Full mobile numbers will no longer be visible on UPI apps like Google Pay, PhonePe, and Paytm; new NPCI directive
The NPCI has issued a new circular for UPI apps—such as Google Pay, PhonePe, and Paytm—and partner banks. This directive, issued under the Digital Personal Data Protection (DPDP) norms, mandates that a user’s full mobile number must not be displayed. The NPCI has set a deadline of September 4 for UPI service providers and banks to comply with this requirement.
What is the NPCI’s directive?
According to reports, the NPCI issued this new order to safeguard the mobile numbers and personal data of UPI users. The agency had previously issued a circular last month stating that UPI users’ mobile numbers should be masked (hidden). This move follows complaints raised by users—particularly regarding the privacy, identity, and safety of women—on social media platforms.
In its circular, the NPCI emphasizes that banks and UPI apps must prioritize user privacy. Sensitive user information—specifically UPI IDs, mobile numbers, and account numbers—must be masked across all customer-facing interfaces. The directive specifies that for transactions made via QR codes, only the last four digits of the user’s mobile number should be visible to the other party; the full number should be hidden once the payment is completed.
UPI apps must prioritize privacy
Furthermore, the NPCI has directed UPI apps like Paytm, Google Pay, and PhonePe to provide an option to create UPI IDs that are not based on mobile numbers, allowing users to choose a username instead. Currently, most users rely on their mobile numbers as their UPI IDs, often because they are unaware of the option to create username-based IDs.
This NPCI directive ensures that users will no longer need to worry about their mobile numbers or other personal details being exposed to others during future transactions. By keeping mobile numbers masked, the measure prevents the other party from harassing users through unsolicited calls or messages. This is a major step taken for the security and privacy of user data.
