RBI's UPI Rules in 2026: What Changed and What It Means for You
UPI has become the backbone of India's digital payment system, handling billions of transactions every month. As the system has scaled, RBI and NPCI have progressively updated the rules — increasing limits, adding features, tightening security, and expanding access.
If you use UPI for daily transactions (which, if you're in urban India, you almost certainly do), several updates from 2025–2026 are worth knowing. Here's what changed and what it means for how you pay.
Transaction Limit Updates
Standard UPI transaction limit: The per-transaction limit for most UPI payments remains ₹1 lakh for standard bank-to-bank transfers. This covers the vast majority of personal and small business transactions.
Higher limits for specific categories: RBI has progressively allowed higher UPI limits for specific transaction types:
- Hospital and healthcare payments: up to ₹5 lakh per transaction
- Educational institution fee payments: up to ₹5 lakh per transaction
- IPO applications via UPI: up to ₹5 lakh
These higher limits were introduced to make UPI practical for large, essential payments that previously required NEFT or RTGS — which involved bank branch visits or net banking, rather than the simplicity of UPI.
UPI Lite: For small transactions (under ₹500), UPI Lite's on-device wallet continues to operate with a ₹2,000 maximum balance. This limit is intentional — it keeps the at-risk amount low given that UPI Lite transactions don't require PIN authentication.
New Features That Affect Everyday Users
UPI Circle (Delegated Payments): One of the more significant 2025 introductions, UPI Circle allows a primary account holder to delegate limited UPI payment capability to a secondary user — a family member, typically.
This means a parent can authorise a child (or an elderly parent can authorise their child) to make UPI payments from a linked account, within limits set by the primary holder. The secondary user can transact on the linked account without needing the primary account's UPI PIN for transactions within the delegated limit.
Practically, this is useful for: giving a college-going child a spending allowance without a separate account, allowing elderly parents who are less comfortable with apps to make payments through a trusted family member's phone, and household management where one person manages payments for the family.
Credit Line on UPI: RBI has progressively expanded the ability to link credit lines (pre-sanctioned credit from banks) to UPI, allowing payments to be made from a credit facility rather than a bank account. This is distinct from credit cards on UPI (which also exists) — it's a bank-issued credit line accessible through the UPI interface.
This effectively allows UPI to function as a credit card for those who qualify for a bank credit line, without requiring a physical card. Repayment works similarly to a credit card — settle the credit line by the due date.
Conversational Payments (UPI AI features): NPCI has been working on enabling conversational, AI-assisted UPI payments — where you can initiate payments through chat or voice interfaces rather than navigating through an app. This is in early rollout and will gradually become more available through partner apps.
Security Updates You Should Know About
Inactive UPI ID deactivation: NPCI has tightened rules on inactive UPI IDs. UPI IDs linked to phone numbers that have been reassigned to new users (which happens when a number is surrendered and reissued) will be deactivated more quickly to prevent misdirected payments.
What this means for you: if you've changed your phone number and haven't updated it across your UPI apps and bank accounts, your old UPI ID may be deactivated. Ensure your linked mobile number is current across all banking relationships.
Two-factor authentication reinforcement: For high-value UPI transactions and new device logins, the verification requirements have been reinforced. If you're setting up UPI on a new phone, expect more verification steps than before — this is a security enhancement, not a bug.
Cooling period for new payees: Several banks have introduced a cooling period (typically 4–24 hours) before the first large transaction to a new UPI payee can be processed. This is a fraud prevention measure — it creates a window to catch transactions initiated by scammers before the money is irreversibly transferred.
If you urgently need to send a large amount to a new recipient, be aware that your bank may hold the first transaction for a cooling period. Plan accordingly for time-sensitive payments.
UPI fraud reporting: NPCI has streamlined the UPI fraud reporting mechanism. If you've been scammed or made a mistaken payment, you can now report it directly through your UPI app (look for a flag or report option on any transaction) as well as through the traditional bank complaint process. Early reporting is critical — the sooner a dispute is raised, the higher the chance of recovery.
Changes That Affect Merchants
UPI for international payments: RBI has progressively expanded UPI's international reach, allowing Indian UPI users to make payments in several countries (Singapore, UAE, Bhutan, Nepal, and others in the growing list). If you travel internationally, check whether the destination is on the enabled list before assuming UPI will work there.
Merchant discount rate (MDR) on UPI: RBI continues to mandate zero MDR for UPI transactions below ₹2,000 at small merchants. This ensures UPI remains free at the point of use for small businesses and their customers.
What Hasn't Changed
UPI remains free for users. Despite periodic speculation about transaction charges, UPI remains free for personal use — no fees to send or receive money, regardless of the bank or app.
Real-time settlement remains the norm. UPI transactions continue to settle in real time (money moves instantly from sender to receiver). The T+0 settlement that makes UPI so useful for daily transactions hasn't changed.
Interoperability is maintained. A Google Pay user can still send to a PhonePe user, an HDFC UPI ID, or any other UPI-enabled account. The open interoperability that makes UPI uniquely useful is a core design principle that hasn't been compromised.
Practical Implications for Your Daily UPI Use
Update your mobile number with your bank if you've changed it. With NPCI's more aggressive deactivation of stale UPI IDs linked to reassigned numbers, keeping your mobile number current is more important than before.
Be patient with new payee cooling periods. If you're sending a large amount to someone new and it gets held for a few hours, this is your bank's fraud prevention working correctly — not a system failure.
Explore UPI Circle if you manage finances for a family member. If you have elderly parents or college-going children who struggle with UPI apps or need a monitored spending arrangement, UPI Circle provides an elegant solution without the complexity of separate accounts.
Use the fraud reporting option promptly if something goes wrong. The faster you report a suspicious or mistaken UPI transaction, the better your chances of recovery. Don't wait for the bank to discover it — report it yourself through the app immediately.
UPI's evolution continues to make it more capable, secure, and accessible. The changes in 2025–2026 are broadly user-friendly — more features, higher limits where needed, and stronger security without significant new friction for legitimate use. Staying aware of what's changed ensures you're using UPI with the current rules and protections in mind.