A MaxRewards-style app for India: linking credit cards, auto-activating issuer offers, and recommending the best card per transaction.

The core feature does not exist here

MaxRewards' entire value proposition is auto-activation: it connects to your card account and activates targeted merchant offers from Amex, Chase, Capital One, Bank of America and Citi every time you sync. In the US, dozens of offers sit behind per-offer 'activate' buttons that nobody clicks. That is the inefficiency the product monetises.

India has no equivalent layer. Indian issuer offers come in two shapes, and neither is automatable by a third party:

1. Portal-routed. HDFC SmartBuy, Axis Grab Deals, ICICI iShop and Amex Reward Multiplier require the user to reach the merchant through the bank's own portal. Axis states the offer is valid only when you arrive via the Grab Deals link, and for most brands only on the merchant's website — not their app, and not any third-party platform. There is no button to press on the user's behalf. There is a tunnel the user must walk through.

1. Merchant-funded instant discounts. '10% off with HDFC cards on Amazon' applies automatically at checkout. There is nothing to activate, so there is nothing to automate.

The founder-facing version of this: you cannot name ten Indian offers a third party could activate for a user. If you can, T1 and T2 in the test plan will tell you, and everything in this report should be re-run.

What is left after you delete it

An advice app. Which is precisely what Cardback was in 2013, what free community content (Technofino, CardInsider, DesiDime, r/CreditCardsIndia) gives away today, and what a general-purpose LLM now answers for free.

There is no legal write path to an Indian card account

MaxRewards stores credentials and acts on the account. That model has no Indian equivalent.

• RBI's Account Aggregator framework explicitly bars platforms from requesting or storing customer credentials — passwords, PINs, private keys, bank account or card details used to authenticate to financial information providers.
• The AA Directions were written specifically to eliminate scraping, permitting only direct institution-to-institution access.
• NBFC-AAs are licensed directly by RBI and cannot operate any business other than consent management.

Critically, AA is read-only. It is a consent-scoped data pipe. It cannot activate an offer, enrol a bonus category, or take any action on an account. There is no write primitive in the Indian stack.

The routes that do exist, and their ceilings

SMS parsing is the India-native workaround — it is what SaveSage uses. But it structurally excludes iOS, and iOS is over-represented among exactly the premium multi-card cohort with the highest LTV. Your best customers are the ones you can serve worst.

DPDP Act 2023

Consent, purpose limitation and breach liability obligations apply to any handling of financial data. Not a blocker, but a real compliance cost on a Rs 480/user/year business.

The counterparty has already acted — this is not a hypothetical

In September 2024, HDFC Bank — India's largest issuer — made two changes that read like a direct answer to this business model:

• Education payments made through third-party apps like CRED and CheQ no longer earn reward points, while payments made directly through college or school websites continue to earn.
• A 1% fee on rental transactions made via third-party apps such as CRED, PayTM and CheQ, capped at Rs 3,000 per transaction.

The largest issuer in the country selectively zeroed out rewards specifically when a third-party app sits in the flow. That is the entire thesis being pre-emptively answered by the party that holds every card.

The value pool is being actively drained

You would be selling a harvester for a field the landowner is paving over — and who can see exactly which tenants brought one.

Separate the three parties

• User: the cardholder.
• Payer: the cardholder (subscription) or the issuer (affiliate).
• Decider: the issuer — on whether an offer exists, whether it can be claimed outside their app, and whether third-party-routed spend earns anything at all.

The decider's economic interest is directly opposed to what you are selling.

The arithmetic, shown

Market, disciplined:

• 119.44M credit cards outstanding (RBI, April 2026)
• ~75M unique cardholders (July 2025) → ~1.6 cards per holder
• Average spend per card: Rs 17,060/month (Jan 2026). This is a mean and the distribution is severely right-skewed — the median is almost certainly under Rs 10,000/month. No median was sourceable, so every figure below overstates the market.
• Qualifying segment (3+ cards, meaningful spend, ~15% of holders): ~11M people
• Value at stake per qualifying user: Rs 2L annual spend x (5% optimised − 2% baseline) = ~Rs 6,000/yr
• Consumers pay 10-20% of delivered value → honest WTP ceiling Rs 600-1,200/yr
• SAM: 11M x Rs 600 = Rs 660 Cr. A second mover reaching 1-3% = Rs 7-20 Cr.

Sanity check against the live incumbent: SaveSage's $1.1M ARR ÷ 200,000 users = ~Rs 480/user/year blended, and that includes bill-payment revenue, not just subscriptions. The model holds.

