DPI Weekly Deep Dive — UPI Record & New Rules | Week of April 13-19, 2026

Executive Summary

India’s Unified Payments Interface (UPI) achieved an unprecedented milestone in March 2026, processing 22.64 billion transactions valued at ₹29.53 lakh crore—the highest monthly volume and value in the system’s decade-long history. This landmark achievement, representing 24% year-on-year growth in volume and 19% in value, underscores UPI’s position as the backbone of India’s digital payments ecosystem and the world’s largest real-time payment platform. ^{1 2}

Simultaneously, NPCI implemented significant regulatory changes effective April 1, 2026, introducing category-based transaction limits up to ₹5 lakh for specific use cases, mandatory two-factor authentication, automatic deactivation of inactive UPI IDs after one year, and real-time fraud alerts. ^{3 4} These updates represent a maturation of the UPI ecosystem, balancing convenience with security as the platform handles over 730 million daily transactions.

The week’s developments also highlighted UPI’s international expansion—with the system now live in eight countries following the PayU partnership to bring UPI to Central Asia—and Kenya’s adoption of India’s DPI stack for governance modernization. ⁵ Meanwhile, the Open Network for Digital Commerce (ONDC) continued to face governance scrutiny, creating a stark contrast between the smooth scaling of payments infrastructure and the challenges in commerce platform development. ⁶

This deep dive analyzes the record-breaking growth, the new regulatory framework, and what these developments mean for India’s digital public infrastructure trajectory.

The Story in Depth

Context: UPI’s Decade of Transformation

Launched on April 11, 2016, by the National Payments Corporation of India (NPCI), UPI began with a modest 17.86 million transactions worth ₹6,952 crore in fiscal year 2017. Over nine years, the platform has transformed from a novel interbank transfer system into a utility that processes approximately 85% of India’s digital transactions and nearly 50% of global real-time digital payments. ⁷

The journey reflects deliberate public digital infrastructure design: zero MDR (merchant discount rate) for consumers, open API architecture enabling any regulated entity to build on the platform, and tight integration with Aadhaar for identity verification. By March 2026, UPI had processed 241.6 billion transactions across the fiscal year, with total value reaching ₹314.23 trillion—a 30% and 21% increase respectively over the previous fiscal year. ¹

What makes March 2026 particularly significant is not just the absolute numbers, but the composition of growth. Tier 2 and Tier 3 cities drove substantial adoption, with quick commerce and small merchant payments contributing significantly to the volume. The platform has moved beyond early adopters in metropolitan areas to become a nationwide utility.

What Happened This Week: Record-Breaking March and Regulatory Overhaul

March 2026 Record Performance:

The Department of Financial Services confirmed UPI’s March 2026 performance showed record metrics across all dimensions: ^{1 2}

• Volume: 22.64 billion transactions (up 11% month-on-month from February’s 20.39 billion)
• Value: ₹29.53 lakh crore (up 10% month-on-month)
• Daily Average: ~730 million transactions, ~₹95,243 crore daily
• Year-on-Year Growth: 24% volume, 19% value

Market Distribution: PhonePe maintained leadership with approximately 45.5% of transaction volume, followed by Google Pay at around 33% and Paytm at 7-8%. The 30% market share cap on third-party UPI apps, originally scheduled to expire, has been extended through December 31, 2026, to promote competition. ⁴

April 2026 Regulatory Changes:

NPCI introduced several operational enhancements effective April 1, 2026: ^{3 4}

1. Category-Based Transaction Limits: While the standard UPI limit remains at ₹1 lakh per transaction, specific categories now permit up to ₹5 lakh per transaction:

   • Tax payments (income tax, GST, property tax)
   • Hospital and medical payments
   • Educational institution fees
   • Insurance premiums
   • IPO applications

2. Inactive UPI ID Deactivation: UPI IDs unused for more than one year will be automatically deactivated. This security measure addresses fraud risks from recycled mobile numbers and dormant accounts. Reactivation requires mobile number verification and re-registration on a UPI app.

3. UPI Lite Enhancement: The offline payment feature now supports transactions up to ₹1,000 per transaction, with wallet balance allowed up to ₹2,000—double the previous limits. No PIN is required, enabling faster micro-payments.

4. Two-Factor Authentication Mandate: All domestic digital payments must use two authentication factors from different categories, with at least one being dynamic. SMS OTP alone is no longer sufficient as a standalone authentication method. Banks must implement biometrics, secure in-app approvals, and risk-based checks for high-value payments.

5. Real-Time Fraud Alerts: A new system warns users before sending payments to UPI IDs flagged as suspicious by multiple users. Users can proceed after the warning, adding a friction layer for awareness.

International Expansion and Global Recognition

UPI’s international footprint expanded with the PayU partnership with 8B to enable UPI payments for Indian tourists in Kazakhstan, Uzbekistan, and Kyrgyzstan. ⁵ The system is now live in eight countries: UAE, Singapore, Bhutan, Nepal, Sri Lanka, France, Mauritius, and Qatar—with France marking India’s first European entry.

