DPI Brief — July 29, 2026
DPI Brief — July 29, 2026 NPCI Mandates UPI Phone Number Masking by September 4 The National Payments Corporation of India (NPCI) has directed all UPI apps and partner banks to mask users’ phone numbers during transactions, moving toward username-based handles as the default identifier. The mandate, first reported by NewsBytes and confirmed by Moneycontrol, is being positioned as a compliance measure under the Digital Personal Data Protection (DPDP) Act. Currently, UPI apps display full phone numbers of both sender and receiver during transactions — a practice that exposes personal data to bystanders and screenshots. NPCI is in active discussions with banks and third-party app providers (PhonePe, Google Pay, Paytm, etc.) to implement the change. The shift to handles (like user@paytm) as the primary UPI identifier has been on the cards for years, but this is the first time NPCI has set a hard deadline. This is a meaningful privacy upgrade for India’s 400 million+ UPI users. ...