Payment Systems and Digital Finance

1. Payment systems as financial infrastructure

Read the detailed note →

What it is

• Class 7, Banks and the Magic of Finance calls financial infrastructure "a network of banks, payment systems, stock markets, and other financial institutions" that helps people, businesses and the government make transactions and manage money. It supports physical infrastructure such as roads and railways.
• A payment system is a mechanism for the clearing and settlement of financial transactions, so that individuals, businesses and organisations can transfer funds to each other (Class 7 definition).
• Clearing means exchanging and checking payment instructions: who owes whom, and how much.

• Settlement means the final transfer of funds between accounts. After settlement, the payment cannot be reversed.

• Digital payments are payments made electronically instead of in cash. Examples are internet or mobile banking transfers, debit or credit cards at POS machines, wallets and UPI QR codes. The government promoted them "to reduce the requirement of cash for transactions and also control corruption" (Class 10, Money and Credit, teacher note).

Ways to classify payment systems

Basis	Type A	Type B
Medium	Paper (cheque, draft)	Electronic (NEFT, UPI, cards)
Size and user	Retail: many small payments (UPI, IMPS)	Large-value: few big payments (RTGS)
Settlement method	Gross: each payment settled on its own	Deferred net: payments are pooled and only the net difference is settled
Timing	Real-time (RTGS, UPI, IMPS)	Batch (NEFT, cheque clearing)

Who governs and who operates

• Payment and Settlement Systems (PSS) Act 2007. Nobody can run a payment system in India without RBI authorisation. RBI regulates and supervises payment systems through its Board for Regulation and Supervision of Payment and Settlement Systems (BPSS).
• RBI is also an operator. It runs the two main large rails, RTGS and NEFT. Class 7 notes that RBI "maintains accounts of other banks and facilitates exchange of funds between them". Final settlement takes place in banks' accounts with RBI.
• National Payments Corporation of India (NPCI). Set up in 2008 as a not-for-profit company, promoted by banks at the initiative of RBI and the Indian Banks' Association. It runs the retail rails:
• NFS (the ATM network), IMPS, RuPay, NACH, AePS, UPI and BHIM, NETC FASTag (tolls)
• Bharat BillPay, through its subsidiary NPCI Bharat BillPay Ltd (NBBL)

• NPCI International Payments Ltd (NIPL), which takes UPI and RuPay abroad

• Policy markers

• Payment-data localisation (April 2018): all payment data of Indian users must be stored only in India.
• Payments Vision 2025 (released 2022): RBI's roadmap. Its themes are integrity, inclusion, innovation, institutionalisation and internationalisation.
• RBI Digital Payments Index (DPI): base March 2018 = 100. It measures how far digital payments have spread and deepened. The index was around 490 in March 2025 (verify current).

2. Cash, cheques and cards

Read the detailed note →

Getting cash (Class 7, Banks and the Magic of Finance)

• At the branch: fill in a withdrawal slip, hand it in at the cash counter and collect the cash.
• At an ATM: an Automated Teller Machine (ATM) is a self-service "mini-bank" open 24×7. ATMs are found at bus depots, markets, railway stations, airports and malls. You insert a debit card, type the Personal Identification Number (PIN) and enter the amount.

• A PIN is a numeric code of 4–6 digits used to authenticate ATM, card and other financial transactions.

• National Financial Switch (NFS): an NPCI network (NPCI took it over from IDRBT in 2009) that connects the ATMs of different banks. A customer of one bank can withdraw cash or check the balance at another bank's ATM. Class 12, Money and Banking lists NFS among the financial-inclusion initiatives.

• White-label ATMs: ATMs owned and run by non-bank companies, allowed by RBI from 2012 to spread ATMs into smaller towns.
• UPI-based cardless withdrawal: you scan a QR code on the ATM screen and approve the withdrawal in a UPI app. No card is needed.

