India digital payments network is adding a major new option: on-device biometric authentication for UPI payments. Starting 8 October 2025, users will be able to authorise UPI transactions with their fingerprint or face instead of typing a UPI PIN. The National Payments Corporation of India (NPCI) rolled this out under a new operating circular, aligned with the Reserve Bank of India’s (RBI) updated authentication directions. It begins with a ₹5,000 per-transaction cap and is optional you can keep using your PIN if you prefer.
New UPI Rule (Effective 8 October 2025) Quick Summary (Vertical Table)
| Item | Details |
|---|---|
| Rollout date | 8 October 2025 (PIN-free option using on-device biometrics goes live). |
| What changes | Users can authorise UPI payments with fingerprint/face instead of entering a UPI PIN (optional). |
| Initial limit | Up to ₹5,000 per transaction; to be reviewed later based on performance. |
| PIN set/reset | Aadhaar-based face authentication added as an option for UPI PIN set/reset. |
| Security framework | Backed by RBI’s Authentication Directions, 2025 allowing alternative factors beyond SMS OTP. |
| Consent & privacy | Explicit, revocable user consent; opt-out anytime; on-device biometric authentication with fresh consent on device re-binding. |
| Official sites | npci.org.in (circulars) and rbi.org.in (directions). |
What exactly is changing from 8 October?
- Authorising payments: Instead of typing a 4/6-digit UPI PIN, you can choose to approve the transaction on your phone with fingerprint or facial recognition. This is in addition to current methods not a forced replacement.
- Transaction cap during pilot: NPCI’s circular sets an initial limit of ₹5,000 for transactions authenticated with on-device biometrics; the limit will be reviewed later.
- UPI PIN set/reset becomes easier: NPCI has also introduced Aadhaar-based face authentication to set or reset your UPI PIN, which can especially help seniors or first-time users who struggle with card/OTP flows.
- Live demo and announcements: The features were unveiled at Global Fintech Fest 2025 in Mumbai, where officials also highlighted the broader roadmap (e.g., micro-ATM cash withdrawals at BC points).
Why RBI new Directions matter
RBI “Authentication Mechanisms for Digital Payment Transactions Directions, 2025” (25 Sep 2025) modernise India’s authentication rules. They mandate 2FA for domestic digital payments while allowing technology-neutral alternatives to traditional OTP/PIN methods opening the door for risk-based and biometric factors where appropriate. NPCI’s UPI circular explicitly references these Directions as the policy basis for adding on-device biometrics.
Is this mandatory? No. Here is how consent and privacy work
NPCI’s circular makes three user protections clear:
- It is optional you may continue using your PIN.
- Explicit user consent is required, and you can opt out at any time.
- A fresh consent must be captured if you change or re-bind your device; banks must disable the biometric method on PIN reset until new consent is taken.
These points reinforce that biometric matching happens on your device, with issuers/UPI apps responsible for security checks and compatibility validation.
Who benefits and when should you use it?
- Seniors and rural users who find PINs hard to remember or type quickly now have a faster, more inclusive way to pay.
- Anyone concerned about shoulder-surfing or PIN theft gains an extra layer of protection with on-device biometrics.
- Everyday purchases under ₹5,000 are the immediate sweet spot; larger values will remain PIN- or bank-policy-gated until limits are reviewed.
How to enable the new method (typical flow)
- Update your UPI app to the latest version.
- In Security/Authentication, choose Biometric authorisation.
- Provide consent and complete device checks; your app may confirm biometric enrollment/state before turning it on.
- For PIN set/reset, some apps will offer Aadhaar-based face authentication as an alternative to card/OTP.
Tip: If you later change devices or reset your UPI PIN, expect the app/bank to turn off biometric authorisation and ask for fresh consent to re-enable.
Frequently Asked Questions (FAQs)
1) From when can I use face/fingerprint instead of UPI PIN?
From 8 October 2025, on-device biometric authentication is available as an optional UPI authorisation method (beginning with a ₹5,000 cap).
2) Will my bank or NPCI store my biometrics?
The circular prescribes on-device authentication and strong consent/disable rules; banks/UPI apps must handle security validations and allow opt-out. Biometric matching happens on your device as part of the approved flow.
3) Can I still use my UPI PIN?
Yes. The biometric method is optional, and you may continue using PIN for all transactions.
4) What is the limit for biometric-authorised payments?
Initially ₹5,000 per transaction; NPCI will review this limit after performance evaluation.
5) Is face authentication used anywhere else in UPI?
Yes. Aadhaar-based face authentication is being introduced as an option for UPI PIN set/reset to simplify onboarding and recovery.
6) Where can I read the official rule?
See NPCI’s operating circular on additional authentication methods for UPI and RBI 2025 Directions on digital payment authentication.
Conclusion
UPI’s biometric authorisation is a practical upgrade: fewer PIN hassles, faster checkouts, and RBI-aligned security controls. Because it is opt-in and on-device, you decide when to use it and you can revert to a PIN anytime. Start with small transactions (≤₹5,000), ensure your app is updated, and review consent settings in your UPI app. Keep an eye on NPCI/RBI advisories for limit changes or additional risk-based controls as adoption grows.
For More Information Click HERE
