{"id":962,"date":"2026-08-23T20:39:55","date_gmt":"2026-08-23T20:39:55","guid":{"rendered":"https:\/\/www.osto.one\/resources\/?p=962"},"modified":"2026-08-23T20:39:55","modified_gmt":"2026-08-23T20:39:55","slug":"escrow-account","status":"publish","type":"post","link":"https:\/\/www.osto.one\/resources\/glossary\/escrow-account\/","title":{"rendered":"Escrow Account (Payments)"},"content":{"rendered":"\n<!-- =========================================================================\n     OSTO GLOSSARY: ESCROW ACCOUNT (PAYMENTS)\n     Shared glossary design system. Paste into one Custom HTML block. No H1.\n     ========================================================================= -->\n\n<style>\n.og{\n  --navy:#1c267a; --text:#0f1538; --muted:#0f1538; --light:#0f1538;\n  --border:#e7e9f2; --divider:#eceef5; --white:#ffffff;\n\n  --peri-50:#f4f5fd;  --peri-100:#e9ecfa; --peri-200:#cfd5f2; --peri-700:#4a52a8;\n  --sage-50:#f2f8f5;  --sage-100:#e3f0e9; --sage-200:#c3ddce; --sage-700:#3a6f5d;\n  --apri-50:#fdf6f0;  --apri-100:#fbe9dc; --apri-200:#f2cdb2; --apri-700:#a2603a;\n  --plum-50:#f8f3f9;  --plum-100:#f0e6f3; --plum-200:#dcc6e2; --plum-700:#6b4576;\n  --sky-50:#f1f7fb;   --sky-100:#e2eff7;  --sky-200:#bfd9e9;  --sky-700:#2f6a89;\n\n  --shadow:0 6px 22px rgba(15,21,56,.05);\n  --font:'Inter',-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;\n  font-family:var(--font); font-size:17px; line-height:1.75; color:var(--text);\n}\n.og p{margin:0 0 22px}\n.og h2{font-family:var(--font);font-size:clamp(25px,3vw,31px);font-weight:700;line-height:1.25;letter-spacing:-.5px;color:var(--navy);margin:52px 0 8px;scroll-margin-top:92px}\n.og h2::after{content:\"\";display:block;width:46px;height:5px;border-radius:3px;margin:12px 0 18px;background:var(--peri-200)}\n.og h2.c-sage::after{background:var(--sage-200)}\n.og h2.c-apri::after{background:var(--apri-200)}\n.og h2.c-plum::after{background:var(--plum-200)}\n.og h2.c-sky::after{background:var(--sky-200)}\n.og ul,.og ol{padding-left:22px;margin:0 0 24px}\n.og li{margin-bottom:9px}\n.og strong{font-weight:600}\n\n.og .dek{font-size:20px;line-height:1.6;color:var(--muted);margin:0 0 18px}\n.og .tags{margin:0 0 30px;padding:0;list-style:none;display:flex;flex-wrap:wrap;gap:8px}\n.og .tags li{margin:0}\n.og .tag{display:inline-block;font-size:12px;font-weight:600;letter-spacing:.7px;text-transform:uppercase;padding:6px 13px;border-radius:20px}\n.og .t-peri{background:var(--peri-100);color:var(--peri-700)}\n.og .t-sage{background:var(--sage-100);color:var(--sage-700)}\n\n.og .short{background:linear-gradient(135deg,var(--peri-100) 0%,var(--sage-100) 100%);border-radius:22px;padding:28px 32px;margin:0 0 30px}\n.og .short .k{font-size:13px;font-weight:700;letter-spacing:1.4px;text-transform:uppercase;color:var(--peri-700);margin:0 0 10px}\n.og .short p{font-size:19px;line-height:1.65;margin:0;color:var(--text)}\n\n.og .toc{background:var(--peri-50);border-radius:20px;padding:24px 28px;margin:0 0 34px}\n.og .toc .k{font-size:12px;font-weight:700;letter-spacing:1.3px;text-transform:uppercase;color:var(--peri-700);margin:0 0 12px}\n.og .toc ol{margin:0;padding-left:20px;columns:2;column-gap:34px}\n.og .toc li{margin-bottom:8px;break-inside:avoid;font-size:16px}\n.og .toc a{color:var(--navy);text-decoration:none;border-bottom:1px solid rgba(28,38,122,.22)}\n\n.og .callout{border-radius:4px;padding:24px 28px;margin:0 0 30px;background:var(--white);border:2px solid var(--navy)}\n.og .callout .k{font-weight:700;font-size:17px;margin:0 0 8px;color:var(--navy)}\n.og .callout p:last-child{margin-bottom:0}\n.og .callout.c-plum{background:var(--plum-50);border:none;border-radius:20px}\n.og .callout.c-plum .k{color:var(--plum-700)}\n\n.og figure{margin:0 0 30px}\n.og .sx{overflow-x:auto;-webkit-overflow-scrolling:touch;border-radius:20px;background:var(--white);box-shadow:var(--shadow)}\n.og .sx svg{display:block;width:100%;height:auto;min-width:600px}\n.og figcaption{font-size:14px;line-height:1.6;color:var(--muted);margin-top:12px}\n.og .swipe{display:none}\n\n.og table{width:100%;border-collapse:collapse;margin:0 0 28px;font-size:15px;background:var(--white);border-radius:18px;overflow:hidden;box-shadow:var(--shadow)}\n.og th{text-align:left;padding:14px 16px;font-weight:700;font-size:12.5px;letter-spacing:.8px;text-transform:uppercase}\n.og td{border-bottom:1px solid var(--divider);padding:13px 16px;vertical-align:top;line-height:1.6}\n.og tr:last-child td{border-bottom:none}\n.og .h-peri th{background:var(--peri-100);color:var(--peri-700)}\n.og .h-sage th{background:var(--sage-100);color:var(--sage-700)}\n.og .h-plum th{background:var(--plum-100);color:var(--plum-700)}\n\n.og .trio{display:grid;grid-template-columns:repeat(3,1fr);gap:14px;margin:0 0 28px}\n.og .tcard{border-radius:18px;padding:20px 22px}\n.og .tcard .n{font-size:16px;font-weight:700;margin:0 0 4px}\n.og .tcard .g{font-size:13px;font-weight:600;margin:0 0 10px;opacity:.8}\n.og .tcard p{font-size:14px;line-height:1.55;margin:0;color:var(--muted)}\n.og .tcard.a{background:var(--sky-50)}   .og .tcard.a .n,.og .tcard.a .g{color:var(--sky-700)}\n.og .tcard.b{background:var(--sage-50)}  .og .tcard.b .n,.og .tcard.b .g{color:var(--sage-700)}\n.og .tcard.c{background:var(--plum-50)}  .og .tcard.c .n,.og .tcard.c .g{color:var(--plum-700)}\n\n.og .pill{display:inline-block;font-size:11px;font-weight:700;letter-spacing:.8px;text-transform:uppercase;padding:5px 11px;border-radius:20px;white-space:nowrap}\n.og .p-req{background:var(--plum-200);color:#4d2f57}\n.og .p-exp{background:var(--sky-100);color:var(--sky-700)}\n.og .p-imp{background:#eef0f4;color:var(--muted)}\n.og .p-ask{background:var(--apri-100);color:var(--apri-700)}\n\n.og details{background:var(--white);border-radius:14px;margin:0 0 10px;box-shadow:0 2px 10px rgba(15,21,56,.04)}\n.og summary{cursor:pointer;padding:16px 20px;font-weight:600;font-size:17px;color:var(--navy);list-style:none;display:flex;justify-content:space-between;gap:16px;align-items:flex-start}\n.og summary::-webkit-details-marker{display:none}\n.og summary::after{content:\"+\";font-size:22px;line-height:1;color:var(--peri-700);flex:0 0 auto}\n.og details[open] summary::after{content:\"\\2013\"}\n.og details p{padding:0 20px 18px;margin:0;font-size:16px;line-height:1.7}\n\n.og .related{font-size:15px;color:var(--muted);border-top:1px solid var(--divider);padding-top:22px;margin-top:40px}\n\n@media(max-width:700px){\n  .og{font-size:16px}\n  .og .dek{font-size:18px}\n  .og .short p{font-size:17px}\n  .og .short,.og .toc,.og .callout{padding:22px 20px}\n  .og .toc ol{columns:1}\n  .og .trio{grid-template-columns:1fr}\n  .og .swipe{display:inline;font-weight:600;color:var(--peri-700)}\n  .og table{font-size:14px}\n  .og th,.og td{padding:11px 12px}\n}\n<\/style>\n\n<div class=\"og\">\n\n<p class=\"dek\">An escrow account in payments is the ring-fenced bank account where a payment aggregator parks customer money before it reaches the merchant, and the Reserve Bank of India controls exactly what may enter and leave it.