In the Indian fintech landscape, Fourth-Party Payment Providers (Aggregators or Payment Solution Providers) act as an essential layer. Unlike Third-Party Application Providers (TPAPs like Google Pay or PhonePe) that face the consumer, Fourth-Party providers focus on merchant-side integration, offering a unified API to access multiple payment gateways, banks, and local methods.
Part I: The Profit Model of Fourth-Party Payments
Fourth-party providers generate revenue through a mix of transactional, technical, and value-added service fees:
1. Transactional Commission (MDR Spread)
Mechanism: The provider charges the merchant a Merchant Discount Rate (MDR) for every transaction.
Profit: They keep the “spread” between the rate they negotiate with the bank/acquirer and the rate they charge the merchant.
2. Integration & Setup Fees
Mechanism: A one-time fee charged to merchants for API integration, technical onboarding, and system configuration.
Purpose: Covers the operational cost of “Know Your Merchant” (KYM) verification and technical support.
3. Subscription & SaaS Fees
Mechanism: Monthly or annual recurring fees for access to a professional merchant dashboard.
Value-Add: This often includes advanced reconciliation tools, real-time analytics, and automated settlement reports.
4. Value-Added Services (VAS)
Risk Management: Charging extra for advanced anti-fraud modules or manual dispute resolution services.
Multi-Currency Conversion: Fees for processing international cards or providing Dynamic Currency Conversion (DCC).
Payout Solutions: Facilitating bulk payouts to vendors or employees via IMPS/NEFT.
Part II: UPI Fraud Risk Warnings (Security Briefing)
While UPI (Unified Payments Interface) is revolutionary, its speed and ease of use are frequently exploited by fraudsters through social engineering.
1. The “Collect Request” Scam
The Trap: A fraudster sends a “Collect Request” to a user, claiming it is a “payment” or a “refund.”
The Warning: Entering your UPI PIN always means money is LEAVING your account. You never need a PIN to receive money.
2. QR Code Scams
The Trap: Fraudsters send QR codes via WhatsApp or email, telling the user to “Scan this to receive your prize/refund.”
The Warning: Scanning a QR code and entering a PIN is a “Send Money” action. Official entities will never ask you to scan a code to receive funds.
3. Screen Sharing Fraud
The Trap: Scammers pose as “Bank Support” and ask users to download apps like AnyDesk or TeamViewer to “fix a technical issue.”
The Warning: These apps allow fraudsters to see your screen, capture your OTPs, and see your UPI PIN as you type it. Never grant screen access to third parties.
4. SIM Swapping & Phishing
The Trap: Fraudsters convince the mobile operator to issue a duplicate SIM card or send phishing links to capture bank login credentials.
The Warning: If your mobile signal suddenly disappears for no reason, contact your bank and operator immediately from a different phone.