UPI and digital payments in 2026: the citizen guide

Unified Payments Interface, built by the National Payments Corporation of India, moved from novelty to infrastructure in under a decade. A tea stall's QR code is a UPI terminal; a kirana's ledger is a passbook. This page is the citizen map of that rail: how to get on it, what the variants do, where it works abroad, and what the law lets you demand when a payment fails.

1. Download any UPI app — GPay, PhonePe, Paytm, BHIM, or your bank's own app.
2. Register the mobile number that is linked to your bank account.
3. Set a UPI PIN; it is different from your ATM PIN and is set through a debit-card verification the first time.
4. Send money to a mobile number, a UPI ID (a virtual payment address), a QR code, or to an account plus IFSC.

Person-to-person and most shop payments cost the user nothing. The merchant-side charges are a separate debate that has not changed what a payer pays.

UPI Lite keeps a small wallet on the device so small payments settle instantly even on flaky networks. Under the RBI's offline framework, updated in October 2024:

• Per-transaction limit: ₹1,000
• Total wallet balance: ₹5,000 (replenishable as it depletes)

Enable it inside your UPI app's settings, top it up from your bank account, and use it for tea, fares and small shops. Failed-payment disputes follow the same rails as regular UPI.

Roughly a quarter of Indian phones are still feature phones. 123Pay serves them four ways, the best known being the IVR call:

• Call 080 4516 3666 from the phone linked to your bank, and follow the voice prompts to pay.
• Other modes: missed-call pay for merchants that support it, a sound-based PAY approach, and a few apps for feature phones.
• Per-transaction limit: ₹10,000.

For an Indian traveller, UPI now works in Bhutan, Nepal, the UAE, Singapore, France, Sri Lanka, Mauritius and, more recently, Qatar — QR acceptance built by NPCI International with local partners, with Sri Lanka and Mauritius launched in February 2024. The list keeps growing; NPCI's international pages carry the current one. Payments are charged in rupees against your Indian account.

The debit lands instantly; the credit does not. The sequence that works:

1. Same day: note the transaction reference in the app, and lodge a complaint with your bank (for a PSU bank app or account, the bank's own complaint portal; for UPI-specific disputes, NPCI's dispute route through the app).
2. Fraud, not failure? Call 1930 immediately and report on cybercrime.gov.in — the first hour is when money is most recoverable. Then the UPI fraud recovery guide.
3. No resolution in 30 days, or a rejection? File free with the RBI Integrated Ombudsman at cms.rbi.org.in. Our UPI deducted-not-received action plan walks the whole path.
4. Salary credited but the balance looks wrong? That is a bank ledger question — see salary credited, balance not updated and why your salary is lower this month.

NPCI is a not-for-profit company owned by banks, not a public authority, so RTI does not apply to it. The regulated parties are:

• Public-sector banks — public authorities. An RTI to the bank's CPIO asks for the payment-failure records and action taken on your complaint.
• RBI — a public authority. RTI to RBI asks what its supervision holds, including action on your Ombudsman-filed complaint.
• Private banks and wallets — not under RTI; the Ombudsman is the lever, and its orders are binding on the institution.

Draft either application with the AI RTI Drafter, and if a reply never comes, the deemed-refusal first appeal template is ready.

• Default UPI cap: ₹1 lakh a day for most transactions (₹5 lakh for hospitals, educational institutions and certain others as notified).
• Merchant payments: up to ₹10 lakh a day to merchants.
• Recurring auto-debits: up to ₹15,000 without an OTP under the e-mandate framework.
• UPI Lite ₹1,000 per payment, ₹5,000 wallet; 123Pay ₹10,000 per payment.

Not for person-to-person or ordinary shop payments. Banks may price specific commercial services separately, and the app will show any fee before you pay.

The rail is safe; the attacks are social — fake QR labels, “collect” requests disguised as refunds, screen-share apps. Never share a UPI PIN or OTP, and remember: nobody legitimate asks you to scan a code to receive money.

Lite draws from an on-device wallet within the ₹5,000 cap, so small payments do not depend on live bank confirmation. Regular UPI debits your bank account through the full rails.

No. Any bank to any bank, instantly — that interoperability is the point.

It will usually auto-reverse within a day. If not, the complaint reference plus the action plan settles it; Ombudsman after 30 days.

You can pay Indian-account-funded QR at merchants in the live countries. It is not a foreign-currency account; charges hit your Indian account in rupees.

• NPCI UPI product statistics — July 2026: 23,658 million transactions, ₹29,87,880 crore, 741 banks live: npci.org.in/product/upi/Product-Statistics
• RBI, framework for offline digital payments — UPI Lite enhanced to ₹1,000 per transaction and ₹5,000 total (October 2024): rbi.org.in
• NPCI, UPI 123Pay product pages, including IVR 080 4516 3666: npci.org.in
• Sri Lanka and Mauritius launches, February 2024: PIB
• Cyber-fraud helpline 1930 and cybercrime.gov.in

Last reviewed: 27 August 2026. Volume and bank count from NPCI's own statistics table for July 2026; UPI Lite and 123Pay limits from the RBI offline framework and NPCI product pages; cross-border list from NPCI International coverage and the February 2024 PIB launch note. The earlier version carried a 16-billion figure, a ₹2,000 Lite wallet and a ₹500 Lite cap — all superseded.