Deep Dive

DPI Deep Dive — Tuesday | September 22, 2026 The week India’s most successful public infrastructure finally got a price list, everyone with a stake in it went to war over the receipt. On September 15, NPCI issued the operational circular that converts last week’s gazette notification into a working fee schedule: from October 15, person-to-merchant UPI payments above ₹2,000 will carry a 0.4% merchant discount rate, capped at ₹300 on transactions of ₹75,000 and above, while everything a consumer does free today — person-to-person transfers at any value, payments up to ₹2,000, QR payments at small vendors — stays free. 1 2 What followed was seven days of escalating contestation: government sources insisting there is “no question of rollback,” the opposition branding it the “UPI tax,” the country’s largest traders’ body calling a national No-UPI Day, thousands of petrol pumps in one state preparing to refuse high-value UPI outright, and a Finance Ministry simultaneously denying American pressure and citing a parliamentary committee as the idea’s parent. 3 4 5 Beneath the noise sits a structural fact: the world’s largest retail fast-payment system — 24.5 billion transactions worth roughly $315 billion in August alone — has been running on a budgetary subsidy the exchequer was already trimming, and this week the subsidy era formally began its end. 6 ...

DPI Deep Dive — Monday | September 21, 2026 Layer 1 — Identity & Authentication — spent the week of September 14–21, 2026 converting biometric verification from one option among many into the default gate between residents and the state. The Petroleum and Natural Gas Ministry announced that from October 1, only households that complete Biometric Aadhaar Authentication (BAA) can book subsidised LPG refills at the regulated price. 1 The Delhi High Court’s interim direction — no new GST registration anywhere in India without biometric Aadhaar authentication — kept rippling through tax practice ahead of a September 22 hearing. 2 3 UIDAI, riding the afterglow of the Global Fintech Fest, disclosed that Aadhaar now handles roughly 10 crore authentications a day, is being engineered for 25–30 crore, and is being prepared to go international for NRIs and OCIs. 4 5 Meanwhile about six crore families have nine days left to complete free mandatory biometric updates for their children before the ₹125 fee returns, 6 7 and Bihar police connected a ₹91 lakh SIM-fraud pipeline to Aadhaar centres and point-of-sale agents — a reminder that the identity layer’s weakest link is its own supply chain. 8 ...

DPI Deep Dive — Sunday | September 20, 2026 title: “DPI Deep Dive — September 20, 2026 | " date: T08:30:00+05:30 draft: false tags: [“DPI”, “Deep Dive”, “Layer: “] categories: [“DPI Deep Dive”] description: “Weekly analysis of layer in India’s Digital Public Infrastructure” DPI Deep Dive — | Layer 7 — Security, Privacy & Trust — spent the week of September 13–20, 2026 rebuilding its machinery in public. TRAI notified the most consequential rewrite of India’s anti-spam rulebook since 2018, conscripting telecom operators, telemarketers and caller-ID apps into a single AI-driven enforcement grid. 1 2 Zscaler ThreatLabz lifted the cover on Operation RapidRust, a Pakistan-aligned campaign running a freshly built Rust malware family against Indian government and defence networks. 3 4 Spain’s data protection authority logged the world’s first breach notification naming an AI agent as the attacker — a dress rehearsal for problems India’s own breach regime has not yet been tested against. 5 Legal analysts mapped who answers when data-processing is outsourced and why one consent function now sits under two rulebooks. 6 7 And beneath it all, the global vulnerability treadmill ran hot — a perfect-10 GitLab flaw exploited within days of patching, 21 critical Cisco bugs fixed in one review — exactly the commodity-software exposure India’s first binding sectoral cyber rules were written to contain. 8 9 10 ...

DPI Deep Dive — Saturday | September 19, 2026 Layer 6 — Governance & Grievance — is where India’s DPI stack talks back: the layer that registers the citizen’s complaint, routes it, clocks it and closes it. This week it made news four times over, and the four windows fit together. On September 16, the government switched on the dedicated web portal for Special Campaign 6.0, the annual, government-wide pendency purge. 1 2 On the numbers side, DARPG released the 51st CPGRAMS monthly report showing 2,16,827 grievances redressed by Central ministries in July, 3 while the daily bulletins recorded 13,557 disposals on September 17 alone. 4 On September 18, DARPG ran a capacity-building workshop on special e-governance projects for the North-Eastern states and Ladakh. 5 And on September 17, the Ministry of Minority Affairs convened a workshop on AI-enabled governance built on Sarvam AI’s Indus, the same week the grievance layer’s own AI assistant — Samadhan Didi — continues to scale on Bhashini. 6 7 The through-line: the layer has finished solving access (anyone can file, in any scheduled language) and is now industrialising disposal — with AI moving into the triage seat. The binding constraint is shifting from “can you file?” to “does closure mean relief?” ...

DPI Deep Dive — Friday | September 18, 2026 Layer 5 — Sectoral Infrastructure — spent this week proving itself in four different registries at once. The Chief Justice of India mounted a public defence of judicial transparency and pointed, specifically, at the eCourts technology stack as the instrument of accountability. 1 Andhra Pradesh put a hard January 1 deadline on digitising the health records of an entire state. 2 The immunisation registry U-WIN carried the HPV campaign past 80 lakh doses with district-level gap data that older paper systems could never have produced. 3 And the Digital Crop Survey ran at full throttle into a monsoon that official data now confirms is leaving kharif acreage short. 4 The pattern across all four: India’s sectoral stacks have moved beyond the pilot stage and are now being asked to serve as evidence — of court transparency, of a state’s health promises, of a vaccine campaign’s reach, and of a farmer’s loss. ...