<\/p>\n\n<ul class=\"tags\">\n  <li><span class=\"tag t-peri\">Glossary<\/span><\/li>\n  <li><span class=\"tag t-sage\">India<\/span><\/li>\n<\/ul>\n\n<div class=\"short\">\n  <p class=\"k\">The short answer<\/p>\n  <p>An escrow account holds funds that belong to someone else. In Indian payments, every non-bank payment aggregator must keep collected merchant funds in an escrow account with a scheduled commercial bank, separate from its own corporate money. Only the credits and debits the RBI lists are permitted. The account cannot be used for cash on delivery, and no interest is paid on the balance except on a defined core portion. The escrow account is what stops merchant money from becoming working capital for the aggregator.<\/p>\n<\/div>\n\n<p>It is a financial control with a technical dependency. The bank enforces the boundary, but the instructions that move money across it come from software the aggregator built.<\/p>\n\n<div class=\"toc\">\n  <p class=\"k\">On this page<\/p>\n  <ol>\n    <li><a href=\"#what\">What an escrow account is in payments<\/a><\/li>\n    <li><a href=\"#flows\">What may go in and what may come out<\/a><\/li>\n    <li><a href=\"#rules\">Settlement timing and the core portion<\/a><\/li>\n    <li><a href=\"#where\">Where else escrow accounts appear<\/a><\/li>\n    <li><a href=\"#security\">What an escrow account does not protect against<\/a><\/li>\n    <li><a href=\"#osto\">How Osto gets you audit-ready<\/a><\/li>\n    <li><a href=\"#faq\">FAQ<\/a><\/li>\n  <\/ol>\n<\/div>\n\n<h2 id=\"what\">What an escrow account is in payments<\/h2>\n\n<p>A generic escrow account holds money for a third party until an agreed condition is met. The payments version is narrower. When a customer pays a merchant through an aggregator, the money lands with the aggregator first. That float can be substantial, and it does not belong to the aggregator.<\/p>\n\n<p>Before 2020, intermediaries ran this float through nodal accounts under a 2009 RBI circular. The 2020 payment aggregator guidelines replaced nodal accounts with escrow, and the Reserve Bank of India (Regulation of Payment Aggregators) Directions, 2025 carried the escrow architecture forward and tightened it.<\/p>\n\n<figure>\n<div class=\"sx\">\n<svg viewBox=\"0 0 760 300\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" role=\"img\" aria-label=\"Permitted credits into the payment escrow account, permitted debits out, and the uses the RBI does not allow.\">\n  <defs><marker id=\"esA\" markerWidth=\"9\" markerHeight=\"9\" refX=\"7\" refY=\"4.5\" orient=\"auto\"><path d=\"M0,0 L9,4.5 L0,9 z\" fill=\"#4a52a8\"\/><\/marker>\n  <marker id=\"esB\" markerWidth=\"9\" markerHeight=\"9\" refX=\"7\" refY=\"4.5\" orient=\"auto\"><path d=\"M0,0 L9,4.5 L0,9 z\" fill=\"#a2603a\"\/><\/marker><\/defs>\n\n  <rect x=\"14\" y=\"34\" width=\"196\" height=\"120\" rx=\"15\" fill=\"#e9ecfa\"\/>\n  <text x=\"112\" y=\"60\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"12\" font-weight=\"700\" fill=\"#4a52a8\">Permitted credits<\/text>\n  <text x=\"112\" y=\"84\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"11\" fill=\"#0f1538\">Customer payments<\/text>\n  <text x=\"112\" y=\"102\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"11\" fill=\"#0f1538\">Merchant pre-funding<\/text>\n  <text x=\"112\" y=\"120\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"11\" fill=\"#0f1538\">Refunds on failed orders<\/text>\n  <text x=\"112\" y=\"138\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"11\" fill=\"#0f1538\">Transfers from other aggregators<\/text>\n\n  <line x1=\"216\" y1=\"94\" x2=\"256\" y2=\"94\" stroke=\"#4a52a8\" stroke-width=\"2.5\" marker-end=\"url(#esA)\"\/>\n\n  <rect x=\"262\" y=\"34\" width=\"216\" height=\"120\" rx=\"15\" fill=\"#1c267a\"\/>\n  <text x=\"370\" y=\"76\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"14\" font-weight=\"700\" fill=\"#ffffff\">Escrow account<\/text>\n  <text x=\"370\" y=\"100\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"11\" fill=\"#b9c1e6\">Held