More significantly, Kenya has adopted India’s DPI stack, including UPI and DigiLocker, to boost governance and digital financial inclusion. This represents the first African nation formally adopting India’s digital public infrastructure model, potentially opening pathways for broader emerging market adoption.

ONDC Contrast: Governance Scrutiny Continues

While UPI scales smoothly, the Open Network for Digital Commerce (ONDC) faced continued scrutiny over transaction counting methodologies and platform neutrality. ⁶ Analysts questioned how ONDC counts transactions where buyer-side and seller-side applications are controlled by the same entity. The network has set ambitious targets of 900 million buyers and 1.2 million sellers within five years, with GMV targeting $48 billion, but faces questions about actual value creation versus network activity.

This divergence—payments infrastructure working smoothly versus commerce infrastructure struggling with identity—highlights the path-dependent nature of DPI development. UPI benefited from early RBI engagement and standardized bank participation; ONDC’s more fragmented participant ecosystem creates governance challenges.

Technical Deep Dive

Architecture and Integration Points

UPI operates as a real-time interbank payment system through three key components:

1. Mobile Application Framework: UPI apps (PhonePe, Google Pay, BHIM, Paytm) interface with the UPI ecosystem through standardized APIs
2. Bank Integration Layer: NPCI connects participating banks through the UPI platform
3. Payment Gateway: Settlement happens through RBI’s RTGS/NEFT infrastructure

Authentication Flow (Post-April 2026):

• Primary factor: Device binding or mobile number verification
• Secondary factor: UPI PIN or biometric verification
• Risk-based assessment for high-value transactions (>₹50,000)

Transaction Categories and Limits:

System Performance Metrics

• Uptime Requirement: 99.99% availability target
• Peak Capacity: ~150 million transactions per hour
• Settlement: Real-time, T+0 for most transactions
• Failure Rate: <0.5% of initiated transactions

Government Perspective

Policy Intent

The new April 2026 regulations reflect NPCI’s dual objectives:

1. Security Enhancement: The inactive UPI ID deactivation and mandatory two-factor authentication address rising fraud concerns. The real-time fraud alert system adds a preventive friction layer without blocking transactions.

2. Convenience Maintenance: Category-based higher limits recognize that different transaction types carry different risk profiles. Enabling ₹5 lakh tax payments through UPI reduces friction for high-value legitimate use cases.

Budget and Investment Context

UPI remains free for consumers—the zero-MDR policy, in place since 2020, has driven adoption but created merchant sustainability concerns. The potential MDR introduction for very large merchants (>₹50 lakh monthly processing) represents a nuanced approach to sustainability without disrupting small merchant adoption.

International DPI Diplomacy

India’s promotion of UPI as a digital public good aligns with its broader G20 and Global South leadership. The Kenya adoption demonstrates that India’s DPI model—open-source, interoperable, and designed for inclusion—resonates with developing countries seeking rapid financial inclusion infrastructure.

Citizen Impact

For Everyday Users

The changes affect citizens differently based on usage patterns:

• Regular Users (< ₹1 lakh transactions): Minimal impact; standard limits unchanged
• High-Value Payment Users: Can now pay taxes, insurance premiums, and medical bills up to ₹5 lakh in a single transaction
• Inactive Account Holders: Risk of UPI ID deactivation if unused for 12+ months
• Feature Phone Users: UPI Lite expansion (₹1,000 limits) supports basic payments without smartphones

For Merchants

• Small Merchants: Zero-MDR continues; no changes
• Large Merchants: Potential future MDR for >₹50 lakh monthly processing
• New Merchants: First 24-hour limit of ₹5,000 applies to new UPI registrations

Security Improvements

The two-factor authentication mandate significantly reduces reliance on static credentials (PIN-only), which attackers have exploited through social engineering. Biometric verification on supported devices adds a layer difficult to compromise remotely.

Global Context

Comparison with Other Real-Time Payment Systems

UPI now accounts for approximately half of global real-time digital payments by volume—a remarkable achievement for a system launched less than a decade ago. ⁷

Regulatory Approaches

Other countries are studying India’s model:

• Brazil: Exploring open network approaches similar to UPI
• Thailand: Evaluating Aadhaar-style national digital identity
• UAE: Adopting UPI-style real-time payments

The UK’s Faster Payments and Europe’s TARGET2 systems, while mature, have not achieved UPI’s scale or growth trajectory—highlighting the public infrastructure approach’s advantages over bank-led systems.

Looking Ahead

What to Watch in Coming Weeks/Months

1. April-May Transaction Data: Confirm whether March record represents a peak or new baseline as the fiscal year closes
2. MDR Implementation: Any movement on merchant discount rates for large merchants
3. International Expansion: Progress in Saudi Arabia, Australia, and the US market entries
4. RBI Regulatory Clarity: Further guidance on credit card integration via UPI
5. ONDC Governance Resolution: How the network addresses platform neutrality concerns

Key Milestones

• Q2 FY27: First full quarter under new NPCI rules
• October 2026: UPI’s 10-year anniversary
• FY27 Target: 300+ billion annual transactions

Sources