How To Do
UPI Limit & 2FA Checker
RBI's "Authentication Mechanisms for Digital Payment Transactions Directions, 2025" took effect on 1 April 2026. Limits and authentication factors now depend on what you're paying for. Pick your use case to see what applies.
What changed on 1 April 2026
- Two-factor authentication (2FA) is mandatory for every digital payment, including UPI. Factors must come from at least two different categories: knowledge (PIN), possession (registered device, token), inherence (biometric).
- Balance check capped at 50/day per UPI app to prevent background polling that overloads the network.
- Higher per-day limit (₹10L) available for tax, education, healthcare, and capital-market payments to verified merchant categories.
- New UPI registrations capped at ₹5,000 per transaction in the first 24 hours.
- OTP alone is no longer sufficient — at least one dynamic factor (UPI PIN, biometric, or hardware token response) is required for every transfer.
Daily limit table
| Use case | Per-transaction | Daily cap |
|---|---|---|
| P2P / general merchant | ₹1,00,000 | ₹1,00,000 |
| Tax payments (income tax, GST) | ₹5,00,000 | ₹10,00,000 |
| Education fees | ₹5,00,000 | ₹10,00,000 |
| Healthcare / hospitals | ₹5,00,000 | ₹10,00,000 |
| Capital market (IPO, MF, stock) | ₹5,00,000 | ₹5,00,000 |
| First 24h after new UPI registration | ₹5,000 | ₹5,000 |
Banks may set lower limits than NPCI's ceiling. Check your bank's UPI policy if a transfer fails inside the cap.
FAQ
Why does my balance check fail after a few tries?
From 1 April 2026, RBI capped balance checks at 50 per app per day. Background polling by apps (refreshing whenever you open them) was overloading bank servers. Your check button works fine; just don't reopen the app 80 times.
My new UPI fails for ₹10,000 transfers — why?
In the first 24 hours after a new UPI registration, individual transfers are capped at ₹5,000. This is a fraud-prevention measure. After 24 hours, your normal ₹1L daily limit kicks in.
How do I unlock the ₹10L higher limit?
Higher limits apply automatically when you transact with verified merchant categories — tax payment portals (NPCI / TIN-NSDL), recognized educational institutions, registered hospitals, and SEBI-regulated capital-market intermediaries. The merchant must be tagged correctly by the acquirer; if your tax payment fails at ₹2L, the issue is on the merchant side, not your bank.
Are UPI transactions still free?
Yes for P2P and most merchant payments. Wallet-to-UPI loads above ₹2,000 attract a 1.1% interchange fee paid by the merchant (not the consumer). Banks may charge for cardless ATM withdrawals via UPI once free transaction limits are exhausted.
Can I disable 2FA?
No. RBI's 2025 directive makes 2FA mandatory for every digital payment. Apps that previously allowed PIN-only payments above device-level biometric had to update by 1 April 2026.