Regulations for Digital Wallets in Nepal: Legal Framework, Licensing, and Compliance

Digital wallet regulations in Nepal establish the comprehensive legal framework governing electronic payment services under the oversight of Nepal Rastra Bank (NRB). Digital payments have experienced explosive growth in Nepal, from QR scans at local shops to utility bill payments and remittance transfers. Behind this convenience lies a tightly regulated ecosystem where every digital wallet—eSewa, Khalti, IME Pay, PrabhuPay, and others—must follow strict compliance rules under NRB's payment directives, cybersecurity standards, KYC requirements, and transaction limits. This guide provides complete coverage of the legal framework, licensing requirements, operational rules, transaction limits, security requirements, and compliance obligations for digital wallet operators and users in Nepal.

Evolution of Digital Payments in Nepal

Nepal's journey into digital payments began with the introduction of credit cards by Nabil Bank in 1990. Himalayan Bank launched Nepal's first domestic credit card and ATM in 1995, followed by Kumari Bank introducing the first internet banking service in 2002. Laxmi Bank pioneered SMS banking (mobile banking) in 2004. However, the modern era of digital wallets began with the launch of eSewa in 2009 by F1Soft International, making it Nepal's first licensed Payment Service Provider and paving the way for the digital payment ecosystem that exists today.

The establishment of the Payment Systems Department (formally known as Payment and Settlement Department) within Nepal Rastra Bank in July 2015 marked a crucial step in modernizing Nepal's payment system. The COVID-19 pandemic accelerated digital payment adoption, with online spending increasing by 30-40% and contactless payments rising by approximately 60% during the pandemic period.

Current Statistics: Nepal has over 10 Payment System Operators (PSOs) and 27 Payment Service Providers (PSPs) licensed by NRB. Internet penetration has reached over 90% of the population, with mobile banking users exceeding 10 million as of recent data.

Digital wallets in Nepal operate under a comprehensive legal framework consisting of primary legislation, regulations, and NRB directives:

Legislation/DirectiveYearScope
Payment Systems Act2075 (2019)Primary law governing payment systems, licensing, and operations
Payment Systems Regulation2076 (2020)Implementation rules for payment systems operations
Nepal Rastra Bank Act2058 (2002)Central bank authority over financial institutions
Electronic Transactions Act2063 (2008)Legal recognition of electronic transactions and cybersecurity
Money Laundering Prevention Act2064 (2008)AML/CFT compliance requirements
Consumer Protection Act2075 (2018)Consumer rights and grievance redressal
Foreign Exchange Regulation Act2019 (1962)Foreign currency transaction restrictions
NRB Unified DirectivesUpdated annuallyTransaction limits, operational guidelines, compliance standards
Digital Payment GuidelinesVariousSpecific guidelines for digital payment operations
Cybersecurity Framework for PSPs & PSOsVariousSecurity standards and compliance requirements
Important: Any wallet operating without NRB approval is considered illegal. Only licensed Payment Service Providers may offer digital wallet services in Nepal.

Regulatory Authority: Nepal Rastra Bank

Nepal Rastra Bank serves as the primary regulator for digital wallets through its Payment Systems Department located in Baluwatar, Kathmandu. NRB controls and oversees:

  • Licensing of Payment Service Providers (PSPs) and Payment System Operators (PSOs)
  • Security compliance and cybersecurity standards
  • Transaction limits and operational guidelines
  • KYC/AML requirements and compliance
  • Merchant guidelines and registration
  • Consumer protection standards
  • Foreign exchange regulation limits
  • On-site inspections and compliance audits

The Payment Systems Department conducts regular monitoring, receives daily notifications and periodic reports from PSPs, and performs on-site inspections to review compliance status.

What is a Digital Wallet (E-Wallet)?

An electronic wallet (e-wallet) is a type of Payment Service Provider that holds electronic money (e-money) and operates on internet-based digital platforms accessible through mobile phones or tablets. E-wallets act as mediators between banks and their customers through non-use of banknotes for payment of services or goods, providing more convenient payment services to the public.

Key Characteristics

  • Holds electronic money in Nepali currency only
  • Operates on internet-based digital platforms
  • Accessible through mobile devices or tablets
  • Allows users to load money from bank accounts
  • Enables payment for goods and services without cash
  • Can be used by customers without traditional bank accounts

License Requirements for Digital Wallet Providers

To operate a digital wallet in Nepal, companies must obtain a Payment Service Provider (PSP) license from Nepal Rastra Bank. The licensing process involves two major steps:

Step 1: Obtain Letter of Intent from NRB

Submit application to NRB's Payment Systems Department demonstrating capability to operate digital wallet services.

