UPI Transaction New Rules 2026
What actually changed in UPI this year? This guide separates the new merchant MDR framework, transaction limits, biometric payments and RBI security rules from viral claims—using official NPCI, RBI and Ministry of Finance sources.
Consumers stay free. Merchant pricing changes.
The most important 2026 distinction is between customers sending money and merchants receiving specified UPI payments. The new MDR framework is a merchant-side payment-ecosystem charge—not a general consumer transaction fee.
Explore this guide
What are the UPI transaction new rules in 2026?
The headline change is the revised merchant MDR framework announced in September 2026. Consumers remain free from UPI transaction charges, while specified merchant payments above ₹2,000 can attract merchant-side MDR from 15 October 2026. Separately, NPCI raised the on-device biometric UPI authentication ceiling to ₹10,000, and RBI's broader digital-payment authentication directions became applicable from 1 April 2026.
P2P transfers remain free. Merchant-side pricing changes apply only to specified P2M transactions, while small-value and small-merchant transactions continue to have zero MDR under the announced framework.
New merchant MDR framework
Specified P2M payments above ₹2,000 move to merchant-side MDR. Consumers are not the payer of this MDR.
Standard rate: 0.4%, subject to category rules₹10,000 biometric approval limit
NPCI doubled the on-device biometric authentication ceiling from ₹5,000 to ₹10,000 for eligible UPI transactions.
UPI PIN continues; biometric use is not a new general UPI capRBI authentication directions
Covered domestic digital payments follow a two-factor framework, with at least one factor dynamically created or proven unless exempted.
OTP is not bannedUp to ₹5 lakh for selected use cases
Higher ceilings apply to approved categories and verified merchants. This does not turn every P2P transfer into a ₹5 lakh transaction.
Bank/app internal limits may be lowerUPI Lite: ₹1,000 per transaction
RBI's enhanced UPI Lite framework supports up to ₹1,000 per transaction and a ₹5,000 wallet limit.
Designed for small-value paymentsUPI 123Pay: ₹10,000
The per-transaction ceiling was enhanced to ₹10,000, expanding UPI use cases for feature-phone users.
Availability depends on participating servicesSources: Ministry of Finance / PIB, 15 Sep 2026 · NPCI UPI circulars · RBI digital-payment authentication directions
UPI charges in 2026: who pays and who stays free?
Do not read “0.4% MDR” as a 0.4% fee on every UPI payment. The new framework separates P2P transfers, customer payments, small merchants and specified merchant categories.
| Transaction type | 2026 treatment | Who bears MDR? | Key threshold / rate | Practical meaning |
|---|---|---|---|---|
| P2P: person to person | Free | No consumer MDR | Free irrespective of amount, subject to applicable transfer limits | Sending money to family or friends remains outside the MDR framework. |
| P2M up to ₹2,000 | Zero MDR | No MDR | ₹2,000 or below | Everyday low-value merchant UPI payments remain free of MDR. |
| Small merchant / P2PM | Zero MDR | No MDR under announced framework | Small merchants receiving up to ₹1 lakh/month through UPI QR | Designed to protect street vendors and neighbourhood businesses. |
| Specified regular P2M above ₹2,000 | Merchant MDR | Merchant ecosystem | 0.4%; capped at ₹300 for ₹75,000+ | A ₹10,000 qualifying payment implies ₹40 MDR for the merchant. |
| Essential / thin-margin sectors | Special flat MDR | Merchant ecosystem | ₹5 for qualifying payments above ₹2,000 | Includes announced categories such as railways, telecom, insurance, fuel and agricultural inputs. |
| Capital-market payments | Special lower MDR | Merchant ecosystem | 0.02%; capped at ₹300 | Applies to categories such as mutual funds, securities, stockbrokers and dealers. |
Illustrative MDR on standard 0.4% transactions
Calculated from the announced standard MDR, with the ₹300 cap applied.
Most merchant transactions remain unaffected
The Ministry of Finance says about 96% of P2M transactions remain outside MDR because they are low-value or protected small-merchant transactions.
Only a limited share of merchant UPI transactions falls into the new chargeable categories.
The Government says MDR is not a customer charge. Banks have been advised to ensure merchants do not pass the UPI MDR to customers, and the framework keeps P2P transfers free.
Primary source: Ministry of Finance / PIB — UPI framework, 15 September 2026.