Cheque

• A cheque is a paper instrument. It instructs your bank to pay a stated amount from your account to a named person.
• Class 7 example: to pay ₹5,000 to Rohan, you write the amount, Rohan's name and your signature. Rohan deposits the cheque in his bank. Your account is debited and his account is credited.
• Class 10 example: M. Salim pays his leather supplier ₹57,000 by cheque. The money moves "in a couple of days" and no cash changes hands. Cheques let demand deposits work as money.
• Drawbacks (Class 7): you have to visit the bank, and the transfer takes time.
• Modern safeguards
• Cheque Truncation System (CTS): banks exchange an image of the cheque instead of the paper. CTS covered the whole country by 2021. Continuous clearing, with settlement within a few hours, began in phases from October 2025 (verify current).
• Positive Pay (Jan 2021): for cheques of ₹50,000 and above, the drawer confirms the key details to the bank in advance.
• Cheque bounce: dishonour of a cheque for lack of funds is a criminal offence under s.138 of the Negotiable Instruments Act, 1881.

Cards

	Debit card	Credit card
Money used	Your own deposit	A loan from the bank
Uses	Cash at ATMs and payments at shops via POS	Buy now, repay later, up to a set limit
Cost	Amount deducted instantly	Interest-free within the billing grace period, then high interest
Is it money?	It is an access device for demand deposits (which are money)	It gives access to credit. The card itself is not money

• Point of Sale (POS) machines are swipe or insert machines at shops that accept card payments. The customer swipes or inserts the card, the amount is entered and the customer types the PIN. "The amount is instantly deducted" (Class 7).
• Plastic money means plastic cards used in place of cash, "but not all of them money per se" (Class 10 teacher note). Class 7, From Barter to Money lists debit and credit cards among the new, intangible forms of money.
• Card networks: Visa and Mastercard (foreign) and RuPay (NPCI, 2012, domestic). RuPay credit cards can be linked to UPI from 2022.
• Payments Infrastructure Development Fund (PIDF), 2021: an RBI fund that subsidises POS and QR acceptance in tier-3 to tier-6 centres and in the North-East (tenure extended; verify current).
• Card security
• EMV chip plus PIN at the counter.
• An additional factor of authentication (usually an OTP) for online card payments.
• Card tokenisation (RBI, effective 1 October 2022): the real card number is replaced by a unique token for online payments. Merchants may no longer store card numbers, so a data leak at a merchant exposes no card details.

3. Electronic fund transfer: net banking, NEFT, RTGS, IMPS

Read the detailed note →

Internet banking

• Internet banking (online banking or netbanking) lets account holders use the bank's website or app to check balances and transaction history, pay bills and transfer money. It works from a computer or smartphone without visiting a branch (Class 7).
• Unlike cheques, electronic methods allow near-instant transfers from sender to receiver. The actual transfers run on the rails below.

The rails

• National Electronic Funds Transfer (NEFT)
• Run by RBI since 2005.
• Uses deferred net settlement in half-hourly batches, 48 a day.
• Available 24×7×365 since December 2019.

• No minimum and no maximum amount.

• Real Time Gross Settlement (RTGS)

• Run by RBI since 2004.
• Each large-value transfer is settled individually and immediately, one transaction at a time.
• Minimum ₹2 lakh, no maximum.
• Available 24×7 since December 2020.

• A systemically important system: its failure would hurt the whole financial system.

• Immediate Payment Service (IMPS)

• Run by NPCI since 2010.
• Instant, round-the-clock retail transfers using an account number and IFSC or a mobile number.

• Limit ₹5 lakh per transaction (since 2021).

• National Automated Clearing House (NACH)

• Run by NPCI for bulk and recurring payments: salaries, pensions, dividends, EMIs and SIP debits.

• The Aadhaar Payment Bridge on NACH sends DBT subsidies to the account linked to a beneficiary's Aadhaar.

• Bharat BillPay (2017): one interoperable platform for utility bills, fees and similar payments, run by NBBL.

Why the design differences matter

• Gross settlement (RTGS)
• There is no settlement risk. A failed payment cannot drag others down, because nothing is left waiting to be netted.

