E-commerce Law in Nepal: Registration, Consumer Protection & Compliance (2025)

Introduction

E-commerce has become central to Nepal’s marketplace: social-commerce via messaging apps, online stores, marketplaces, and direct seller pages are now routine. This article explains e-commerce law in Nepal — the statutory framework, registration and compliance obligations, consumer protection responsibilities, cross-border concerns, and practical steps for online vendors, marketplaces and foreign investors. It is written with corporate and compliance teams in mind and framed for legal clarity and operational use.

The statutory backbone: Electronic Transactions Act and the new E-commerce Act

Two statutes form the backbone of Nepal’s legal regime for digital commerce.

First, the Electronic Transactions Act, 2063 (2008) (ETA) established rules for electronic records, signatures, authentication, and evidentiary recognition of electronic documents — fundamental for any e-commerce transaction, contract formation, and secure payment flows. The ETA enables legal recognition of digital signatures, sets out certification authorities, and creates offences related to the misuse of electronic means.

More recently, the government enacted the Electronic Commerce Act (Electronic Commerce Act, 2081 / 2025) to provide a targeted regulatory framework for commercial transactions carried out online. The 2025 Act aims to systematise e-commerce registration, require disclosure by online businesses, establish grievance redressal obligations, and set compliance requirements for platforms and sellers. The law introduces new mandatory registration/registration portals for e-commerce operators and establishes penalties for non-compliance.

What this means practically: any business operating an online store, marketplace, or channel that conducts sales within Nepal must consider obligations under both the ETA (for authentication, electronic contracts and cyber-offences) and the Electronic Commerce Act (for registration, disclosures, and consumer protections).

Scope: who and what the law covers

The Electronic Commerce Act (2025) has broad language covering any business that supplies goods or services through electronic means, including:

• E-commerce websites (owned, hosted, or operated from Nepal);
• Social-commerce pages and stores selling goods to Nepalese consumers;
• Online marketplaces connecting buyers and sellers; and
• Digital services (online subscriptions, digital content, SaaS) are delivered to Nepal.

There are limited exemptions (for very small micro-enterprises or cottage industries in certain categories), but the recent law dramatically narrows the “informal” space and brings many previously unregulated sellers into the regulatory net.

Mandatory registration and disclosure requirements

A core feature of the 2025 E-commerce Act is mandatory registration of e-commerce operators on the official portal maintained by the relevant authority (the Department of Commerce / Department of Commerce, Supplies and Consumer Protection or the ministry designated by the statute). The Act requires online sellers and marketplaces to:

• Register on the e-commerce portal and obtain an e-commerce registration number.
• Disclose corporate data on the platform (business name, physical address, PAN/VAT registration, contact details);
• Provide clear product descriptions, prices, tax treatment and applicable return/refund policies; and
• Maintain an accessible grievance redressal mechanism and complaint log.

Operating without registration is explicitly punishable under the Act and may invite fines, takedown orders, or prosecution. The Act’s stated purpose includes increasing transparency and protecting consumers while integrating online transactions into the tax and regulatory framework.

Consumer protection & returns — how existing law applies to e-commerce

The Consumer Protection Act (2018/2019) (amendments consolidated into 2075/2076) already provides robust protections for buyers: rights to safe and accurate products, labelling, pricing transparency, returns/refunds, and remedies for defective goods. The E-commerce Act imports and specifies how these consumer protections operate in online contexts — for example, mandatory display of return policies, explicit disclosure of seller identity, and a statutory timeline for resolving complaints.

Grievance redressal: The 2025 Act prescribes that e-commerce operators maintain a grievance mechanism — complaints must be acknowledged and resolved within set timelines (for example, 15 working days in many draft provisions). Vendors must log complaints and show proof of resolution to enforcement authorities when required.

Liability allocation: marketplaces vs sellers

A perennial legal question: who is liable for defective goods or illegal listings — the marketplace or the third-party seller? The 2025 Act seeks to balance responsibilities:

• Marketplaces remain responsible for due diligence, verifying important seller information, and removing clearly illegal listings once notified.
• Sellers remain primarily responsible for product quality, tax compliance, and contractual performance to buyers;
• For certain consumer harms, joint or strict liability can be imposed on marketplaces that negligently fail to remove unlawful content or fraudulent sellers.

Practically, this means marketplaces should have robust onboarding, KYC (Know Your Customer), verification procedures and a takedown and escrow policy for high-risk transactions.

Data protection, privacy and cybersecurity intersection

Although Nepal is still developing a standalone data protection statute, the Electronic Transactions Act and related cyber laws govern unauthorised access, data tampering and cyber offences. E-commerce businesses must protect customer data, implement secure payment flows and follow good practice on data retention and deletion. The 2025 E-commerce Act also touches on data-handling obligations for e-commerce businesses and may direct rule-making for data retention and cross-border flows.

Practical compliance steps: adopt a privacy policy, implement HTTPS and TLS, secure customer credentials, maintain access logs, and have an incident response plan that maps to reporting requirements in the ETA and any sectoral rules.

Tax and accounting compliance for online sellers

Online sellers and marketplaces are within the ambit of tax authorities. Key obligations:

• VAT/PAN registration where thresholds are met;
• Accurate tax invoices and e-invoicing if and when mandated;
• Withholding tax obligations on payments to certain suppliers; and
• Reporting of cross-border receipts and repatriation for foreign sellers.

The Electronic Commerce Act emphasises formalisation of online business into the tax system — expect guidance from the Inland Revenue Department and the Nepal Rastra Bank on payment flows and foreign currency reporting.

