

Table of Contents
Digital wallet regulations in Nepal establish the comprehensive legal framework governing electronic payment services under the oversight of Nepal Rastra Bank (NRB). Digital payments have experienced explosive growth in Nepal, from QR scans at local shops to utility bill payments and remittance transfers. Behind this convenience lies a tightly regulated ecosystem where every digital wallet—eSewa, Khalti, IME Pay, PrabhuPay, and others—must follow strict compliance rules under NRB's payment directives, cybersecurity standards, KYC requirements, and transaction limits. This guide provides complete coverage of the legal framework, licensing requirements, operational rules, transaction limits, security requirements, and compliance obligations for digital wallet operators and users in Nepal.
Evolution of Digital Payments in Nepal
Nepal's journey into digital payments began with the introduction of credit cards by Nabil Bank in 1990. Himalayan Bank launched Nepal's first domestic credit card and ATM in 1995, followed by Kumari Bank introducing the first internet banking service in 2002. Laxmi Bank pioneered SMS banking (mobile banking) in 2004. However, the modern era of digital wallets began with the launch of eSewa in 2009 by F1Soft International, making it Nepal's first licensed Payment Service Provider and paving the way for the digital payment ecosystem that exists today.
The establishment of the Payment Systems Department (formally known as Payment and Settlement Department) within Nepal Rastra Bank in July 2015 marked a crucial step in modernizing Nepal's payment system. The COVID-19 pandemic accelerated digital payment adoption, with online spending increasing by 30-40% and contactless payments rising by approximately 60% during the pandemic period.
Legal Framework Governing Digital Wallets
Digital wallets in Nepal operate under a comprehensive legal framework consisting of primary legislation, regulations, and NRB directives:
| Legislation/Directive | Year | Scope |
|---|---|---|
| Payment Systems Act | 2075 (2019) | Primary law governing payment systems, licensing, and operations |
| Payment Systems Regulation | 2076 (2020) | Implementation rules for payment systems operations |
| Nepal Rastra Bank Act | 2058 (2002) | Central bank authority over financial institutions |
| Electronic Transactions Act | 2063 (2008) | Legal recognition of electronic transactions and cybersecurity |
| Money Laundering Prevention Act | 2064 (2008) | AML/CFT compliance requirements |
| Consumer Protection Act | 2075 (2018) | Consumer rights and grievance redressal |
| Foreign Exchange Regulation Act | 2019 (1962) | Foreign currency transaction restrictions |
| NRB Unified Directives | Updated annually | Transaction limits, operational guidelines, compliance standards |
| Digital Payment Guidelines | Various | Specific guidelines for digital payment operations |
| Cybersecurity Framework for PSPs & PSOs | Various | Security standards and compliance requirements |
Regulatory Authority: Nepal Rastra Bank
Nepal Rastra Bank serves as the primary regulator for digital wallets through its Payment Systems Department located in Baluwatar, Kathmandu. NRB controls and oversees:
- Licensing of Payment Service Providers (PSPs) and Payment System Operators (PSOs)
- Security compliance and cybersecurity standards
- Transaction limits and operational guidelines
- KYC/AML requirements and compliance
- Merchant guidelines and registration
- Consumer protection standards
- Foreign exchange regulation limits
- On-site inspections and compliance audits
The Payment Systems Department conducts regular monitoring, receives daily notifications and periodic reports from PSPs, and performs on-site inspections to review compliance status.
What is a Digital Wallet (E-Wallet)?
An electronic wallet (e-wallet) is a type of Payment Service Provider that holds electronic money (e-money) and operates on internet-based digital platforms accessible through mobile phones or tablets. E-wallets act as mediators between banks and their customers through non-use of banknotes for payment of services or goods, providing more convenient payment services to the public.
Key Characteristics
- Holds electronic money in Nepali currency only
- Operates on internet-based digital platforms
- Accessible through mobile devices or tablets
- Allows users to load money from bank accounts
- Enables payment for goods and services without cash
- Can be used by customers without traditional bank accounts
License Requirements for Digital Wallet Providers
To operate a digital wallet in Nepal, companies must obtain a Payment Service Provider (PSP) license from Nepal Rastra Bank. The licensing process involves two major steps:
Step 1: Obtain Letter of Intent from NRB
Submit application to NRB's Payment Systems Department demonstrating capability to operate digital wallet services.
Step 2: Register Company and Fulfill Requirements
After receiving Letter of Intent, register company and fulfill all licensing requirements before commencing operations.
