What is an Account Aggregator, and why can't it read your data?

The PDF problem it solves

For years, getting a loan in India meant downloading six months of bank statements, emailing them to a stranger, and hoping nobody noticed the PDF could be edited in about four minutes. Lenders knew it. Borrowers knew it. Everyone pretended.

The Account Aggregator framework replaced the PDF with a request. The RBI created the licence in 2016, and the network went live in 2021. It now covers billions of accounts across banks, insurers, pension funds and securities, and in June 2026 the RBI recognised Sahamati, the industry body, as its self-regulatory organisation.

How the blindfold works

There are three roles. The institution that holds your data is the provider. The one asking for it is the user. The Account Aggregator stands between them and manages exactly one thing: your consent.

When a lender asks, you see a consent request that spells out what is shared, why, and for how long. Say yes, and the data travels from your bank to the lender encrypted end to end. The aggregator routes it without ever holding the key. It is not being polite. It literally cannot look.

What builders get wrong

The first mistake is treating consent as a formality. Consent here has a purpose and an expiry. Pull a bank statement to decide a loan, then reuse it for marketing, and you have not found a loophole; you have broken the one promise the whole system runs on.

The second is assuming every institution shares everything. Coverage has grown enormously, but data types and participation still vary. Build fallbacks for the gaps.

The third is assuming anyone can plug in. Requesting data generally requires being a regulated entity. Many software companies reach the network through a regulated partner rather than directly.

When it is worth it

Wherever document collection is your bottleneck: lending, underwriting, wealth onboarding, insurance. And ask for the narrowest consent that does the job. People approve small, specific requests far more readily than sweeping ones, which makes privacy good product design, not just good manners.

A courier who carries a sealed envelope from your bank to your lender. They know the pickup, the drop, and the deadline you set. They never see the letter, and the envelope self-destructs on the date you chose.

Where you meet it

Every "link your accounts to get an instant offer" screen. Every loan approved in minutes without a single uploaded document. Every finance app asking permission in plain language, and meaning it, because the system will not let it do otherwise.

FAQ

Can an Account Aggregator see my bank data? No. It moves the data encrypted and does not hold the key to read it.

Can I take my consent back? Yes. Consent is voluntary and can be revoked.