Citizen Observation 63 of 777 | UPI 54 Pages Circular – P7 | My Face, My Fingerprint — Do I Stay in Control?

Published 12^th October 2026

Nayakanti Prashant
3rd Gen Banker & Citizen Lobbyist – Bengaluru

https://in.linkedin.com/in/prashantnayakanti

The intro

My partner recognises my face, even when I change my look.

But if I register my face for UPI payments today and grow a beard tomorrow, will my UPI app recognise me just as easily?

The Trigger

The trigger is Section 9 — Biometric Authentication, on page 14 of the UPI Consolidated Circular, Version 1.0 dated 18 September 2026.

The circular describes biometric authentication as a way to authenticate UPI transactions using biometrics already registered on the device, including fingerprints and facial recognition, as an alternative to the UPI PIN.

It also addresses device and security validation, user eligibility, explicit and informed consent, notifications when biometric authentication is enabled or disabled, and circumstances in which biometric authentication may become inactive.

What caught my attention was the possibility of using my face to authorise a payment.

I have not enabled biometric authentication for my UPI payments. So this is not a review based on extensive personal use. It is a citizen's question prompted by the circular.

My face changes. My appearance changes. A beard may come and go.

My partner recognises the person behind those changes.

Will my UPI payment journey be just as straightforward?

The Prospective audience

The UPI customer curious about biometric authentication.

The person considering face or fingerprint authentication instead of entering a UPI PIN.

The customer who wants to understand what they are consenting to, what happens when circumstances change, and whether they can continue to stay in control.

And perhaps, like me, the person who has not yet enabled this feature but wants to understand it before making a choice.

I am not approaching this as a technical expert or an experienced biometric UPI user.

I am approaching it as a customer asking a question about a familiar part of life: my face.

This is no longer merely a post about biometric authentication. It begins with something deeply familiar: the person closest to me recognises me even when my appearance changes. Can my digital payment journey give me the same confidence?

Act I — The Face My Partner Knows

My partner recognises me even when I change my look.

A clean-shaven face today. A beard tomorrow. Perhaps a different appearance a few months later.

The person remains the same. The appearance changes.

Now imagine registering my face for UPI payments today. If I grow a beard over time, will my UPI app recognise me just as easily?

It is a small, everyday question. But when my face becomes part of authorising a payment, the question feels personal.

Act II — When My Face Becomes Part of a Payment

Section 9 of the UPI Consolidated Circular introduces biometric authentication as an additional way to authenticate UPI transactions, using biometrics already registered on a supported device—including facial recognition and fingerprints—as an alternative to the UPI PIN.

Ref: The respective parts of UPI-Consolidated-Circular

I have not enabled biometric authentication for my UPI payments. I am not writing from extensive personal experience with this feature.

I am looking at it as a customer considering a possible choice.

My face is familiar to my partner. My fingerprint is familiar to me. But when either becomes part of my payment journey, I want to understand what I am enabling, what I am consenting to, and what happens when circumstances change.

The circular addresses several parts of that journey: device and security checks, eligibility, explicit and informed consent, notifications when biometric authentication is enabled or disabled, and the ability to opt out. It also describes circumstances in which biometric authentication may become inactive.

These provisions matter because authentication is not just about making a payment possible. It is also about knowing what I have chosen and retaining a meaningful say in that choice.

But one personal question remains open: if my appearance changes, will my payment experience remain straightforward?

I cannot answer that from the circular alone. And I do not need to pretend that I can.

Act III — Recognition Is Only the Beginning

Perhaps the more important question is not whether my face changes.

It is whether I understand the arrangement I have entered into when I choose biometric authentication.

Do I know how to enable it? Do I understand the consent being sought? Will I be notified when its status changes? Can I opt out if I no longer want to use it? And if it becomes inactive under the circumstances described in the circular, do I understand what I need to do next?

These are not questions I ask as a technology expert. They are questions I ask before making a choice that becomes part of an everyday payment.

My partner may recognise me through a beard, a haircut or the passing of time.

My phone's biometric system follows its own technical process. I should not assume that human recognition and device authentication work in the same way.