DPI Deep Dive — Thursday | September 17, 2026 Layer 5 — Sectoral Infrastructure — spent the week doing two opposite things at once. On one side, three registries that define how the Indian state sees its citizens — land records, health accounts, farmer identities — all announced expansion: a ₹565.50 crore “Land Stack” with Bhu-Aadhaar for every parcel, 1 a new skills academy to push hospital records online, 2 and a kharif procurement season that now runs through AgriStack farmer IDs in state after state. 3 On the other side, the week produced the sharpest evidence yet of what happens when enrollment becomes a precondition for a legal entitlement: in Maharashtra’s Konkan, ₹161 crore of sanctioned crop-relief money is sitting undistributed because roughly 83,000 farmers never got a Farmer ID or never completed e-KYC. 4 The sectoral layer is no longer being piloted; it is being enforced — and this week showed both faces of that shift. ...

DPI Deep Dive — Wednesday | September 16, 2026 Layer 3 — Documents & Data Exchange — spent the week proving that the document layer is no longer backstage infrastructure; it is now the product. DigiLocker’s architecture crossed a new scale marker — 73.53 crore registered users and 936.03 crore issued documents, per the government’s own Global Fintech Fest factsheet 1 — and then three different governments moved decisively around it: New Delhi explored taking the locker model global for businesses as the BRICS Summit convened in Delhi, 2 Tamil Nadu stopped printing driving licences and registration certificates altogether, 3 Karnataka debated walking physical marks cards back into existence, 4 and NeGD quietly made DigiLocker the first deployment site for agentic AI in government. 5 The through-line: India’s documents layer has graduated from “scan and store” to “issue, verify, and act” — and every step of that graduation is now contested at the point of acceptance, not the point of issuance. ...

DPI Deep Dive — Tuesday | September 15, 2026 Layer 2 — Payments & Financial Rails — did not have a quiet week; it had a constitutional one. The Global Fintech Fest (September 8–11) turned Mumbai into a trade show for UPI’s next decade, and then, on September 14, the government quietly rewrote the price list. A gazette notification under the Payment and Settlement Systems Act now guarantees zero charges on UPI payments up to ₹2,000 and on RuPay debit card payments — and by doing so, formally opens the door to merchant fees on everything above that line. 1 2 3 The same week, NPCI unveiled UPI Tap & Pay and the AI-powered MyUPI support layer, 4 confirmed — through leaks and platform launches — that it is building a registry to let AI agents pay on UPI, 5 and drew its first cross-border acceptance deal in Singapore even as the Prime Minister told the fintech industry to take UPI global and stop paying foreign card networks’ tolls. 6 7 The through-line: India’s payments rail is simultaneously renegotiating its price, its future operators, its physical form, and its borders — and the consumer’s seat at that table is still a folding chair. ...

DPI Deep Dive — Monday | September 14, 2026 Layer 1 — Identity & Authentication — spent the week of September 7–13, 2026 being hardened, exported, and embarrassed, often in the same seventy-two hours. The Delhi High Court effectively ruled that no new GST registration should move without biometric-based Aadhaar authentication, making biometrics the default gate into the formal economy. 1 2 At Global Fintech Fest 2026, UIDAI moved face authentication out of a clunky background app and into every bank’s native app with a new SDK and developer sandbox — while its CEO talked openly about taking Aadhaar international. 3 4 Then the Lucknow bench of the Allahabad High Court was told that a learning licence had been issued in the name of a dead man using his Aadhaar details, and government counsel could not explain how. 5 And the Aadhaar App, already past four crore downloads, quietly crossed one crore document updates this week, positioning itself as the consent wallet the DPDP era assumes will exist. 6 7 The through-line: India’s identity layer is scaling faster than its failure modes are being governed — and this week, the courts, not the regulator, were doing the governing. ...

DPI Deep Dive — Sunday | September 13, 2026 Layer 7 — Security, Privacy & Trust — is the layer that only becomes visible when it is tested, and the week of September 6–13, 2026 tested it from five directions at once. The DPDP compliance machine hit an eight-week runway to the November 13 switch-on of India’s consent infrastructure — even as the Data Protection Board that must eventually hear complaints still has no Chairperson or Members. 1 2 UIDAI disclosed that Aadhaar absorbs hundreds of cyberattacks every day while the system prepares to scale toward 300 million authentications daily. 3 4 DoT’s Financial Fraud Risk Indicator crossed ₹5,000 crore in prevented fraud and quietly expanded from payments into pensions, insurance and demat accounts. 5 At Global Fintech Fest 2026, the finance minister called AI a double-edged sword and the Bank of Baroda chief executive asked the system to invest more in defence. 6 7 And as Delhi prepared to host the BRICS Summit, Delhi Police told government officials to stop using Google Drive and Tor — in the same breath. 8 The through-line: India is building security machinery faster than it is building the institutions that make security accountable. ...