Unified Payments Interface (UPI) Basics

Electronic payments that are processed within seconds and credited from one bank to another, without an intermediary, are instant payments.

Checks, RTGS, EFT/ACH, cards had their concerns related to delays, frauds, AML check, batch processing delay, hidden charges, etc. Some could not handle Peer2Peer transactions.

Instant payments have low cost, high speed, support P2P and are always available.

The popular ones are UPI/ IMPS (India), RTP (USA), Faster payments (UK), SEPA IC (Europe).

UPI was started in 2016. And it allows not just interbank transactions but also Person2Merchant ones. A virtual address, QR code, Pull Pay (R2P) are the critical features of UPI.

UPI payment address:

All payment addresses are denoted as account@provider

1. Universal:
   1. account_number@bank_name_IFSC_code.npci
   2. aadhar_number@aadhaar.npci
   3. mobile_number@mobile.npci
2. Unique to India:
   1. user@my_psp

Bit more on the PSPs:

1. Acquire new customers
2. Facilitate payments
3. Provide front end or mobile app to customer
4. They can be bank or 3^rd part fin tech partner (BHIM, googlepay, amazonpay, phonepe)
5. One customer’s bank account can have multiple UPI apps.
6. One PSP can tie up with multiple banks for the issuance of PSP VPA handles. Eg: google pay has tied up with 4 banks; @okaxis, @okicici, @okhdfcbank, @oksbi

UPI Framework consists of:

1. Acquiring channel for UPI application (payment request)
2. Payer PSP
3. Remitter bank (debit request)
4. Payee PSP (authorization and mapping request)
5. Beneficiary bank (credit)
6. NPCI

Typical flow from the user perspective is:

1. Payer sends request to Payer Bank
2. Payer Bank validates (and verifies settlement later). Then sends the request to Instant Payment System. Who sends it to Beneficiary Bank.
3. Beneficiary Bank sends update to Beneficiary. And sends a confirmation of execution to Payment System who then sends it to Payer Bank.
4. Payer Bank sends status to Payer.

Typical flow system flow perspective is:

 

 

 

 

 

 

 

 

UPI settlement process illustration:

Case- 10 transactions 1,00,000 from Bank A to Bank B. And 5 transactions 30,000 from Bank B to Bank A.

1. NPCI sends request to RBI to Dr Bank A for 70000 and credit Bank B for 70000
2. NPCI sends settlement report to Bank A; it Cr Nostro RTGS (shadow mirror a/c) and Db UPI GL
3. NPCI sends settlement report to Bank B; it Db Nostro RTGS (shadow mirror a/c) and Cr UPI GL
4. Both banks hold RTGS settlement with RBI, 1^st call is for Cr Remitter and Cr UPI GL, 2^nd call is Cr Beneficiary and Db UPI GL

Settlement happens multiple times a day and is a case of nett deferred settlement.

UPI customer registration:

1. Download app
   1. PSP Mobile App has 2 components: PSP Mobile App functionality + NPCI SDK (library. Embedded within the app. It encrypts the UPI PIN and sends it to NPCI)
2. Customer registration
   1. Outbound SMS and Hard-binding (device finger printing). Out bound SMS is sent from the selected SIM card to the PSP; who gets mobile number, finger print details like device id, App Id, IMEI number.
3. Add bank account
   1. Customer selects the bank form the list
   2. PSP forms a request to NPCI with the mobile#
   3. NPCI forwards the request to the Issuer bank
   4. Bank retrieves account numbers linked to the mobile#
   5. Bank passes it back to NPCI
   6. NPCI passes it to PSP; who stores bank + ifsc wrt mobile# and device info
   7. List of account # are shown to be selected from the app
   8. PSP creates unique VPA for that customer for that bank for that account number
4. Generate UPI PIN
   1. Customer selects “generate PIN” option
   2. PSP requests OTP for that customer account
   3. NPCI requests the Issuer bank for OTP generation request
   4. Issuer bank generates OTP and send to customer
   5. Customer then enters debit card #, expiry date, OTP
   6. PSP forwards the OTP validation request
   7. UPI decrypts the details (including PIN) and encrypts with Issuer key
   8. Issuer bank decrypts the data and validates the details and OTP. And saves the PIN.

Responsibilities of the parties:

1. Payer PSP
   1. Onboard new customer
   2. Create her/ his UPI ID
   3. Create device binding
2. Payee PSP
   1. Onboard customer/ merchant
   2. Facilitate money transfer/ payment to recipient using UPI
3. Remitter Issuer bank
   1. Hold and debit bank account for transaction
   2. Store and verify UPI PIN
4. Beneficiary bank
   1. Process incoming credits and funds into beneficiary account