Archive · 30 Jul 2026
India's UPI to Mask Phone Numbers, Boost Privacy, Fight Fraud
India’s big payment system, called UPI, is getting a makeover to keep people’s phone numbers private.
From September 2026, UPI apps will only show the last four digits of a phone number and a username.
Users will also be able to pay using their fingerprint or face, so they don’t need a PIN.
To stop bad guys from scamming people, the system will use smart computer tricks that look at how people normally use their phones.
If the police need to investigate, they can only get the full details if a court says so.
This plan helps keep money safe while protecting privacy.
NPCI mandates UPI apps to hide users' mobile numbers by September 2026.
Only last four digits and username-based IDs will be displayed publicly.
On-device biometric authentication (fingerprint/facial) will enable PIN‑free credit payments.
AI‑driven fraud detection and behavioural analytics will offset reduced visibility.
Lawful access to personal data will be limited to court orders or statutory requests.
- Who
- National Payments Corporation of India and UPI platforms
- What
- Implement privacy measures and fraud detection for UPI transactions
- When
- Implementation deadline September 4, 2026; current status as of 2026
- Where
- India
- Why
- To protect user privacy, reduce scams, and maintain security
- Implementation Deadline
- September 4, 2026
- Mobile Number Masking
- Only last four digits displayed
- Biometric Authentication
- Fingerprint or facial recognition
- Fraud Detection
- AI-driven behavioural analytics
- Lawful Access
- Court orders or statutory requests