• The cost is liquidity: banks need more funds on hand to pay each transfer in full.

• Net batches (NEFT)

• Only the net difference between banks moves, so banks need far less liquidity.

• The cost is a short wait and some exposure until the batch settles.

• Pushing adoption: RBI waived its own processing charges on NEFT and RTGS from July 2019 and asked banks to pass the benefit to customers. Online NEFT and RTGS for savings accounts is now generally free.

System	Operator	Settlement	Minimum / maximum	Timing
RTGS	RBI (2004)	Gross, real-time	Min ₹2 lakh; no max	24×7 since Dec 2020
NEFT	RBI (2005)	Deferred net, half-hourly batches	None; none	24×7 since Dec 2019
IMPS	NPCI (2010)	Instant (net settled later between banks)	Max ₹5 lakh	24×7
UPI	NPCI (2016)	Instant for the customer	Usually ₹1 lakh; higher for some categories (verify current)	24×7
NACH	NPCI	Bulk batches	Varies by mandate	Scheduled

4. Mobile payments and UPI

Read the detailed note →

Mobile payments

• Mobile payments are made through a phone using bank apps, wallets or UPI apps such as BHIM. They allow instant transfers and balance checks at any time. They reduce "the need for physical passbook updates" and let users "track transactions anytime" (Class 7).

Unified Payments Interface (UPI)

• Launch: NPCI launched UPI in April 2016. It opened to the public in August 2016. The BHIM app followed in December 2016.
• What it is: a real-time, 24×7, interoperable system for bank-account-to-bank-account payments. It works for person-to-person (P2P) and person-to-merchant (P2M) payments.
• How you address a payee: a UPI ID (virtual payment address), a mobile number or a QR code. You do not need the account number or IFSC.
• Security: device binding ties the phone and SIM to the account, and a UPI PIN approves each payment. No wallet is needed. Money moves directly between bank accounts.
• Kumar–Piyush walkthrough (Class 7, Fig. 8.18): the buyer scans the seller's QR code or enters the seller's number, types the amount and enters the UPI PIN. The buyer's account is debited, the seller's is credited in seconds, and both get a confirmation.
• QR code
• A machine-readable square barcode. In payments it holds the payee's details, such as a UPI ID or merchant ID, and the payer scans it with a smartphone.
• Class 7, From Barter to Money: fruit-seller Krishnappa keeps a QR card on his cart, and "the payment then goes directly into Krishnappa's bank account."
• BharatQR (2016) is one common QR code for cards and UPI.

Add-ons

Feature	Year	Purpose
UPI AutoPay	2020	Recurring mandates (subscriptions, EMIs)
UPI 123PAY	2022	UPI for feature phones (IVR, missed call, app-less)
UPI Lite	2022	Small payments without a PIN for each payment, from an on-device balance
RuPay credit card on UPI	2022	Pay merchants from a credit card through UPI
Pre-sanctioned credit lines on UPI	2023	Bank credit lines usable through UPI
UPI Circle	2024	Delegated payments: a primary user lets a trusted person pay within limits

• Why it spread
• During COVID-19, UPI supported contactless, cashless transactions (Class 7).

• Its user-friendly design works in many Indian languages.

• Scale: about 20 billion transactions a month by 2025. That is the large majority of India's digital payment volume, and India is the largest real-time payments market in the world (verify current figures).

UPI abroad: "India's gift to the world of payment systems" (Class 7)

• NPCI International Payments Ltd (NIPL), 2020 takes UPI and RuPay to other countries.
• Country milestones

Country	Milestone
Bhutan	BHIM-UPI QR acceptance, 2021 (the first to accept UPI QR)
Nepal	First country to adopt UPI as a payment platform, 2022 (the NCERT framing)
Singapore	PayNow–UPI link, Feb 2023: the first cross-border link between two fast-payment systems
UAE	UPI acceptance
France	Feb 2024: the first country in Europe
Sri Lanka and Mauritius	Feb 2024
Trinidad and Tobago	First in the Caribbean

• More countries are joining (country list: verify current).