Step 2: Register Company and Fulfill Requirements

After receiving Letter of Intent, register company and fulfill all licensing requirements before commencing operations.

Minimum Capital Requirements

Service CategoryMinimum CapitalLicense TypeKey Requirements
Payment Service Provider (Full Service)NPR 500 millionClass A LicenseFull banking integration, interoperability, comprehensive AML/CFT
Digital Wallet OperatorNPR 100 millionClass B LicenseKYC verification, transaction monitoring, consumer protection
Payment Gateway ProviderNPR 50 millionClass C LicensePCI-DSS compliance, secure payment processing, fraud prevention
Card Transaction OperationsNPR 50 millionPSP LicenseCard security standards, settlement procedures
Telecom/Web-based TransactionsNPR 10 millionPSP LicenseTechnology infrastructure, security compliance
QR Code Payment ProviderNPR 50 millionQR Payment LicenseStandardized QR protocols, merchant onboarding
Payment AggregatorNPR 25 millionAggregator LicenseMerchant verification, settlement procedures
Remittance Service ProviderNPR 10 millionRemittance LicenseForeign exchange compliance, beneficiary verification

Other Licensing Requirements

  • Board of Directors: 3 to 7 directors required; public limited companies must have at least one "Expert Director"
  • Settlement Agreement: Must execute settlement agreement with a commercial bank of Nepal before commencing service
  • Settlement Account: Maintain adequate liquidity; transaction amount must not exceed balance in settlement account
  • Secure IT Infrastructure: Must pass IT infrastructure audit
  • Disaster Recovery Systems: Mandatory backup and disaster recovery capabilities
  • Cybersecurity Compliance: Meet NRB cybersecurity standards
  • KYC/AML System Integration: Implement compliant customer verification systems
  • Customer Support: Dedicated customer support system required
  • Escrow Accounts: Separate escrow accounts for user funds

Transaction Limits for Digital Wallets

NRB sets transaction limits through Unified Directives, which are updated periodically. The following limits apply to digital wallets like eSewa, Khalti, IME Pay, PrabhuPay, and others:

Bank Account to Digital Wallet Transfers

ParameterLimit
Per TransactionNPR 50,000
Daily LimitNPR 100,000 (Updated: NPR 200,000)
Monthly LimitNPR 10,00,000 (10 lakh)

Digital Wallet to Bank Account Transfers

ParameterLimit
Per TransactionNPR 50,000
Daily LimitNPR 100,000 (Updated: NPR 200,000)
Monthly LimitNPR 10,00,000 (10 lakh)

Wallet to Wallet Transfers

ParameterLimit
Per TransactionNPR 25,000
Daily LimitNPR 100,000
Monthly LimitNPR 5,00,000 (5 lakh)
Transaction FrequencyMaximum 10 times/day (except for organizations, customers, and agents)

Mobile Banking and QR Payments (Updated 2023)

Transaction TypeDaily LimitMonthly Limit
Mobile Banking (including QR)NPR 300,000As per bank policy
QR Merchant PaymentsNPR 100,000NPR 10,00,000
Bank to Wallet/Vice VersaNPR 200,000NPR 10,00,000

Wallet Balance Limit

  • Maximum Balance: NPR 50,000 (wallet-dependent)
  • No limit when transferring from wallet to wallet carrier's bank accounts

Non-KYC User Restrictions

  • Extremely limited transaction access
  • No large transactions allowed
  • Account freeze risk if suspicious activity detected
Note: NRB updates transaction limits regularly. These values reflect current 2025 guidelines. Always verify current limits with respective wallet providers or NRB circulars.

Agent Regulations

PSPs may appoint agents to carry out marketing, payment instrument issuance, and other services. Key regulations include:

Agent-Based Transactions

Transaction TypeLimit
Customer Deposit (Daily)NPR 25,000
Customer Deposit (Total through Agent)NPR 1,00,000
Customer Withdrawal (Per Day)NPR 5,000
Customer Withdrawal (On Demand)NPR 25,000

Agent Compliance Requirements

  • Agent details must be made public and NRB informed
  • PSP remains responsible for works carried out by agent
  • Electronic transaction limits do not apply to agents and sub-agents appointed by PSP
  • Records of customer identification documents must be kept at all appointed offices

Permitted Uses of Digital Wallets

E-money stored in digital wallets can be used for:

