What Is UPI? How It Works, Limits and What to Do When a Payment Fails
PERSONAL FINANCE

What Is UPI? How It Works, Limits and What to Do When a Payment Fails

You scan a QR code at a chai stall, tap in your PIN, and about three seconds later the money has left your account and reached the vendor’s. That is UPI, short for Unified Payments Interface, the payment layer the National Payments Corporation of India (NPCI) built on top of the banking system. The speed is the whole point. It is also why a mistake or a scam is so hard to undo.

What actually happens when you pay

UPI is not a wallet and it is not an app. PhonePe, Google Pay, Paytm, BHIM and your own bank’s app are front ends. Behind them, your bank debits your account, the receiver’s bank credits theirs, and NPCI’s switch passes the messages between the two. Your UPI ID (something like name@bankhandle) is just a label that points to a bank account, which is why you never have to hand out your account number or IFSC code.

One rule is worth burning into memory. The UPI PIN is for sending money. Entering it is the step that authorises a debit. If anyone asks you to enter your PIN to receive money, that is fraud, every time. Receiving never needs a PIN.

Setting it up

It takes about five minutes if the basics are right.

  • Keep the SIM registered with your bank inside the phone. The app verifies you by sending an SMS from that number, and a dual-SIM phone with the wrong SIM selected is a common reason setup fails.
  • Install an app from the official store, allow the SMS permission, pick your bank, and let it find the linked account.
  • Set a UPI PIN using the last six digits and expiry date of your debit card. Some banks also offer Aadhaar-based OTP setup.
  • Send a small amount, say ₹10, to someone you know before you rely on it for anything that matters.

You can link more than one bank account and choose which one pays by default. Check that default before scanning, especially if you keep a salary account and a spending account.

Limits: read the lowest number, not the famous one

Limits are set at three levels, by NPCI, by your bank and by the app, and the lowest one wins. So a limit quoted in a news story may not be the one on your phone.

WhatLimitWorth knowing
Person to person₹1 lakh per dayNPCI’s standard cap. Banks can set it lower.
Most merchant paymentsGenerally ₹1 lakh per transactionYour bank may set a lower daily total.
Selected verified-merchant categories (insurance, capital markets, travel, loan and EMI collections, government e-marketplace)Up to ₹5 lakh per transaction and ₹10 lakh per dayNPCI raised these from 15 September 2025. Credit card bills: ₹5 lakh per transaction, ₹6 lakh per day.
UPI Lite₹1,000 per payment without a PIN; ₹5,000 maximum balanceA small on-phone balance for low-value payments. Check your app for the daily cap.
First day after a new PIN or new phoneOften ₹5,000A cooling-off rule some banks apply. SBI does, for example.
Number of paymentsBank-specific, often around 20 a day for P2PCheck with your bank.

If you are paying a college fee or a large premium, check your limit the day before, not at the counter. For bigger transfers between people, use NEFT or RTGS instead, which have no upper cap set by the RBI, although your bank may set one.

When the money leaves but the payment fails

This happens to everyone sooner or later. The screen says failed, your SMS says debited.

Under the RBI’s rules on failed transactions, if money left your account but did not reach the person you paid, the receiving bank must reverse it by the next working day (T+1). For merchant payments where you never got a confirmation, the window is five days (T+5). If the bank misses it, it owes you ₹100 for every day of delay, paid without you having to ask.

So the sequence is simple. Wait a working day. Check your bank statement, not just the app, because the app often lags. Note the 12-digit UPI reference number from the transaction. If nothing has moved, raise a complaint in the app, then with your bank, and if it still goes nowhere, take it to the RBI’s Integrated Ombudsman.

Sending money to a wrong UPI ID is different. That payment succeeded, into a real person’s account, so nobody can reverse it on their own. Tell your bank immediately and ask them to contact the receiving bank. Whether you get it back depends on whether the receiver agrees, which is why the extra second spent reading the name on the confirmation screen is worth it.

The scams I would actually watch for

The collect-request trick. Someone selling you a sofa on a classifieds site says they will send an advance, and a request pops up. You tap approve and enter your PIN. You have paid them. Read whether the screen says Pay or Receive before you do anything.

The fake customer care number. You search for a bank’s helpline, a scammer’s number sits at the top, and the person on the line asks you to install a screen-sharing app. Never install one at a stranger’s request. Get helpline numbers from the back of your card or the bank’s own site.

The QR code for receiving money. A QR code only ever sends money out. Nobody needs you to scan one to receive anything.

If you do get caught, call your bank right away and report it on 1930 or at cybercrime.gov.in. The first hour matters more than anything else you do.

What it costs you

Paying someone from your bank account through UPI is free. Some apps add a platform fee on mobile recharges or bill payments, so look at the final screen before you confirm. Merchants do not pay a fee on regular UPI payments either, which is one reason even small vendors accept it.

Key takeaways

  • UPI moves money between bank accounts in seconds, and apps are just the front end.
  • You enter the PIN only to send money, never to receive it.
  • The P2P cap is ₹1 lakh a day, some verified-merchant categories go up to ₹5 lakh per payment, and your own bank’s limit may be lower.
  • A debited-but-failed payment should be reversed by the next working day, or by day five for merchant payments, with ₹100 a day owed for delays.
  • Check the name on the confirmation screen. A wrong-ID payment is very hard to recover.

FAQ

What is the daily UPI limit? For person-to-person transfers NPCI’s standard cap is ₹1 lakh a day. Your bank or app can set it lower, and selected merchant categories have higher caps, up to ₹10 lakh a day. Check the limit shown in your own app.

Can I use UPI without internet? NPCI has a *99# service that works on a basic phone with no data connection, and UPI Lite and UPI 123PAY exist for low-value and feature-phone payments. Features and banks supported vary, so confirm with your bank.

My payment failed but the money was debited. What now? Wait one working day for the automatic reversal, check your statement, and note the UPI reference number. If it is not back after that, complain to your bank and escalate to the RBI Ombudsman if needed.

Is UPI safe? The system is robust. The weak point is the person approving the payment. Do not share your PIN, do not approve requests you did not start, and do not install apps at a stranger’s request.

Sources checked: the NPCI circular of 28 August 2025 on merchant-category limits (via news reports of it), the RBI circular on turnaround time and compensation for failed transactions (20 September 2019), and SBI’s UPI limits page. Limits change, so treat the table as a guide and confirm in your app.

This article is for general education and is not personal financial advice.