Payment Gateway for Small Business India: 2026 Real Costs

If you run a small business in India and you already have a UPI QR code taped to your counter, then shopping for a payment gateway for small business India probably feels like paying for something you already get free. That instinct is costing you money — and there is now a date on the calendar that makes it worth fixing.

Here is the part almost no comparison article says plainly: UPI carries zero MDR on bank-account payments. Yet most payment gateways still charge you roughly 2% as a "platform fee" on that same zero-MDR UPI volume. Razorpay publishes this on its own UPI charges page. Terra Insight independently lists card-grade rates applied to zero-MDR volume as the highest-frequency merchant billing-leakage pattern in India. A gateway's own blog can't tell you this. We can, because we don't sell gateways — we build the checkout layer that sits on top of one.

In this guide: verified July 2026 pricing from every major provider, what the 15 September 2026 RBI deadline actually requires (and who it legally applies to), the truth about the UPI MDR proposal, and a pre-deadline checklist you can run in twenty minutes.

Which payment gateway is best for a small business in India in 2026?

There is no single winner — the answer depends almost entirely on your payment mix. If most of your money arrives over UPI, the gateway that charges nothing on UPI beats the one with the lower headline rate, every time.

Here is the verified picture as of July 2026. All rates exclude 18% GST.

Gateway	Domestic rate	UPI treatment	Setup / AMC	Settlement
Paytm PG	1.99% credit card & netbanking	Zero on UPI and RuPay debit	Zero / Zero	T+2
PhonePe PG	1.95% standard (zero-fee promo running)	Standard rate	Zero / Zero	T+2
Cashfree	1.95% standard; 1.6% conditional promo	Standard rate	Zero / Zero	T+2
Razorpay	2% domestic; 3% international/AmEx	~2% platform fee applies	Zero / Zero	T+2
PayU	~2% domestic; 3.0–4.0% international	Standard rate	Zero / Zero on many plans	T+2
Instamojo	2% + Rs 3 per transaction	Standard rate	Zero / Zero	T+2
CCAvenue	~1.99%	Standard rate	Rs 3,000–7,500 setup + Rs 2,000/yr	T+2

Two things the listicles bury. Cashfree's 1.6% promo (for merchants signing up between 18 Sep 2025 and 31 Jul 2026, valid one year) requires UPI to be at least 40% of your monthly GTV and is rescinded if your domestic volume crosses Rs 1 crore in any month. And CCAvenue is the outlier where setup fees genuinely bite — its higher tier carries a Rs 30,000 setup charge.

The industry band is 1.75%–2.2% domestic and 3%–4.5% for international or premium cards. Within that band, instrument-level pricing matters far more than the headline number.

Is UPI really free for merchants, or do gateways still charge a fee?

Both are true, and that's the confusion. UPI's MDR is zero — the interchange your bank would normally take on a card doesn't exist on a bank-account UPI payment. But a payment gateway is a separate commercial layer, and it can charge its own platform fee on top of a zero-MDR rail. Many do, at card-grade rates.

Run the arithmetic on a real business. Say you collect Rs 8 lakh a month, 80% of it over UPI:

On a gateway charging ~2% across the board: roughly Rs 12,800/month on the UPI portion alone, plus GST.
On a gateway with zero UPI fee: Rs 0 on that same volume.

That's over Rs 1.5 lakh a year, on a rail the regulator made free. This single line item outweighs almost every feature difference people argue about.

Two more fees worth knowing. RBI's debit-card MDR caps are 0.4% for merchants up to Rs 20 lakh turnover and 0.9% above that (0.3%/0.8% for QR-based), capped at Rs 1,000 per transaction — RuPay debit has been zero-MDR since January 2020. Separately, PPI/wallet interchange of 0.5%–1.1% already applies to UPI transactions above Rs 2,000 when the customer pays from a wallet rather than a bank account. Small merchants are largely exempt, and most MSMEs have never heard of it.

Confirmed: the RBI 15 September 2026 payment aggregator deadline

This one is real, dated and published. Under the RBI (Regulation of Payment Aggregators) Directions, 2025 — issued 15 September 2025 — Section 13(j) requires payment aggregators to ensure that merchants onboarded up to 31 December 2025 comply with due-diligence requirements within one year. That clock runs out on 15 September 2026. Merchants onboarded from 1 January 2026 onwards get no extended timeline at all.

Read the framing carefully, because fear-based versions of this news are circulating. The legal obligation sits on the payment aggregator, not on you. RBI is not going to freeze your settlements. What will happen is commercial: gateways are expected to suspend or de-onboard merchants whose documents don't clear, because the PA's own licence is at risk. RBI's documented powers against a non-compliant PA include restricting new merchant onboarding, suspending authorisation, and cancellation proceedings. No aggregator will absorb that risk for a Rs 6 lakh/month merchant.

