UIDAI Moves to Ban Aadhaar Photocopies, Mandates QR-Based Digital Verification

Layer: L1 — Identity

The Unique Identification Authority of India (UIDAI) is preparing to notify a new rule that will prohibit hotels, event organisers, telecom companies and other private entities from collecting or storing physical photocopies of Aadhaar cards. ¹²

Under the forthcoming regulation, any entity performing Aadhaar-based identity verification must register with UIDAI as an Offline Verification Seeking Entity (OVSE) and adopt digital methods — either QR-code scanning or a forthcoming Aadhaar mobile application currently in beta testing. ³

The new Aadhaar app will support app-to-app verification that works without a live connection to the central UIDAI server, making identity checks viable in low-connectivity environments. UIDAI CEO Bhuvnesh Kumar described the move as a “privacy-first” shift aligned with both the Aadhaar Act and the incoming DPDP Act provisions. ¹

For consumers, the change is significant: no more handing over photocopies at hotel check-ins, office registrations or event entries. For verification entities, it means upgrading to API-integrated QR scanning or the Aadhaar app — a compliance cost that will cascade across millions of establishments nationwide. The rule notification is expected imminently.

NPCI International Partners with Uzbekistan’s NIPC — UPI Expands to 11th Country

Layer: L2 — Payments

NPCI International Payments Ltd (NIPL) signed a commercial agreement on August 30 with Uzbekistan’s National Interbank Processing Centre JSC (NIPC), operator of the national HUMO payment system, to enable UPI payments across Uzbekistan via the country’s interoperable QR code — UZQR. ⁴⁵

Indian tourists, business travellers and students will be able to scan UZQR codes using their existing UPI apps for instant merchant payments, without needing local payment instruments. The deal was announced via a PIB statement on August 31, timed with Prime Minister Modi’s visit to Tashkent. ⁵⁶

Uzbekistan becomes the 11th country where UPI is accepted for merchant payments. With UPI recording 2,366 crore transactions worth ₹29.88 lakh crore in July 2026 alone across 741 participating banks, the international expansion adds real utility for India’s outbound travellers while extending the network effects of the payments rails. ⁷

NPCI to Make UPI AutoPay Interoperable Across Apps

Layer: L2 — Payments

NPCI is working on making UPI AutoPay mandates portable across different UPI applications — a move that would let users switch payment apps (say from PhonePe to Google Pay) without losing their recurring payment setups for subscriptions, SIPs, insurance premiums and EMIs. ⁸⁹

Currently, AutoPay mandates are locked to the app where they were created, creating vendor lock-in that penalises consumers for wanting choice. The interoperability feature, reported by multiple outlets on August 31, would work similarly to mobile number portability — eligible mandates could be accessed and managed across any compliant UPI app. Merchants would also gain the ability to shift mandates to a new acquiring bank or payment service provider. ⁹

This is a consumer-friendly structural reform at significant scale. With UPI’s monthly transaction count exceeding 23 billion, even a modest portability uptake would reshape competitive dynamics among payment apps.

India’s Cybercrime Crisis Deepens — 28.15 Lakh Cases, ₹22,495 Crore Lost in 2025

Layer: L7 — Trust

Fresh data confirms India’s digital fraud epidemic is worsening. Cybercrime cases surged 24% in 2025 to 28.15 lakh, up from 22.68 lakh in 2024. Financial losses stood at ₹22,495 crore — marginally lower than 2024’s ₹22,845 crore, which officials attribute to faster fund-freezing mechanisms through the Citizen Financial Cyber Fraud Reporting System. ¹⁰

Investment scams accounted for 76% of total financial losses and 35% of all cases. Digital arrest scams contributed 9% of losses, while sextortion — lower in per-case value but massive in volume — made up 19% of cases. Institutions flagged 24.67 lakh mule accounts and 18.43 lakh suspect identities. ¹⁰

Meanwhile, Cyble co-founder Beenu Arora and DRONA CEO Dhruv Pandit launched a joint AI-powered cyber defence initiative in Ahmedabad targeting deepfakes, dark-web leaks and digital identity theft — a recognition that existing CERT-In and I4C frameworks are insufficient against AI-augmented attacks. Deepfake-related fraud has grown 550% since 2019. ¹¹

The data underscores a widening gap between India’s rapid digital adoption (UPI, Aadhaar, ONDC) and the trust infrastructure needed to sustain it. The DPDP Act’s enforcement, still finding its footing, needs to move faster.