• UPI One World: a prepaid, UPI-linked wallet for foreign visitors to India.

• Technology partnerships: Namibia and other countries are building UPI-like systems with NPCI's help.
• BIS Project Nexus: a plan to link many national fast-payment systems through one hub. India joined in 2024, with Malaysia, the Philippines, Singapore and Thailand.
• Strategic angles
• Soft power and DPI diplomacy.
• Cheaper remittances.
• A step towards internationalising the rupee through local-currency settlement.

5. Demonetisation and the less-cash push

Read the detailed note →

2016: the turning point

• Timing: demonetisation (November 2016) came about three months after UPI's public launch.
• What happened: ₹500 and ₹1,000 notes stopped being legal tender (Class 12, Money and Banking, Box 3.2).
• Result: cash became scarce, so households and firms turned to wallets, cards, POS and UPI QR codes.
• NCERT framing
• Class 10 teacher note: people were encouraged to use bank deposits instead of cash. Digital transactions spread through "bank-to-bank transfer through the internet or mobile phones, cheques, ATM cards, credit cards, Point of Sale (POS) swipe machines, and QR codes through UPI system at shops … to reduce the requirement of cash for transactions and also control corruption."

• Class 12: demonetisation could help tax administration "by shifting transactions out of the cash economy into the formal payment system. Households and firms have begun to shift from cash to electronic payment technologies."

• Follow-through

• BHIM app (December 2016).
• Watal Committee on digital payments (report December 2016): recommended an independent payments regulator and an open-access, competitive system.
• NITI Aayog incentives: Lucky Grahak Yojana (for consumers) and Digi-Dhan Vyapar Yojana (for merchants), which paid prizes for digital payments.
• Nilekani Committee on deepening digital payments (2019).

• The broader Digital India programme.

• Cross-references: the demonetisation event itself is in money-evolution-functions; its effects on liquidity and money supply are in banking-monetary-policy.

Cashless or less-cash?

• A cashless society is one where financial transactions happen through "the transfer of digital information (usually an electronic representation of money)" and not through physical notes and coins (Class 12).
• India's realistic goal is "less-cash", not zero cash.
• Currency in circulation (NCERT data, Class 12, Money and Banking, Table 3.5; RBI Handbook 2024-25)

Year	Currency in circulation (₹ crore)
2015-16	16,63,463
2016-17 (demonetisation)	13,35,266
2020-21	28,53,763
2024-25	37,24,448

• Currency-to-GDP ratio
• Fell to about 8.7% in 2016-17.
• Rose above pre-2016 levels by 2020-21: COVID made people hold cash as a precaution.

• Has eased since (verify current).

• The "cash paradox": cash and digital payments have grown together. Digital payments have taken over transactions, but people still hold cash as a store of value and a safety buffer.

• Limits to going cashless
• The digital divide: rural people, the elderly and women have less access to phones and digital skills.
• Weak connectivity.
• Costs for merchants.
• Privacy and surveillance worries.

• System outages and weak resilience.

• Classroom debate (Class 10 teacher note): make a collage of the areas where people legitimately and legally use digital payments and where they use cash. Both have lawful uses.

6. The JAM trinity and inclusion rails

Read the detailed note →

JAM = Jan Dhan + Aadhaar + Mobile

• Jan Dhan (PMJDY, 2014)
• Aims to give every Indian a bank account with no minimum balance and no fees.

• Class 7: before 2014 "only 15 crore Indians had bank accounts". Since then "over 50 crore accounts have been opened, mainly by women" (NCERT: over 50 crore; now about 56 crore, verify current).

• Aadhaar: biometric identity. It allows paperless e-KYC.

• Mobile: mobile phone coverage delivers the service.
• Economic Survey 2014-15: named the "JAM trinity" as the way to make targeted, leakage-free transfers.
• Why JAM matters (Class 7)
• Wages, scholarships and subsidies are credited directly into accounts through DBT.
• Direct transfers "have reduced middlemen".