That is precisely why I want to understand the feature before enabling it.

Convenience matters. But understanding what I consent to—and knowing that I retain a choice—matters too.

Citizen Observation — The Question Behind the Face

The UPI Consolidated Circular gives biometric authentication a place in the payment journey. It also describes consent, notifications, opt-out and other safeguards.

My observation begins where the circular's provisions meet a customer's everyday curiosity.

I have not enabled this feature. I do not know from personal use how a change in facial appearance might affect my experience. The circular does not specifically answer my beard question either.

But the question deserves to be asked—not as a complaint, and not as a verdict on the technology.

When my face or fingerprint becomes part of my UPI payment journey, do I understand what I am choosing, what may change, and how I remain in control?

A familiar face may open the conversation.

The real destination is a customer who understands the choice.

Closing thought

My partner recognises the person behind my changing appearance.

When I consider biometric authentication, I want to bring that same human curiosity to my digital payment choices—not assume that a device recognises me in the same way, but understand how its authentication process works and what I have agreed to.

I may choose to enable it. I may choose not to.

Either way, the choice should begin with understanding.

April 11 – Proposed Digital Transactions Day

The April 11 connection — From a payment feature to a citizen's day

April 11 is proposed as Digital Transactions Day—an occasion to pause and reflect on how digital transactions are experienced by the people who use them.

That reflection need not begin with transaction volumes, new features or the speed of a payment. It can begin with a much smaller question: Do I understand the choice I am making when I pay?

Biometric authentication is one example. A face or fingerprint may offer an alternative to entering a UPI PIN. But a customer's journey includes more than the moment of authentication.

It includes understanding the feature, giving informed consent, knowing when its status changes, and being aware of the options available if circumstances change.

That is where this observation finds its connection with the proposed April 11.

Digital Transactions Day should invite us to look beyond whether a transaction can happen—and reflect on whether the citizen understands the journey.

Across CO777, each observation can open a different window into that journey: what I see, what I understand, what I know, what I can control, and what I can trace.

For CO63, the starting point is my face. The wider question is the same one that runs through the series: am I an informed participant in my own digital transactions?

And Digital Transactions can be Financial or Non – Financial, depending on the need at the specific time.

Disclaimer: This is a citizen observation based on the UPI Consolidated Circular, Version 1.0 dated 18 September 2026, and a personal question about biometric authentication.

It is not a technical assessment or a claim that changes in facial appearance cause authentication failure. April 11 — Digital Transactions Day is a proposal.

 

The Joy of Digital Transactions

Nayakanti Prashant
3rd Gen Banker & Citizen Lobbyist – Bengaluru
Advocating Digital Transactions Day (April 11)

Author’s Blogs

https://prashantrandomthoughts.blogspot.com
https://prashantnepayments.blogspot.com
https://innovationinbanking.blogspot.com

 

 

Citizen Observation 57 of 777 | UPI 54 Pages Circular – P4 | Do I Clearly Know Who I Am Paying?

 Published 05^th October 2026

Nayakanti Prashant
3rd Gen Banker & Citizen Lobbyist – Bengaluru

https://in.linkedin.com/in/prashantnayakanti

 

The Intro

CO55 asked:

Is My UPI Number Journey Clear?

Now I move to an even more basic question:

Who am I paying?

I may scan a QR code.

I may enter a UPI ID.

I may use a UPI Number.

I may simply pay a merchant.

But before I press Pay, I want one thing to be clear:

Who is on the other side of my payment?

This is important so the BP does not shoot up, once the payment is made.

 The Trigger

Sections 2.13, 2.14 and 2.15 — Beneficiary and Merchant Identification.

The circular goes beyond simply routing a payment.

It requires the beneficiary's name to be conveyed and displayed to the User before the transaction is initiated, so that the User can verify it. UPI-Consolidated-Circular (1)(1)

For merchant transactions, it also addresses how the end beneficiary's identity is to be conveyed and displayed.

And there is an important customer-facing point:

A name captured from a QR code or entered by the User cannot simply become the beneficiary name displayed for the transaction. UPI-Consolidated-Circular (1)(1)

That gives CO57 its customer question:

Before I press Pay, do I clearly know who I am paying?

