How UPI works: the full picture and the rules of paying safely

From the vegetable seller to the big showroom, most payments in India today are made by scanning a QR code with a phone. All this has been made possible by UPI, the "Unified Payments Interface". But behind the scenes, how does UPI work, and how can you use it safely? Here is the full picture in simple words.

UPI at a glance

The basics of UPI

• UPI ID: a simple address for your bank account, such as "name@bank". You do not need to share your account number and IFSC.
• UPI PIN: a secret 4- or 6-digit number that approves sending money. You set it yourself using your debit card.
• One app, many banks: you can link several bank accounts in one UPI app.

Behind the scenes: how does the money move?

When you send someone money, your UPI app sends the request to your bank. Your bank checks the PIN, takes the money from your account and sends a message to NPCI's "switch". NPCI informs the other person's bank, which credits the money to their account. The whole process usually takes just a few seconds. Note that the money never sits in the app — it goes straight from one bank account to another.

Did you know? UPI is among the largest real-time payment systems in the world. In 2025 more than 20 billion transactions were recorded on UPI in a single month. Payments by UPI have also been linked up in countries such as Singapore, the UAE, Nepal, Bhutan, Mauritius, Sri Lanka and France.

Special forms of UPI

• UPI Lite: for small payments, without entering the PIN every time.
• UPI 123PAY: launched in 2022 so that UPI payments can be made even from simple (feature) phones without the internet.
• QR codes: scan the shopkeeper's QR and pay at once.
• RuPay credit cards: RuPay credit cards can also be linked to UPI for payments.

UPI is part of India's digital infrastructure — read Digital India: Aadhaar, UPI and DigiLocker. The network all this runs on: The history of the internet.

How to avoid UPI fraud

• Never a PIN to receive money: the UPI PIN is entered only to send money. If someone says "enter your PIN to receive money", it is a fraud.
• QR codes are only for paying: you never need to scan a QR code to receive money.
• Check the name: always look at the payee's name shown on screen before paying.
• Keep your PIN and OTP secret: no bank, police officer or company will ever ask for your PIN or OTP.
• Beware of fake customer care: do not trust numbers found on the internet; contact only through the app or the bank's official website.
• Do not install screen-sharing apps: never download such apps because a stranger asks you to.
• If you are cheated, act at once: call the helpline 1930, complain at cybercrime.gov.in and inform your bank.

More articles: Science · Economy questions.