How UPI actually works — a plain-English guide.
Unified Payments Interface (UPI) is India's real-time payment system, built and operated by the National Payments Corporation of India (NPCI). Launched in 2016, it lets anyone move money between bank accounts instantly using a virtual payment address (VPA), a QR code, or a mobile number. Without sharing account numbers or IFSC codes.
The pieces involved
- NPCI operates the central switch that routes every UPI transaction between banks.
- Issuing and acquiring banks hold the payer's and payee's accounts and authorise debits and credits.
- Payment Service Providers (PSPs) are banks that connect consumer apps to the UPI network.
- Third-Party Application Providers (TPAPs) are the consumer apps people actually use. They ride on a PSP bank's connection.
What happens in a payment
When a payer approves a payment with their UPI PIN, the request travels from the app to its PSP bank, through the NPCI switch, to the payer's bank for debit and the payee's bank for credit. The whole loop (including checks at each hop) completes in seconds, around the clock, every day of the year.
One payment, hop by hop
- You start the payment. You scan a QR, type a UPI ID or pick a contact. Your app only works because it has been tied to your phone's SIM and to a bank account during setup.
- The app asks its PSP bank. The request goes to the bank that sponsors your app on UPI. It packages it as a pay request for the NPCI switch.
- NPCI finds the receiver. The switch asks the receiver's PSP who owns that UPI ID, and gets back the account behind it. That's why your app can show the receiver's name before you pay.
- You enter your UPI PIN. The PIN is captured by NPCI's own secure component inside the app and travels encrypted to your bank. The app itself never sees it.
- Your bank debits you. It checks the PIN, your balance and its own limits and risk rules, then debits the account.
- The receiver's bank credits them. NPCI sends the credit, the receiver's bank confirms, and both sides get a success response carrying the same reference number (RRN).
All of this usually takes a few seconds. If any hop says no, you get a response code instead. Our list of UPI error codes explains what each one means and whether money left your account.
Push payments and collect requests
Most UPI payments are push: you start them and send money out. A collect request works the other way. A merchant or person asks for money, and it lands in your app waiting for approval. Nothing moves until you enter your PIN, which is why the rule is simple: you never need your PIN to receive money. Anyone who says otherwise is running a scam.
Beyond one-off payments
- UPI AutoPay lets you approve a recurring mandate once, for subscriptions, EMIs or SIPs. See how AutoPay mandates work.
- UPI Lite keeps a small balance on your phone for low-value payments without a PIN each time.
- RuPay credit cards on UPI let you pay a UPI QR from a credit line instead of a bank account. The volume is still small but growing fast; the UPI statistics page has the official numbers.
Where the money actually settles
For you, a UPI payment is final in seconds. Between banks, it isn't settled one payment at a time. NPCI nets out what each bank owes the others and settles those totals in several settlement cycles through the day. The customer sees real time; the banks see batches. That gap is where reconciliation work, disputes and chargebacks live.
How big it has become
According to figures tabled in the Rajya Sabha, UPI handled about 18 million transactions in 2016-17 and about 83,751 million in 2022-23. The UPI statistics page lays out the year-by-year numbers, UPI against cards, IMPS, NEFT and RTGS, and fraud cases, all from data.gov.in.
Why it matters for institutions
For banks and fintechs, UPI is not one integration but several: acquiring (accepting payments), issuing (letting customers pay), complaint and dispute handling, settlement and reconciliation. Each has its own operational and compliance surface — which is exactly the layer ZyroAI's UPI Stack takes care of, with Sentinel scoring transactions for fraud before settlement.