UPI MDR to start Oct 15, funding payment security and merchant acceptance expansion

NPCI will levy 0.4% MDR on eligible P2M UPI payments above ₹2,000, capped at ₹300, to support cybersecurity and infrastructure. PhonePe plans 20,000-plus frontline hires and 50 lakh devices, while Pine Labs targets 10 lakh soundboxes; NPCI says most users and small merchants remain unaffected.

— Source publishedThu, 24 Sept, 2026, 17:08 IST·First seen Thu, 24 Sept, 2026, 18:02 IST·Source Inc42

What happened

NPCI’s new UPI MDR framework will charge 0.4% on eligible merchant payments above ₹2,000, funding cybersecurity and infrastructure. PhonePe and Pine Labs

Key facts

  • UPI MDR effective October 15
  • 0.4% MDR on eligible P2M UPI payments above ₹2,000
  • MDR capped at ₹300 per transaction
  • ₹13,000 Cr-₹15,000 Cr estimated first-year MDR collections
  • PhonePe to hire 20,000+ frontline sales personnel
  • PhonePe to deploy 50 Lakh+ payment devices over one year
  • Pine Labs to deploy 10 Lakh soundboxes
  • 96% of UPI transactions by volume remain free
  • 75% of UPI transaction value remains free
  • 75% of UPI merchants have never processed a transaction above ₹2,000
  • Businesses processing over ₹1,000 Cr annually expected to contribute 80% of MDR collections
  • Merchants processing over ₹1 Cr annually expected to contribute another 10%

Why this matters

The security-funded infrastructure buildout increases the strategic value of partnerships or acquisitions in merchant devices, fraud prevention, and rural payment distribution.

What to watch

  • Final NPCI circular defining eligible P2M categories, exemptions, collection mechanics and whether the Oct. 15 start date holds.
  • Actual MDR pass-through behavior by major aggregators, marketplaces, large merchants and offline chains.
  • Monthly growth in soundbox, QR and POS installations from PhonePe, Pine Labs, Paytm, banks and other acquirers.
  • UPI transaction mix above versus below ₹2,000, plus any rise in card, wallet, net-banking or credit-on-UPI usage in affected categories.
  • Fraud-loss trends, outage rates and cybersecurity investment disclosures following MDR collection.
  • Government or RBI commentary on consumer/merchant protection, surcharge enforcement and potential revisions to the cap.
  • Prioritize device deployment in underpenetrated districts where soundbox-led confirmation can reduce cash handling and failed-payment disputes.
  • Build merchant segmentation around the ₹2,000 threshold; offer routing, pricing and settlement tools for high-ticket categories such as electronics, healthcare, travel and education.
  • Use MDR-linked funding to expand real-time fraud detection, mule-account monitoring, transaction-risk scoring and merchant cyber hygiene.
  • Expect acquirers and payment aggregators to bundle soundboxes, QR, POS, credit and working-capital offers, making merchant data ownership more strategically valuable.
  • Track whether large platforms quietly introduce checkout nudges toward lower-cost payment methods for eligible high-value UPI transactions.

Also reported by