 

The Prospective Audience

The UPI customer making a payment.

Not the merchant acquirer.

Not the PSP.

Not the QR infrastructure.

The person standing in front of the payment screen.

The person who wants to know:

Who is this payment going to?

Is the displayed name reliable?

Is this the merchant I intended to pay?

Can I verify before I authorise?

---

The CO777 progression

CO51 — What should I look for?
↓
CO53 — Will I be told clearly?
↓
CO55 — Is my UPI Number journey clear?
↓
CO57 — Do I clearly know who I am paying?

Act I — Before I Press Pay

A UPI payment can begin in many ways.

I scan a QR code.

I enter a UPI ID.

I use a UPI Number.

I select a merchant.

But before I authorise the payment, the circular says transaction details — including the beneficiary name — should be displayed to me. This is an additional step before authentication.

§2.6 | Page 7 | UPI-Consolidated-Circular UPI-Consolidated-Circular (1)(1)

That sounds like a small step.

For me, it is not.

It gives me a moment to pause and ask:

Is this the person or merchant I intended to pay?

---

Act II — The Name I See Matters

The circular becomes more specific when it comes to merchant transactions.

For every merchant transaction, the Payee PSP has to convey the identity of the end Beneficiary.

For a Verified Merchant, the validated brand name is to be conveyed.

For a non-verified Merchant, the circular provides for the CBS name or validated brand name.

And where the merchant transaction involves credit to a User's account on an aggregator platform — including credit card payments, NETC recharge and wallet payments — the end Beneficiary is to be identified by the registered name for that User.

§2.14 | Page 8 | UPI-Consolidated-Circular UPI-Consolidated-Circular (1)(1)

So the question is no longer simply:

Did my payment go through?

It becomes:

Did I know who I was paying before I authorised it?

---

Act III — Can the Name Be Changed?

There is another detail that caught my attention.

The circular says names captured from QR codes or User-defined names should not be displayed as the Beneficiary's name for transaction purposes.

It also requires UPI Application Providers to disable any option that allows Users to modify the Beneficiary's name for transaction purposes.

§2.15 | Page 8 | UPI-Consolidated-Circular UPI-Consolidated-Circular (1)(1)

That makes the customer moment even clearer.

I scan.

I see the name.

I verify.

Then I authorise.

For me, that is more than a display requirement.

It is a moment of trust.

---

Citizen Observation — One Observation at a Time

A UPI payment may take only a few seconds.

But somewhere between scan and Pay is a very important customer moment:

Who am I paying?

The Consolidated Circular addresses that moment through beneficiary identification, merchant identity and the information displayed before authorisation.

I am simply looking at it one customer moment at a time.

Citizen Observation — One Observation at a Time.

---

Closing Thought

A payment can be fast.

A payment can be convenient.

But before I press Pay, I want to know one simple thing:

Who is on the other side?

For me, knowing the beneficiary is not just about completing a transaction.

It is about having a moment to verify before I trust.

---

April 11 — Proposed Digital Transactions Day

This is another small connection to my proposal for April 11 — Digital Transactions Day ( UPI Beta Launch in 2016)

Digital payments have made transactions faster.

But as the journey evolves, the customer should also have opportunities to pause, understand and verify.

CO57 is one such pause.

One payment.
One identity.
One customer observation.

Yes, still mistakes can happen.

---

Disclaimer

This Citizen Observation is based on the UPI Consolidated Circular, Version 1.0 dated 18 September 2026, issued by NPCI.

The observations are made from a customer/citizen perspective and are not intended to constitute a technical interpretation, regulatory opinion, implementation instruction or criticism of NPCI, banks, PSPs, UPI Application Providers or any other ecosystem participant.

Readers are requested to focus on the information, notifications and instructions provided by their respective banks and UPI service providers for their individual circumstances.

The purpose of this observation is to encourage customer awareness and understanding of the UPI journey.