• They ensure "timely disbursement of funds".

• PMJDY scheme details are in financial-inclusion-rural-credit.

Rails built on JAM (Class 12's list: Jan Dhan, AePS, e-wallets, NFS)

• Aadhaar-enabled Payment System (AePS)
• An NPCI system for basic banking at micro-ATMs or business correspondents (village-level bank agents).
• Services: cash withdrawal, deposit, balance enquiry and fund transfer.
• Authentication: Aadhaar number plus biometric (fingerprint or iris). No card or PIN is needed.
• Risk: fraudsters have used cloned or silicone fingerprints taken from land and property records.

• Safeguards: fingerprint liveness checks, face authentication, and the option to lock Aadhaar biometrics on UIDAI's site.

• Aadhaar Payment Bridge (APB): routes DBT credits to the account linked to a person's Aadhaar.

• E-wallets and prepaid payment instruments (PPIs)
• An e-wallet is a digital account, usually in a mobile app, loaded with money in advance for payments and transfers. RBI regulates it as a PPI.
• Prepaid payment instruments are wallets and prepaid cards loaded with value in advance and used for purchases and transfers.
• RBI PPI Master Direction (2021)
  • Small PPIs: minimum KYC, low limits.
  • Full-KYC PPIs: up to ₹2 lakh outstanding.
  • Full-KYC wallets must be interoperable with UPI and card networks.
  • Cash withdrawal is allowed from full-KYC PPIs, within limits.

• Wallets boomed after 2016 while cash was scarce. UPI later overtook them.

• e-RUPI (2021): person-specific and purpose-specific e-vouchers, delivered by SMS or QR code, and redeemable only for the intended service (for example, vaccination). It is built on UPI by NPCI.

• NFS (Section 2) is the ATM layer of the same inclusion system.
• Class 12: "financial inclusion is seen as a realistic dream because of mobile and smart phone penetration across the country."

7. Digital public infrastructure and the data layer

Read the detailed note →

Digital public infrastructure (DPI)

• DPI means open, interoperable digital systems built as public goods: identity, payments and data sharing. Private companies build competing products on top of them.
• India Stack (the layers)

Layer	Components
Identity	Aadhaar, e-KYC, eSign
Payments	UPI, AePS
Data	DigiLocker, Account Aggregator, DEPA (Data Empowerment and Protection Architecture)
Extensions	ONDC (Open Network for Digital Commerce, 2022); OCEN (Open Credit Enablement Network); RBI's Unified Lending Interface (ULI), announced 2024 (verify status)

• DPI diplomacy: G20 New Delhi (2023)
• The Leaders' Declaration adopted a framework for systems of DPI.

• India set up a Global DPI Repository and proposed a Social Impact Fund to help other countries build DPI.

• Comparisons

• Brazil's Pix (central-bank-run, 2020) and Singapore's PayNow are also public fast-payment rails.
• India's model is public rails with competing private apps.
• The contrast is card-network-led systems (US) and big-tech-wallet-led systems (China's Alipay and WeChat Pay), where private firms own the rails.

The data layer

• Account Aggregator (AA)
• An RBI-regulated, consent-based intermediary that lets individuals securely share their financial data from one institution with another.
• Legal form: an NBFC-AA under the RBI Master Direction of 2016.

• The network went live in September 2021.

• How the AA works

• Financial Information Providers (FIPs): banks, insurers and others that hold the data.
• Financial Information Users (FIUs): lenders and others that want the data.
• The AA carries the data only with the customer's explicit consent, for a stated purpose and period.

• AAs are data-blind: they pass on encrypted data and cannot read or store it.

• Why it matters: it enables cash-flow-based lending to thin-file MSMEs and individuals, who have little credit history or collateral.

• Open banking
• Banks share customer data with third-party providers, with consent, through secure APIs, to enable new services. Examples: the EU's PSD2 and the UK's open-banking rules.

• India's AA is a variant: a separate regulated consent manager sits in between, instead of banks dealing directly with each third party.