For context on how serious the licence is: non-bank PAs must hold Rs 15 crore net worth at application and Rs 25 crore by their third financial year. Over 60 entities hold PA authorisation; 19 are authorised for cross-border (PA-CB), where the per-transaction export limit has been raised to Rs 25 lakh — relevant if you're a small exporter.

Not confirmed: will UPI payments above Rs 2,000 be charged MDR?

There is no MDR on UPI. No decision has been announced as of 21 July 2026. Anyone telling you a rate is "coming" is guessing.

What actually exists: the Parliamentary Standing Committee on Finance report dated 12 March 2026 recommended examining a tiered MDR under which street vendors and small businesses stay exempt while large entities contribute. The Department of Financial Services told that committee that the absence of MDR makes the UPI ecosystem financially unsustainable. The story resurfaced in the press on 16–17 July 2026.

The reported numbers are genuinely contested — that alone should tell you how unsettled this is. Moneycontrol reported a ceiling of "less than 0.5%"; multiple other outlets reported 5–7 basis points (0.05–0.07%) — roughly a tenth of that. Treat 0.5% as a discussed ceiling and 5–7 bps as the more likely working number. A reported exemption for businesses under Rs 1–1.5 crore turnover comes from unnamed officials, not any published document.

For balance: on 11–12 June 2025 the Finance Ministry called MDR-on-UPI reports "completely false, baseless and misleading" and reaffirmed its support for zero MDR. That denial predates the March 2026 committee report, so it isn't the last word — but it is on record.

Don't restructure your business around a proposal. Do keep an eye on it.

What documents are required to activate a payment gateway in India?

Here's where most articles get it wrong, and the error matters. RBI Section 13(b) grants simplified due diligence to "smaller merchants" — domestic turnover up to Rs 40 lakh, or export turnover up to Rs 5 lakh. Full KYC applies only above those thresholds. If you're a kirana store in Ghaziabad or a two-person D2C brand in Jaipur, you are almost certainly in the simplified bucket. Nobody should be telling you to assemble a full corporate KYC file.

Note that Rs 40 lakh is the due-diligence threshold. It is not the Rs 20 lakh figure from the debit-card MDR caps — those are two different rules, and conflating them is a common mistake.

The checklist to run before September:

PAN legal name, bank account name and GST legal name matched exactly — character for character, including punctuation. Name mismatch is a leading cause of onboarding rejection and of documents failing re-verification.
Business proof appropriate to your constitution — proprietorship, partnership, LLP or private limited.
A bank account in the business's name, not a personal savings account.
Your gateway's stated pricing per instrument — UPI, RuPay debit, credit card, netbanking, wallet, international — in writing, not the headline rate.
Last month's effective rate, calculated yourself: fees ÷ volume, per payment method. This is the number that tells you whether you're being charged card rates on zero-MDR UPI.

Can I get a payment gateway without GST registration? Yes — a proprietorship below the GST threshold can generally be onboarded, though instrument availability and limits vary by aggregator. The catch is downstream: without a GST-matched paper trail, your books get harder every quarter. That's a good moment to look at automating GST invoice generation so each payment carries its own invoice ID from the start.

Why a payment link beats a WhatsApp QR screenshot

Picture a two-person home-fragrance brand in Jaipur selling over Instagram DMs and WhatsApp. Orders get confirmed in chat, the customer is sent a personal UPI QR, and "proof of payment" comes back as a screenshot. Every night the owner spends 45–60 minutes matching SMS bank alerts to orders by hand. Twice, they shipped against a forged "Payment Successful" screenshot.

That's not a rare setup — it's the default for lakhs of Indian businesses, and every part of it is a leak:

Fake screenshots are a documented 2026 problem. A Ghaziabad kirana store lost Rs 2,400 of groceries; a Gujarat electronics showroom handed over an iPhone 16 against a fake Paytm confirmation; Kerala police have issued public warnings.
An hour a day of manual reconciliation is roughly 250 hours a year of unpaid admin.
A personal UPI account leaves no GST-matched trail, and you cannot offer cards, netbanking or EMI — so every customer who wanted to pay that way simply didn't buy.
Unlabelled bank alerts mean you can't tell which order the money belongs to, which is exactly how payments quietly go missing and stay unrecovered.

A payment link is safer for one structural reason: confirmation comes from a gateway webhook, not from the customer. A screenshot can be edited in thirty seconds; a webhook cannot. The link also carries an order or invoice ID, so reconciliation happens automatically instead of at 11pm.

One caveat: a link still asks the customer to act every single time. If you bill the same customers the same amount every month, a mandate beats a link — that is a different setup, covered in our guide to recurring payment collection for Indian small businesses.