---

The Joy of Digital Transactions

Nayakanti Prashant
3rd Gen Banker & Citizen Lobbyist – Bengaluru
Advocating Digital Transactions Day (April 11)

Author’s Blogs

https://prashantrandomthoughts.blogspot.com
https://prashantnepayments.blogspot.com
https://innovationinbanking.blogspot.com

 

Citizen Observation 55 of 777 | UPI 54 Pages Circular – P3 | Is My UPI Number Journey Clear?

 Published 03 October 2026

Nayakanti Prashant
3rd Gen Banker & Citizen Lobbyist – Bengaluru

https://in.linkedin.com/in/prashantnayakanti

The Intro

CO53 asked:

Will I Be Told Clearly?

Now I move to another everyday part of the UPI journey:

My UPI Number.

The Consolidated Circular describes a UPI Number as a numeric payment identifier that a User may voluntarily set up against an existing UPI ID, enabling the User to send and receive payments. UPI-Consolidated-Circular

That sounds simple.

But then I paused:

Is my UPI Number journey clear from beginning to end?

The Trigger for this blog post

Section 5 — UPI Number.

The circular covers much more than simply creating a number.

It covers:

creation → linking → de-linking → deregistration → replacement → payment → verification → consent → porting → continued use.

Section 5 begins at PDF Page 9 and continues through Pages 10 and 11. UPI-Consolidated-Circular

And there is an important customer-facing requirement in §5.4:

The UPI Number must be resolved and the beneficiary details presented to the User for verification and confirmation before the transaction is processed.

§5.4 | Page 11 | UPI-Consolidated-Circular

That gives me a very clear customer moment.

The Prospective Audience

The UPI customer who uses, receives, changes or manages a UPI Number.

Not the Numeric UPI ID Mapper.

Not the PSP.

Not the technical routing layer.

The person who wants to know:

What is my UPI Number?

Where is it linked?

Can I change it?

Who am I paying?

Can I verify before I pay?

What happens if I change my mind?

This is a common emotion.

The Core Question

Is my UPI Number journey clear?

And this gives CO55 a natural progression from CO53:

CO51 — What should I look for?
↓
CO53 — Will I be told clearly?
↓
CO55 — Is my UPI Number journey clear?

Act I — It Starts With a Number

The Consolidated Circular defines a UPI Number (Numeric UPI ID) as a numeric payment identifier that a User may voluntarily set up against an existing UPI ID, enabling the User to send and receive payments.

Section 5 — UPI Number | Page 9 | UPI-Consolidated-Circular

The User can choose an 8-digit or 9-digit UPI Number, or use the registered mobile number as a 10-digit or 11-digit UPI Number.

The circular also provides for the ability to link, de-link, deregister or replace the chosen UPI Number.

So I paused.

A number may look simple.

But behind that number is a journey:

Create.
Link.
Use.
Change.
Replace.
Deregister.

Is that journey clear to me as a customer?

 

Act II — Before I Pay

Now comes the moment that matters most.

I enter a Beneficiary's UPI Number.

The circular requires the UPI Application to have the Beneficiary's UPI Number entered twice and validated before proceeding, subject to specified exceptions. It also places responsibility for an incorrect transfer on the User initiating the payment.

§5.3 | Pages 9–10 | UPI-Consolidated-Circular

But then comes an important customer-facing requirement.

Under §5.4, the Payer PSP and UPI Application Provider must resolve the UPI Number and present the Beneficiary details to the User for verification and confirmation before processing the transaction.

§5.4 | Page 10 | UPI-Consolidated-Circular

That is the moment I want to notice.

I enter a number.

I see who it belongs to.

I verify.

Then I pay.

For a customer, that is not merely a technical routing process.

That is a moment of trust.

And, trust enables more digital transactions.

 

Act III — It Doesn't End With Payment

The journey does not end when the UPI Number is created.

The circular also addresses what happens afterwards.

A User may maintain multiple UPI Numbers across different UPI Applications, subject to the specified rules.

§5.6 | Page 10 | UPI-Consolidated-Circular

It also provides for lifecycle management — including creation/registration, update and deletion/deregistration.

§5.7 | Page 10 | UPI-Consolidated-Circular

And where a UPI Number is being seeded or ported, the circular requires explicit and informed consent, with an opt-out mechanism and an opt-in process.