with a scheduled<\/text>\n  <text x=\"370\" y=\"117\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"11\" fill=\"#b9c1e6\">commercial bank, separate<\/text>\n  <text x=\"370\" y=\"134\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"11\" fill=\"#b9c1e6\">from corporate funds<\/text>\n\n  <line x1=\"484\" y1=\"94\" x2=\"524\" y2=\"94\" stroke=\"#4a52a8\" stroke-width=\"2.5\" marker-end=\"url(#esA)\"\/>\n\n  <rect x=\"530\" y=\"34\" width=\"216\" height=\"120\" rx=\"15\" fill=\"#e3f0e9\"\/>\n  <text x=\"638\" y=\"60\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"12\" font-weight=\"700\" fill=\"#3a6f5d\">Permitted debits<\/text>\n  <text x=\"638\" y=\"84\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"11\" fill=\"#0f1538\">Settlement to merchants<\/text>\n  <text x=\"638\" y=\"102\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"11\" fill=\"#0f1538\">Refunds to payers<\/text>\n  <text x=\"638\" y=\"120\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"11\" fill=\"#0f1538\">Commission to the aggregator<\/text>\n  <text x=\"638\" y=\"138\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"11\" fill=\"#0f1538\">Onward transfer to other aggregators<\/text>\n\n  <rect x=\"14\" y=\"180\" width=\"732\" height=\"46\" rx=\"13\" fill=\"#fbe9dc\"\/>\n  <text x=\"380\" y=\"200\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"12\" font-weight=\"700\" fill=\"#a2603a\">Not permitted: cash on delivery, the aggregator&#8217;s own expenses, lending against the balance,<\/text>\n  <text x=\"380\" y=\"217\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"12\" font-weight=\"700\" fill=\"#a2603a\">or any purpose the Directions do not list<\/text>\n\n  <rect x=\"14\" y=\"238\" width=\"732\" height=\"46\" rx=\"13\" fill=\"#f0e6f3\"\/>\n  <text x=\"380\" y=\"258\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"12\" font-weight=\"700\" fill=\"#6b4576\">Every debit is triggered by an instruction from the aggregator&#8217;s settlement system.<\/text>\n  <text x=\"380\" y=\"275\" text-anchor=\"middle\" font-family=\"Inter,sans-serif\" font-size=\"12\" font-weight=\"700\" fill=\"#6b4576\">The bank enforces the boundary. It does not verify the instruction was legitimate.<\/text>\n<\/svg>\n<\/div>\n<figcaption><span class=\"swipe\">Swipe to see the full diagram. <\/span>An escrow account restricts the categories of movement, not the correctness of any individual instruction.<\/figcaption>\n<\/figure>\n\n<h2 id=\"flows\" class=\"c-sage\">What may go in and what may come out<\/h2>\n\n<p>The permitted list is closed. Anything not named is not allowed, and the escrow bank is expected to police it.<\/p>\n\n<table class=\"h-sage\">\n  <thead>\n    <tr><th>Direction<\/th><th>What the Directions allow<\/th><\/tr>\n  <\/thead>\n  <tbody>\n    <tr><td><strong>Credits in<\/strong><\/td><td>Payments collected from customers, pre-funding placed by merchants, refunds against failed or cancelled or returned transactions, and transfers received from other authorised aggregators in the same flow.<\/td><\/tr>\n    <tr><td><strong>Debits out<\/strong><\/td><td>Settlement to merchants, refunds to the paying customer, commission due to the aggregator, payments to other authorised aggregators in the flow, and payments made on the merchant&#8217;s own instruction.<\/td><\/tr>\n    <tr><td><strong>Blocked<\/strong><\/td><td>Cash on delivery collections, the aggregator&#8217;s operating costs, and any use outside the authorised aggregation business.<\/td><\/tr>\n  <\/tbody>\n<\/table>\n\n<p>Aggregators may hold one additional escrow account at a different scheduled commercial bank. Cross-border flows are further separated into inward and outward collection accounts held only with authorised dealer Category-I banks.