The Zero-Fee Dilemma
One of the biggest drivers of UPI's explosive growth was its zero-cost model for users and merchants. This was a deliberate policy to encourage digital adoption, but it came at a cost. The government has been subsidising banks and payment service providers
to cover their operational expenses. With transaction volumes now in the trillions of rupees, this subsidy model is under strain. Policymakers are now intensely debating the reintroduction of a Merchant Discount Rate (MDR) — a small fee paid by merchants for processing payments. Recent discussions suggest a potential MDR of 0.3% could be applied to UPI transactions above a certain threshold, like ₹2,000 or ₹3,000. The goal is to ensure the long-term financial sustainability of the UPI ecosystem without discouraging the small-value transactions that form its backbone. The government has clarified that consumers will not be charged, but a shift for merchants could be on the horizon.
Tackling the Concentration Risk
The UPI market has become a duopoly. As of late 2024, PhonePe and Google Pay collectively processed over 80% of all UPI transactions. This level of concentration poses a systemic risk; if one of these major platforms were to fail, it could disrupt a huge portion of the country's retail payments. To counter this, the National Payments Corporation of India (NPCI) introduced a rule to cap any single app's market share at 30% of total transaction volume. However, implementing this has proven difficult. Forcing a successful company to stop onboarding new users is a tough pill to swallow, and the deadline for compliance has been repeatedly extended, now standing at December 31, 2026. An RBI Deputy Governor has publicly noted the practical challenges of enforcing such a cap, suggesting that encouraging new players to enter and grow might be a more effective long-term solution.
The Global Ambition and Its Hurdles
Taking UPI global is a key priority, turning a domestic success into a tool of India's soft power. Partnerships have been signed with over a dozen countries, including Singapore, the UAE, France, and Japan. The vision is to allow Indian travellers to pay seamlessly abroad and to simplify cross-border remittances. However, progress has been slower than the headlines suggest. Challenges include navigating complex international regulations on foreign exchange and data security, and ensuring technical interoperability with diverse foreign payment systems. Furthermore, merchant adoption and training abroad have been inconsistent. While a user might be able to pay with UPI in a Singaporean food court, finding a similarly enabled merchant in another partner country can be difficult. Policymakers are now focused on moving from high-level agreements to building reliable, bilateral payment rails that work consistently for users.
Strengthening Security as Volumes Soar
With over 550 million users as of June 2026, UPI has become a prime target for fraudsters. As usage grows, so do the risks of phishing, mule accounts, and social engineering scams. In response, regulators are rolling out a wave of security enhancements. Effective April 2026, a major RBI directive mandates stronger two-factor authentication for all digital payments, requiring at least one dynamic element like a biometric scan or a secure in-app approval for every transaction. The RBI has also proposed other measures, such as a one-hour 'cooling-off' period for high-value transfers to new payees, giving users a window to cancel a potentially fraudulent transaction. These rules aim to make the system more resilient and bolster user trust, which is critical for UPI's continued success.