LTV and the CAC wall

Name a channel that delivers a paying Indian fintech customer for Rs 530. There isn't one. Not Meta, not Google, not influencers. Only organic content, community, or television — and SaveSage already took the television slot via Shark Tank India Season 5.

The scaling mismatch is the quiet killer

Costs scale with cards covered — a credible rules database for 500+ Indian cards, revised monthly, is 1-2 FTE analysts plus engineering, roughly Rs 40-60 lakh/yr, fixed, before a single rupee of revenue.

Revenue scales with paying conversions.

Halve conversion from 5% to 2.5% and the business does not halve — it falls below the fixed cost floor entirely.

You need roughly 500K engaged users before the rules database pays for itself. SaveSage has 200K after two years with national TV exposure.

The CPA gap

Every global survivor converged on credit card lead generation. India pays 4-6x less for it: Rs 500-3,000 per approved application here, versus $50-200+ in the US. The monetisation model everyone else escaped to is structurally weaker in your market.

Everyone with distribution left this layer for card issuance

This is the loudest signal in the report, and it was invisible until I stopped searching for MaxRewards analogues and started searching for what Indian card apps actually became.

Nobody in India stayed a pure optimisation layer. Every funded player with distribution walked to the other side of the table and started issuing, because that is where the economics are.

The same convergence, globally

• Wallaby → acquired by Bankrate, folded into CreditCards.com. Affiliate.
• MaxRewards itself → its homepage is now a card marketplace with structured data on 900+ cards, a value calculator and an editorial ranking. Affiliate.
• Kudos → raised $39.7M, partnered with CardRatings and Red Ventures for card coverage, pushes insurance quote comparison. Affiliate plus leads.
• CardPointers → subscription, but a small indie business, not a venture outcome.

The subscription is a retention wrapper. The revenue is affiliate. And in India, affiliate pays 4-6x less.

The kill-shot

You spend nine months building the card-rules database, because it is the part you control. You launch to 3,000 users from Twitter and Reddit. Retention is fine — people open it before big purchases — but conversion to Rs 999/yr sits at 2%, because CRED does 70% of the job free and the remaining 30% is answerable by asking an LLM. You raise a small angel round on the SaveSage comp. Month 14, HDFC or Axis publishes a T&C update excluding third-party-routed offer claims, and your one hard automation feature dies in a support-ticket avalanche. Month 16, CRED ships 'best card for this merchant' as a retention feature. Month 18 you are at Rs 18 lakh ARR with Rs 4 lakh/month burn on database maintenance, and the only inbound is a bank asking whether you would white-label the engine for Rs 30 lakh a year. You take it. Good outcome for a services business, dead one for a startup.

The eight strongest failure modes, ranked

1. The core mechanic does not exist in India — FATAL. Indicator: you cannot name ten activatable Indian offers.
2. No legal write path to a card account — FATAL. Indicator: your first bank conversation ends at 'we don't offer that.'
3. The counterparty has already cut off third-party apps — FATAL. Indicator: it already happened, Sept 2024.
4. CRED is free, huge, and loses money on purpose — FATAL to consumer subscription at scale. Indicator: CRED ships a best-card feature.
5. Every Indian player with distribution left for issuance — FATAL to the standalone thesis. Indicator: already happened.
6. Allowable CAC (Rs 530) is below every paid channel — SURVIVABLE, expensive. Indicator: first Rs 50,000 of ad spend yields under 20 subscribers.
7. The value pool is actively shrinking — SURVIVABLE. Indicator: your own 'value delivered' metric declines quarter over quarter.
8. iOS is structurally excluded from SMS parsing — SURVIVABLE, costly. Your highest-LTV cohort is the one you serve worst.

The one assumption most likely false

'Indian credit card offers are structured such that a third party can capture value on the user's behalf.'

They are not. They are portal-routed or auto-applied at checkout. Downstream of this falling: the automation disappears, you become an advice app, and advice has no defensible ARPU.

Why hasn't anyone done this — the uncomfortable version

They have. Cardback did it in 2013 and died. SaveSage is doing it now at roughly Rs 9 Cr revenue with 45 employees. The smallness is the datum.

And the uncomfortable half: the value here is pure transfer. You move rupees from the issuer's marketing budget to the consumer's pocket, creating nothing. The issuer plays a repeat game with a rules engine and a compliance team; the consumer plays once, casually. In a transfer game against an organised repeat player, the organised player adjusts the rules. HDFC adjusted them in September 2024.

The bear case commits a category error: it evaluates a MaxRewards clone. Nobody has to build one.

