The process nobody talks about enough — and why getting it wrong is more expensive than most fintechs realize.
If you’ve ever signed up a business to accept digital payments, applied for a payment gateway, or helped a small retailer get onto a lending platform, you’ve encountered merchant onboarding — even if it wasn’t called that at the time. It’s one of those backend processes that customers rarely see in its entirety, but feel completely whenever it goes wrong. A clunky experience, an unexplained rejection, a document request that seems to come out of nowhere three days into the process — these are all symptoms of merchant onboarding that hasn’t been thought through properly.
So what actually is it, and why does it matter so much in fintech specifically?
At its most basic, merchant onboarding is the process through which a fintech company — a payment aggregator, a lending platform, a BNPL provider, an acquiring bank — verifies, approves, and activates a business as a participant on its platform. It’s the B2B equivalent of KYC. Instead of verifying an individual, you’re verifying an entire business entity: its legal existence, its ownership structure, its financial health, its compliance standing, and its risk profile.
That sounds straightforward. In practice, it’s anything but.
A merchant isn’t a single data point. It’s a layered entity — a proprietor or a private limited company or an LLP, with directors who have their own identities, a GST registration that may or may not be active, a bank account that needs to match the business name, a physical or registered address, a category of business that determines what risk tier it falls into, and potentially a credit history that tells you something about how it manages money. Verifying all of that accurately, quickly, and in a way that doesn’t make the merchant feel like they’re being interrogated — that’s the core challenge of merchant onboarding.
Why fintech companies feel this problem more acutely than traditional banks
Traditional banks have always done some version of merchant verification. But they had the luxury of doing it slowly, with in-person visits, physical document submissions, and multi-week timelines that merchants grudgingly accepted because there was no alternative.
Fintech changed the expectation entirely. When a small business owner in Surat signs up for a payment gateway today, they expect to be live within 24 to 48 hours. When a kirana store owner in Lucknow applies for a working capital loan through a lending app, they’re not going to wait two weeks for verification. The market has set a speed standard that fintechs have to meet — and that speed has to coexist with regulatory compliance, fraud prevention, and genuine risk assessment. That tension is where most of the complexity in merchant onboarding lives.
The stakes are also asymmetric in an important way. Onboarding a fraudulent or high-risk merchant doesn’t just create a bad loan or a chargeback problem. It creates regulatory exposure, potential liability, reputational damage, and in some cases, facilitation of financial crime. Payment aggregators that onboard merchants without adequate due diligence have faced RBI action. NBFCs that skip proper KYB checks have ended up with portfolios full of ghost businesses. The cost of getting merchant onboarding wrong is not just operational — it can be existential.
What merchant onboarding actually involves, step by step
The process typically begins with business identity verification — confirming that the entity applying actually exists as a legal business. In India, this means checking the CIN for private limited companies, the Udyam registration number for MSMEs, or the GST registration number for most small businesses. Each of these pulls from a different database, and each tells you something slightly different about the business.
Then comes director or owner verification — the individual KYC layer sitting underneath the business. Who owns this business? Are they who they say they are? Do they appear on any sanctions lists, politically exposed persons databases, or adverse media? This is where individual PAN verification, Aadhaar-based checks, and sometimes video KYC come in for the people behind the entity.
Bank account verification follows — confirming that the account the merchant wants to receive settlements into actually belongs to them. A penny drop or a name-match against account records is standard here, but more sophisticated platforms also look at account age and transaction history signals where available.
Beyond the identity and document layer, there’s the risk and compliance layer — business category classification, transaction volume assessment, AML screening, and sometimes a credit bureau pull depending on what the platform is offering. A merchant running a pharmacy has a different risk profile from one running a forex exchange booth, and the onboarding process needs to reflect that.
Finally, there’s the ongoing monitoring piece that often gets underbuilt — periodic re-verification, watchlist screening, and transaction behaviour monitoring that continues well after the merchant goes live. Merchant onboarding, done properly, is not a one-time event. It’s the start of a compliance relationship.
Where most platforms are losing merchants — and money
The drop-off problem in merchant onboarding is significant and underreported. Most platforms track overall activation rates but don’t instrument the funnel granularly enough to know where merchants are abandoning the process. Is it at the document upload stage? After the first verification check fails? During the bank account confirmation? Each of these has a different fix, and without the data, you’re guessing.
Beyond drop-off, there’s the problem of false rejections — legitimate businesses being declined or delayed because their documents are slightly non-standard, their GST registration is relatively recent, or their business name doesn’t exactly match across databases. Every false rejection is a lost merchant, and in a competitive market, that merchant is almost certainly going to a competitor within the week.
The best merchant onboarding experiences are ones where the verification is rigorous in the background and invisible in the foreground. The merchant provides their details, the checks run across multiple databases in real time, and they get activated quickly without ever feeling like they were put through a compliance wringer. That experience is now achievable — the verification infrastructure exists to do this at scale, in seconds rather than days.
Why this is a product and business problem, not just a compliance one
Here’s the reframe that more fintech teams need to make: merchant onboarding is not a compliance cost centre. It’s a growth lever.
A faster, smoother onboarding experience means higher activation rates, lower CAC, better word-of-mouth among the merchant communities you’re trying to penetrate, and a cleaner portfolio from day one because the right merchants got in and the wrong ones didn’t. Every hour you shave off the onboarding timeline is real revenue. Every friction point you remove is a merchant who stays instead of churning before they’ve even transacted.
The fintechs that are winning the merchant acquisition game right now have treated onboarding as a product problem worthy of serious engineering and design investment — not just a regulatory checkbox to get past on the way to the real work. Because in this market, the real work and the compliance work are the same thing. You just have to build them that way.
Leave a Reply