• Privacy: the Digital Personal Data Protection Act 2023 requires consent, purpose limitation and data-fiduciary duties.

8. Who pays for payments: MDR, aggregators and market structure

Read the detailed note →

Merchant discount rate (MDR)

• MDR is the fee a merchant pays to banks and payment firms for accepting card or digital payments. It is usually a percentage of the transaction.
• It is shared among the acquiring bank (the merchant's bank), the issuing bank (the customer's bank) and the network.
• Zero MDR
• Applies to RuPay debit cards and BHIM-UPI from 1 January 2020.

• Legal basis: the Finance (No. 2) Act 2019 inserted s.10A in the PSS Act and s.269SU in the Income-tax Act (large businesses must offer prescribed digital modes).

• Government incentive scheme: compensates banks for low-value BHIM-UPI P2M and RuPay debit transactions, because they earn no MDR (current outlay: verify).

• Wallet interchange (2023): a fee of up to 1.1% on merchant UPI payments above ₹2,000 made from wallets (PPIs), paid by large merchants and not by customers.
• The debate
• Case for zero MDR: free, universal access and fast adoption by small merchants.
• Case against: banks and apps have little incentive to invest in capacity and fraud controls.
• Proposal: charge MDR only to large merchants (verify current).
• RBI's Discussion Paper on Charges in Payment Systems (2022) set out these trade-offs.

Aggregators vs gateways

	Payment aggregator (PA)	Payment gateway
Role	Pools payments from customers for merchants and settles them later	Technology that routes the payment
Handles funds?	Yes, through an escrow account	No
Regulation	RBI-authorised under the 2020 guidelines, with net-worth and escrow norms	Baseline technology recommendations

Market structure

• Concentration: two apps carry most UPI volume.
• NPCI's cap: no single third-party app may exceed 30% of UPI volume. The deadline has been deferred repeatedly (verify current deadline).
• Other concerns
• Big-tech and foreign ownership of the leading apps (data and strategic control).
• Outages and weak operational resilience, since so much commerce now depends on one rail.

9. Fintech, digital lending and regulatory innovation

Read the detailed note →

Fintech

• Fintech is the use of technology such as mobile apps, data analytics, APIs and blockchain to deliver financial services more cheaply and to more people.

Digital-lending models

• Peer-to-peer (P2P) lending
• Online platforms connect individual lenders directly with borrowers, bypassing banks.
• Regulated by RBI as NBFC-P2Ps since 2017, with exposure caps per lender and per borrower.

• 2024 tightening: platforms may not offer credit enhancement, guarantee returns or promise instant liquidity. They must act only as intermediaries and not take lending risk themselves.

• Buy Now Pay Later (BNPL)

• Short-term credit at checkout. The buyer pays in instalments, often interest-free if repaid on time.

• In 2022 RBI barred loading PPIs from credit lines. This hit card-less BNPL models that ran through wallets.

• Digital lending apps: RBI Digital Lending Guidelines (September 2022)

• Based on the 2021 Working Group on Digital Lending.
• Disbursal and repayment must go only between the borrower's account and the regulated lender's account. No third-party pool accounts.
• A Key Fact Statement must show an all-inclusive APR (annual percentage rate).
• A cooling-off period lets the borrower exit the loan without penalty.
• Default-loss guarantees from fintech partners are capped at 5% of the loan portfolio.
• Lenders and apps must appoint grievance redressal officers.

• These rules were consolidated into Digital Lending Directions (2025) (verify).

• Illegal loan apps: unregistered apps that charge predatory rates, misuse phone contacts and use harassment and shaming to recover dues.

Regulatory innovation

• Regulatory sandbox
• A controlled setting where new financial products are tested live with a limited number of customers, under relaxed rules and regulatory supervision.
• RBI Enabling Framework (2019). Themed cohorts:
  • retail payments
  • cross-border payments
  • MSME lending
  • prevention and mitigation of financial frauds
  • later, theme-neutral cohorts

• SEBI, IRDAI and IFSCA run their own sandboxes.

