UPI gets smarter: Face and fingerprint authentication launched for secure payments

For actual payments, the update introduces on-device biometric authentication. This means using your phone's built-in fingerprint scanner, face ID, or similar features instead of entering your PIN.

Imagine making payments with just a quick face scan or fingerprint touch—no more typing in your UPI PIN every time. That's the exciting update coming to India's Unified Payments Interface (UPI). On October 7, 2025, the National Payments Corporation of India (NPCI) issued a circular announcing optional new authentication methods for UPI users. This move aims to make digital payments easier and more secure, based on guidelines from the Reserve Bank of India (RBI).

Currently, most UPI transactions require a PIN set using your Aadhaar OTP or debit card details (except for small features like UPI Lite). The new options build on this by adding biometric tech, like face or fingerprint recognition. These are voluntary—you can stick with your old PIN if you prefer. The goal is to enhance user experience while keeping things safe.

New option for setting or resetting your UPI PIN

One big change is for when you set or reset your UPI PIN. Normally, you use your debit card info or an Aadhaar-linked OTP. Now, there's an alternative: UIDAI Face Authentication.

This uses the Unique Identification Authority of India's (UIDAI) face recognition system. It's like unlocking your phone with your face, but for UPI setup. Banks and UPI apps (like Google Pay or PhonePe) must follow strict UIDAI rules to implement this. It's designed to be a convenient backup if you don't have your card or OTP handy.

Easier transaction authentication with biometrics

For actual payments, the update introduces on-device biometric authentication. This means using your phone's built-in fingerprint scanner, face ID, or similar features instead of entering your PIN.

It's starting small, i.e. only for transactions up to Rs. 5,000. NPCI plans to review and possibly increase this limit based on how well it works. This feature happens right on your device, making it faster for everyday small payments, like buying groceries or paying a friend.

Banks and apps will roll this out, but it's optional. If you enable it, you can always switch back to PIN.

Also read | Here is a checklist when you go shopping for gold this Diwali

Key safety guidelines to protect users

Safety is a top priority, so NPCI laid out clear rules for banks and apps:

Device Checks: Apps must verify your phone isn't hacked and supports biometrics properly. This includes checking OS versions and enrollment status.

Consent is key: You must give explicit permission to use these features, and you can opt out anytime. Apps need fresh consent after linking a new device.

Eligibility and validation: Banks will check if you're eligible and validate your biometrics before approving.

Communication and controls: You'll get notifications when enabling or disabling biometrics. If you reset your PIN, biometrics get paused until you reconfirm.

Security measures: Keys for biometrics must rotate yearly, and if you don't use the feature for 90 days, it'll deactivate automatically.

These steps ensure no one can misuse your info, and everything complies with regulations.

Also read | How to make your Rs 1 crore retirement corpus last 25–30 years with smart asset allocation

What this means for you

This update makes UPI more user-friendly, especially for those who find PINs cumbersome. It's a step toward seamless digital payments in India, where UPI already handles billions of transactions monthly. Banks and apps will implement these soon, so watch for updates in your UPI app.

If you're tech-savvy, try the biometrics for quicker transactions. But remember, security comes first—only enable on trusted devices. With these changes, UPI is evolving to be safer and simpler for everyone.