It is hard to overstate how much UPI has changed daily life in India. Roadside chai stalls, neighbourhood kirana shops, ride-hailing apps, doctors' clinics — all of them now accept payment by simply scanning a QR code. From a couple of million transactions in its first month in 2016, UPI has grown to handle more than 14 billion transactions a month, making it the world's largest real-time payments system.

Yet many users still treat UPI as a black box: they tap a button, the money disappears, the recipient gets a notification, and that's that. This guide opens up the box. We'll explain what a UPI payment actually is, how UPI IDs work, what the limits are, how charges are structured, and — most importantly — how to use it safely.

What is UPI?

UPI stands for Unified Payments Interface. It is a real-time payment system developed by the National Payments Corporation of India (NPCI) and rolled out in April 2016 with 21 banks at launch. UPI's defining feature is that it lets you transfer money between any two bank accounts in India using a simple identifier — the UPI ID — instead of the traditional bundle of account number and IFSC.

Behind the scenes, UPI rides on the IMPS rails for actual settlement. So in a sense, UPI is best thought of as a smart, user-friendly layer on top of IMPS that handles the heavy lifting of looking up bank details and authenticating the user.

How a UPI payment works under the hood

When you send Rs 200 to your tea-stall guy, six things happen in roughly two seconds:

  1. You scan his QR or enter his UPI ID and amount in your UPI app (Google Pay, PhonePe, Paytm, BHIM, your bank's app, etc.).
  2. The app sends an authorisation request to the NPCI's UPI switch.
  3. NPCI looks up his UPI ID in its directory, finds his bank, and forwards the request.
  4. His bank confirms the account is valid and willing to receive.
  5. You authenticate with your UPI PIN — proof that you authorised the transaction.
  6. NPCI instructs both banks (yours and his) to settle the amount over IMPS, and pings both apps with success notifications.

The entire process happens in real time, 24 x 7, including weekends and holidays. There is no batch settlement, no banking-hours window, no manual approval anywhere.

Setting up your first UPI ID

To use UPI you need three things: a smartphone, a bank account at a UPI-enabled bank (which is essentially every bank in India today), and your debit card details for one-time setup.

  1. Download a UPI app: any of Google Pay, PhonePe, Paytm, Amazon Pay, BHIM, or your bank's official app.
  2. Verify your mobile number: the SIM in your phone must match the mobile number registered with your bank account. The app will send a silent SMS to confirm — keep your data SIM in the phone during setup.
  3. Pick your bank: the app shows banks where it found accounts linked to your number.
  4. Set a UPI PIN: use your debit card's last six digits and expiry to authenticate, then set a 4 or 6-digit UPI PIN. This PIN is what you'll enter for every payment.
  5. Pick a UPI ID (VPA): something like yourname@oksbi or yourname@ybl. The part after @ is the bank handle.

You can have multiple UPI IDs across different apps, all linked to the same bank account. There is no extra charge for additional IDs.

Limits and charges

Transaction limits

UPI is governed by NPCI rules and bank-specific tightenings. The standard limits in 2026 are:

Charges for personal use

For person-to-person UPI payments, there is no charge. Banks earn their share through interchange on merchant transactions, not consumer fees.

Charges for merchant payments

Most retail UPI merchant transactions remain free for both consumer and merchant. However, NPCI has introduced an interchange fee of up to 1.1% on UPI payments made to merchants using prepaid wallets / PPI instruments for amounts above Rs 2,000. This affects only wallet-based UPI; bank-account UPI continues to be free for both sides.

Tip: If you're a merchant accepting UPI, make sure your QR code is linked to a bank account, not a wallet, to avoid the interchange fee passing on to your customer.

UPI vs IMPS vs NEFT

AspectUPIIMPSNEFT
Identifier neededUPI ID or QRAccount + IFSC, or mobile + MMIDAccount + IFSC
Per-transaction capRs 1 - 5 lakhRs 5 lakhNo cap
Settlement speedReal timeReal time30-min batches
Online costFreeFreeFree
Best forDaily payments, splitting bills, merchantsLarger urgent transfersSalary, EMI, regular bills

Read our full NEFT vs RTGS vs IMPS guide for a deeper comparison of the three older systems.