Payment systems, payment intermediaries and escrow

E-commerce requires a secure, regulated payment infrastructure. Payment gateways and mobile wallets must comply with Nepal Rastra Bank (NRB) rules. The E-commerce Act suggests frameworks for licensed payment service providers and potential escrow models for high-value transactions. For marketplaces, consider escrow arrangements or staged release on confirmation of delivery to reduce dispute volumes.

Cross-border sales and foreign operators

If a seller outside Nepal supplies goods or services to Nepalese consumers, Nepal’s E-commerce Act asserts jurisdiction where the consumer is in Nepal. This has implications:

• Foreign sellers may be required to register or appoint a local agent/liaison;
• Tax obligations (withholding, VAT collection) may be enforced on payment gateways and platforms; and
• Enforcement against foreign entities will often proceed via intermediary takedowns, blocking orders or requests to payment processors.

The recent government actions requiring platform registration are evidence of a stronger extraterritorial enforcement appetite — non-compliant platforms have been subject to blocking or restrictive measures.

Advertising, pricing and unfair trade practices

E-commerce operators must ensure truthful advertising, transparent pricing (including taxes and delivery fees), and adherence to consumer protection standards. The Consumer Protection Act prohibits false or misleading claims; the E-commerce Act extends this to online displays, sponsored posts, and social-commerce. Maintain audit trails of price display, promotions, and influencer disclosures.

Dispute resolution and ADR mechanisms

The law encourages alternative dispute resolution (ADR), mediation, and administrative complaint handling for faster consumer redress. The E-commerce Act encourages or mandates online ADR portals, and parties can still access civil courts or arbitration if the dispute is commercial and the parties agreed to arbitration clauses. For consumer claims, administrative remedies under the Consumer Protection regime may be quicker and cost-effective.

Enforcement & penalties

Penalties in the E-commerce Act cover: operating without registration, failure to maintain grievance mechanisms, misrepresentation of goods, failure to disclose taxes, and certain cyber offences (overlap with the ETA). Penalties vary (fines, corrective notices, platform suspension), and persistent or severe non-compliance can attract criminal or administrative sanctions.

Practical compliance checklist for e-commerce operators

1. Register on the official e-commerce portal (if required) and obtain the registration number.
2. Display full business information (name, address, PAN/VAT, contact, return policy).
3. Implement secure payments and comply with NRB rules for payment service providers.
4. Adopt a privacy policy and data security measures consistent with ETA and best practice.
5. Maintain grievance redressal procedure and complaints log; resolve within statutory timelines.
6. Ensure accurate tax invoices, VAT/PAN compliance and file returns on time.
7. Onboard marketplace sellers with KYC and product verification; maintain takedown policy.
8. Train staff on digital evidence handling and documentation for possible audits and enforcement.

Risks and enforcement trends — what to watch

• Platform registration and local presence: Government focus on registration and local liaisons — non-compliant platforms may be blocked or subject to penalties.
• Consumer protection enforcement: Expect stricter enforcement of return/refund obligations and labelling mistakes.
• Data protection movement: Watch for a future dedicated data protection law that may codify cross-border data flows and privacy rights.

A lawyer’s practical drafting tips for e-commerce contracts

• Terms of Service & Seller Agreements: Define clear dispute resolution, liability caps, KYC obligations, and tax responsibilities.
• Return & Refund Policy: Put a clear timeframe and condition exceptions; align with the Consumer Protection Act.
• Privacy & Cookies: Be explicit about data collection, processing, retention; map processors and sub-processors.
• Escrow & Payment Terms: Include dispute holdbacks, chargeback handling and force majeure clauses adapted for digital commerce.
• IP & Counterfeit Policy: Define notice-and-takedown and repeat infringer rules.

Conclusion

E-commerce law in Nepal is maturing rapidly: the Electronic Transactions Act provides the technical legal foundation and the new Electronic Commerce Act (2025) imposes specific obligations on online businesses for registration, disclosure and consumer redress. The Consumer Protection Act continues to be the chief statute protecting buyers. For businesses and foreign investors, compliance is now both a legal duty and a market differentiator — credibility, transparent policies, and robust grievance resolution are competitive advantages.

---

FAQs

Q1: Do I need to register my Facebook or Instagram store under the E-commerce Act?
If you sell goods or services to Nepalese consumers through social channels and meet the thresholds set out in the Electronic Commerce Act, you are required to register and disclose mandated information. The law specifically targets online sellers regardless of whether they use websites or social platforms.

Q2: Are foreign e-commerce platforms subject to Nepalese law?
Yes. The E-commerce Act asserts jurisdiction over transactions where the consumer is in Nepal; this can lead to registration obligations or enforcement via intermediaries. Enforcement against foreign platforms will depend on cooperation with payment processors or on taking network-level actions where necessary.

Q3: What is the difference between the Electronic Transactions Act and the Electronic Commerce Act?
The Electronic Transactions Act (2008) focuses on authentication, digital signatures, and cyber offences; the Electronic Commerce Act (2025) specifically regulates commercial activities online — registration of e-commerce businesses, consumer protections in online contexts, and disclosure obligations.

Q4: How fast must I resolve customer complaints?
The E-commerce Act prescribes timelines (for example, acknowledgement and resolution within a specific number of days — many provisions point to 15 days for resolution). Check the implementing rules for exact timelines.

Q5: What penalties apply for non-compliance?
Penalties range from fines and corrective notices to potential blocking or suspension of platforms. For cyber offences, ETA penalties include fines and imprisonment in serious cases. Always consult the statute for exact penalty clauses.