DPI Brief — September 15, 2026
The dust has settled on Global Fintech Fest 2026 in Mumbai, and the week’s announcements are hardening into actual infrastructure. Today’s brief reads the fest’s wake: identity tooling going SDK-first, UPI acquiring both a tap gesture and an AI helpdesk, a vetting registry for spending AI agents, corporate bonds issued natively on a blockchain with central-bank-money settlement, and DigiLocker becoming a mandatory identity rail for a national exam.
1. UIDAI ships a Face Authentication SDK, a sandbox, and an onboarding playbook [L1 — Identity]
At GFF, UIDAI launched the Aadhaar Face Authentication SDK and Sandbox, letting ecosystem partners embed face authentication directly inside native Android and iOS apps — no more bouncing between a service app and the Aadhaar app. A companion “Playbook on Ease of Onboarding” guides BFSI entities into the authentication ecosystem for verifying customers, staff and business partners. The scale is already enormous: the indigenous AI/ML face-auth stack, live since 2021, has processed over 500 crore transactions across roughly 200 organisations — powering Jeevan Pramaan life certificates, Ayushman Bharat onboarding, DBT, Aadhaar-enabled payments and SIM e-KYC. UIDAI is also preparing to take Aadhaar global for NRIs and OCIs and drafting guidelines for small-merchant Aadhaar-based KYC. The consumer question that comes with convenience: every new SDK integration widens the surface where your face is the password. A public sandbox is the right place to prove the anti-spoofing works before banks ship it to a billion cameras.
2. UPI gets Tap & Pay — and an AI helpdesk built on NPCI’s own small language model [L2 — Payments]
NPCI has rolled out NFC-based UPI Tap & Pay: tap your phone at an NFC point-of-sale terminal, no PIN required below ₹5,000, and — notably — designed to work in areas with little or no network connectivity, per NPCI chairman Ajay Kumar Choudhary. It supports multiple UPI-linked accounts including RuPay Credit Card on UPI, and the timing, days before Apple Pay’s expected full India launch, is no accident. Alongside it comes MyUPI, an AI platform built on FiMI, NPCI’s own small language model: 24×7 multilingual support, payee-context information, automated real-time chargebacks for eligible transactions, and transaction replay across any UPI app. All this rides on a rail that moved 24.51 billion transactions worth ₹29.82 lakh crore in August. PIN-free tap is a real accessibility win for elders and low-network regions — but it shifts fraud from needing your PIN to needing nothing, and the liability answer for unauthorised taps must arrive with the feature, not after the first dispute wave.
3. Agentic payments get a gatekeeper: the Unified Agentic Protocol registry [L2 — Payments]
Reuters reports NPCI is building a registry to vet and monitor AI agents transacting on UPI, as part of its planned Unified Agentic Protocol (UAP). The registry is the gatekeeping layer — identifying, screening and authorising which agents may pay at all — starting with UPI and potentially extending to cards and bill payments. Early use cases are deliberately small and frequent: groceries, not investments. The design leans on delegation machinery UPI already has (the same rails behind UPI Circle), with spending caps, scopes, revocation and audit trails. What is still missing, as analysts note, is a public liability framework for when an agent gets it wrong. The pilots are real — Razorpay, OpenAI, Axis Bank and BigBasket have run agentic shopping on UPI Circle and Reserve Pay. India would be the largest national test bed for agentic payments on earth, in the same week its own PM asked the industry to build a Fintech Consumer Protection Index. Sequencing matters: liability and redress rules before scale, not after.
4. Demat 2.0: corporate bonds issued natively on DLT, settled in CBDC [L2 — Markets]
RBI Governor Sanjay Malhotra and SEBI Chairman Tuhin Kanta Pandey jointly launched the Demat 2.0 pilot for tokenised corporate bonds at GFF. Bonds will be issued, held, traded and settled as digital tokens on a distributed ledger, connected to RBI’s wholesale CBDC (via the UMI bridge) for atomic settlement — bond and money move instantaneously. Per NPCI, India is the first country where corporate bonds are issued natively on a DLT with ownership recorded by statutory depositories and the funds leg settled in central bank digital currency, all within existing regulated market infrastructure. The consumer angle is indirect: atomic settlement removes counterparty risk in the bond market that prices the credit households and SMEs borrow against. Watch whether tokenised bonds open a genuinely retail primary market, or remain wholesale plumbing.
5. GATE 2027 makes DigiLocker registration mandatory — with live facial verification [L3 — Documents]
IIT Madras, the organising institute for GATE 2027, has made DigiLocker-based registration mandatory for Indian nationals, adding live facial verification during the application process. It is the clearest sign yet that DigiLocker — now at 73.53 crore registered users and 936.03 crore issued documents per the government’s own GFF factsheet — has graduated from convenient archive to mandatory identity rail. Separately, reporting on the government’s AI-agent plans suggests DigiLocker will serve as the reference implementation for consent management and analytics components that other government bots will reuse. For lakhs of applicants, DigiLocker uptime and record accuracy are now admission-critical. The failure modes to pressure-test before November: certificate names that don’t match Aadhaar exactly, and a registration crunch hitting a document store that has never faced a national deadline.
Sources: PIB, UIDAI, NPCI, Reuters, Indian Express, DD India, Moneycontrol, MediaNama, Education Times. Brief compiled 2026-09-15, 08:00 IST.