RBI’s 1-Hour UPI Delay Rule:
Everything You Need to Know
Digital fraud crossed ₹22,931 crore in 2025. Here’s exactly what the RBI is proposing, who gets affected, and what you should do right now.
India’s UPI network processed 228 billion transactions worth nearly ₹300 lakh crore in 2025 alone — averaging 698 million transactions every single day by December. That is more daily transactions than Visa handles globally. But behind those jaw-dropping numbers, a different set of figures has been quietly climbing: fraud cases have surged more than tenfold in just four years.
On April 10, 2026, the Reserve Bank of India released a discussion paper titled “Exploring Safeguards in Digital Payments to Curb Frauds.” It sets out four concrete proposals. Stakeholders have until May 8, 2026 to submit responses before the RBI potentially issues formal guidelines.
1. What RBI Is Actually Proposing
The headline proposal is a one-hour pause on peer-to-peer digital transfers above ₹10,000. Here is precisely how it would work under the proposal:
| Mechanism | How It Works |
|---|---|
| Your account is debited | Instantly, the moment you confirm the payment |
| Recipient receives funds | After a hold of up to 60 minutes |
| Cancellation window | Any time during that 60-minute hold period |
| Suspicious transaction alert | Bank must seek reconfirmation before releasing funds |
| Bypass option — whitelisting | Pre-approved trusted contacts receive funds instantly |
| Who is covered | Individuals, sole proprietors, small partnership firms |
| Minimum transfer amount to trigger hold | Above ₹10,000 |
“Fraudsters typically rely on creating urgency and maintaining continuous psychological pressure on the victim to prevent deliberation. Introducing lag at the payer’s end breaks the fraudster’s psychological control.”
— RBI Discussion Paper, “Exploring Safeguards in Digital Payments to Curb Frauds,” April 10, 20262. The Real Fraud Numbers: 2021 to 2025
The following figures are verified data from the National Cyber Crime Reporting Portal (NCRP), cited directly in the RBI’s official discussion paper.
3. How UPI Fraud Actually Works — No Technical Hacking Required
The RBI paper emphasises a point that is easy to overlook: almost none of today’s digital payment fraud involves a breach of banking systems. No one is hacking into servers. No passwords are stolen from databases.
The dominant attack category is called Authorised Push Payment (APP) fraud. The victim sends the money themselves — willingly, but under psychological manipulation.
| Fraud Type | How It Works | Why Instant UPI Makes It Worse |
|---|---|---|
| Fake bank official call | Caller claims your account is compromised; asks you to transfer to a “safe” account | Transaction completes in under 2 seconds — no recovery window |
| KYC / SIM card scam | Caller pretends to be from telecom or government, says Aadhaar/SIM needs urgent verification | Urgency prevents the victim from verifying the caller’s identity |
| Deepfake / AI voice fraud | AI-generated voice or video of a known contact requests emergency money transfer | Rising sharply in 2025–26; nearly impossible to detect in real time |
| Mule account networks | Fraudsters move money through multiple accounts in minutes to avoid recovery or tracing | Instant settlement removes the window to intercept the transaction chain |
| Fake customer care | Victim finds a fake helpline number online, calls it, and is tricked into making a payment | Victim authorises payment themselves — banks have limited liability recourse |
Speed is the fraud’s most powerful asset. Once money moves on UPI or IMPS, recovery is extremely difficult. Banks can file disputes and law enforcement can get involved — but actual recovery rates remain low because funds are moved, split, or withdrawn within minutes of arriving.
4. All Four RBI Proposals, Clearly Explained
The discussion paper does not propose just one measure. It outlines four distinct options, each targeting a different dimension of the fraud problem.
5. Who Is Affected — and Who Is Not
| Transaction Type | Affected by Delay? | Reason |
|---|---|---|
| P2P transfer above ₹10,000 to a new/unwhitelisted contact | Yes — 60-min hold | Core target of the proposal |
| P2P transfer to a whitelisted / trusted contact | Instant | Pre-approved recipients bypass the hold entirely |
| QR code scan at a shop or restaurant | Instant | Merchant payments explicitly exempt under proposal |
| Online shopping / e-commerce checkout | Instant | Routed through verified payment aggregators with own checks |
| EMIs / recurring mandate payments | Instant | Pre-authorised by verified merchants; explicitly exempt |
| NACH transactions (utility, insurance) | Instant | Explicitly exempt under the discussion paper |
| Cheque-based payments | Instant | Explicitly exempt under the discussion paper |
| Sole proprietors / small firms making informal P2P transfers | Yes — hold applies | Informal business P2P transfers are included in scope |
| Any P2P transfer below ₹10,000 | Instant | Below the threshold; daily micro-payments fully unaffected |
6. What Other Countries Are Already Doing
India is not the first country to introduce friction into instant payment systems as an anti-fraud tool. The RBI discussion paper itself draws on global precedents.
India’s proposed 60-minute hold is actually shorter than the UK’s 72-hour window or Singapore’s 12-hour model for high-risk actions. The RBI has acknowledged this as an intentional trade-off — preserving UPI’s competitive speed advantage while introducing a targeted intervention window where it matters most.
7. Practical Tips for UPI Users Right Now
- Whitelist contacts you pay regularly. Most UPI apps allow saving trusted contacts. Send a ₹1 test transfer to a new recipient today — this whitelists them so future transfers above ₹10,000 go through instantly once the rule is live.
- Keep IMPS active as a backup. For truly urgent, time-sensitive transfers where instant confirmation is non-negotiable, IMPS remains an option. Set it up before you need it — not after an emergency arises.
- For offline emergencies, use QR codes. Physical merchant QR code scans are expected to bypass the delay entirely. Keeping this option available matters for in-person urgent situations.
- Plan high-value transfers in advance. For rent, freelancer payments, or family remittances above ₹10,000, sending earlier in the day removes any timing pressure. The 60-minute window becomes irrelevant when you plan ahead.
- Watch your app’s UI for clear messaging. A message like “Payment releases at 3:47 PM” turns the wait into a feature. Vague loading spinners create confusion. If your bank’s app communicates poorly, report it via their official feedback channels.
- Senior citizens: discuss the trusted-person option with family. Under Option 2, nominating a trusted family member as an authenticator for transfers above ₹50,000 could provide significant added protection for elderly relatives.
- Never whitelist a contact under pressure. If someone calls and insists you whitelist their number before sending money — stop. Legitimate recipients do not ask to be whitelisted on a call. This is a fraud tactic designed to bypass the new safeguard.
