Co-branded Card Operation Project Report: Industry Trends, Operations Setup, Service Standards, Investment Opportunities, Revenue and Margins

Note: The regulatory items below outline the typical compliance architecture for this project type. Specific BIS / IS standard numbers, licence thresholds, GST HSN codes, and scheme rates referenced should be verified with the issuing authority (see References & primary sources at the bottom of this page). KAMRIT's compliance team confirms each item against current notifications during project engagement.

The co-branded card operation requires a layered licence architecture beginning with RBI authorisation as a Scheduled Commercial Bank or a Non-Banking Financial Company with credit card issuance rights, followed by enrolment in the Card Network operating agreement with either Visa Asia Pacific, Mastercard Asia Pacific, or NPCI RuPay. The merchant partnership dimension triggers additional compliance touchpoints under the Payment and Settlement Systems Act 2007 and the extant Master Directions on Prepaid Payment Instruments where card-linked offers are bundled with wallet functionality.

• RBI Master Direction on Credit Card Operations DNBR (PD) 218/03.10.001/2015-16 as amended: mandates minimum net owned funds of ₹100 crore for standalone card issuance by NBFCs, with capital adequacy ratio of 15 percent; this is the primary threshold gate for entity structuring.
• Card Network Enrolment Agreement (Visa/Mastercard/RuPay): requires PCI-DSS Level 1 compliance for data centres, ISO 27001 certification for information security management, and minimum annual transaction volume commitments; failure to meet volume thresholds in year two triggers rate renegotiation.
• Prevention of Money Laundering Act 2002 compliance: KYC/AML framework integrating CKYC registry, eSign based Aadhaar OTP verification, and periodic re-KYC cycles; the Account Aggregator ecosystem now permits FIP-approved data sharing for income verification reducing documentation cycle from 5 days to 2 hours.
• Master Direction on Digital Payment Security Controls RD-DIR-01/2024: mandates multi-factor authentication for transactions above ₹5,000, biometric fallback protocols for rural co-branded variants, and quarterly penetration testing by CERT-In empanelled agencies.
• GST Registration under GSTN and Input Tax Credit reconciliation: co-branded interchange fees attract 18 percent GST; merchant discount rate disputes require GST Council clarification on bundled services; EPFO and ESI registration mandatory if employee headcount exceeds thresholds under the Employees' Provident Funds Act 1952.
• RBI Account Aggregator Framework NBFC-AA licence: required if the co-branded operation intends to leverage consent-based income and expense data for underwriting; NPCI AA certification adds 6-8 months to the project timeline.
• Credit Information Companies Regulations 2006 (CIBIL, Experian, Equifax, CRIF): mandatory membership for credit bureau pulls prior to card issuance; bureau API integration cost of ₹15-25 lakh annually per bureau; real-time score refresh critical for BNPL-linked co-branded variants.
• RBI Consumer Grievance Redressal Framework: appointment of a grievance officer under the Banking Ombudsman Scheme 2006; SLA of 30 days for grievance resolution; mandatory quarterly reporting to the Integrated Ombudsman System.

KAMRIT Financial Services LLP manages the complete regulatory licence stack for the co-branded card project, from NBFC registration with RBI through Card Network accreditation to AA framework enrolment, coordinating legal opinions, compliance audits, and regulatory submissions under a single engagement structure to compress the time-to-licence to under 10 months.

The co-branded card operations sub-sector sits at the intersection of payment infrastructure, lending intermediation, and loyalty economics. Unlike standalone credit card issuance, co-branded operations derive value from merchant partnerships that subsidise acquisition cost and generate interchange revenue tied to partner category spend. The sub-sector is distinguishable from adjacent prepaid instrument operations and payment aggregator businesses by its dual exposure to credit risk and the RBI's stricter capital adequacy norms under the Master Direction on Credit Cards.

Within co-branded cards, five distinct segments exhibit differentiated growth rate gradients: co-branded credit cards linked to retail ecosystems (28 percent CAGR), fuel co-branded cards (18 percent CAGR), airline and travel co-branded cards (21 percent CAGR), healthcare and pharmacy co-branded cards (26 percent CAGR), and tech platform co-branded cards (32 percent CAGR driven by BNPL integration). The Account Aggregator framework is enabling lenders to underwrite co-branded card limits using alternative data, compressing the time-to-first-transaction from 14 days to under 48 hours for qualified applicants. The UPI dominance dynamic creates both competition and complementarity: RuPay co-branded cards linked to UPI handles are capturing the mass market, while Visa and Mastercard co-branded variants target the upper deciles of discretionary spend.

