DPI Brief — October 26, 2026

Coverage window: 25 October 2026, 08:00–26 October 2026, 08:00 IST.

This window brought a new RBI data-centre and cyber-training facility, an NPCI ledger-architecture benchmark, the latest NPCI payment-rail snapshot, ONDC’s urban-transit reach figures and a UIDAI reminder on masked Aadhaar. The figures and performance statements below are attributed to the agencies that published them; none of the releases supplies an independent outcome audit.

1. RBI opens data-centre and cybersecurity-training facilities (L7 — trust; cross-cutting financial DPI)

On 25 October, the Prime Minister inaugurated RBI’s data centre and Cybersecurity Training Institute in Bhubaneswar. His address framed them as part of a shift from expanding banking access to making banking more efficient and reliable, arguing that financial systems need stronger digital infrastructure and trained people to face changing cyber threats.

This is a tangible institutional investment in the resilience of the financial system that supports digital payments, not a new UPI feature or evidence that payment uptime has already improved. The public address gives no capacity, failover, recovery-time or independent security-testing results. Those operational measures—and whether the new facility measurably improves continuity during a disruption—will matter more than the inauguration itself.

2. NPCI publishes a 4.4× Drunix throughput benchmark (L2 — payments infrastructure)

NPCI’s 25 October engineering post says its Drunix architecture achieved 3,500 transactions per second against 800 for vanilla Hyperledger Fabric on the same three-node Kubernetes cluster. NPCI attributes the difference to a modular design whose specialised components can scale independently.

This is a benchmark claim about a ledger architecture, not a measurement of live UPI throughput; the post does not say that UPI runs on Drunix. The comparison is promising for high-volume systems, but the published post does not provide enough detail to assess workload mix, consistency settings, error rates, repeatability or production deployment. Those disclosures would make the headline multiplier more useful to operators and the public.

3. NPCI’s 24 October snapshot shows 788.35 million BHIM UPI transactions (L2 — payments)

NPCI’s daily statistics post, published on 25 October, reports 788.35 million BHIM UPI transactions worth ₹87,569.43 crore on 24 October. The same graphic lists 2.71 million AePS transactions, 10.51 million IMPS transactions and 12.73 million NETC/FASTag transactions for that day.

The UPI figure is explicitly for BHIM UPI, not a complete total for every UPI app or channel. A one-day transaction count and value show scale, not whether payments succeeded first time, how many were reversed, or how much fraud was reported. Publishing failure, reversal and grievance measures alongside throughput would make the daily dashboard more useful to consumers.

4. ONDC reports 16.5 million September transit bookings (L4 — commerce and mobility)

At the 19th Urban Mobility India conference, ONDC said its network connected 15 transit operators across more than 24 cities and recorded 16.5 million bookings in September 2026. The network’s stated aim is to let commuters discover and book journeys across modes through participating apps.

These are ONDC’s own network figures, shared in a conference post; “bookings” should not be read as completed rides or unique passengers. The post does not break the total down by city, operator, transport mode, cancellations or fulfilment. Those splits would show whether interoperability is producing dependable journeys beyond a headline aggregate.

5. UIDAI promotes masked Aadhaar for situations where applicable (L1 — identity)

UIDAI’s 25 October post reminds people that a Masked Aadhaar displays only the last four digits and can be downloaded from myAadhaar or the Aadhaar App. This is a privacy-oriented reminder, not a new rule requiring organisations to accept masked copies or a change to authentication policy.

Masking can reduce exposure of the full number when a copy is genuinely needed; it does not answer why an organisation needs Aadhaar in the first place. Residents should still be told what the document will be used for and offered a workable alternative where Aadhaar is not required.

Seven-layer scan

  • L1 Identity: UIDAI’s Masked Aadhaar reminder above; no new authentication rule located.
  • L2 Payments: NPCI’s Drunix benchmark and 24 October rail statistics above; no new UPI/RuPay rule located.
  • L3 Documents: No material new DigiLocker, API Setu or eSign announcement found in the official feeds reviewed.
  • L4 Commerce: ONDC’s transit-network figures above; no separate material GeM change found.
  • L5 Sectoral: No material new ABHA/ABDM or AgriStack announcement found in the reviewed sources.
  • L6 Governance: No material CPGRAMS or eOffice service change located.
  • L7 Trust: RBI’s new resilience facilities above; no separate new CERT-In advisory or DPDP/TRAI regulatory notice located.

Watch next: operating and recovery disclosures for RBI’s facilities; benchmark methodology and production status for Drunix; and outcome data—payment failures, fulfilled transit bookings, and usable identity alternatives—alongside headline activity.