UPI (Unified Payments Interface)

What Is UPI?

The Unified Payments Interface (UPI) is an instant mobile payment system developed by the National Payments Corporation of India (NPCI) and launched in 2016. It allows users to link their bank accounts to mobile apps and transfer money in real time using a simple identifier called a Virtual Payment Address (VPA), a phone number, or a QR code. UPI runs as an open API layer on top of India's existing Immediate Payment Service (IMPS) infrastructure and is regulated by the Reserve Bank of India (RBI).

By transaction volume, UPI is the most successful real-time payment system ever built. In 2025, it processed 228.3 billion transactions for the year, surpassing Visa's global digital payment volume according to the International Monetary Fund. December 2025 alone saw 21.63 billion transactions worth approximately ₹28 lakh crore (around $335 billion USD). The system handles roughly 7,500 transactions per second during peak periods and is used by over 400 million people in India.

How It Works

UPI operates on a four-layer architecture designed for interoperability, security, and scale:

Architecture Layers

1. Infrastructure layer: NPCI operates a centralized switch that validates, routes, and settles all transactions between participating banks and Payment Service Providers (PSPs).
2. Bank layer: as of mid-2025, 675 banks participate in the UPI ecosystem, providing account services and maintaining customer relationships.
3. Application layer: third-party apps (TPAPs) like PhonePe, Google Pay, and Paytm provide the user interface. These apps must integrate through a registered PSP bank and cannot connect directly to NPCI.
4. User layer: end users interact through apps using Virtual Payment Addresses (VPAs), QR codes, or phone numbers to initiate payments.

Transaction Flow

A typical UPI payment follows this sequence:

1. The sender opens their UPI app and enters the recipient's VPA or scans a QR code
2. The app forwards the payment request to the sender's PSP bank
3. The PSP bank routes the request to the NPCI switch
4. NPCI validates the request and forwards it to the sender's issuing bank
5. The issuing bank verifies the account balance and authenticates via UPI PIN
6. Upon authorization, the issuing bank debits the sender's account
7. NPCI routes a credit instruction to the beneficiary's bank
8. The beneficiary bank credits the recipient, and both parties receive confirmation

If the recipient's bank fails to acknowledge, NPCI instructs the sender's bank to reverse the transaction automatically. All state changes are handled atomically or rolled back to prevent fund loss: a property similar to transaction finality in blockchain systems.

Security Model

UPI uses two-factor authentication for every transaction. The first factor is device binding (the registered mobile device), and the second is the UPI PIN set by the user. Transactions are encrypted using TLS, AES, and PKI protocols. Importantly, neither the sender nor recipient needs to share bank account numbers: the VPA acts as an abstraction layer, similar to how a Lightning invoice abstracts away channel details.

// Simplified UPI transaction request structure
{
  "payerVpa": "user@bankpsp",
  "payeeVpa": "merchant@anotherpsp",
  "amount": "500.00",
  "currency": "INR",
  "transactionNote": "Coffee payment",
  "transactionId": "TXN20260310A1B2C3",
  "transactionTimestamp": "2026-03-10T14:30:00+05:30"
}

// Response from NPCI switch
{
  "transactionId": "TXN20260310A1B2C3",
  "status": "SUCCESS",
  "responseCode": "00",
  "approvalNumber": "123456",
  "rrn": "601234567890"  // Retrieval Reference Number
}

The Zero-Cost Model

One of UPI's most distinctive features is its zero-cost model for consumers and merchants. Since January 2020, the Indian government has legally eliminated the Merchant Discount Rate (MDR) on all UPI and RuPay transactions through amendments to the Payments and Settlement Systems Act. Neither senders nor merchants pay any transaction fees.

To compensate payment ecosystem participants (banks, PSPs, and app providers) for their processing costs, the government operates an annual incentive scheme. For FY2026-27, the budget allocation stands at ₹2,000 crore (approximately $240 million). The incentive is paid to acquiring banks at a rate of 0.15% per transaction value for person-to-merchant (P2M) transactions up to ₹2,000.

This subsidy model has fueled massive adoption but also creates a sustainability tension. Industry stakeholders estimate actual processing costs at roughly 0.25% of transaction value, meaning the government subsidy covers only a fraction of expenses. The Payments Council of India has lobbied for reintroducing a modest MDR of 0.3% on higher-value transactions, arguing that the zero-fee mandate constrains innovation and infrastructure investment.

Why UPI Succeeded

Several design decisions set UPI apart from real-time payment systems in other countries:

• Interoperability as a protocol requirement: unlike closed-loop systems where users must be on the same app, UPI mandates that any app works with any bank and any other app. This mirrors the interoperability that open payment protocols aim to achieve.
• Open API architecture: NPCI allows third-party developers to build payment apps on top of UPI infrastructure, opening the market to non-bank innovators. To manage concentration risk, NPCI caps any single third-party app at 30% of total transaction volume.
• Mobile-first design: UPI was built for smartphones from day one, with QR code payments as a core feature rather than an afterthought.
• Government backing and regulation: the Reserve Bank of India provided a clear regulatory framework, and the zero-MDR policy removed adoption friction for merchants.
• Identity integration: linking to India's Aadhaar identity system simplified KYC onboarding and reduced fraud, enabling faster account creation.