UPI transaction limit 2026: normal, daily and category-wise limits
There is no single UPI limit for every payment. The ceiling depends on the transaction type, merchant category, authentication route and the internal risk limits of your bank or UPI app.
| UPI use case | Reference ceiling | Important condition | What users should know |
|---|---|---|---|
| Normal UPI transaction | Generally up to ₹1 lakh / transaction | Subject to bank/app limits | NPCI's public FAQ describes normal UPI at up to ₹1 lakh per transaction. |
| Tax payments | Up to ₹5 lakh / transaction | Eligible payment flow | RBI enhanced the tax-payment UPI ceiling from ₹1 lakh to ₹5 lakh. |
| Capital markets | ₹5 lakh / transaction; ₹10 lakh cumulative / 24h | Verified merchant category | NPCI's higher-limit framework applies category controls. |
| Insurance | ₹5 lakh / transaction; ₹10 lakh cumulative / 24h | Verified merchant category | Acquiring and issuing-bank controls still apply. |
| Travel | ₹5 lakh / transaction; ₹10 lakh cumulative / 24h | Specified merchant category | Not a general P2P ceiling. |
| Credit-card bill payment | ₹5 lakh / transaction; ₹6 lakh cumulative / 24h | Specified category | Issuer controls can be stricter. |
| Jewellery | ₹2 lakh / transaction; ₹6 lakh cumulative / 24h | Specified merchant category | Higher generic ₹5 lakh headline does not apply here. |
| UPI Lite | ₹1,000 / transaction; ₹5,000 wallet | Small-value UPI Lite flow | Different from the linked bank account's normal UPI limit. |
| UPI 123Pay | ₹10,000 / transaction | Feature-phone UPI product | Daily and bank-level risk controls can still apply. |
| On-device biometric authentication | ₹10,000 / eligible transaction | Authentication-method ceiling | This is not the overall UPI transaction limit. |
NPCI's ceiling is not a promise that every bank will permit the maximum. The higher-limit circular expressly allows member banks to set internal limits based on their policies.
Sources: NPCI UPI FAQs · NPCI higher-limit circular OC-185B · RBI tax-payment UPI limit.
New ₹10,000 UPI biometric payment rule
From 7 August 2026, NPCI increased the per-transaction ceiling for eligible UPI payments approved through on-device biometric authentication from ₹5,000 to ₹10,000.
A ₹10,000 biometric ceiling tells you how much may be approved with that authentication method. The underlying UPI transaction may have a different category limit.
Two-factor authentication rules applicable from April 2026
RBI's Authentication Mechanisms for Digital Payment Transactions Directions, 2025 became applicable from 1 April 2026. The framework is broader than UPI, but it directly matters to UPI apps, banks and payment flows.
| Rule | 2026 position | What it means for UPI users |
|---|---|---|
| Minimum authentication | At least two distinct factors for covered digital payments, unless exempted | The payment chain must meet RBI's authentication principles. |
| Dynamic factor | At least one factor must be dynamically created or proven for non-card-present digital payments | At least one proof is unique to that transaction. |
| SMS OTP | Not banned | RBI allows innovation beyond OTP but does not require OTP to disappear. |
| Risk-based controls | Additional checks can be used | Banks may add stronger verification to higher-risk activity. |
Some headlines describe biometrics as a replacement for UPI PIN or OTP. The actual regulatory direction is technology-neutral: multiple authentication factors can be used as long as the required security principles are satisfied.
Source: Reserve Bank of India — Authentication Mechanisms for Digital Payment Transactions Directions, 2025.
What businesses should change before 15 October 2026
If your business receives significant UPI payments, the new framework is not just a payments-news story. It can affect settlement economics, reconciliation and how you communicate with customers.
Confirm whether the account is treated as small merchant/P2PM, regular P2M or a special sector.
Start with acquirer/bank recordsMeasure what share of receipts are above ₹2,000 and which are in special-rate categories.
Use real settlement dataAdd merchant MDR as a separately tracked payment-processing cost where applicable.
Match gross sales to net settlementThe Government states that customers should not be charged UPI MDR.
Train billing teamsKeep the payment-processing document and settlement reports for bookkeeping and tax reconciliation.
Coordinate with your accountantHigher NPCI ceilings do not force your issuer to allow the maximum.
Confirm actual operating limitsIf a qualifying regular merchant receives a ₹10,000 UPI payment after the framework takes effect, a 0.4% standard MDR equals ₹40. A ₹75,000 qualifying payment reaches the ₹300 cap; payments above that remain capped at ₹300 under the announced standard structure.
Source: Ministry of Finance / PIB — revised UPI MDR framework.
UPI transaction data: April–August 2026
The rule changes arrive at enormous scale. NPCI's monthly statistics show UPI volume rising to about 24.51 billion transactions in August 2026.
Monthly UPI volume
NPCI volume in millions; labels below show approximate billion transactions.
Monthly UPI value
Transaction value stayed around ₹29 lakh crore each month while volume kept climbing.
How much higher are selected limits?
Visual scale using the current reference ceilings described above.
2026 UPI rule timeline
Two-factor principles become the operating baseline for covered digital payments.
NPCI's revised on-device biometric limit takes effect.
Merchant pricing structure is clarified.
Specified P2M transactions above ₹2,000 move to the announced pricing framework.
Data source: NPCI UPI Product Statistics, FY 2026-27.