Complexity is a moat, not an obstacle. Indian rewards are harder than American ones. A point can be worth Rs 1 via SmartBuy travel and Rs 0.30 as cashback. Rules change monthly across 500+ cards, with caps, MCC exclusions and category carve-outs. That is precisely why an LLM answers this badly and why community blogs go stale within weeks. Structured, current, per-card redemption data is a genuinely hard artefact — and it compounds: every month you maintain it, the switching cost for a copycat grows by a month.

Demand is proven, not speculative. SaveSage went 0 → 200,000 users → $1.1M ARR in under a year from an October 2024 launch. That question is settled.

Cardback's death does not transfer. It failed into a ~20M-card market with no smartphone-first cohort, no UPI, no premium card segment and no SMS-parsing infrastructure. It peaked at 20,000 users. The market today is 119 million cards growing 8% YoY, with 0.93 million issued in a single month. Not the same market.

CRED is weaker here than it looks. Over 90% of CRED's revenue is lending, payments and insurance. Rewards optimisation is strategically inconvenient for them — it steers users toward other banks' cards and away from CRED's own monetised flows. Incumbents do not ship features that cannibalise their P&L. That is the gap.

The convergence to issuance is an opportunity, not a warning. CheQ went to AU; Kiwi to AU and Yes. Those partnerships were available to small, unfunded teams with a user base and data. Co-branded economics — interchange share plus annual fee share — are 10-50x subscription ARPU.

The shape I could not kill

Sell the rewards-intelligence layer to issuers, not consumers.

Every bank in India is fighting for share — SBI Cards, Federal and IDFC FIRST gaining while large private banks lose momentum — and none of them can tell a prospect 'here is what you would earn on our card versus what you earn today.'

Flip the payer to the issuer and all four primary attacks lose their target:

I could not kill the B2B shape. Every attack in the red team is an attack on the consumer subscription.

If you build anything, build this

Which customer: Card issuers and networks. Not consumers.

Which monetisation: Annual licence for a rewards-intelligence and offer-normalisation engine — 'show our prospect what they would earn on our card versus what they earn today' — plus churn and wallet-share analytics.

What to build first: The structured rules database for the top 60 Indian cards, sold as a data feed with an API. No consumer app at all.

What to DELETE:

• The consumer subscription
• The mobile app
• The auto-activation feature
• The word 'MaxRewards' from the pitch

Decision rule on the tests

• If T1 or T2 fails → stop. The MaxRewards thesis is dead regardless of how T3-T5 land.
• If T1 and T2 pass but T4 fails and T3 passes → build the B2B feed.
• If T1, T2 and T3 all fail → this category is closed to you, and the honest move is to spend the nine months on something else.

Note on what the tests deliberately avoid

Founders reliably test what they control — 'can we build it' — rather than what decides the outcome. Three of these five require no code at all. T1 is eight phone calls. T2 is a spreadsheet. T3 is fifteen cold emails. If you find yourself building the rules database before running T1, that is the failure mode, not the plan.

Gaps you should close before acting on any of this

The largest gap: no verbatim voice-of-customer was retrieved. No Reddit, Technofino or Quora threads surfaced through search. The pain in this report is attested only by a vendor-run survey and one Bankbazaar executive quote. Read 50 Technofino and r/CreditCardsIndia threads yourself before acting.

Numbers I could not verify:

• The 'Rs 10,000 crore of points expire annually' figure. Founder quote, no methodology, impressively round. Treat as marketing.
• The '70% don't optimise' statistic. Survey conducted by SaveSage — the company selling the solution.
• Median (as opposed to mean) Indian cardholder spend. All segment arithmetic here uses a right-skewed mean and therefore overstates the market.
• SaveSage's paid-subscriber count, churn, retention, and the split between subscription and bill-payment revenue. The $1.1M ARR figure appears in three outlets but all trace to one press release — single-source in substance.

Open questions:

• Cardback's actual cause of death. No post-mortem exists. I inferred it structurally, which is weaker evidence than it reads as.
• Whether Amex India requires per-offer enrolment the way Amex US does. The India Amex Offers page describes merchant-level terms but not an activation mechanic. This is the one plausible exception to the 'no activatable layer' finding, and T2 exists to settle it.
• Whether any Indian issuer has ever granted a third party programmatic offer-activation access. Absence of evidence, not evidence of absence. T1 exists to settle it.
• Whether RBI's AA roadmap adds any write-capable primitive. I found none, but the framework is actively evolving.
• CheQ's and Kiwi's post-pivot performance. If their card launches are failing, the 'converge to issuance' conclusion weakens considerably.