What Actually Happens When You Tap 'Pay' on UPI

Scanning a QR code at a tea stall and paying in two seconds feels effortless. Behind that tap, several organisations work together in real time. Understanding how it works also helps you avoid the most common UPI frauds.

The players

• NPCI (National Payments Corporation of India): the umbrella body, promoted by the RBI and the Indian Banks’ Association, that built and runs UPI. It acts as the central switch connecting everyone.
• Your UPI app: PhonePe, Google Pay, Paytm, BHIM or your bank’s own app. These are front-ends; most third-party apps work through partner banks.
• Your bank and the receiver’s bank: where the money actually sits and moves.

The journey of a payment

1. You scan or enter a UPI ID (like name@bank). The UPI ID, or virtual payment address, means you never have to share your account number.
2. You enter your UPI PIN. The PIN is encrypted on your phone and verified by your bank. Your app never sees it in readable form.
3. The request travels through NPCI’s switch, which routes it to your bank to debit your account.
4. Your bank debits you, and NPCI routes the credit to the receiver’s bank.
5. Both of you get confirmation, usually within seconds.

Behind the scenes, banks settle the net amounts they owe each other in batches, but for you and the receiver, the money moves almost instantly.

The one rule that stops most fraud

You never need to enter your UPI PIN to receive money.

A UPI PIN only ever sends money out of your account. Fraudsters send “collect requests” or QR codes saying “enter PIN to receive ₹5,000”. If a screen asks for your PIN, money is leaving your account.

More safety habits

• Check the name shown before confirming a payment. It’s the registered name of the account holder.
• Never share your PIN or an OTP with anyone, including people claiming to be from your bank or the app.
• Set transaction limits in your app if you rarely make large payments.
• Report fraud immediately to your bank and on the national cybercrime helpline 1930 or cybercrime.gov.in.

Why UPI matters

UPI made instant, free, account-to-account payments available to anyone with a smartphone and a bank account, and it’s now the main way India pays. For merchants, it means accepting digital payments with nothing more than a printed QR code.