• Blockchain

• A decentralised, tamper-resistant digital ledger.
• Transactions are grouped in linked blocks, and copies are kept on many computers.
• Changing one record would mean changing every copy.

• Uses: trade finance, cross-border payments, land records and CBDC pilots.

• Cross-references: crypto-assets and stablecoins are in financial-markets-instruments; CBDC design is in banking-monetary-policy.

10. Financial frauds and cyber safety

Read the detailed note →

How frauds work (Class 7)

• Fraudsters use fake calls or messages to trick people into downloading harmful apps or sharing bank details or OTPs.
• This "gives them access to the user's mobile or computer", so they can steal personal data and drain bank accounts.
• A financial fraud is a scam that uses fake calls, messages or harmful apps to steal bank details or OTPs and empty accounts.
• Newer patterns
• Phishing (fake links or emails) and vishing (fake voice calls).
• SIM swap: the fraudster gets a duplicate SIM to receive your OTPs.
• QR and collect-request scams: the victim scans a code or enters a PIN believing they will receive money, but actually pays.
• Fake customer-care numbers.
• Mule accounts: accounts rented or hijacked to move stolen money.
• "Digital arrest": fake police or officials threaten arrest over video call and demand payment.
• Fake investment and trading scams.

Safeguards (Class 7, Fig. 8.23)

• Never share your phone number, account number, home address, passwords or OTPs with strangers.
• Avoid clicking unknown links or videos received in messages.
• Do not store account passwords, debit card PINs and similar details on devices.
• One-Time Password (OTP): a unique temporary code of letters or numbers used to verify identity or authorise a transaction. It is a one-time second factor of authentication: something you have (the phone), added to something you know (the PIN).

Institutional response

• How to report
• Call helpline 1930, or use the National Cybercrime Reporting Portal (cybercrime.gov.in).
• Both are run by MHA's Indian Cyber Crime Coordination Centre (I4C).

• Speed matters: a quick report lets banks freeze the stolen money before it passes through mule accounts.

• RBI customer protection

• Limited liability (2017): zero customer liability if an unauthorised transaction is reported within three working days. The loss is capped for reports made in 4–7 days. After that, the bank's board-approved policy decides.
• RBI Integrated Ombudsman Scheme (2021): one ombudsman for banks, NBFCs and payment operators.
• Fraud-risk management Master Directions (2024).
• MuleHunter.AI: an AI tool from the Reserve Bank Innovation Hub that finds mule accounts.
• "bank.in" domains: only for genuine bank websites.

• New authentication directions that move beyond SMS OTP (verify current).

• Department of Telecommunications (DoT)

• Sanchar Saathi: block lost phones and check connections issued in your name.

• Chakshu: report suspected fraud calls and messages.

• Data pattern (RBI Annual Report): card and internet frauds lead by number, while loan (advances) frauds lead by value. Bank-fraud and NPA details are in banking-regulation-npas.

• The balance (Class 7, question 8): how to keep the convenience of digital payments while limiting the risk of cyber fraud.
• Answer through technology (tokenisation, device binding, AI monitoring), regulation (liability rules) and financial literacy.

---

Exam angles

Prelims — high-yield facts and traps

• Regulator vs operator
• RBI regulates all payment systems under the PSS Act 2007 (through BPSS) and itself operates RTGS and NEFT.
• NPCI (2008, not-for-profit) runs UPI, BHIM, IMPS, NFS, RuPay, AePS, NACH, NETC FASTag and Bharat BillPay (through NBBL). NIPL takes UPI abroad.
• I4C and the reporting portal are under MHA.

• Account Aggregators (NBFC-AA) and P2P platforms (NBFC-P2P) are RBI-regulated NBFCs.

• Settlement mechanics

• RTGS: gross, real-time, minimum ₹2 lakh.
• NEFT: deferred net, half-hourly batches (48 a day), no minimum.
• IMPS: instant, up to ₹5 lakh.

• UPI: instant account-to-account payments. Per-transaction limits vary by category (verify current).

