Digital India

DPI Brief — June 24, 2026 1. Tata Electronics Cyber Breach Exposes Supply Chain Vulnerabilities in India’s Electronics Manufacturing (L7: Trust / CERT-In) Tata Electronics confirmed a major cybersecurity incident after ransomware group World Leaks published over 200,000 stolen files on the dark web, allegedly containing component designs and manufacturing specifications belonging to customers Apple and Tesla[^1]. The breach, which Tata said it detected “a few weeks ago,” raises serious questions about the security of India’s electronics manufacturing supply chain — a sector the government has aggressively promoted through production-linked incentive (PLI) schemes. Apple’s cybersecurity team is actively investigating the incident and may recommend security changes to its India manufacturing partners[^2]. CERT-In, India’s nodal cyber incident response agency under MeitY, has been reportedly informed. The incident underscores a growing risk: as India positions itself as a global manufacturing hub, supply chain cybersecurity becomes a critical DPI trust layer concern. The 630 GB of allegedly leaked data includes manufacturing blueprints, quality inspection standards, and employee passport data[^3]. ...

DPI Brief — June 23, 2026 NPCI Plans Unified E-Mandate Tracking Across All UPI Apps The National Payments Corporation of India (NPCI) is set to unify UPI e-mandate management for all third-party application providers (TPAPs), enabling users to view and manage their recurring subscriptions from a single dashboard regardless of which app they use. Currently, UPI AutoPay mandates are siloed within individual apps — a user with subscriptions on PhonePe, Google Pay, and Paytm has to check each app separately to track or cancel recurring payments. The move addresses a long-standing consumer pain point and could significantly boost transparency in the UPI AutoPay ecosystem, which has seen rapid growth in SIPs, utility bill payments, and subscription services. NPCI’s Data Science team highlighted the initiative at a recent public event, positioning it alongside the unified “UPI Help” complaint resolution system. No firm rollout timeline has been announced yet. ...

DPI Brief — June 22, 2026 UPI Crosses 23 Billion Monthly Transactions as Market Concentration Erodes India’s Unified Payments Interface processed a record 23.2 billion transactions in May 2026, consolidating its position as the world’s largest real-time payment system. But the more significant development this week is the structural shift in market dynamics: for the first time since NPCI began publishing app-wise data, the combined market share of PhonePe and Google Pay has fallen below 80%, dropping to 79% in May. PhonePe held 46.3% (down from 46.5% a year ago) while Google Pay slipped to 32.7% (from 36.1%). Challenger apps are gaining ground rapidly—Navi climbed to 3.6% from just 0.2% two years ago, while super.money, BHIM, and WhatsApp Pay also expanded. This diversification comes with six months remaining before NPCI’s 30% individual market share cap deadline, signalling that the regulator’s long-standing goal of a pluralistic UPI ecosystem is taking shape. ...

DPI Brief — June 21, 2026 Maharashtra Integrates Mahasarathi Family ID with DigiLocker [L3 — Documents] Maharashtra has integrated its Mahasarathi (Family ID) — the state’s foundational household identifier — with DigiLocker, enabling nearly 14 crore residents to securely access, store, and share their Family ID digitally. The integration supports two-way functionality: citizens can fetch existing Family IDs into their DigiLocker accounts, and eligible residents can apply for a new Family ID through DigiLocker with consent. This move promotes paperless governance and simplifies access to welfare schemes and citizen services. It is a significant step toward interoperable state-level identifiers plugging into the national digital document infrastructure. ...

DPI Brief — June 20, 2026 1. UPI Market Concentration Drops Below 80% as NPCI Cap Deadline Looms — L2 (Payments) PhonePe and Google Pay’s combined UPI market share fell below 80% for the first time in May 2026, dropping to 79% according to NPCI data released this week. This is a historic shift since the payments body began releasing app-specific transaction data, and comes just six months before the deadline for implementing the 30% market cap rule for a single UPI app. The gradual erosion of the two-player dominance signals that newer entrants—Paytm, Amazon Pay, and bank-integrated apps—are gaining traction. With UPI processing approximately 645 million transactions daily (peaking over 700 million in a single day), the stakes of market share distribution are enormous. The upcoming cap, designed to prevent monopolistic control over India’s digital payment rail, will force PhonePe—currently the market leader—to cede significant volume to competitors. ...

DPI Brief — June 19, 2026 L2: UPI Smashes 23 Billion Transactions in May, PhonePe–Google Pay Duopoly Cracks UPI processed a record 23.2 billion transactions worth ₹29.9 lakh crore in May 2026 — the highest-ever monthly volume for any real-time payment system globally. April 2026 was the first time any system crossed the 20-billion mark, and May pushed the frontier further. 1 But the more significant structural shift is in market share. According to NPCI data, the combined share of PhonePe and Google Pay fell below 80% for the first time since NPCI began publishing app-level statistics. PhonePe held ~46% and Google Pay ~33%, with Paytm, Navi, super.money, BHIM, and WhatsApp Pay collectively chipping away at the duopoly. This matters because NPCI’s 30% market cap rule for a single UPI app takes effect within six months, and the data suggests the ecosystem is already diversifying ahead of the deadline. 2 ...

DPI Brief — June 18, 2026 1. UPI Goes Live at Galeries Lafayette, Nice — India’s Payment Rail Reaches France (L2) Commerce and Industry Minister Piyush Goyal launched Unified Payments Interface (UPI) services at the iconic Galeries Lafayette in Nice, France, on June 16, 2026. The launch enables Indian travellers to make seamless QR-code-based payments using familiar apps like PhonePe, Google Pay, and Paytm while shopping at one of France’s most premium department store chains. Goyal called it “a significant step” in India’s ongoing effort to internationalise its digital payment infrastructure. UPI is now accepted at merchant locations across France through NPCI’s international linkage partnerships, following earlier rollouts in Sri Lanka, Mauritius, Nepal, and the UAE. ...

DPI Brief — June 17, 2026 Pine Labs Launches P3P: India’s First Autonomous Agentic Payment Protocol on UPI Layer: L2 (Payments) / L4 (Commerce) Pine Labs has launched the Pine Labs Payment Protocol (P3P), marking India’s first autonomous agentic payment protocol built directly on the Unified Payments Interface (UPI) network. The protocol is already live in production, with Gullak, a digital gold savings platform, as the first merchant on the network. ...

DPI Brief — June 15, 2026 India’s DPI ecosystem saw significant movement this week across payments, commerce, telecom regulation, agriculture, and documents — five layers in a single news cycle. Here are the top stories. L2 Payments: India-Nepal UPI-NPI Cross-Border Corridor Goes Live India and Nepal operationalised a peer-to-peer cross-border remittance corridor on 6 June 2026, linking India’s Unified Payments Interface (UPI) with Nepal’s National Payments Interface (NPI). The system, formally announced by the Ministry of Finance on 11 June, enables citizens of both countries to transfer money in real time via mobile banking apps and digital wallets — without remittance agents, cash couriers, or informal hundi networks. ...

DPI Brief — June 13, 2026 1. India–Nepal UPI-NPI Linkage Goes Live: Real-Time Cross-Border Remittances Layer: L2 — Payments NPCI International Payments Limited (NIPL) and Nepal Clearing House Ltd (NCHL) have operationalised the direct linkage between India’s Unified Payments Interface (UPI) and Nepal’s National Payments Interface (NPI). The service, which went live on 6 June, enables person-to-person cross-border remittances in real time using mobile numbers or virtual payment addresses (VPAs)—no bank account details required. ...