<\/p>\n\n<h2 id=\"rules\" class=\"c-apri\">Settlement timing and the core portion<\/h2>\n\n<div class=\"trio\">\n  <div class=\"tcard a\">\n    <p class=\"n\">Settlement timelines<\/p>\n    <p>The 2020 rules pegged settlement to shipment, delivery or refund expiry dates. Under the 2025 Directions the aggregator and merchant set the timeline contractually, within the outer limits prescribed.<\/p>\n  <\/div>\n  <div class=\"tcard b\">\n    <p class=\"n\">The core portion<\/p>\n    <p>No interest is payable on the escrow account balance. The exception is a defined core portion of the domestic balance, calculated from the lowest daily balances across preceding fortnights.<\/p>\n  <\/div>\n  <div class=\"tcard c\">\n    <p class=\"n\">Auditor certification<\/p>\n    <p>A statutory auditor certificate on escrow compliance goes to the RBI quarterly, alongside a certificate from the bank holding the account.<\/p>\n  <\/div>\n<\/div>\n\n<h2 id=\"where\" class=\"c-plum\">Where else escrow accounts appear<\/h2>\n\n<p>Payment aggregation is the most visible case, not the only one. Non-bank prepaid instrument issuers hold outstanding customer balances in an escrow account with a scheduled commercial bank on the same principle: money that belongs to users must not sit on the issuer&#8217;s balance sheet. Cross-border aggregators run separate inward and outward accounts. In each case the structure answers the same question, which is what happens to customer money if the company fails.<\/p>\n\n<h2 id=\"security\" class=\"c-sage\">What an escrow account does not protect against<\/h2>\n\n<p>This is the gap most teams miss. An escrow account is a legal and banking control. It ring-fences merchant funds from the aggregator&#8217;s creditors and its own spending. It does nothing about the integrity of the systems that generate settlement instructions.<\/p>\n\n<table class=\"h-peri\">\n  <thead>\n    <tr><th>Risk the escrow account does not cover<\/th><th>What actually closes it<\/th><\/tr>\n  <\/thead>\n  <tbody>\n    <tr><td>A compromised settlement or payout system issuing valid-looking debits<\/td><td><a href=\"https:\/\/www.osto.one\/resources\/glossary\/mfa\/\">Multi-factor authentication<\/a> on privileged access, segregation of duties, and maker-checker on payout runs<\/td><\/tr>\n    <tr><td>Altered merchant bank details, whether by an attacker or an insider<\/td><td>Change control with independent verification, plus <a href=\"https:\/\/www.osto.one\/resources\/glossary\/dlp\/\">data loss prevention<\/a> and monitoring on merchant master records<\/td><\/tr>\n    <tr><td>An exposed or undocumented settlement API endpoint<\/td><td>Full <a href=\"https:\/\/www.osto.one\/resources\/glossary\/api-security\/\">API discovery and authorisation<\/a>, with testing that reaches business logic<\/td><\/tr>\n    <tr><td>Reconciliation breaks discovered weeks late<\/td><td><a href=\"https:\/\/www.osto.one\/resources\/glossary\/siem\/\">Correlated logging<\/a> with alerting, and an audit trail nobody can quietly edit<\/td><\/tr>\n    <tr><td>Findings surfacing first in the annual audit<\/td><td>Scheduled <a href=\"https:\/\/www.osto.one\/resources\/glossary\/vapt\/\">VAPT<\/a> with retests, run before the auditor arrives<\/td><\/tr>\n  <\/tbody>\n<\/table>\n\n<div class=\"callout\">\n  <p class=\"k\">The audit reaches the escrow controls<\/p>\n  <p>The annual system and cyber security audit that a payment aggregator files with the RBI is performed by a <a href=\"https:\/\/www.osto.one\/resources\/glossary\/cert-in-empanelment\/\">CERT-In empanelled auditor<\/a>, and escrow operations sit squarely inside its scope. Access to the settlement system, approval workflow, logging and reconciliation all get examined. Weaknesses there become regulatory findings, not just internal ones.