Fintech & Digital Money
Account Aggregators: Sharing Your Financial Data Safely
How India's Account Aggregator framework lets people share financial data with consent to get loans and services, and the safeguards involved.
To get a loan, apply for insurance or plan investments, people often need to share financial information, such as bank statements. Traditionally, this meant printing statements or sharing passwords, which was slow and risky. India created a new system to make this easier and safer: the Account Aggregator framework.
How it works
An Account Aggregator is an RBI-licensed entity that acts as a consent manager. It lets a person securely share financial data from one institution, such as a bank, with another, such as a lender, only with their explicit consent.
- The customer requests a service, such as a loan.
- The lender asks for data through an Account Aggregator.
- The customer receives a consent request stating what data will be shared, for what purpose and for how long.
- If the customer approves, the data flows directly and in encrypted form from the bank to the lender.
Importantly, the Account Aggregator cannot read or store the data itself; it only passes it on.
Why it matters
- Faster loans: lenders can quickly verify income and cash flows.
- Credit for small businesses: businesses without formal credit histories can show their bank transaction records to get loans.
- Control and privacy: customers decide what to share and can withdraw consent.
The framework went live in 2021 as part of India’s digital public infrastructure, and adoption grew quickly, with many millions of consents processed.
A small shopkeeper has no formal credit history, but receives many UPI payments into her bank account. Through an Account Aggregator, she shares six months of bank data with a lender. The lender sees steady sales and approves a working capital loan within a day, without her needing to visit a branch or bring printed statements.
Concerns
Concerns include ensuring people understand what they consent to, protecting against misuse of data once shared, and making consent screens accessible, including for blind users with screen readers.
Account Aggregators are designed to be data-blind: they transmit encrypted data between institutions with your consent but cannot read or sell it.
- Account Aggregators let people share financial data between institutions with explicit consent.
- They are RBI-licensed and cannot read or store the data they transmit.
- The framework speeds up loans and helps small businesses without credit histories.
- Clear, accessible consent and data protection are key concerns.
No recording for this one yet - EconReader can read it aloud for you.