NPCI asks UPI apps to mask phone numbers and account details by September 4
NPCI has directed banks and UPI apps to limit the display of customer phone numbers, UPI IDs and bank-account details under DPDP-aligned privacy rules. Apps may retain visibility of only the final four mobile digits and offer UPI IDs not tied to phone numbers.
NPCI has directed banks and UPI apps to mask customers’ phone numbers, UPI IDs and bank-account details to align with DPDP privacy requirements. Platforms may show only the last four mobile digits and enable non-mobile-number-based UPI IDs.
Why this matters
NPCI's privacy directive adds a data-protection layer to its recent UPI product activity, including its proposed UPI Meta checkout framework and reported offline tap-and-pay plans for retail PoS terminals.
Retail-company signals are accelerating, up +401400% QoQ.