• Chronology

Year	Event
2004	RTGS
2005	NEFT
2008	NPCI
2010	IMPS
2012	RuPay
2014	PMJDY
Apr/Aug 2016	UPI (pilot / public)
Nov 2016	Demonetisation
Dec 2016	BHIM
Dec 2019	NEFT 24×7
Jan 2020	Zero MDR
Dec 2020	RTGS 24×7
Sept 2021	AA network live
Oct 2022	Card tokenisation
Feb 2023	PayNow–UPI link
Feb 2024	France, Sri Lanka, Mauritius

• Statement traps (all FALSE)
• "UPI needs a wallet to hold money first." UPI moves money bank to bank.
• "Cheques and debit cards are legal tender." Only notes and coins are legal tender, and a cheque can be refused.
• "A credit card is money." It spends a loan, not a deposit.
• "Merchants may store card numbers after tokenisation." They may not.
• "Customers bear the loss even if they report within three working days." Liability is zero.
• "NPCI operates RTGS." RBI does.
• "Nepal was the first to accept UPI QR." Bhutan (2021) was first to accept the QR. Nepal was the first to adopt UPI as a platform (NCERT, 2022).

• "Account Aggregators can read and store your data." They are data-blind.

• Authentication: UPI uses device binding plus UPI PIN. AePS uses Aadhaar plus biometric. Online card payments use an additional factor (OTP).

• Definitions to know: MDR, PPI, payment aggregator vs gateway, open banking vs Account Aggregator, DPI, blockchain, BNPL, regulatory sandbox, cashless society, payment system (clearing and settlement).
• Firsts
• Bhutan: first UPI QR acceptance.
• Nepal: first adopter of UPI (NCERT).
• Singapore: first cross-border fast-payment link.
• France: first in Europe.

• Trinidad and Tobago: first in the Caribbean.

• Numbers: helpline 1930; portal cybercrime.gov.in; Positive Pay for cheques of ₹50,000 and above; Digital Payments Index base March 2018 = 100; default-loss guarantee cap 5%; wallet interchange 1.1%.

Mains — GS-III themes

1. UPI and DPI as a development model and a diplomatic export - Inclusion through JAM and DBT, which cut leakages and middlemen. - Public rails with private competition on top. - Soft power through NIPL, G20 and the DPI repository (GS-III and GS-II).

2. Demonetisation and digital payments: a lasting shift or a coincidence? - UPI's launch timing. - The rise and fall of the currency-to-GDP ratio: the cash paradox. - Why "less-cash" fits India better than "cashless".

3. Who should pay for payments? - Is zero MDR sustainable? - Concentration in two apps, and the delayed 30% cap. - Outages and the resilience of UPI as critical infrastructure.

4. Digital lending - Inclusion through fintech, Account Aggregators and ULI (cash-flow lending to MSMEs). - Risks: predatory apps, privacy and consent (DPDP Act 2023). - How RBI balances innovation (sandbox) with stability (lending guidelines, P2P curbs).

5. Cyber fraud - A challenge for governance, policing across states and financial literacy. - Institutional answers: I4C, 1930, liability rules, MuleHunter.AI. - The digital divide by gender, region and age.

Current-affairs hooks

• NPCI's monthly UPI volume and value milestones. UPI launches abroad during PM visits. IMF, BIS and ACI Worldwide reports on UPI. Progress on Project Nexus.
• RBI MPC "statement on developmental and regulatory policies": new UPI limits and products, fraud measures, authentication rules. Payments Vision updates. Digital Payments Index releases.
• Union Budget incentive scheme for UPI and RuPay. The MDR debate. NPCI decisions on the market-cap deadline.
• Global Fintech Fest (Mumbai). G20 and DPI follow-ups. Adoption of ULI, Account Aggregators and ONDC.
• I4C and NCRP data. "Digital arrest" advisories. RBI Annual Report fraud statistics. RBI financial-literacy campaigns. UPI outages. Progress of continuous cheque clearing and bank.in migration.