UPI privacy concerns put merchant access to customer data under scrutiny
An opinion piece argues that UPI payment flows can expose customer names and, in some cases, mobile numbers to merchants, creating risks of unsolicited contact and harassment. It calls for data minimisation, merchant audits and stronger enforcement under India’s data-protection law.
What happened
Opinion piece flags UPI payment flows as a consumer-privacy risk, alleging merchants can access customers’ names and sometimes mobile numbers, enabling
Key facts
- ₹143
- 2023
- Fortune 500
Why this matters
Retail and payments groups should assess partnerships or acquisitions in consent management, tokenisation and merchant-data governance as stronger UPI privacy enforcement becomes more likely.
What to watch
- NPCI circulars or product changes that mask payer identifiers, limit merchant-side transaction metadata or alter QR-payment receipts.
- RBI supervisory guidance on payment-data minimisation, merchant-acquirer controls or customer grievance handling.
- DPDP Rules, consent-manager standards, Data Protection Board activity or early enforcement actions involving payment-linked personal data.
- Consumer complaints, viral incidents or police cases linking UPI transactions to unsolicited marketing, stalking, fraud or harassment.
- Major PSPs, banks or payment aggregators launching masked-identity merchant dashboards or privacy-certified QR products.
- Large retail chains changing checkout, loyalty or digital-receipt practices because UPI data can no longer be used as an implicit customer identifier.
- Map every payment-data field visible to store staff, franchisees, delivery partners, acquirers and CRM vendors; remove customer mobile numbers and names where they are not operationally required.
- Replace personal merchant QR codes and staff-owned payment accounts with centrally managed business QR infrastructure and controlled settlement access.
- Separate payment-confirmation workflows from marketing and loyalty enrollment; require explicit, independently captured consent for promotional outreach.
- Implement merchant and franchisee audit logs, retention limits, role-based access and disciplinary procedures for misuse of payment-derived data.
- Ask PSPs, banks and payment aggregators for documented data-flow maps, masking options, breach-notification commitments and contractual liability allocation.
- Prepare customer-facing privacy messaging and a rapid-response process for complaints involving unsolicited calls, messages or harassment after payment.