NPCI's Unified Agent Protocol: What Agentic UPI Payments Mean for Banking Apps

India is building one of the first national-scale frameworks for AI agents to make real-time retail payments. NPCI's Unified Agent Protocol (UAP) is designed to let AI agents execute UPI payments on a customer's behalf within limits the customer sets, without a human approving every single transaction. At Global Fintech Fest 2026 in September, the first agentic UPI experiences went live on narrow use cases like flight booking. For banks, NBFCs, and payment apps, UAP raises one strategic question above all others: where will customers authorise, watch, and control the agents that spend their money? The answer that is emerging is: inside the financial app they already trust.

What Is NPCI's Unified Agent Protocol?

NPCI's Unified Agent Protocol is a framework that allows AI agents to initiate UPI payments on a user's behalf within pre-authorised limits, building on existing UPI mechanisms such as UPI Circle (delegated payments) and UPI Reserve Pay (blocking an amount for future use). Instead of approving each payment with a UPI PIN, the customer delegates bounded payment authority to a specific agent once, with limits, merchant scope, and the ability to revoke. The goal is to make agent-initiated commerce possible on UPI while preserving interoperability, auditability, and settlement finality.

Agentic UPI vs UPI AutoPay: What Is Actually New?

UPI AutoPay already lets a merchant debit a fixed or variable amount on a schedule, so agentic UPI can look similar at first glance. The difference is who decides. With AutoPay, the customer approves a specific merchant and a recurring payment in advance. With agentic UPI, the customer approves an agent and a budget, and the agent decides what to buy, from which approved merchant, and when, within that budget.

AutoPay: one merchant, a known schedule, a mandate the customer set up for that biller.
Agentic UPI: one agent, many possible merchants, decisions made in real time based on the customer's stated intent.
AutoPay is a payment instruction. Agentic UPI is delegated judgement, which is why consent, limits, and audit design matter far more.

How Does Agentic UPI Payment Work in Practice?

The first implementations shown at GFF 2026 make the flow clear:

The customer authorises an agent inside a financial app. On Amazon Pay's Smart Wallet, this happens on the UPI Manage page, where the customer picks the agent and sets monthly limits, per-transaction limits, and merchant-level consent.
The agent acts on intent. It searches for a flight, compares prices, and selects the booking the customer asked for, even waiting for a price drop if instructed.
Payment executes within the delegated limit through UPI, without a fresh PIN entry for each transaction.
Every action is logged and remains revocable from the same app.

L&T Finance and Pine Labs announced the same pattern for the L&T Finance PLANET App, where a buyer agent completes flight ticket payments through the app's own UPI functionality, with Pine Labs Grantex providing authorisation delegation, spend controls, and auditability. Girish Krishnan, Director of Payments, Rewards and Merchant Services at Amazon Pay India, described the ambition: "Our Amazon Pay Smart Wallet is going to be the foundation which can work across different merchants once you consent, and you can use autonomous agents across all of those merchant apps to do the work for you."

What NPCI Said About AI Agents and UPI at GFF 2026

NPCI's leadership was explicit that agents will not get unchecked control over money. Ajay Kumar Choudhary, Non-executive Chairman of NPCI, told the GFF 2026 audience on September 10: "Decision making and execution must remain separate. AI may recommend, but authentication and final settlement must follow deterministic auditable rules." He also said NPCI is examining the protocols needed to identify and authorise digital agents within UPI while preserving interoperability, auditability, and settlement finality.

Consumer advocates are pushing for the same rigour. Srikanth Lakshmanan of the Cashless Consumer collective argued in response that agents represent a bigger cultural shift than recurring mandates ever did, and that a protocol handing payment authority to software deserves at least as much process. Whatever the final rules look like, the direction is clear: bounded delegation, visible consent, and auditable execution.

Why Agentic UPI Makes the Banking App the Control Center

Agentic payments could have gone the other way, with agents living entirely outside financial apps. UAP's design, and the first agentic UPI launches at GFF 2026, point in the opposite direction. The banking or payment app becomes more central because it holds the three things an agent cannot operate without:

The verified identity and UPI credentials of the customer, bound to their device and bank account.
The consent screen where limits are set, reviewed, and revoked. Customers will not hand spending power to an agent without a clear, familiar place to control it.
The audit trail and grievance path that a regulated entity is accountable for when something goes wrong.

Banking apps are not disappearing, they are becoming agents, and UAP accelerates that. A bank app that only offers a static permissions page will host other companies' agents. A bank app with its own in-app agent can propose the payment, explain it, get confirmation on the same screen, and execute it, all under one brand and one accountable entity.

What Banks and NBFCs Should Do Before Agentic UPI Scales

Agentic UPI is live today only for narrow cases like travel booking, which gives BFSI teams a short window to prepare:

Build the agent-permissions experience into your app now. Limits, merchant scope, spend history per agent, and one-tap revocation should feel as native as a UPI AutoPay mandate screen.
Launch your own in-app agent for high-intent journeys such as bill payments, FD bookings, EMI prepayments, and insurance renewals, so customers delegate to you first.
Architect for NPCI's principle: the agent recommends, the customer confirms, and deterministic bank systems authenticate and settle.
Instrument everything. Per-agent logs, anomaly alerts, and dispute workflows will be the first things supervisors ask about.

RevRag AI builds in-app AI agents for BFSI apps designed around this separation of recommendation and execution, so an agent can guide and act inside the app while approvals and settlement stay deterministic and auditable.

Where Agentic UPI Payments Are Heading

Two specific, checkable predictions for how UAP reshapes Indian payments:

By December 2027, most agent-initiated UPI payment volume in India will be authorised from a consent screen inside a bank or payment app, not from a standalone third-party chatbot.
By March 2028, at least one top-10 Indian bank will let customers pay utility bills and credit card dues through its own in-app agent under delegated UPI limits, with no PIN entry per payment.

Frequently Asked Questions About NPCI's Unified Agent Protocol

What is the Unified Agent Protocol (UAP) by NPCI?

The Unified Agent Protocol is an NPCI framework that lets AI agents initiate UPI payments on a user's behalf within limits the user has pre-authorised, building on UPI features like UPI Circle and Reserve Pay. It is designed to enable agent-initiated commerce while keeping payments interoperable, auditable, and final.

Can AI agents make UPI payments without a PIN?

Under agentic UPI models demonstrated at GFF 2026, a customer authorises a specific agent once and sets monthly, per-transaction, and merchant limits. The agent can then pay within those limits without a fresh PIN for each transaction, and the customer can revoke access at any time from the app.

Which apps support agentic UPI payments?

At GFF 2026, Amazon Pay launched Smart Wallet for agentic UPI payments, starting with flight bookings via ixigo, and L&T Finance announced agentic commerce with Pine Labs inside the L&T Finance PLANET App, also starting with flight bookings. More merchants and use cases are expected as NPCI finalises the framework.

Is agentic UPI safe?

Safety depends on bounded delegation and auditability. NPCI's chairman has said AI may recommend, but authentication and final settlement must follow deterministic, auditable rules. Customers should only authorise agents through their bank or payment app's consent screen, with clear limits and the ability to revoke.