What is the RBI Proposing?
The Reserve Bank of India has floated a discussion paper suggesting new safety measures for digital payments to tackle a surge in online fraud. The most significant proposal involves adding 'friction' to certain Unified Payments Interface (UPI) transactions.
This isn't about stopping payments, but about slowing them down deliberately. One key idea is a potential time-out or cooling-off period for large person-to-person (P2P) transfers. For example, a payment over a certain threshold, like ₹10,000, might be held in a provisional state for up to an hour before being credited to the recipient's account. During this window, the sender would have the option to cancel the transaction if they realize they've been scammed. Other proposals include a 'Yes/No' pop-up for risky transactions and additional authentication for vulnerable users, such as those over 70.
The Billion-Rupee Fraud Problem
The reason for this proposed change is simple: money lost to digital fraud has skyrocketed. As UPI's popularity has grown, so has its appeal to criminals. According to RBI data, while transactions above ₹10,000 make up about 45% of fraud cases by volume, they account for a staggering 98.5% of the total value lost. Scammers have become experts in 'social engineering'—tricking, coercing, or impersonating authorities to pressure people into making instant, irreversible payments. These are often called 'authorised push payment' frauds, because the victim authorises the transaction themselves, making it difficult to reclaim the funds. The current system's greatest strength, its instant and final nature, becomes a major weakness in these scenarios. By the time a victim realizes their mistake, the money is often long gone. The RBI's proposal is a direct attempt to give users a crucial window to rethink and reverse a fraudulent payment.
A Speed Bump for Safety
So, how would this work in practice? Imagine you're sending ₹50,000 to a new contact. After you enter your UPI PIN, the money would be debited from your account, but instead of an instant credit, it would enter a one-hour holding period. Both you and the recipient would be notified, but the funds would not be accessible to them. If you get a gut feeling that something is wrong or realize you've been duped, you could enter your UPI app and cancel the transaction within that hour. The funds would then be returned to your account. This intentional delay, or 'friction', moves away from the current frictionless ideal and prioritizes security over speed for high-stakes payments. For smaller, everyday transactions, like paying for groceries or a cab, nothing would change; they would remain instant. The proposal specifically targets larger P2P transfers, not merchant payments made via QR codes.
The Convenience vs. Security Trade-Off
While the goal of protecting consumers is widely supported, the proposal has sparked debate within the financial technology sector. Critics worry that adding delays could dilute the core appeal of UPI, which has always been its real-time settlement. For small businesses or individuals who rely on quick, large transfers for legitimate reasons—like paying a supplier or settling a rental deposit—a mandatory one-hour wait could be a significant inconvenience. Some experts argue that instead of a blanket delay, a more sophisticated, risk-based approach should be used, leveraging AI to flag suspicious transactions for extra verification without slowing down all large payments. The core of the debate is finding the right balance: How much convenience are we willing to trade for an extra layer of security? The RBI is currently seeking feedback on this very question from banks, payment companies, and the public before making any final decision.