Minimum Capital Requirements
| Service Category | Minimum Capital | License Type | Key Requirements |
|---|---|---|---|
| Payment Service Provider (Full Service) | NPR 500 million | Class A License | Full banking integration, interoperability, comprehensive AML/CFT |
| Digital Wallet Operator | NPR 100 million | Class B License | KYC verification, transaction monitoring, consumer protection |
| Payment Gateway Provider | NPR 50 million | Class C License | PCI-DSS compliance, secure payment processing, fraud prevention |
| Card Transaction Operations | NPR 50 million | PSP License | Card security standards, settlement procedures |
| Telecom/Web-based Transactions | NPR 10 million | PSP License | Technology infrastructure, security compliance |
| QR Code Payment Provider | NPR 50 million | QR Payment License | Standardized QR protocols, merchant onboarding |
| Payment Aggregator | NPR 25 million | Aggregator License | Merchant verification, settlement procedures |
| Remittance Service Provider | NPR 10 million | Remittance License | Foreign exchange compliance, beneficiary verification |
Other Licensing Requirements
- Board of Directors: 3 to 7 directors required; public limited companies must have at least one "Expert Director"
- Settlement Agreement: Must execute settlement agreement with a commercial bank of Nepal before commencing service
- Settlement Account: Maintain adequate liquidity; transaction amount must not exceed balance in settlement account
- Secure IT Infrastructure: Must pass IT infrastructure audit
- Disaster Recovery Systems: Mandatory backup and disaster recovery capabilities
- Cybersecurity Compliance: Meet NRB cybersecurity standards
- KYC/AML System Integration: Implement compliant customer verification systems
- Customer Support: Dedicated customer support system required
- Escrow Accounts: Separate escrow accounts for user funds
Transaction Limits for Digital Wallets
NRB sets transaction limits through Unified Directives, which are updated periodically. The following limits apply to digital wallets like eSewa, Khalti, IME Pay, PrabhuPay, and others:
Bank Account to Digital Wallet Transfers
| Parameter | Limit |
|---|---|
| Per Transaction | NPR 50,000 |
| Daily Limit | NPR 100,000 (Updated: NPR 200,000) |
| Monthly Limit | NPR 10,00,000 (10 lakh) |
Digital Wallet to Bank Account Transfers
| Parameter | Limit |
|---|---|
| Per Transaction | NPR 50,000 |
| Daily Limit | NPR 100,000 (Updated: NPR 200,000) |
| Monthly Limit | NPR 10,00,000 (10 lakh) |
Wallet to Wallet Transfers
| Parameter | Limit |
|---|---|
| Per Transaction | NPR 25,000 |
| Daily Limit | NPR 100,000 |
| Monthly Limit | NPR 5,00,000 (5 lakh) |
| Transaction Frequency | Maximum 10 times/day (except for organizations, customers, and agents) |
Mobile Banking and QR Payments (Updated 2023)
| Transaction Type | Daily Limit | Monthly Limit |
|---|---|---|
| Mobile Banking (including QR) | NPR 300,000 | As per bank policy |
| QR Merchant Payments | NPR 100,000 | NPR 10,00,000 |
| Bank to Wallet/Vice Versa | NPR 200,000 | NPR 10,00,000 |
Wallet Balance Limit
- Maximum Balance: NPR 50,000 (wallet-dependent)
- No limit when transferring from wallet to wallet carrier's bank accounts
Non-KYC User Restrictions
- Extremely limited transaction access
- No large transactions allowed
- Account freeze risk if suspicious activity detected
Agent Regulations
PSPs may appoint agents to carry out marketing, payment instrument issuance, and other services. Key regulations include:
Agent-Based Transactions
| Transaction Type | Limit |
|---|---|
| Customer Deposit (Daily) | NPR 25,000 |
| Customer Deposit (Total through Agent) | NPR 1,00,000 |
| Customer Withdrawal (Per Day) | NPR 5,000 |
| Customer Withdrawal (On Demand) | NPR 25,000 |
Agent Compliance Requirements
- Agent details must be made public and NRB informed
- PSP remains responsible for works carried out by agent
- Electronic transaction limits do not apply to agents and sub-agents appointed by PSP
- Records of customer identification documents must be kept at all appointed offices
Permitted Uses of Digital Wallets
E-money stored in digital wallets can be used for:
- Mobile recharge and top-up