  • Mobile recharge and top-up
  • Utility bill payments (electricity, water, internet)
  • Cable television and telephone fee payments
  • Payment for goods and services at registered merchants
  • QR code-based merchant payments
  • Fund transfers to other wallet users
  • Bank account transfers
  • Government fee payments
  • Insurance premium payments
  • School and college fee payments

Additional Services (With NRB Approval)

  • Interest on Balance: E-wallets can offer interest on balance amounts with prior NRB approval
  • Promotional Offers: Cashback, bonus, or discounts can be provided after notifying NRB

Restrictions on Digital Wallet Usage

Digital wallets in Nepal are subject to certain restrictions:

  • Currency: E-money can only be held in Nepali currency (NPR)
  • International Payments: Cannot be used to pay for goods and services outside Nepal
  • Credit/Lending: E-wallets are restricted from offering loans or credit to customers
  • Foreign Currency: Cannot hold or transact in foreign currencies
Note: The Digital Lending Related Guideline 2078 (2022) issued by NRB has paved the way for potentially permitting PSPs to play a role as agents of banks and financial institutions during digital lending, though direct lending by e-wallets remains restricted.

Security and Compliance Requirements

NRB mandates strict security protocols for all digital wallet operators:

Mandatory Security Requirements

RequirementDescription
Two-Factor Authentication (2FA)Mandatory for all transactions
OTP VerificationRequired for transaction authorization
3D SecurityRequired for Card-Not-Present (CNP) transaction authentication
ISO 27001 StandardsInformation security management compliance
Encrypted ServersMust be located within Nepal
Transaction LogsComprehensive logging and monitoring required
Disaster Recovery SiteMandatory backup and recovery infrastructure
Disaster Recovery PolicyFormulated and implemented policies required
Annual System AuditRegular cybersecurity audits mandatory
Insurance CoverageAmount held in e-wallet must be insured

Reporting Requirements

  • Daily notifications to Payment Systems Department of NRB
  • Periodic reporting on transactions, audit, and compliance status
  • Suspicious transaction reporting to Financial Information Unit
  • Immediate reporting of security breaches or system failures

KYC/AML Compliance Requirements

All digital wallets must implement comprehensive Know Your Customer (KYC) and Anti-Money Laundering (AML) procedures:

KYC Requirements

  • Customer Identification: Collection of customer identity information
  • Document Verification: Citizenship certificate, passport, or driving license verification
  • Address Verification: Proof of residence documentation
  • Photograph: Recent photograph for identity verification
  • Contact Information: Mobile number and email verification

AML/CFT Requirements

  • Transaction Monitoring: Real-time monitoring of suspicious transactions
  • Fraud Detection: Automated fraud detection systems
  • Blacklist Screening: Screening against sanctioned and blacklisted names
  • Suspicious Activity Reporting: Immediate reporting to Financial Information Unit
  • Record Keeping: Maintenance of transaction records for prescribed period
  • Risk Assessment: Customer risk categorization and enhanced due diligence

Remittance Regulations for Digital Wallets

Digital wallets involved in remittance services must comply with specific regulations:

  • Users working abroad can send earned amounts through authorized remittance companies/banks
  • Remittance payments up to NPR 1,00,000 can be paid in cash
  • Amounts exceeding NPR 1,00,000 must be deposited directly to user's bank account
  • Payments can be made through remittance cards issued by remittance companies
  • Verification required: Customer identification number, name, address, amount, and contact number
  • Records of customer identification documents must be kept at all offices
  • Suspicious transactions must be reported immediately to NRB's Financial Information Unit

Merchant Regulations

Businesses accepting digital wallet payments must comply with NRB merchant guidelines:

Merchant Registration Requirements

  • Register as merchant with respective PSP/PSO
  • Provide valid PAN (Permanent Account Number)
  • VAT registration (if applicable)
  • Business registration certificate
  • Bank account for settlement

Operational Requirements

  • Use only NRB-authorized QR codes (FonePay, UnionPay, etc.)
  • Maintain comprehensive transaction records
  • Follow anti-fraud guidelines
  • Display QR codes prominently
  • Provide transaction receipts to customers
  • Report suspicious transactions
Warning: Using illegal QR codes or unlicensed payment networks leads to penalties including fines and business license suspension.

