DPI Brief — September 13, 2026

With Global Fintech Fest 2026 concluded in Mumbai and the BRICS Summit wrapping up in New Delhi, the last 24 hours delivered a dense cluster of announcements spanning identity, payments, agriculture and trust layers of India’s DPI stack. Yesterday’s brief covered UPI Tap & Pay, MyUPI and the BRICS CBDC push; today’s edition tracks the developer tooling, ambient-payments and compliance stories still unfolding.

1. UIDAI opens up Aadhaar Face Authentication with a developer SDK and sandbox [L1 — Identity]

At GFF 2026, UIDAI launched a “Face Auth SDK & Sandbox” — a plug-and-play kit plus a controlled testing environment for integrating Aadhaar face authentication into apps. The SDK ships with AI/ML-based liveness and anti-spoofing, encrypted auth-data handling, and targets BFSI players who must meet RBI-mandated multi-factor authentication. UIDAI chairman Neelkanth Mishra told the fest the authority is deploying AI extensively for fraud detection and expects agentic use cases to grow sharply over the next three years. In parallel, UIDAI signed with MapmyIndia to surface authorised enrolment centres on the Mappls app — a small but citizen-useful discovery fix.

2. BRICS New Delhi Declaration puts DPI on the multilateral agenda [L5 — Sectoral / Global DPI]

The New Delhi Declaration adopted at the 18th BRICS Summit notes the meeting of the Focus Group on Digital Public Infrastructure, welcomes the Digital BRICS Forum 2026, and endorses a BRICS Network on Digital Agriculture spanning AI, geospatial intelligence, IoT-enabled monitoring and advanced data analytics. Leaders also backed four farmer-centric initiatives — BRICS AGRIN, a Global Forum on Farmers’ Rights in Seed Systems, a centres-of-excellence network on agroecology, and the digital agriculture network — plus further work on a Russia-backed BRICS Grain Exchange. For India’s DPI diplomacy, this is the template for UPI-and-Aadhaar-style infrastructure going multilateral: non-binding, consensus-based, and increasingly formalised — with AgriStack-adjacent data-exchange norms likely to follow.

3. UPI moves into the car: ToneTag’s DrivePay reaches IndianOil pumps [L2 — Payments]

ToneTag, Tata Motors and IndianOil launched DrivePay at GFF 2026 — India’s first in-car fuel payment, built on NPCI’s UPI Circle framework for “Introduction of IoT Devices and Software on the UPI Ecosystem”. Connected-car owners at IndianOil outlets can pay for fuel from the dashboard without handing over a phone or card. It is the latest sign of payments migrating off the phone screen onto ambient surfaces — wearables, cars, appliances. That is genuinely convenient, but each new surface widens the attack plane: transaction limits, device-binding rules and dispute paths designed for phones will need rethinking when the phone is no longer in the loop.

4. Wizz Financial wires UPI into a global remittance wallet [L2 — Cross-border]

Wizz Financial launched a unified cross-border app with its SWITCH interoperability engine, connecting its US and UAE propositions with Indian UPI accounts for real-time inward transfers, payouts to 80+ countries, and UPI One World access for international visitors to India. The company bills it as the first wallet “where UPI meets remittance for every nationality.” Read it carefully: this is private infrastructure layered on public rails — a usefully competitive remittance corridor for the diaspora, but “global UPI ecosystem” is the company’s framing, not an NPCI interoperability milestone.

5. SBI targets DPDP compliance by December — eight months ahead of deadline [L7 — Trust]

India’s largest lender has procured the software and hardware needed for Digital Personal Data Protection Act compliance and plans to be fully compliant by end-December 2026 — well ahead of the May 13, 2027 date when core obligations kick in (consent-manager Rule 4 arrives November 13, 2026). The catch: the Data Protection Board that will hear complaints and levy penalties still has no chairperson or members. Institutions getting ready while the referee’s bench sits empty is progress — but enforcement readiness is the part consumers will actually feel.

Quick hits