- Utility bill payments (electricity, water, internet)
- Cable television and telephone fee payments
- Payment for goods and services at registered merchants
- QR code-based merchant payments
- Fund transfers to other wallet users
- Bank account transfers
- Government fee payments
- Insurance premium payments
- School and college fee payments
Additional Services (With NRB Approval)
- Interest on Balance: E-wallets can offer interest on balance amounts with prior NRB approval
- Promotional Offers: Cashback, bonus, or discounts can be provided after notifying NRB
Restrictions on Digital Wallet Usage
Digital wallets in Nepal are subject to certain restrictions:
- Currency: E-money can only be held in Nepali currency (NPR)
- International Payments: Cannot be used to pay for goods and services outside Nepal
- Credit/Lending: E-wallets are restricted from offering loans or credit to customers
- Foreign Currency: Cannot hold or transact in foreign currencies
Security and Compliance Requirements
NRB mandates strict security protocols for all digital wallet operators:
Mandatory Security Requirements
| Requirement | Description |
|---|---|
| Two-Factor Authentication (2FA) | Mandatory for all transactions |
| OTP Verification | Required for transaction authorization |
| 3D Security | Required for Card-Not-Present (CNP) transaction authentication |
| ISO 27001 Standards | Information security management compliance |
| Encrypted Servers | Must be located within Nepal |
| Transaction Logs | Comprehensive logging and monitoring required |
| Disaster Recovery Site | Mandatory backup and recovery infrastructure |
| Disaster Recovery Policy | Formulated and implemented policies required |
| Annual System Audit | Regular cybersecurity audits mandatory |
| Insurance Coverage | Amount held in e-wallet must be insured |
Reporting Requirements
- Daily notifications to Payment Systems Department of NRB
- Periodic reporting on transactions, audit, and compliance status
- Suspicious transaction reporting to Financial Information Unit
- Immediate reporting of security breaches or system failures
KYC/AML Compliance Requirements
All digital wallets must implement comprehensive Know Your Customer (KYC) and Anti-Money Laundering (AML) procedures:
KYC Requirements
- Customer Identification: Collection of customer identity information
- Document Verification: Citizenship certificate, passport, or driving license verification
- Address Verification: Proof of residence documentation
- Photograph: Recent photograph for identity verification
- Contact Information: Mobile number and email verification
AML/CFT Requirements
- Transaction Monitoring: Real-time monitoring of suspicious transactions
- Fraud Detection: Automated fraud detection systems
- Blacklist Screening: Screening against sanctioned and blacklisted names
- Suspicious Activity Reporting: Immediate reporting to Financial Information Unit
- Record Keeping: Maintenance of transaction records for prescribed period
- Risk Assessment: Customer risk categorization and enhanced due diligence
Remittance Regulations for Digital Wallets
Digital wallets involved in remittance services must comply with specific regulations:
- Users working abroad can send earned amounts through authorized remittance companies/banks
- Remittance payments up to NPR 1,00,000 can be paid in cash
- Amounts exceeding NPR 1,00,000 must be deposited directly to user's bank account
- Payments can be made through remittance cards issued by remittance companies
- Verification required: Customer identification number, name, address, amount, and contact number
- Records of customer identification documents must be kept at all offices
- Suspicious transactions must be reported immediately to NRB's Financial Information Unit
Merchant Regulations
Businesses accepting digital wallet payments must comply with NRB merchant guidelines:
Merchant Registration Requirements
- Register as merchant with respective PSP/PSO
- Provide valid PAN (Permanent Account Number)
- VAT registration (if applicable)
- Business registration certificate
- Bank account for settlement
Operational Requirements
- Use only NRB-authorized QR codes (FonePay, UnionPay, etc.)
