More fintech firms, banks likely to come under scanner AJINKYA KAWALE Mumbai, 1 March After Fino Payments Bank chief's arrest for alleged irregularities, more digital payments firms and smaller banks are likely to be under the scanner as part of a crackdown on Payout API-related transactions in the banned real-money gaming sector, sources said. The industry is also expecting heightened scrutiny of payment aggregators and intermediaries such as gateways with probes likely to extend to smaller banks that may have such processed transactions in the past. Executives told Business Standard that payout APIs were integrated with intermediaries and banks, then misused to automatically send bulk payments that distribute betting proceeds while making the transactions appear legitimate. "People wanting to do such transactions know which entities may support them and shift their integrations to such banks and payment aggregators," a senior executive at a payments company said, requesting anonymity. The focus on such dealings comes at a time when an investigation by the Directorate General of GST Intelligence (DGGI) has led to the arrest of Fino Payments Bank's Managing Director and Chief Executive Officer (CEO) Rishi Gupta. Sources said that such arrangements enabling bank and non-bank integrations with entities posing as merchants typically occur at the sales or merchant acquisition stage, and may not necessarily involve bank chiefs. "There are social media groups where some blacklisted merchants are asked to be labelled as whitelisted ones so that they can start accepting payments and use payout APIs. There are more such payment aggregators involved in such transactions, and another small bank that is likely to be investigated," a second source explained. Industry sources added that many small banks are new to a more complex digital payments stack and may not necessarily have the nuance to tackle problematic transactions with a weak risk evaluation mechanism. Adding to the challenge is how such transactions flow within the ecosystem since they look legitimate at first and may not trigger an alarm unless specific patterns such as bulk late night transactions, varying ticket sizes, are recognised in the first place.