Project-specific demand drivers

• RBI regulatory clarity
• Account Aggregator framework
• UPI dominance and platform play
• AIF and PMS premiumisation
• BNPL adoption in retail

The technology architecture for a co-branded card operation spans three distinct layers: the card management system, the payment processing gateway, and the data analytics engine. For card management, Temenos T24 and FIS Profile are the established enterprise platforms deployed by the private equity-backed national chain at a typical CapEx of ₹3.5 crore to ₹6 crore for a mid-sized portfolio, while the regional Tier-2 player with national ambition has adopted a cloud-native stack on AWS Mumbai region reducing upfront infrastructure cost to ₹1.2 crore with a per-card monthly licence of ₹15-20. The payment gateway layer integrates with BillDesk, CCAvenue, and Razorpay X for merchant acquiring; native API integration with NPCI RuPay for UPI-linked card transactions adds ₹45 lakh to ₹80 lakh in integration cost.

For the D2C-first brand, a fintech-as-a-service model using Slice or ZWL infrastructure reduces the card issuing CapEx to ₹55 lakh to ₹85 lakh, making it viable at the lower end of the project envelope. Fraud management systems from ThreatMetrix or IDFirst cost ₹20-35 lakh annually, with AI-driven behavioural scoring models adding ₹30-50 lakh in year one development cost. Data analytics infrastructure on Databricks or Snowflake with consent management under the DPDP Act 2023 costs ₹40-70 lakh.

Energy costs for the data centre layer run ₹8-12 lakh per month for a colocation setup in Mumbai or Chennai. The total technology CapEx lands in the ₹2.1 crore to ₹7 crore range for a phased rollout, with the upper envelope accommodating a full Temenos deployment and in-house fraud model development.

The Means of Finance for the co-branded card operation is structured across three tiers aligned to the project CapEx band of ₹2.1 crore to ₹29 crore. For projects at the lower CapEx range of ₹2.1 crore to ₹5 crore, the recommended structure is 70 percent equity from promoters and ₹30 lakh to ₹1 crore under the SIDBI's SAFE (Secure and Fair Fellowship for Enterprises) scheme or CGTMSE-backed term loan from a regional bank such as Bank of Baroda or Punjab National Bank at 8.5 to 9.5 percent ROI. For mid-range projects of ₹5 crore to ₹15 crore, a 60:40 debt-equity split is recommended with ICICI Bank or Axis Bank providing ₹4 crore to ₹8 crore in structured term finance against the card issuing licence and merchant partnership contracts as security, complemented by ₹1 crore to ₹2 crore from the SIDBI's Credit Guarantee Fund for a 75 percent guarantee coverage. For the upper CapEx band of ₹15 crore to ₹29 crore, the structure shifts to 55 percent debt from a consortium led by HDFC Bank or IDBI Bank, with the State Bank of India offering a priority sector lending classification under the bank's MSME retail advance policy; a ₹3 crore to ₹5 crore subordinate debt component from a NBFC investor or private equity limited partner completes the structure. The working capital cycle for a co-branded card operation runs 45 to 60 days, dominated by receivable float from merchant partners and the interchange settlement lag of 2-3 days with Card Networks. A revolving working capital facility of ₹1.5 crore to ₹4 crore with HDFC Bank or IndusInd Bank at MCLR plus 150 basis points is recommended. State government incentives in Karnataka, Maharashtra, and Telangana for fintech operations include stamp duty exemption and electricity duty holiday for data centre infrastructure; Karnataka's Fintech Hub policy provides 20 percent CAPEX subsidy capped at ₹2 crore for approved operations in Bengaluru.

Three risks require specific mitigation structures within the bankable DPR. First, the regulatory risk of a shift in RBI's stance on co-branding arrangements: the Draft Master Direction on Licensing of Payment Aggregators and Payment Gateways had proposed tighter disclosure norms for co-branded interchange that could compress NIM by 40 to 60 basis points; mitigation requires merchant partnership agreements with floor-rate interchange clauses and a contractual pass-through of regulatory cost to the merchant partner. Second, the portfolio credit risk embedded in the co-branded card book: the expected credit loss for new-to-credit and thin-file borrowers under the Account Aggregator framework is higher than for traditional credit card issuers, with NPA trajectories of 4.5 to 7 percent in the first 24 months; mitigation requires a dynamic provisioning model calibrated to RBI's income recognition norms, with a specific loan loss reserve of 5 percent for the first year.

Third, the technology and fraud risk of a scalable card processing infrastructure: a single-point failure in the payment gateway or a coordinated fraud ring targeting the co-branded merchant pool can generate losses of ₹50 lakh to ₹1.5 crore per incident; mitigation requires multi-node architecture on AWS Mumbai and Hyderabad with 99.9 percent uptime SLA and real-time fraud scoring with a 35-millisecond response threshold. Sensitivity analysis on the base case shows that a 100 basis point increase in cost of funds extends the payback by 0.4 years at the ₹15 crore CapEx level, while a 15 percent shortfall in merchant partner acquisition reduces Year 2 interchange revenue by ₹1.8 crore, requiring an additional ₹60 lakh equity injection.