- Maintain comprehensive transaction records
- Follow anti-fraud guidelines
- Display QR codes prominently
- Provide transaction receipts to customers
- Report suspicious transactions
Consumer Protection Measures
NRB regulations ensure consumer protection through:
- Refund Guidelines: Clear procedures for failed transaction refunds
- 24/7 Dispute Resolution: Mandatory customer support availability
- Transaction Reversal: Mechanism for erroneous transaction correction
- Data Protection: Standards for customer data privacy and security
- Fraud Monitoring: Real-time fraud detection and prevention
- Transaction Notifications: Mandatory notifications for every transaction
- Grievance Redressal: Formal complaint handling procedures
- Transparent Fees: Clear disclosure of all charges and fees
Consumer Responsibilities
- Comply with terms and conditions of digital payment methods
- Notify provider immediately of loss/theft of electronic payment instrument
- Keep track of balance, especially after each transaction
- Report suspicious activities promptly
- Maintain confidentiality of PIN and passwords
Outsourcing Regulations
PSPs may outsource certain activities subject to NRB regulations:
- Can outsource payment-related activities, customer support, and grievance services
- Outsourcing agreement must be recorded with NRB
- Outsourced institution must comply with NRB payment-related laws
- PSP remains responsible for payment, reconciliation, and settlement of all transactions conducted through outsourcing
Penalties for Non-Compliance
Violations of digital wallet regulations can result in:
| Violation | Penalty |
|---|---|
| Operating without license | License suspension, monetary fines, criminal prosecution |
| Security compliance failures | Fines up to NPR 1 million, operational restrictions |
| KYC/AML violations | License suspension, fines, reporting to authorities |
| Exceeding transaction limits | Fines, account restrictions |
| Consumer protection violations | Fines, operational restrictions, license review |
| Failure to report suspicious transactions | Fines, criminal prosecution under AML laws |
| Unauthorized foreign currency transactions | Fines, license suspension, prosecution |
Major Digital Wallets in Nepal
The following are major NRB-licensed digital wallets operating in Nepal:
| Wallet | Operator | Launch Year | Notable Features |
|---|---|---|---|
| eSewa | F1Soft International | 2009 | First digital wallet in Nepal, largest user base |
| Khalti | Sparrow Pay Pvt. Ltd. | 2017 | Wide merchant acceptance, promotional offers |
| IME Pay | IME Digital Solution Ltd. | 2018 | Remittance integration, banking services |
| PrabhuPay | Prabhu Management Pvt. Ltd. | 2019 | Remittance focus, wide agent network |
| ConnectIPS | Nepal Clearing House Ltd. | 2019 | Real-time fund transfer, bank integration |
Recent Developments and Future Outlook
NRB Initiatives
- Fiscal Year 2079/80: Declared as "Year of Electronic Transaction Promotion"
- National Payment Switch: Work in progress for interconnection between electronic payments and devices
- Digital Lending Framework: Formulated for digital loan guidance
- Unified QR Code: Push for standardized merchant payment QR codes
- Interoperability: Efforts to connect all banks and financial institutions to single service provider
Future Regulatory Trends
- Potential introduction of UPI-like cross-border payment systems
- Enhanced digital lending frameworks
- Stricter cybersecurity standards
- Greater interoperability requirements
- Expanded transaction limits based on compliance levels
Need Legal Assistance?
Our legal team provides comprehensive services for digital payment compliance including PSP licensing, regulatory filings, KYC/AML system implementation, and ongoing compliance support. Contact us for professional consultation on digital wallet regulations in Nepal.
Frequently Asked Questions
Digital wallets in Nepal are regulated by Nepal Rastra Bank (NRB) through its Payment Systems Department. NRB controls licensing of Payment Service Providers (PSPs), security compliance, transaction limits, KYC requirements, merchant guidelines, AML/CFT rules, and consumer protection. Any wallet operating without NRB approval is considered illegal. The Payment Systems Department was established in July 2015 and conducts regular monitoring, receives daily notifications, and performs on-site inspections.
To operate a digital wallet, companies must obtain a Payment Service Provider (PSP) license from Nepal Rastra Bank. The process involves:
- Obtain Letter of Intent from NRB
- Register company under Company Act 2063
- Meet minimum capital requirements (NPR 100 million for digital wallet operators)
- Execute Settlement Agreement with commercial bank
- Demonstrate secure IT infrastructure
- Implement KYC/AML systems
- Establish disaster recovery systems
Capital requirements vary by service category:
| Service Category | Minimum Capital |
|---|---|
| Full PSP (Class A) | NPR 500 million |
| Digital Wallet Operator (Class B) | NPR 100 million |
| Payment Gateway (Class C) | NPR 50 million |
| Card Transactions | NPR 50 million |
| Telecom/Web Transactions | NPR 10 million |
| QR Code Payment Provider | NPR 50 million |
| Payment Aggregator | NPR 25 million |
Current transaction limits (subject to NRB updates):
| Transaction Type | Per Transaction | Daily | Monthly |
|---|---|---|---|
| Bank to Wallet | NPR 50,000 | NPR 200,000 | NPR 10 lakh |
| Wallet to Bank | NPR 50,000 | NPR 200,000 | NPR 10 lakh |
| Wallet to Wallet | NPR 25,000 | NPR 100,000 | NPR 5 lakh |
| Mobile Banking/QR | - | NPR 300,000 | As per bank |
Wallet balance limit is NPR 50,000. Non-KYC users have extremely limited access.