UPI fraud, collect requests and wrong transfers in 2026
The safest mental model is simple: receiving money does not require you to enter a UPI PIN. A PIN authorises a debit from your account. Also remember that person-to-person UPI collect requests were discontinued from 1 October 2025, so normal P2P payments in 2026 are payer-initiated.
A UPI PIN is used to authorise payment from your account, not to unlock an incoming payment.
Review the recipient shown by your app, especially when scanning an unfamiliar QR code.
NPCI's UPI FAQ directs users to their participating app/bank for transaction grievances and status.
Banks and legitimate support teams should not ask you to reveal a UPI PIN.
Save transaction ID, timestamp, amount and recipient details before contacting the app/bank.
If fraud is suspected, report it immediately through your bank/app and the relevant official cyber-fraud channel.
References: NPCI UPI FAQs · NPCI UPI circulars.
Five viral UPI claims you should not misread
| Claim | Reality in 2026 | Why it matters |
|---|---|---|
| “Every UPI payment above ₹2,000 has a 0.4% charge.” | No. The 0.4% standard MDR is for specified merchant-side P2M transactions; P2P stays free and multiple zero/special-rate categories exist. | Do not treat merchant MDR as a customer tax. |
| “UPI limit is now ₹5 lakh for everyone.” | No. ₹5 lakh applies only to selected eligible categories and verified merchant use cases. | P2P and bank/app limits remain separate. |
| “₹10,000 is the new UPI limit.” | No. ₹10,000 is the on-device biometric authentication ceiling and also the UPI 123Pay per-transaction ceiling. | Different products can share the same number for different reasons. |
| “Fingerprint has replaced UPI PIN.” | No. Biometric authentication is an optional supported route; UPI PIN remains. | Availability varies by bank, app and device. |
| “RBI banned OTP from April 2026.” | No. RBI allows alternative factors but did not discontinue SMS OTP. | The rule is about strong, flexible authentication—not one mandatory technology. |
Core UPI 2026 questions covered on this page
The page is intentionally structured around closely related search intents instead of creating thin, cannibalising pages for every wording variation.
The keywords are used naturally in the title, headings, tables, FAQs and structured data. Meta-keywords alone do not create rankings; source quality, search-intent match, internal links, freshness and page experience matter more.
Sources used for this 2026 UPI guide
Payment rules move quickly. These links point to the primary regulatory or official sources used for the figures and rule summaries above.
Frequently asked questions
What are the new UPI transaction rules in 2026?
The major 2026 developments include the revised merchant MDR framework effective 15 October 2026, the ₹10,000 on-device biometric authentication ceiling effective 7 August 2026, and RBI's digital-payment authentication directions applicable from 1 April 2026. Existing product and category limits also remain relevant.
Will customers pay UPI charges in 2026?
No. The Ministry of Finance says UPI remains free for citizens and P2P transfers remain free. The new MDR is a merchant-side payment-ecosystem charge on specified P2M transactions.
What is the UPI MDR rate from 15 October 2026?
The announced standard MDR is 0.4% for specified P2M transactions above ₹2,000, capped at ₹300 for transactions of ₹75,000 and above. Special rates apply to some sectors.
Are UPI merchant payments below ₹2,000 free?
Yes. P2M transactions up to ₹2,000 remain at zero MDR under the revised framework. Small merchants covered by the P2PM zero-MDR category also retain protection.
What is the normal UPI transaction limit in 2026?
NPCI's public FAQ states that normal UPI is generally up to ₹1 lakh per transaction. Your bank or app can impose a lower operating limit.
Can I transfer ₹5 lakh through UPI?
Only where the transaction qualifies for a higher permitted category. Several specified verified-merchant use cases can reach ₹5 lakh per transaction, but that is not the general P2P ceiling.
What is the UPI biometric payment limit in 2026?
NPCI increased the eligible on-device biometric authentication ceiling from ₹5,000 to ₹10,000 per transaction with effect from 7 August 2026.
Has the UPI PIN been removed?
No. Biometric approval is an optional authentication route for eligible transactions. The UPI PIN continues to be supported.
Has RBI banned SMS OTP?
No. RBI's framework permits different authentication factors and specifically does not require SMS OTP to be discontinued.
What is the UPI Lite limit in 2026?
UPI Lite supports up to ₹1,000 per transaction with a ₹5,000 wallet limit under the RBI framework.
What is the UPI 123Pay transaction limit?
RBI enhanced the UPI 123Pay per-transaction limit to ₹10,000 for feature-phone users.
Can I use P2P UPI collect requests in 2026?
No. NPCI discontinued person-to-person UPI collect requests from 1 October 2025. Normal payer-initiated transfers and merchant payments continue.
Keep payments, books and compliance aligned
CompanyJi can help businesses with company registration, GST registration, return filing and recurring compliance so your payment records connect cleanly with the rest of the business.
Request a callback
Share your name, mobile number and email address.