// INSIGHTS
Cashless RFID Payments and Access on One Credential
6 min read
A three-day festival expects 25,000 attendees and runs 60 food and beverage counters. Cash means float management, theft risk, slow queues and no data. Card terminals mean network dependence and 8 to 12 seconds per transaction. An NFC wristband that handles both entry and spending settles in under half a second and produces a complete sales record. It also introduces a set of problems that have nothing to do with technology and everything to do with money.
One credential, two functions
The wristband carries a unique identifier and a signed access credential. At gates it functions as the entry token, verified cryptographically against the ticketing record. At bars and stalls it functions as a wallet reference. The balance is not stored only on the band. It is held in a ledger, with a signed copy cached on the band and on every reader, which is what makes offline operation possible.
Offline capability is not optional at Indian festival grounds. Mobile data at a site with 25,000 people is effectively unusable during peak hours. Readers therefore operate autonomously: they verify the band, apply the debit locally, record the transaction with a monotonic counter, and queue it for settlement. When connectivity returns, transactions reconcile centrally. We typically size readers to hold four hours of offline transactions comfortably.
That design has one unavoidable consequence, and it is important to state it plainly. During an offline window, a determined attacker with two readers can attempt to spend the same balance twice before reconciliation. We limit exposure with per-transaction caps, per-window spend caps, signed counters and rapid reconciliation, but we do not claim it is impossible. The correct engineering answer is to bound the maximum loss, quantify it, and price it into the commercial model rather than pretend the risk is zero.
Operating parameters at festival scale
What the platform handles
Unified entry and spend credential
One band handles gate access, zone access and payment. Attendees carry nothing else, and the organiser gets entry and spend data joined on the same identifier.
Offline tap with deferred settlement
Readers debit locally with signed transaction counters and queue for reconciliation. Counters keep serving through a total network outage rather than reverting to cash.
Live sales and stock visibility
Revenue per counter, per hour, per SKU, updated as readers sync. Operators can move staff and stock during the event instead of learning what happened afterwards.
Refund and reconciliation workflow
Unspent balances, disputed transactions and lost bands run through a defined process with an audit trail, including the offline transactions that arrived late.
How a cashless deployment is built
Decide the money model first
Closed-loop wallet, voucher model or a licensed prepaid partner. This decision determines the regulatory obligations, who holds the float and how refunds work. It comes before any hardware discussion.
Encode and distribute bands
Bands are encoded and linked to tickets in advance where possible. Pre-linking at purchase removes the single largest source of gate congestion on day one.
Counter layout and staff training
Reader placement, top-up point density and staff drills. Most cashless queue problems are layout problems. We model expected transaction rates per counter and size top-up points accordingly.
Settlement, refunds and audit
Post-event reconciliation across all readers, a refund window communicated to attendees in advance, and a full transaction export for the organiser's accounts and GST filings.
What usually goes wrong
Top-up queues, not bar queues, are the classic failure. Organisers size bar readers correctly and then install six top-up points for 25,000 people. The queue simply relocates and attendees blame the technology. Online top-up before arrival, plus top-up capability at every bar, plus dedicated points at a ratio of roughly one per 800 to 1,000 attendees, is the fix. Lost bands are the second issue. A band with money on it that is dropped in a field is a customer service problem at 11 pm, so balances must be recoverable against the ticket identity, which requires pre-linking. The third is refunds. Unspent balance is the most reliable source of post-event anger, and organisers who quietly keep it generate complaints that outlast the event. Announce the refund window and the process before the gates open, in writing, and honour it. Physically, RFID read range degrades near metal counters, ice buckets and dense liquid, so reader mounting has to be tested at the actual counter, not in an office.
The regulatory dimension is where most Indian cashless projects go wrong, and it deserves plain speech. Loading value onto a credential and letting people spend it engages RBI rules on prepaid payment instruments. Depending on the structure, the organiser may need to work with a licensed PPI issuer, or structure the offering as vouchers rather than a wallet, and there are clear implications for who holds the float, how refunds must be handled, KYC thresholds and GST invoicing at each counter. We build the technology. We do not give legal advice, and we will not let a client assume the question away. If a vendor tells you a closed-loop event wallet has no regulatory dimension in India, treat that as a reason to check their answers. Separately, transaction data joined to identity is personal data under the DPDP Act, so the purpose, retention period and any sharing with sponsors need to be stated in the notice attendees actually see at purchase.
Common questions
What happens if I lose my band?
If the band was linked to a ticket or phone number at purchase, the balance is recoverable. Staff block the lost identifier, which propagates to readers within seconds when online and on reconnection when offline, and issue a replacement band carrying the remaining balance. Unlinked anonymous bands cannot be recovered, which is why we push pre-linking.
Do refunds of unspent balance actually work?
Yes, when the refund process is designed before the event rather than after. We support a defined post-event refund window with automated payout to the original payment method. The organiser must decide and publish the window, any processing fee and the cut-off date in advance.
Who holds the money, and is this regulated in India?
It is regulated. Loading and spending value engages RBI prepaid payment instrument rules, and the correct structure depends on whether you use a licensed PPI partner or a voucher model. Float custody, KYC thresholds, refund obligations and GST invoicing all follow from that choice. We build to whichever structure your legal and finance teams approve, and we raise the question at the first meeting.
Settle the money model, then the hardware
Tell us your attendance, counter count and preferred wallet structure and we will map the technical and settlement architecture.