound across every application.
The AA ecosystem has grown faster than any other open finance framework globally. Here are the key numbers as of late 2025:
The growth trajectory is still accelerating. Sahamati estimates that 15–20% of the Indian adult population will use AA by the end of FY26. Moreover, use cases are expanding beyond lending into insurance underwriting, portfolio management, pension planning, and personal finance management.
For NBFCs and fintech lenders, the implication is straightforward. Account aggregator integration is rapidly shifting from a competitive advantage to a baseline requirement. Lenders who do not adopt AA will face slower processing times, higher fraud exposure, and a narrower reach into new-to-credit segments.
In fact, the account aggregator framework has moved from pilot to production at remarkable speed. Four years after launch, it processes hundreds of millions of consents. Moreover, it powers over ₹1.6 lakh crore in lending. And it reaches borrower segments that traditional document-based workflows could never serve efficiently.
For lenders, therefore, the value proposition is clear. AA delivers verified, structured financial data in seconds—without the fraud risk of manual uploads and without the extraction errors of OCR-based processing. When combined with a bank statement analyser that processes AA JSON data, the result is faster decisions, lower defaults, and a broader addressable market.
Consequently, the question is no longer whether to adopt an account aggregator. Instead, it is how quickly a lender can integrate it into their credit underwriting stack. The framework is live. The institutions are connected. And the borrowers are ready.
An account aggregator is an RBI-licensed NBFC that acts as a consent manager for financial data. It enables customers to share their bank statements, tax records, and investment data with lenders or other institutions. Importantly, the AA does not store or view the data. It only facilitates secure, consent-based transfers.
Yes. The account aggregator framework uses end-to-end encryption. The AA itself is data-blind and cannot read user data. Additionally, all data carries a digital signature from the source institution. Customers can revoke consent at any time through the AA app. The entire framework operates under RBI regulation.
Account aggregator eliminates manual bank statement uploads. Instead, verified financial data flows directly from the bank to the lender in seconds. This speeds up credit underwriting, removes document fraud risk, and enables lenders to reach borrowers who lack formal credit histories but have active bank accounts.
As of 2025, over 155 Financial Information Providers participate in the AA ecosystem. This includes all major public and private banks, mutual fund depositories, insurance companies, and pension funds. Additionally, over 475 Financial Information Users (lenders, insurers, PFM apps) are live.
Open banking typically gives third-party providers direct API access to bank data. The AA framework is different because it places a consent manager between the data holder and the data consumer. The customer controls every data request. Moreover, AA covers not just banking data but also investments, insurance, pensions, and tax information.