Which of the following statements regarding RBI's tightened norms under the Payment and Settlement Systems (PSS) Act, 2007, is/are correct?

1. RBI has been empowered under Section 30 of the PSS Act to impose a penalty of up to ₹10 lakh or twice the amount involved in the contravention, whichever is higher.
2. The monetary penalty or compounding amount must be paid within 30 days from the date of receipt of the penalty order.
3. The new norms allow companies to appeal against the penalty within 90 days of the order.