The practical breaking point is around 30–40 WhatsApp orders a month. Below that, manual link tracking holds. Above it, gaps start appearing and an API-based checkout becomes necessary rather than nice-to-have.

The market context: why this is worth doing now

The volume is not theoretical. In June 2026, UPI processed 22.72 billion transactions worth Rs 28.92 lakh crore — about 757 million transactions and Rs 96,405 crore a day, up 23% year on year. FY2025-26 closed at 241.62 billion transactions worth Rs 314 lakh crore across roughly 55.5 crore users.

India now has around 6.5 crore merchants and 56.86 crore QR codes, with QR infrastructure up 91.5% YoY in FY25 and over 75% of new deployment happening in Tier 2 and Tier 3 cities (PIB/NPCI). PayNearby's MSME Digital Index 2026, surveying 10,000 retailers and MSMEs in June 2026, found 80% reporting increased digital payment usage and 87% feeling more confident with digital tools than a year ago — though cash remains the single largest mode at 37%. (PayNearby is a fintech with a commercial interest in that finding; read it as directional.)

On safety, the trend is genuinely improving. UPI fraud stood at Rs 805 crore across 10.64 lakh incidents to November FY26, down from Rs 981 crore/12.64 lakh in FY25 and Rs 1,087 crore in FY24, per a Lok Sabha reply by MoS Finance Pankaj Chaudhary.

Also worth knowing for 2026: the baseline UPI daily limit is Rs 1 lakh (up to Rs 10 lakh for verified categories), two-factor authentication became a requirement in April 2026, and NPCI's 30% market-share cap has been extended to 31 December 2026. All that transaction data, incidentally, is a genuinely useful business intelligence source once it's flowing through a structured checkout instead of your personal bank SMS.

FAQs

How much does Razorpay charge compared to Cashfree, PayU and Paytm?

Excluding 18% GST: Razorpay is 2% domestic and 3% international/AmEx; Cashfree is 1.95% standard with a conditional 1.6% promo; PayU is around 2% domestic and 3.0–4.0% international; Paytm charges zero on UPI and RuPay debit and 1.99% on credit card and netbanking. If your volume is UPI-heavy, that last line is the whole comparison.

What is the difference between MDR, platform fee, TDR and setup fee?

MDR (merchant discount rate) is the regulated interchange on card and wallet rails — zero on UPI bank payments and RuPay debit. TDR (transaction discount rate) is the same idea under a different label. Platform fee is the gateway's own commercial charge, unregulated, and it's what gets applied to zero-MDR UPI. Setup fee is a one-time onboarding charge — zero at most providers, Rs 3,000–30,000 at CCAvenue.

How long does settlement take — T+1 or T+2?

T+2 is the standard across Razorpay, Cashfree, PayU, Paytm, PhonePe and Instamojo. Faster or instant settlement is generally a paid add-on; get the rate for it in writing before you enable it, since it's often not published.

What should I do if my payment gateway account gets frozen?

Freezes usually trace to a document or name mismatch, a sudden volume spike outside your declared pattern, or a chargeback cluster. Contact your aggregator's risk team with your PAN, bank and GST documents ready and matched, and be prepared to explain the volume change. Prevention is far cheaper than resolution — which is exactly why the pre-September checklist above is worth twenty minutes now.

Do these rules apply if I export?

Cross-border collections need a PA-CB authorised provider — 19 entities currently hold it — and the per-transaction export limit is Rs 25 lakh. Your export-turnover threshold for simplified due diligence is Rs 5 lakh, lower than the Rs 40 lakh domestic line.

Where Cybiqon fits

To be clear about what we are and aren't: Cybiqon is not a payment aggregator, and we cannot influence whether a gateway approves you. What we build is the layer on top of an authorised PA — a proper checkout on your own website or app, a payment-link flow for WhatsApp and Instagram orders, and auto-reconciliation so every payment lands with an invoice ID attached instead of as an unlabelled bank alert. Confirmation comes from a gateway webhook, not a customer's screenshot.

If you'd like, we'll review your current checkout setup and flag PAN/bank/GST name mismatches before September — no charge, no obligation. We work with MSMEs across manufacturing, D2C, retail and services, and we'll tell you honestly if your existing setup is fine. Reach us at +91 9250711473 or [email protected], or see what we do at cybiqon.in. If cash flow is the underlying worry, invoice discounting through TReDS may be the more relevant conversation.

The takeaway

Choosing a payment gateway for small business India in 2026 comes down to three honest questions: what does your provider actually charge on UPI, do your PAN, bank and GST names match exactly before 15 September 2026, and does your money arrive labelled or unlabelled? The RBI deadline is confirmed; the UPI MDR proposal is not. Fix the first, watch the second, and stop shipping goods against screenshots. If you want a second pair of eyes on your setup, Cybiqon is a call away.

Payment Gateway for Small Business India: 2026 Real Costs