DPI Brief — September 04, 2026

India’s DPI stack spent the week prepping for its biggest stress test yet: letting AI agents spend your money. With the Global Fintech Fest opening in Mumbai on September 8, NPCI’s agentic-payments plan, a record UPI month, a billion linked health records, and ONDC’s biggest tenant yet all landed in the same news cycle. Here’s what matters across the seven layers.

1. NPCI readies the “Unified Agent Protocol” — UPI for AI agents (L2 Payments, with L7 Trust implications)

Reuters reports that NPCI is preparing the Unified Agent Protocol, likely to be unveiled at the Global Fintech Fest beginning September 8, which would let AI agents execute UPI payments within user-set rules — without approving every transaction. The design leans on two existing rails: UPI Circle, which delegates payment authority to a secondary party (here, an agent), and Reserve Pay, which blocks funds for repeated debits — currently capped at ₹10,000 for 90 days, limits that may be revised for agentic use. NPCI plans merchant integration infrastructure, spending limits, audit trails, identity checks, and a liability framework whose details remain undisclosed.

The trust layer is scrambling to keep up. MeitY has proposed mandatory human-in-the-loop interventions in agentic AI payments, while CERT-In’s Digital Threat Report 2025-26 recommended human-in-the-loop controls for agent actions above defined financial thresholds — with no threshold actually set. Consumer advocates, including MediaNama’s Nikhil Pahwa, argue agentic commerce needs separate agent handles and PINs, user-set amount and frequency caps, and a real recourse mechanism. The timing is notable: Anthropic launched AI shopping agents days after the Reuters report, and Mastercard and Visa are building rival agentic rails in India. India could be first to run agent payments at national scale — and first to find out where delegation breaks.

2. UPI logs its biggest month ever: 24.51 billion transactions (L2 Payments)

The infrastructure that would carry agentic payments just posted record volume. Per NPCI data released September 1, UPI processed 24.51 billion transactions worth ₹29.82 lakh crore in August — the first time monthly volume crossed 24 billion, up 3.6% month-on-month and 22% year-on-year. Value grew 20% annually, hovering just under the ₹29.9 lakh crore record from May and July. Average daily volume hit a record 791 million transactions, with festive demand (Raksha Bandhan) cited as a driver. UPI is now accepted in 11 countries. The open question for consumers: volume compounds far faster than value, meaning ticket sizes keep shrinking — the exact profile agentic commerce targets.

3. ABDM crosses 100 crore linked health records (L5 Sectoral)

India’s health data exchange doubled its linked-records count from 50 crore in February 2025 to over 100 crore ABHA-linked health records, per the Health Ministry, on a base of 73+ crore ABHA IDs. Separately, Haryana officials said this week the state will accelerate digital healthcare adoption (September 3). A billion records is a genuine milestone — but it concentrates risk: consent architecture, hospital data hygiene, and breach accountability now scale with it.

4. Flipkart pilots food delivery on ONDC; DigiHaat goes Swadeshi (L4 Commerce)

Flipkart is preparing to pilot food delivery through ONDC, per BW Marketing World (September 3) — putting the country’s biggest e-commerce firm directly against Swiggy and Zomato on the open network, and marking ONDC’s most significant large-platform endorsement since its mobility foray. Meanwhile, government-backed DigiHaat launched a “Swadeshi” marketplace for verified Made-in-Bharat products. The network effect cuts both ways: big-platform participation validates ONDC economics, but also tests whether the network stays open or gets re-dominated by its largest participant.

5. Aadhaar: 1.2 crore school biometric updates done — but payment linkages still fail beneficiaries (L1 Identity)

UIDAI has completed biometric updates for 1.2 crore students across 1.03 lakh schools and launched Aadhaar Update Drive 2.0 in J&K schools with the state IT department. The counterpoint: in Gujarat, over 1.5 lakh women face Aadhaar-related payment hurdles under the PM Matru Vandana Yojana, with 75,437 installments rejected between FY24 and August 2026 — a reminder that identity-linked delivery fails silently at the last mile, and rejections rarely trigger grievance loops.

Quick takes

  • L6 Governance: DARPG released its 48th CPGRAMS monthly report for July 2026 covering states/UTs, alongside a new Secretary-level Review Meeting Module for complaint oversight.
  • L7 Trust: TRAI data puts India’s wireless subscriber base at 1.31 billion (June) — the user base every trust-layer rule ultimately governs.

Watch this week: Global Fintech Fest opens September 8. If the Unified Agent Protocol debuts as reported, the delegation-versus-consent debate moves from papers to production.