Consumer Protection Measures

NRB regulations ensure consumer protection through:

  • Refund Guidelines: Clear procedures for failed transaction refunds
  • 24/7 Dispute Resolution: Mandatory customer support availability
  • Transaction Reversal: Mechanism for erroneous transaction correction
  • Data Protection: Standards for customer data privacy and security
  • Fraud Monitoring: Real-time fraud detection and prevention
  • Transaction Notifications: Mandatory notifications for every transaction
  • Grievance Redressal: Formal complaint handling procedures
  • Transparent Fees: Clear disclosure of all charges and fees

Consumer Responsibilities

  • Comply with terms and conditions of digital payment methods
  • Notify provider immediately of loss/theft of electronic payment instrument
  • Keep track of balance, especially after each transaction
  • Report suspicious activities promptly
  • Maintain confidentiality of PIN and passwords

Outsourcing Regulations

PSPs may outsource certain activities subject to NRB regulations:

  • Can outsource payment-related activities, customer support, and grievance services
  • Outsourcing agreement must be recorded with NRB
  • Outsourced institution must comply with NRB payment-related laws
  • PSP remains responsible for payment, reconciliation, and settlement of all transactions conducted through outsourcing

Penalties for Non-Compliance

Violations of digital wallet regulations can result in:

ViolationPenalty
Operating without licenseLicense suspension, monetary fines, criminal prosecution
Security compliance failuresFines up to NPR 1 million, operational restrictions
KYC/AML violationsLicense suspension, fines, reporting to authorities
Exceeding transaction limitsFines, account restrictions
Consumer protection violationsFines, operational restrictions, license review
Failure to report suspicious transactionsFines, criminal prosecution under AML laws
Unauthorized foreign currency transactionsFines, license suspension, prosecution

Major Digital Wallets in Nepal

The following are major NRB-licensed digital wallets operating in Nepal:

WalletOperatorLaunch YearNotable Features
eSewaF1Soft International2009First digital wallet in Nepal, largest user base
KhaltiSparrow Pay Pvt. Ltd.2017Wide merchant acceptance, promotional offers
IME PayIME Digital Solution Ltd.2018Remittance integration, banking services
PrabhuPayPrabhu Management Pvt. Ltd.2019Remittance focus, wide agent network
ConnectIPSNepal Clearing House Ltd.2019Real-time fund transfer, bank integration

Recent Developments and Future Outlook

NRB Initiatives

  • Fiscal Year 2079/80: Declared as "Year of Electronic Transaction Promotion"
  • National Payment Switch: Work in progress for interconnection between electronic payments and devices
  • Digital Lending Framework: Formulated for digital loan guidance
  • Unified QR Code: Push for standardized merchant payment QR codes
  • Interoperability: Efforts to connect all banks and financial institutions to single service provider
  • Potential introduction of UPI-like cross-border payment systems
  • Enhanced digital lending frameworks
  • Stricter cybersecurity standards
  • Greater interoperability requirements
  • Expanded transaction limits based on compliance levels

Our legal team provides comprehensive services for digital payment compliance including PSP licensing, regulatory filings, KYC/AML system implementation, and ongoing compliance support. Contact us for professional consultation on digital wallet regulations in Nepal.

Frequently Asked Questions

Digital wallets in Nepal are regulated by Nepal Rastra Bank (NRB) through its Payment Systems Department. NRB controls licensing of Payment Service Providers (PSPs), security compliance, transaction limits, KYC requirements, merchant guidelines, AML/CFT rules, and consumer protection. Any wallet operating without NRB approval is considered illegal. The Payment Systems Department was established in July 2015 and conducts regular monitoring, receives daily notifications, and performs on-site inspections.

To operate a digital wallet, companies must obtain a Payment Service Provider (PSP) license from Nepal Rastra Bank. The process involves:

  1. Obtain Letter of Intent from NRB
  2. Register company under Company Act 2063
  3. Meet minimum capital requirements (NPR 100 million for digital wallet operators)
  4. Execute Settlement Agreement with commercial bank
  5. Demonstrate secure IT infrastructure
  6. Implement KYC/AML systems
  7. Establish disaster recovery systems

Capital requirements vary by service category:

Service CategoryMinimum Capital
Full PSP (Class A)NPR 500 million
Digital Wallet Operator (Class B)NPR 100 million
Payment Gateway (Class C)NPR 50 million
Card TransactionsNPR 50 million
Telecom/Web TransactionsNPR 10 million
QR Code Payment ProviderNPR 50 million
Payment AggregatorNPR 25 million

Current transaction limits (subject to NRB updates):

Transaction TypePer TransactionDailyMonthly
Bank to WalletNPR 50,000NPR 200,000NPR 10 lakh
Wallet to BankNPR 50,000NPR 200,000NPR 10 lakh
Wallet to WalletNPR 25,000NPR 100,000NPR 5 lakh
Mobile Banking/QR-NPR 300,000As per bank

Wallet balance limit is NPR 50,000. Non-KYC users have extremely limited access.