<\/p>\n<\/div>\n\n<h2 id=\"osto\">How Osto gets you audit-ready<\/h2>\n\n<p>Whether you hold the escrow account or build software for someone who does, the technical controls are the same set. Osto covers them by default rather than as separate purchases. Expert-led <a href=\"https:\/\/www.osto.one\/resources\/glossary\/vapt\/\">VAPT<\/a> and continuous scanning test the settlement path before an auditor does, <a href=\"https:\/\/www.osto.one\/resources\/glossary\/api-security\/\">API discovery<\/a> and <a href=\"https:\/\/www.osto.one\/resources\/glossary\/cspm\/\">cloud posture management<\/a> close the exposure gaps that dominate findings, and <a href=\"https:\/\/www.osto.one\/resources\/glossary\/siem\/\">correlated logging<\/a> gives you the trail an information systems auditor asks to walk.<\/p>\n\n<p>The evidence layer is purpose-built for this. One control set answers the RBI reviewer, a <a href=\"https:\/\/www.osto.one\/resources\/glossary\/payment-aggregator\/\">payment aggregator<\/a> customer&#8217;s vendor questionnaire, <a href=\"https:\/\/osto.one\/resources\/blog\/soc-2-for-startups\/\" target=\"_blank\" rel=\"noopener\">SOC 2<\/a> and <a href=\"https:\/\/www.osto.one\/resources\/glossary\/iso-27001\/\">ISO 27001<\/a> together. Osto prepares your evidence and gets you through the review. The mandated audit is performed by the empanelled auditor.<\/p>\n\n<!-- ============ CTA ============ -->\n<div style=\"background:linear-gradient(135deg,#1c267a 0%,#3f4796 48%,#6b4576 100%);border-radius:22px;padding:38px 34px;margin:40px 0 12px;box-shadow:0 10px 26px rgba(28,38,122,.2);text-align:center;\">\n  <p style=\"display:inline-block;background:rgba(255,255,255,.16);color:#ffffff;font-family:'Inter',-apple-system,sans-serif;font-size:11px;font-weight:700;letter-spacing:1.2px;text-transform:uppercase;padding:6px 14px;border-radius:20px;margin:0 0 16px;\">Free security assessment<\/p>\n  <p style=\"color:#ffffff;font-family:'Inter',-apple-system,sans-serif;font-size:26px;line-height:1.3;font-weight:700;letter-spacing:-.4px;margin:0 0 12px;\">Protect the systems that move the money<\/p>\n  <p style=\"color:#cfd3ea;font-family:'Inter',-apple-system,sans-serif;font-size:16px;line-height:1.65;margin:0 auto 26px;max-width:520px;\">Osto finds and fixes what an empanelled auditor would flag in your settlement path, then holds the evidence. VAPT, cloud posture, code security, logging and compliance in one platform.<\/p>\n  <a href=\"https:\/\/osto.one\/contact\/\" style=\"display:inline-block;background:#ffffff;color:#1c267a;font-family:&#039;Inter&#039;,-apple-system,sans-serif;font-weight:700;font-size:16px;text-decoration:none;border-bottom:none;padding:14px 30px;border-radius:12px;margin:0 6px 10px;\" target=\"_blank\" rel=\"noopener\"><span style=\"color:#1c267a;\">Get a free security assessment<\/span><\/a>\n  <a href=\"https:\/\/osto.one\/book-demo\/\" style=\"display:inline-block;background:transparent;color:#ffffff;font-family:&#039;Inter&#039;,-apple-system,sans-serif;font-weight:600;font-size:16px;text-decoration:none;border:1.5px solid rgba(255,255,255,.5);border-radius:12px;padding:13px 28px;margin:0 6px 10px;\" target=\"_blank\" rel=\"noopener\"><span style=\"color:#ffffff;\">Book a platform walkthrough<\/span><\/a>\n  <p style=\"color:#b3b8d8;font-family:'Inter',-apple-system,sans-serif;font-size:13px;margin:14px 0 0;\">Audit-ready in days &middot; RBI, SEBI and DPDP mapped &middot; One platform, everything<\/p>\n<\/div>\n\n\n<h2 id=\"faq\">Frequently asked questions<\/h2>\n\n<details>\n  <summary>What is an escrow account in payments?