Monday 2 November 2026Updated 06:16 IST
bharat.digital

India's digital economy, public infrastructure and security

A bharat.digital explainer

How UPI works

What happens between scanning a QR code and the money arriving, and who does what along the way.

Unified Payments Interface, or UPI, is an instant payment system built by the National Payments Corporation of India (NPCI), an organisation regulated by the Reserve Bank of India. NPCI ran a pilot with 21 member banks from 11 April 2016, and banks began putting UPI apps on app stores from 25 August 2016.

The idea is simple: any bank account, any app. You link one or more bank accounts to a UPI app, get a UPI ID (a virtual address such as name@bank), and can then pay or be paid by anyone else on UPI, whichever bank or app they use. You never need to share an account number or IFSC code.

The parties in a payment

  • The app you use, such as a bank's own app or a third party app like BHIM, PhonePe or Google Pay.
  • The payer's PSP (payment service provider), the bank that connects that app to UPI.
  • Your bank, which holds the account the money leaves.
  • NPCI's central UPI switch, which routes the request between banks.
  • The payee's PSP and bank, which receive the money.

What happens when you pay

When you scan a QR code or enter a UPI ID, your app sends the request through its PSP to NPCI. NPCI looks up which bank sits behind the payee's address and asks your bank to debit your account. Your bank checks the UPI PIN you entered, debits the money and the payee's bank credits it. Both sides get a confirmation, usually within seconds. UPI is built on top of NPCI's IMPS infrastructure, which is why it runs around the clock, including on holidays.

Why it is considered secure

Every payment needs two factors, in line with RBI rules: the mobile number registered with your bank, on the device you are using, and your UPI PIN, a 4 to 6 digit code that you set yourself. The app does not store your PIN, and your bank will never ask for it. Most UPI fraud does not break this system; it tricks people into approving a payment or a collect request themselves. If someone asks you to enter your PIN to receive money, it is a scam: you only enter a PIN to pay.

Push, pull and more

UPI supports paying someone (push), requesting money (pull, or a collect request), payments by static or dynamic QR code, and recurring mandates through AutoPay. Merchants of every size use the same rails as people sending money to friends.

How big it is

In September 2026, NPCI reported 24,068.38 million UPI transactions worth ₹29,37,396.67 crore (see Numbers).