what is an account aggregator

An Account Aggregator (AA) is an RBI-regulated entity that lets you share your own financial data — from banks, mutual funds, insurers and the like — securely and with your explicit consent, between regulated institutions. The framework went live for banks in 2021. Instead of downloading statements or sharing a password, you approve a specific, time-bound request through an AA app, and the data flows directly and encrypted from the institution that holds it to the one you have chosen to receive it.

how does the account aggregator framework work

When a lender or adviser needs your data, they raise a consent request that lands in your Account Aggregator app. You see exactly what is being asked for, by whom, for what purpose and for how long, and you approve or decline it. If you approve, the data moves straight from the source institution to the requester in encrypted form. Crucially, the Account Aggregator itself cannot read the data it passes — it is "data-blind", acting only as a consent manager and a pipe, not as a store of your financial information.

is the account aggregator safe

It is designed to be safer than the alternatives it replaces. You never share a password, the data is encrypted end to end, the aggregator cannot see the contents, and every consent is specific, purpose-limited, time-bound and revocable — you can withdraw it later and stop the flow. The genuine risks are ordinary caution ones: only use a licensed Account Aggregator, read what each consent actually covers before approving, and do not approve a request whose purpose or duration you do not understand. The control is real, but only if you use it.

do I have to use an account aggregator

No — it is voluntary, and nothing forces you to share data through it. It exists to make legitimate sharing faster and safer when you do want it, for instance to speed up a loan application or give an adviser a consolidated view. If you prefer, you can still provide statements the old way. The point of the framework is to give you a controlled, revocable option, not to compel you to expose your finances; treat any party that insists you must use it, or asks for a very broad or open-ended consent, with suspicion.

Account Aggregator India: how it works and whether it is safe

Applying for a loan or signing up with an adviser used to mean one of two uncomfortable things: emailing around PDF statements, or worse, typing your bank password into someone else’s screen so they could "fetch" your data. Both hand over far more than the moment requires. The Account Aggregator framework was built to end that.

You control the four Ws

Every consent spells out four things: what data is shared, who receives it, why, and for how long. You see all four before approving, and you can revoke the consent afterwards to stop any ongoing flow. That is the real shift — instead of surrendering a password that gives open-ended access to everything, you grant a narrow, purpose-limited, expiring permission for one specific need. The framework turns data sharing from an all-or-nothing handover into something closer to a single, revocable key cut for one door.

Check yourself

What does it mean that an Account Aggregator is "data-blind"?

Simple bhasha mein

Data share karo, chaabi diye bina

Pehle loan ya adviser ke liye financial data dena matlab PDF email karo ya bank password de do — dono zaroorat se zyada de dete hain. Account Aggregator (RBI-regulated, 2021 se live) yeh badalta hai: explicit, time-bound consent pe tumhara data (bank, MF, insurance) do institutions ke beech encrypted, seedha flow hota. AA app mein request dikhti — kya data, kisko, kyun, kitne der — tum approve/decline karo, baad mein revoke bhi. Khaas baat: AA "data-blind" hai — data ghumata hai par khud padh nahi sakta, sirf consent manager. Password nahi, PDF nahi. Voluntary hai — koi majboor nahi kar sakta. Safeguard tabhi kaam kare jab consent padho: licensed AA use karo, open-ended ya zyada-broad request decline karo.

What to remember

An Account Aggregator shares your financial data on explicit, time-bound consent — no passwords or PDFs.
It is RBI-regulated and went live for banks in 2021; the data flows encrypted, source to recipient.
It is data-blind — it routes your data but cannot read it, acting only as a consent manager.
Every consent names what, who, why and how long, and you can revoke it later.
It is voluntary; use a licensed AA, read each consent, and decline anything broad or open-ended.

You reached the endMark it done and keep your streak going.

Up nextA budget that survives contact with an Indian household Previous: Crypto, digital gold and everything no regulator covers

Finished this lesson?

Mark it done to track your progress through the curriculum.

Common questions

Short, direct answers to what people ask about this topic.

what is an account aggregator: An Account Aggregator (AA) is an RBI-regulated entity that lets you share your own financial data — from banks, mutual funds, insurers and the like — securely and with your explicit consent, between regulated institutions. The framework went live for banks in 2021. Instead of downloading statements or sharing a password, you approve a specific, time-bound request through an AA app, and the data flows directly and encrypted from the institution that holds it to the one you have chosen to receive it.
how does the account aggregator framework work: When a lender or adviser needs your data, they raise a consent request that lands in your Account Aggregator app. You see exactly what is being asked for, by whom, for what purpose and for how long, and you approve or decline it. If you approve, the data moves straight from the source institution to the requester in encrypted form. Crucially, the Account Aggregator itself cannot read the data it passes — it is "data-blind", acting only as a consent manager and a pipe, not as a store of your financial information.
is the account aggregator safe: It is designed to be safer than the alternatives it replaces. You never share a password, the data is encrypted end to end, the aggregator cannot see the contents, and every consent is specific, purpose-limited, time-bound and revocable — you can withdraw it later and stop the flow. The genuine risks are ordinary caution ones: only use a licensed Account Aggregator, read what each consent actually covers before approving, and do not approve a request whose purpose or duration you do not understand. The control is real, but only if you use it.
do I have to use an account aggregator: No — it is voluntary, and nothing forces you to share data through it. It exists to make legitimate sharing faster and safer when you do want it, for instance to speed up a loan application or give an adviser a consolidated view. If you prefer, you can still provide statements the old way. The point of the framework is to give you a controlled, revocable option, not to compel you to expose your finances; treat any party that insists you must use it, or asks for a very broad or open-ended consent, with suspicion.

The Account Aggregator: sharing your financial data without handing over the keys

You control the four Ws

Common questions