Digital wallets can be used for:

  • Mobile recharge and top-up
  • Utility bill payments (electricity, water, internet)
  • Cable TV and telephone fee payments
  • Merchant payments via QR codes
  • Fund transfers to other wallet users
  • Bank account transfers
  • Government fee payments
  • Insurance premium payments
  • School and college fee payments

With NRB approval, wallets can offer interest on balance and promotional offers like cashback.

Restrictions include:

  • E-money can only be held in Nepali currency (NPR)
  • Cannot be used for payments outside Nepal
  • Cannot hold or transact in foreign currencies
  • E-wallets cannot offer loans or credit to customers
  • Non-KYC users have limited transaction access

The Digital Lending Guideline 2078 may allow PSPs to act as agents for bank lending in the future.

Mandatory security requirements include:

  • Two-factor authentication (2FA) for all transactions
  • OTP verification for transaction authorization
  • 3D Security for Card-Not-Present transactions
  • ISO 27001 compliance
  • Encrypted servers located within Nepal
  • Comprehensive transaction logging
  • Disaster recovery site and policies
  • Annual system audits
  • Insurance coverage for wallet amounts
  • Daily notifications and periodic reporting to NRB

KYC requirements:

  • Customer identification and verification
  • Document verification (citizenship, passport, driving license)
  • Address verification
  • Contact information verification

AML requirements:

  • Real-time transaction monitoring
  • Automated fraud detection systems
  • Blacklist screening against sanctioned names
  • Suspicious activity reporting to Financial Information Unit
  • Record keeping for prescribed period
  • Customer risk categorization

Agent-based transaction limits:

TransactionLimit
Customer Deposit (Daily)NPR 25,000
Customer Deposit (Total)NPR 1,00,000
Customer Withdrawal (Daily)NPR 5,000
Customer Withdrawal (On Demand)NPR 25,000

Agent details must be made public and reported to NRB. PSP remains responsible for all agent activities.

Remittance regulations include:

  • Payments up to NPR 1,00,000 can be paid in cash
  • Amounts exceeding NPR 1,00,000 must be deposited to bank account
  • Verification required: Customer ID, name, address, amount, contact number
  • Records must be kept at all offices
  • Suspicious transactions must be reported to NRB's Financial Information Unit
  • Remittance cards can be used for payments within Nepal

Merchants must:

  • Register with respective PSP/PSO
  • Provide valid PAN (Permanent Account Number)
  • Obtain VAT registration (if applicable)
  • Submit business registration certificate
  • Open bank account for settlement
  • Use only NRB-authorized QR codes (FonePay, UnionPay, etc.)
  • Maintain transaction records
  • Follow anti-fraud guidelines
  • Display QR codes prominently
  • Report suspicious transactions

Consumer protection includes:

  • Clear refund guidelines for failed transactions
  • 24/7 dispute resolution availability
  • Transaction reversal mechanism
  • Data protection standards
  • Real-time fraud monitoring
  • Mandatory transaction notifications
  • Formal grievance redressal procedures
  • Transparent fee disclosure

Consumers must maintain PIN confidentiality, report lost/stolen instruments immediately, and monitor transactions.

Penalties include:

ViolationPenalty
Operating without licenseLicense suspension, fines, criminal prosecution
Security compliance failuresFines up to NPR 1 million, operational restrictions
KYC/AML violationsLicense suspension, fines, reporting to authorities
Exceeding transaction limitsFines, account restrictions
Consumer protection violationsFines, operational restrictions
Failure to report suspicious transactionsFines, criminal prosecution

eSewa, launched in 2009 by F1Soft International, was the first digital wallet in Nepal. It became Nepal's first licensed Payment Service Provider and pioneered the modern digital payment ecosystem. The digital banking era in Nepal began with credit cards (Nabil Bank, 1990), domestic ATMs (Himalayan Bank, 1995), internet banking (Kumari Bank, 2002), and mobile banking (Laxmi Bank, 2004) before e-wallets emerged.

Future developments include:

  • National Payment Switch for interconnection between electronic payments
  • Digital Lending Framework implementation
  • Unified QR code standardization
  • Enhanced interoperability between banks and financial institutions
  • Potential UPI-like cross-border payment systems
  • Stricter cybersecurity standards
  • Expanded transaction limits based on compliance levels
  • Greater financial inclusion initiatives
  • Fiscal Year 2079/80 was declared "Year of Electronic Transaction Promotion"