Staying safe — the scams to know

UPI is technically very secure. The protocol authenticates every transaction with a PIN, the PIN never leaves your device unencrypted, and no amount of social engineering can give a fraudster direct access to your money. But fraudsters have figured out indirect paths. Almost every UPI scam now in circulation relies on tricking the user into pressing the wrong button. Here are the patterns to know:

1. The "approve to receive" trick

A scammer sends you a UPI collect request dressed up as a payment to you. They might say "I'm sending you Rs 5,000, please approve to receive." You enter your PIN to "approve," but you've actually authorised a debit. Rule: you never enter your UPI PIN to receive money. Only to send.

2. Fake customer-care numbers

Someone Googles "PhonePe customer care" and lands on a phishing page with a fake number. Calls them. The fake "agent" asks them to install a "support tool" (typically AnyDesk or TeamViewer), which gives the scammer screen access to harvest OTPs in real time. Rule: only use customer-care numbers from inside the official app.

3. QR code switcheroo

A scammer pastes their QR sticker over a merchant's, so payments meant for the merchant land in the scammer's account. Rule (for merchants): check daily that your QR is intact and that the displayed payee name matches your shop. Rule (for customers): always verify the payee name shown by the app before confirming.

4. Wrong-number "OOPS" payment

You "accidentally" receive a small payment from an unknown number, who then begs you to refund it. Days later they file a chargeback. The original payment was made from a stolen card or compromised account, and you've now refunded clean money to a fraudster. Rule: if you receive an unexpected payment, raise it with your bank — don't refund directly.

5. Loan-app honey trap

Predatory loan apps require UPI auto-debit mandates as a condition of approving a small loan. They then charge enormous "processing fees" through the auto-debit. Rule: review every UPI mandate carefully in your bank app's Mandates section. You can revoke them at any time.

If something goes wrong, act fast. Call your bank immediately, file a complaint via the NPCI dispute mechanism in your UPI app, and report financial fraud on the cybercrime helpline 1930 within the first 24 hours. Recovery is significantly higher within the first window before funds get layered into mule accounts.

When a UPI payment fails

UPI failures fall into three buckets, each with a different resolution path:

Frequently Asked Questions

Do I need an IFSC for UPI?

No, the UPI app handles the IFSC lookup internally. You only need the recipient's UPI ID or QR code. If you'd like to look up an IFSC for any other reason, our free IFSC search tool covers every Indian bank branch.

Can I use UPI without a debit card?

You need a debit card just to set up the UPI PIN initially. After that, the card is no longer required. Some banks (notably HDFC, ICICI, Axis) now also offer Aadhaar-based UPI activation that bypasses the need for a debit card altogether.

Is UPI safe to use on multiple apps?

Yes. Each UPI app stores its own UPI PIN configuration, but they all settle through NPCI. There's no cross-app risk.

Can foreigners use UPI in India?

Yes, since 2024 NPCI's UPI International programme allows non-resident Indians and even some foreign tourists to use UPI through partner apps. The recipient and merchant experience is identical to domestic UPI.

What happens to UPI if the internet goes down?

NPCI introduced UPI 123Pay for feature phones, which works over IVR and missed-call flows without needing data. There is also UPI Lite for offline-style small-value transactions that settle when connectivity returns.

Final thoughts

UPI's beauty is its simplicity — a single ID, free of charge, settled in real time. But that simplicity is built on a layered foundation of IMPS, NPCI, your bank, and dozens of cooperating institutions. Knowing how those layers fit together makes you a better, safer user. The one habit that will serve you longest is to slow down by half a second before every UPI confirmation: read the payee name, glance at the amount, and only then enter your PIN.

For a deeper look at UPI's underlying transfer system, read our NEFT vs RTGS vs IMPS guide. And if you want to budget around your UPI spending, try our free budget planner.

IFSCNOW Editorial Team

Independent banking and payments writers. We base our coverage on RBI circulars, NPCI publications, and bank communications, cross-checked with everyday user testing.