Enhanced Privacy for UPI Users
The National Payments Corporation of India (NPCI), the operator of India's popular Unified Payments Interface (UPI) system, has issued a significant directive aimed at bolstering user privacy. UPI apps and partner banks are now mandated to mask users' phone numbers during transactions, a change expected to enhance the security and privacy of digital payments across the country.
This initiative comes as a direct response to growing concerns over personal data exposure and aligns with the principles of India's Digital Personal Data Protection (DPDP) Act. The government has reportedly set a deadline of September 4 for banks and payment applications to implement these crucial changes.
Addressing Privacy Concerns and User Complaints
Currently, phone numbers serve a critical role in identifying users and verifying transactions within the UPI ecosystem. However, their visibility during payment processes has frequently been flagged as a privacy risk. Users have raised numerous complaints on social media, expressing discomfort with their contact information being readily accessible to others, which could lead to unwanted contact or identity-related issues.
A senior executive from a UPI app noted, "The DPDP implementation would mean that phone numbers or full names could be a privacy risk, and NPCI is talking to banks and UPI apps to ensure that their systems are ready to understand and fix the roles and responsibilities on each participant."
The NPCI's circular specifically instructs UPI platforms to conceal customer information, including UPI IDs, mobile numbers, and bank account numbers, making transactions more secure and private.
How UPI Payments Will Work with Masked Numbers
With the new privacy rules in effect, users will see significant changes in how their personal information is displayed. For instance, it is suggested that only the last four digits of a user's mobile number should be visible during a transaction, offering a balance between identification and privacy.
For QR code payments, the directive states that neither the payer's nor the recipient's full mobile number should be displayed once the transaction is completed. Furthermore, UPI apps are being encouraged to allow users to create UPI IDs that are not tied to their mobile numbers, providing an alternative identifier for transactions.
Implementation Deadline and Future Outlook
The September 4 deadline underscores the urgency with which NPCI and the Indian government are approaching digital privacy. This move is part of a broader effort to strengthen data protection frameworks for the millions of Indians who rely on UPI for their daily financial transactions. By masking phone numbers, NPCI aims to provide a more secure and trustworthy environment for digital payments, reinforcing user confidence in India's rapidly evolving digital economy.