<\/summary>\n  <p>A bank account that holds customer money collected on behalf of merchants, kept separate from the collecting company&#8217;s own funds. In India, every non-bank payment aggregator must maintain one with a scheduled commercial bank, and only the credits and debits set out in the RBI Directions are permitted.<\/p>\n<\/details>\n\n<details>\n  <summary>Why is an escrow account mandatory for payment aggregators?<\/summary>\n  <p>Because the aggregator holds money that belongs to merchants and customers. Ring-fencing it in an escrow account keeps that float off the aggregator&#8217;s balance sheet, out of reach of its creditors, and unavailable as working capital. It is a consumer and merchant protection measure.<\/p>\n<\/details>\n\n<details>\n  <summary>What is the difference between a nodal account and an escrow account?<\/summary>\n  <p>Nodal accounts were the earlier arrangement under a 2009 RBI circular for payment intermediaries. The 2020 payment aggregator guidelines replaced them with escrow accounts, which carry a defined list of permitted credits and debits, bank-level oversight and periodic auditor certification. The 2025 Directions repealed the nodal account circular for most entities.<\/p>\n<\/details>\n\n<details>\n  <summary>Does a payment escrow account earn interest?<\/summary>\n  <p>Generally no. The Directions state that no interest is payable on the escrow account balance. The exception is the core portion of a domestic escrow balance, a stable minimum derived from the lowest daily balances across preceding fortnights, which the bank may move to a separate interest-bearing account. Cross-border balances do not earn interest.<\/p>\n<\/details>\n\n<details>\n  <summary>Can an escrow account be used for cash on delivery?<\/summary>\n  <p>No. The Directions explicitly bar the escrow account from being operated for cash on delivery transactions. Businesses that previously pooled cash collections through the same account have had to redesign those flows.<\/p>\n<\/details>\n\n<p class=\"related\"><strong>Related glossary terms:<\/strong> Payment Aggregator &middot; NBFC Regulatory Layers &middot; CERT-In Empanelment &middot; RBI DAKSH &middot; VAPT &middot; SIEM &middot; API Security &middot; DLP<\/p>\n\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>An escrow account in payments is the ring-fenced bank account where a payment aggregator parks customer money before it reaches\u2026<\/p>\n","protected":false},"author":8,"featured_media":963,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[180],"tags":[425,426],"class_list":["post-962","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-glossary","tag-escrow-account","tag-escrow-account-payment-aggregator"],"_links":{"self":[{"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/posts\/962","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/comments?post=962"}],"version-history":[{"count":1,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/posts\/962\/revisions"}],"predecessor-version":[{"id":964,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/posts\/962\/revisions\/964"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/media\/963"}],"wp:attachment":[{"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/media?parent=962"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/categories?post=962"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.osto.one\/resources\/wp-json\/wp\/v2\/tags?post=962"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}