The result is a system where PhonePe (48.3% market share), Google Pay (37.0%), and Paytm (7.8%) collectively serve hundreds of millions of users, yet the underlying protocol ensures no single app creates a walled garden.

International Expansion

Through NPCI International Payments Limited (NIPL), UPI has expanded beyond India. As of early 2026, UPI merchant payments are accepted in Bhutan, Nepal, Singapore, Sri Lanka, Mauritius, UAE, France, Cyprus, Qatar, Oman, and Malaysia. The UPI-PayNow linkage between India and Singapore, launched in 2023, represents a bilateral model where two countries' real-time payment systems are connected for cross-border transfers.

Japan is set to begin a UPI trial implementation in April 2026 following an agreement between NIPL and NTT Data. Israel, Kenya, Rwanda, and several other countries are in various stages of negotiation. NPCI's stated goal is to expand UPI to 20 nations by FY2028-29. The broader Project Nexus initiative under the Bank for International Settlements (BIS) aims to connect instant payment systems of India, Malaysia, the Philippines, Singapore, and Thailand into a multilateral network.

Comparing UPI with Other Payment Systems

Lessons for Crypto Payment Adoption

UPI's trajectory from zero to 20 billion monthly transactions in under a decade offers several lessons for crypto payment systems, including Bitcoin Layer 2 networks:

• Simplicity wins over technical sophistication: UPI succeeded not because of novel cryptography but because scanning a QR code is easier than carrying cash. Crypto wallets must match this simplicity to reach mainstream users. Projects like Spark focus on abstracting away blockchain complexity to deliver UPI-level user experiences.
• Interoperability drives network effects: UPI's open protocol means every new app strengthens the entire ecosystem. Crypto payment networks benefit from similar openness, where any wallet can interact with any merchant through shared standards like BOLT12 offers.
• Near-zero fees are table stakes: UPI proved that consumers and small merchants will not tolerate transaction fees for everyday payments. Bitcoin Layer 2 solutions must achieve comparable fee structures to compete for daily payment use cases.
• Merchant network effects matter as much as user adoption: UPI is accepted at millions of shops, street vendors, and online merchants. Without a comparable acceptance network, even technically superior payment systems remain niche.
• Centralization has tradeoffs: UPI's centralized architecture enables regulatory compliance and rapid iteration but also creates single points of failure. In April 2025, UPI experienced its largest outage in three years, lasting over five hours. Decentralized systems like Bitcoin's Lightning Network avoid this risk but face their own challenges around liquidity and routing.

Where Crypto Complements UPI

Despite UPI's domestic success, several areas remain where crypto payment infrastructure offers advantages:

• Cross-border payments: UPI's international expansion requires bilateral agreements with each country. Crypto networks are borderless by default, enabling dollar-denominated payments anywhere without government-to-government negotiations.
• Programmable money: UPI supports basic mandates and autopay, but crypto enables sophisticated conditional payments through HTLCs, hodl invoices, and smart contracts.
• Self-custody: UPI transactions always flow through banks. Crypto payments can be fully self-custodial, giving users direct control of their funds without intermediary risk.
• Censorship resistance: centralized systems can freeze accounts or block transactions. Decentralized payment networks provide permissionless access, which matters in regions with unstable financial institutions.

Risks and Considerations

Sustainability of the Zero-Fee Model

UPI's zero-MDR policy is funded by government subsidies that cover only a fraction of processing costs. If subsidies are reduced or eliminated, the ecosystem faces pressure to introduce fees, which could slow adoption among the small merchants and street vendors who currently drive volume.

Concentration Risk

Despite the open protocol, the top two apps (PhonePe and Google Pay) control over 85% of UPI transactions. NPCI's 30% volume cap per app has not been enforced strictly, raising concerns about market concentration and the influence of foreign-owned platforms on India's payment infrastructure.

Fraud and Security

UPI's scale has attracted increasingly sophisticated fraud. In October 2025, NPCI banned peer-to-peer collect requests (where one user requests payment from another) due to rising fraud cases. New rules introduced in August 2025 require displaying the payee's registered name before confirming transfers, adding friction but reducing social engineering attacks.

Centralized Points of Failure

As a centralized system, UPI is subject to outages that affect hundreds of millions of users simultaneously. The April 2025 outage was traced to transaction status check API flooding, highlighting how architectural decisions can create systemic risk at scale. Decentralized alternatives like Bitcoin's Layer 2 networks distribute this risk across thousands of independent nodes.

This glossary entry is for informational purposes only and does not constitute financial or investment advice. Always do your own research before using any protocol or technology.