The National Payments Corporation of India has issued a new directive requiring all Unified Payments Interface applications to mask user phone numbers. This change is designed to enhance privacy by ensuring that full mobile numbers are not visible to other users during transactions. Instead, the system will push for the use of unique UPI IDs or usernames to facilitate payments.
Currently, many UPI apps display the sender or receiver's phone number as part of the transaction interface. While this has been convenient for verifying the identity of a recipient, it has also raised concerns about the exposure of personal contact information to strangers. The new mandate aims to standardize how these details are presented across all platforms.
Under the updated guidelines, apps must implement masking so that only a portion of the phone number is visible, such as replacing middle digits with asterisks. This shift encourages users to rely on Virtual Payment Addresses, which act as a digital alias for bank accounts. By decoupling the transaction process from the primary mobile number, the NPCI hopes to reduce the risk of unsolicited contact and potential data misuse.
This transition will affect millions of UPI users across India, as well as the various fintech companies that manage these payment interfaces. Developers will need to update their application designs to comply with these privacy standards within the specified timeframe. The move reflects a broader regulatory push to strengthen data protection within the country's rapidly growing digital payments ecosystem.
As the rollout begins, users might notice changes in how they confirm payment recipients. While the core functionality of sending and receiving money remains unchanged, the visual interface will prioritize anonymity. The NPCI continues to monitor the implementation to ensure that both security and user convenience are maintained as the digital economy evolves.