Digital wallets can be used for:
- Mobile recharge and top-up
- Utility bill payments (electricity, water, internet)
- Cable TV and telephone fee payments
- Merchant payments via QR codes
- Fund transfers to other wallet users
- Bank account transfers
- Government fee payments
- Insurance premium payments
- School and college fee payments
With NRB approval, wallets can offer interest on balance and promotional offers like cashback.
Restrictions include:
- E-money can only be held in Nepali currency (NPR)
- Cannot be used for payments outside Nepal
- Cannot hold or transact in foreign currencies
- E-wallets cannot offer loans or credit to customers
- Non-KYC users have limited transaction access
The Digital Lending Guideline 2078 may allow PSPs to act as agents for bank lending in the future.
Mandatory security requirements include:
- Two-factor authentication (2FA) for all transactions
- OTP verification for transaction authorization
- 3D Security for Card-Not-Present transactions
- ISO 27001 compliance
- Encrypted servers located within Nepal
- Comprehensive transaction logging
- Disaster recovery site and policies
- Annual system audits
- Insurance coverage for wallet amounts
- Daily notifications and periodic reporting to NRB
KYC requirements:
- Customer identification and verification
- Document verification (citizenship, passport, driving license)
- Address verification
- Contact information verification
AML requirements:
- Real-time transaction monitoring
- Automated fraud detection systems
- Blacklist screening against sanctioned names
- Suspicious activity reporting to Financial Information Unit
- Record keeping for prescribed period
- Customer risk categorization
Agent-based transaction limits:
| Transaction | Limit |
|---|---|
| Customer Deposit (Daily) | NPR 25,000 |
| Customer Deposit (Total) | NPR 1,00,000 |
| Customer Withdrawal (Daily) | NPR 5,000 |
| Customer Withdrawal (On Demand) | NPR 25,000 |
Agent details must be made public and reported to NRB. PSP remains responsible for all agent activities.
Remittance regulations include:
- Payments up to NPR 1,00,000 can be paid in cash
- Amounts exceeding NPR 1,00,000 must be deposited to bank account
- Verification required: Customer ID, name, address, amount, contact number
- Records must be kept at all offices
- Suspicious transactions must be reported to NRB's Financial Information Unit
- Remittance cards can be used for payments within Nepal
Merchants must:
- Register with respective PSP/PSO
- Provide valid PAN (Permanent Account Number)
- Obtain VAT registration (if applicable)
- Submit business registration certificate
- Open bank account for settlement
- Use only NRB-authorized QR codes (FonePay, UnionPay, etc.)
- Maintain transaction records
- Follow anti-fraud guidelines
- Display QR codes prominently
- Report suspicious transactions
Consumer protection includes:
- Clear refund guidelines for failed transactions
- 24/7 dispute resolution availability
- Transaction reversal mechanism
- Data protection standards
- Real-time fraud monitoring
- Mandatory transaction notifications
- Formal grievance redressal procedures
- Transparent fee disclosure
Consumers must maintain PIN confidentiality, report lost/stolen instruments immediately, and monitor transactions.
Penalties include:
| Violation | Penalty |
|---|---|
| Operating without license | License suspension, fines, criminal prosecution |
| Security compliance failures | Fines up to NPR 1 million, operational restrictions |
| KYC/AML violations | License suspension, fines, reporting to authorities |
| Exceeding transaction limits | Fines, account restrictions |
| Consumer protection violations | Fines, operational restrictions |
| Failure to report suspicious transactions | Fines, criminal prosecution |
eSewa, launched in 2009 by F1Soft International, was the first digital wallet in Nepal. It became Nepal's first licensed Payment Service Provider and pioneered the modern digital payment ecosystem. The digital banking era in Nepal began with credit cards (Nabil Bank, 1990), domestic ATMs (Himalayan Bank, 1995), internet banking (Kumari Bank, 2002), and mobile banking (Laxmi Bank, 2004) before e-wallets emerged.
Future developments include:
- National Payment Switch for interconnection between electronic payments
- Digital Lending Framework implementation
- Unified QR code standardization
- Enhanced interoperability between banks and financial institutions
- Potential UPI-like cross-border payment systems
- Stricter cybersecurity standards
- Expanded transaction limits based on compliance levels
- Greater financial inclusion initiatives
- Fiscal Year 2079/80 was declared "Year of Electronic Transaction Promotion"