§5.15 | Page 11 | UPI-Consolidated-Circular

It further says UPI Number-related information should be communicated in a fair, transparent and unbiased manner.

§5.16 | Page 11 | UPI-Consolidated-Circular

So my question becomes:

Do I understand my UPI Number not just when I use it — but throughout its journey?

---

WHITEBOARD

MY UPI NUMBER

CREATE → VERIFY → USE → CHANGE → CONTROL

IS MY JOURNEY CLEAR?

---

Citizen Observation — One Observation at a Time

A UPI Number may be only a few digits.

But for the customer, those digits can represent a much bigger journey.

Who am I paying?

Did I verify?

Can I change it?

Can I deregister it?

Did I give my consent?

The circular addresses these moments across different provisions.

I am simply looking at them one customer moment at a time.

Citizen Observation — One Observation at a Time.

Closing Thought

A number is easy to remember.

A journey is not always as simple.

For me, the important part is not merely having a UPI Number.

It is being able to understand:

where it came from,

where it takes my payment,

and what control I have over it.

A UPI Number may be numeric.

The customer's journey should be clear.

---

April 11 — Proposed Digital Transactions Day

This is also where April 11 — proposed Digital Transactions Day connects with the series.

From the launch of UPI to the many ways in which we experience digital payments today, the journey continues to evolve.

The proposal for April 11 is a simple invitation to pause once a year and look at that journey from the customer's side.

CO55 is one such pause.

One number.

One journey.

One customer observation.

April 11 is the UPI Beta Launch day, way back in 2016

---

Disclaimer

This Citizen Observation is based on the UPI Consolidated Circular, Version 1.0 dated 18 September 2026, issued by NPCI.

The observations in this post are made from a customer/citizen perspective and are not intended to constitute a technical interpretation, regulatory opinion, implementation instruction or criticism of NPCI, banks, PSPs, UPI Application Providers or any other ecosystem participant.

Readers are requested to refer to the information, notifications and instructions provided by their respective banks and UPI service providers for their individual circumstances.

The purpose of this observation is to encourage customer awareness and understanding of the UPI journey.

---

The Joy of Digital Transactions

Nayakanti Prashant
3rd Gen Banker & Citizen Lobbyist – Bengaluru
Advocating Digital Transactions Day (April 11)

Author’s Blogs

https://prashantrandomthoughts.blogspot.com
https://prashantnepayments.blogspot.com
https://innovationinbanking.blogspot.com

 

 

Citizen Observation 53 OF 777 | UPI 54 Pages Circular – Post 2 | Will I Be Told Clearly?

  

Published 01^st October 2026

Nayakanti Prashant
3rd Gen Banker & Citizen Lobbyist – Bengaluru

https://in.linkedin.com/in/prashantnayakanti

 

The Intro

CO51 of 777 began with a simple question:

What, in these 54 pages, should I look for as a customer?

For CO53 of 777, I begin with the first customer moment:

When something happens to my UPI transaction, will I be told clearly?

The Trigger

The UPI Consolidated Circular speaks directly about notifications to users.

It says that users should be duly notified of all UPI-related activities through their registered channel.

Section 10 — User Support and UPI Safety Awareness | Page 15 UPI-Consolidated-Circular (1)(1)

And then comes Section 10.3:

“provide timely notifications for all UPI debit, credit, reversal and post-reconciliation account entries.”

Section 10.3 | Page 15 UPI-Consolidated-Circular (1)(1)

The notifications should not lead to confusion.

 

The Customer Moment

I paused here.

Because these are not just words in a circular.

Debit.

Credit.

Reversal.

Post-reconciliation.

Each one can become a moment when I look at my phone and ask:

What happened to my money?

And that brings me to the question behind CO53:

Is receiving a notification enough?

Or should the notification help me understand what happened?

 

Act I — The Notification

A UPI transaction happens.

I look at my phone.

A notification arrives.

For the ecosystem, that may be a communication.

For me, it is a moment of understanding.

Did my payment happen?

Was my account debited?

Was it credited?

Was the transaction reversed?

What happened after reconciliation?

