If your UPI app suddenly started behaving differently this year, you’re not imagining it. NPCI has rolled out a fresh set of new UPI rules in 2026 covering transaction limits, security checks, and merchant charges. Whether you’re a daily Google Pay user or run a small shop accepting QR payments, these changes directly affect how you send and receive money.
These updates aren’t random tweaks. They respond to explosive UPI growth, rising fraud attempts, and network congestion during peak hours. NPCI worked with the RBI to balance convenience with safety, tightening some limits while raising others for verified categories like education and healthcare. Here’s every major rule broken down simply, step by step.
[rank_math_toc]
Rule 1: Daily Transaction Limits
For most peer-to-peer and regular merchant transfers, the baseline daily UPI limit stays at ₹1 lakh per user. However, verified high-value categories such as education fees, hospital bills, and tax payments can now access elevated limits of up to ₹10 lakh daily, provided the receiving institution has completed additional bank-level verification and approval.
Rule 2: API and Frequency Caps
To reduce network congestion during peak hours, NPCI now restricts how often apps can ping servers. Balance inquiries are capped at 50 requests per app per day, account-listing calls for linked banks are limited, and repeated status checks now require mandatory waiting periods between retries, keeping the entire payment network faster and more stable for everyone.
Rule 3: Stronger Auto-Debit Mandate Windows
Recurring payments like subscriptions and EMIs now follow tighter timing windows for auto-debit mandates, alongside stronger multi-factor authentication checks. This reduces the chance of unauthorised recurring deductions and gives users clearer, more predictable notifications before any automatic payment actually leaves their linked bank account each cycle.
Rule 4: Scheduled Payments Restricted to Off-Peak Hours
Bulk and scheduled payments, often used by businesses for salary disbursals or vendor payouts, are now confined to designated off-peak processing windows. This spreads network load more evenly across the day and prevents the kind of transaction failures that used to spike during high-traffic hours like month-end salary dates.
Rule 5: Enhanced Security for High-Value Transfers
Multi-factor authentication frameworks now apply more strictly to larger transfers, adding an extra verification layer beyond just your UPI PIN for high-value transactions. This is designed specifically to reduce successful phishing and social-engineering fraud attempts, which have been rising alongside UPI’s massive adoption across urban and rural India alike.
Rule 6: Gradual Rollout Since August 2025
NPCI began phasing in these updated operational guidelines from August 2025, with full implementation across every payment app and bank by 2026. This staggered approach let banks and fintech apps update their systems gradually, minimising the kind of sudden outages that would have disrupted millions of daily UPI transactions overnight.
Rule 7: Clearer Merchant Charge Disclosures
Merchant-facing UPI transactions above certain thresholds now come with clearer fee disclosures baked into the payment flow, so small businesses know upfront what interchange charges may apply. This transparency push aims to reduce disputes between payment aggregators and merchants over deducted amounts on larger transaction volumes.
What This Means for Small Businesses
Shopkeepers and small merchants relying on UPI QR codes should review their payment aggregator’s updated fee disclosures, since the clearer charge breakdown may reveal costs that were previously bundled less transparently. It’s a good moment to compare aggregators and confirm settlement timelines haven’t shifted under the new off-peak scheduling rules for bulk or recurring merchant payouts.
Businesses issuing recurring auto-debit mandates, such as subscription services, should also notify customers about the stricter authentication windows, since users may need to re-approve mandates that previously renewed silently. Clear communication here reduces failed payments and customer confusion during the transition period as banks finish rolling out these changes.
Frequently Asked Questions
Will the new UPI rules affect normal daily transactions under ₹1 lakh?
Most everyday users sending small amounts for shopping or bill payments won’t notice much change, since the baseline ₹1 lakh daily limit and standard PIN authentication remain unchanged.
Do these new UPI rules 2026 apply to all apps like Google Pay and PhonePe?
Yes, since NPCI sets these guidelines at the network level, every UPI-enabled app including Google Pay, PhonePe, Paytm, and bank apps must comply uniformly.
Why were frequency caps on balance checks introduced?
Excessive automated balance-check requests were overloading bank servers during peak hours, causing transaction failures; the new caps keep the network stable for actual payments.
Are UPI transactions still free for regular users?
Yes, peer-to-peer UPI transfers remain free for individual users. The new merchant charge disclosures mainly affect business accounts processing high transaction volumes.
Final Thoughts
These new UPI rules for 2026 mostly work quietly in the background, making payments safer and the network more reliable without complicating your day-to-day tapping and scanning. For more digital identity essentials, see our guides on Aadhaar PVC card ordering and PAN card download online.