The circular requires timely notifications for these UPI account entries.

Section 10.3 | Page 15 UPI-Consolidated-Circular (1)(1)

But as a customer, I am looking at something very simple:

Can I understand what just happened?

That’s all, Nothing More -  Nothing Less.

 

Act II — When the Notification Becomes Useful

The Consolidated Circular gives us a more detailed example through UPI AutoPay.

Under §14.3, the Remitter Bank and Payer PSP / UPI Application Provider are required to send communication or notification to the User for every UPI AutoPay transaction — including mandate registration, pre-debit notification, execution, post-debit notification, modification, pause, unpause and revoke.

§14.3 | Page 20 UPI-Consolidated-Circular (1)(1)

That makes me pause again.

Because here, the notification is not just about telling me that something happened.

There are different moments in the journey.

Before the debit.

When the debit happens.

After the debit.

When something changes.

When I pause, unpause or revoke.

And the circular goes one step further.

Under §14.7, I should have the facility to choose or change the mode — SMS, email, etc. — for receiving the pre-debit notification.

Under §14.8, that pre-debit notification must reach me at least 24 hours before the actual charge/debit and, at a minimum, tell me the Merchant's name, transaction amount, date and time of debit, UMN and reason for debit.

§14.7–14.8 | Page 21 UPI-Consolidated-Circular (1)(1)

Now the customer question becomes clearer.

It is not only about being notified.

It is about being given enough information to understand the transaction.

And, it is important to remember that UPI transactions take place around the clock, so the notification can land in a customers inbox any time.

---

Act III — The Customer's Test

So, when I look at a UPI notification, I am left with four very simple questions:

Was I told in time?

Can I understand what happened?

Can I identify the transaction?

Do I know what I can do next?

The Consolidated Circular contains specific provisions for notifications.

My observation is about what those notifications mean from the customer's side of the screen.

Because a notification may be technically delivered.

But for the customer, the real test is simpler:

Can I make sense of it?

---

WHITEBOARD

A UPI NOTIFICATION - Tells me something happened.

A USEFUL NOTIFICATION - Helps me understand what happened.

---

Citizen Observation — One Observation at a Time

CO51 began with the circular.

CO53 begins with the notification.

A payment journey can change in seconds.

The customer's understanding should not have to wait.

One transaction.

One notification.

One moment of understanding.

Citizen Observation — One Observation at a Time.

Closing Thought

A UPI notification may arrive in seconds.

But the real value is whether I can understand what has happened.

As customers, we may not read every page of a 54-page circular.

But we can pay attention to the information that reaches us through our banks and UPI channels.

So, readers are requested to focus on the information received from their banks — especially the details accompanying UPI transactions, debits, credits, reversals and other transaction-related notifications.

Because sometimes, the first clue to understanding our payment journey is already sitting on our phone.

---

Digital Transactions Day (Proposed) — April 11

This observation also takes me back to a larger journey.

April 11 — the proposed Digital Transactions Day i.e UPI Beta Launch Day, but not limited to UPI, but to recognise the continuing journey of digital transactions.

From the early UPI journey to today's everyday transaction notifications, the technology may evolve.

But one thing remains constant:

The transaction is experienced by the customer.

And that is why April 11 is proposed as a day to pause, observe and understand our digital transaction journey.

---

Disclaimer:
This Citizen Observation is based on the UPI Consolidated Circular, Version 1.0 dated 18 September 2026, issued by NPCI.

This post is a citizen/customer-perspective observation and is not intended to be a technical interpretation, regulatory opinion, implementation proposal or criticism of NPCI, banks, UPI applications or any other ecosystem participant.

Readers are requested to refer to the information and notifications received from their respective banks and UPI service providers for their individual transactions and circumstances.

The observations in this post are intended to encourage customer awareness and understanding of the UPI journey.

The Joy of Digital Transactions

Nayakanti Prashant
3rd Gen Banker & Citizen Lobbyist – Bengaluru
Advocating Digital Transactions Day (April 11)

Author’s Blogs

https://prashantrandomthoughts.blogspot.com
https://prashantnepayments.blogspot.com
https://innovationinbanking.blogspot.com