AI Agents That Pay With UPI: How Agentic Payments Work in India, What Is Live and What Is Coming (2026)
Short answer: AI agents can already pay with UPI in India, in limited form. In October 2025, NPCI, OpenAI and Razorpay piloted UPI payments inside ChatGPT, with BigBasket and Vi as the first merchants. In June 2026, Pine Labs put its P3P protocol live on UPI, letting agents pay after a single upfront approval. And in September 2026, Reuters reported that NPCI has prepared a framework, called the Unified Agent Protocol, that would let AI agents make small UPI payments without approving each transaction.
None of this is a nationwide consumer launch yet. But the building blocks, UPI Reserve Pay and UPI Circle, are live on the world's largest real-time payment system, which processed 24.07 billion transactions worth ₹29.37 lakh crore in September 2026 alone.
This report explains how agentic payments work, what is live and what is coming, how India's approach compares with Visa, Mastercard, Google and OpenAI, the risks researchers have found, and how to stay safe.
What are agentic payments?
Today, every UPI payment needs you: you open an app, check the amount and enter your PIN. An agentic payment is one that an AI agent completes on your behalf, within rules you set in advance.
Examples that companies are building for:
- "Reorder my usual groceries every Sunday, up to ₹2,000."
- "Recharge my phone when the plan is about to expire."
- "Buy ₹500 of digital gold whenever the price falls below a level I choose."
- "Book the cheapest train ticket to Pune on Friday evening."
The hard problem is not moving money. UPI does that in seconds. The hard problem is authority: proving that an agent is allowed to spend, limiting how much and where, and deciding who is responsible when the agent gets it wrong.
What is live and what is coming: a timeline
| Date | What happened | Status |
|---|---|---|
| 9 October 2025 | NPCI, OpenAI and Razorpay pilot UPI payments inside ChatGPT. Axis Bank and Airtel Payments Bank are banking partners. BigBasket (groceries) and Vi (mobile recharges) are the first merchants. Razorpay also completes proofs of concept with Google's Gemini and Anthropic's Claude. | Pilot, limited access |
| February 2026 | Mastercard demonstrates what it calls India's first fully authenticated agentic commerce payment, using its Agent Pay framework, at the India AI Impact Summit. | Demonstration |
| 11 June 2026 | Pine Labs launches P3P, an agentic payment protocol built on UPI mandates. Digital gold app Gullak is live, and Vijay Sales is in proof of concept. | Live in production |
| July 2026 | Business Standard reports NPCI is developing the Unified Agent Protocol (UAP) with industry. | In development |
| 1 September 2026 | Reuters reports NPCI has prepared the UAP framework for small agent payments without per-transaction approval. | Prepared, no launch date |
If you are trying to pay for ChatGPT itself with UPI and it is failing, that is a different problem. See our guide: ChatGPT UPI payment not working? Every fix.
How do AI agents pay with UPI? The building blocks
India did not need to build new payment rails for agents. It is extending two UPI features that already exist:
- UPI Reserve Pay, built on a framework called single block, multiple debits (SBMD). You block an amount in your bank account for a specific merchant, and the merchant can debit it in parts later without asking for your PIN each time. Reuters reported that banks currently cap such blocks at about $105 (Reuters' conversion) for up to 90 days, and that the limit could change for agent use.
- UPI Circle, which lets a primary account holder delegate payment authority to a secondary user. It was designed for family members. In the agent model, the secondary user can be an AI agent.
Put together, a typical agentic UPI payment works like this:
- You set the mandate. In your UPI app or the agent's app, you approve a spending limit, the merchants allowed and how long the permission lasts, and confirm with your UPI PIN.
- The funds are blocked. The amount stays in your account but is reserved for the approved purpose.
- The agent shops. It compares options and builds the order.
- The merchant requests a debit within the mandate you approved.
- NPCI and your bank check the request. Is the agent authorised? Is the amount within the limit? Is the merchant allowed? NPCI only checks that the payment request is genuine. It does not see what you are buying.
- The debit happens and you are notified. You can see every agent payment and revoke the mandate at any time.
The Unified Agent Protocol: what NPCI is planning
According to reports in Business Standard and Reuters, the UAP would:
- Register and verify agents, so a bank knows which agent is asking for money and on whose behalf.
- Let users write rules for when and how much an agent may pay, with spending limits, audit trails and identity checks built in.
- Work with any agent, whether it lives in a merchant app, a payment app, an AI assistant like ChatGPT or Claude, or a dedicated agent platform.
- Start small. Early use cases are expected to be frequent, low-value purchases such as groceries and daily essentials. Later uses could include agents buying during sales or investing when prices hit set levels.
- Come with a liability framework, though details have not been disclosed. Industry participants expect chargebacks and dispute resolution to change for agent-led payments.
No launch date has been announced. If it rolls out, India would be among the first countries with national infrastructure for agentic payments.
How India's approach compares with Visa, Mastercard, Google and OpenAI
Global payment companies are building their own agent protocols, mostly on top of cards. They share one idea: an agent should never hold your raw payment details, and every payment should carry proof of what you authorised.
| Protocol | Who | How it limits the agent | Status (2026) |
|---|---|---|---|
| Unified Agent Protocol (UAP) | NPCI (UPI) | User rules, spending limits and audit trails, built on Reserve Pay and UPI Circle | Prepared, not launched |
| P3P | Pine Labs (UPI) | One upfront UPI mandate, spend controls enforced by Grantex, revocable any time | Live on UPI since June 2026 |
| Agent Pay | Mastercard | The agent carries a signed record of the user's instructions, and the network rejects payments that do not match | Live with partner banks |
| Agentic Commerce Protocol | OpenAI with Stripe | Single-use tokens tied to one merchant, one session and an amount range | Live |
| Intelligent Commerce and Trusted Agent Protocol | Visa | Extends card tokenisation to agents, with agent identity checks | Early, partner deployments |
| AP2 | Agent-to-agent standards for authentication and authorisation | Beta, partner-gated | |
| x402 | Coinbase | Uses the web's HTTP 402 "payment required" code for machine payments in crypto | Live |
India's advantage is reach. Card-based protocols depend on card ownership, while UPI already serves hundreds of millions of people who may never have a credit card. In June 2026, 63.5% of UPI transactions were person-to-merchant payments, exactly the kind agents would make.
The risks: what research shows about AI shopping agents
Agents that can pay are only as safe as their judgement, and research suggests that judgement is still weak.
In November 2025, Microsoft researchers published Magentic Marketplace, a simulated market with 100 AI customer agents and 300 AI business agents. They found that:
- Agents settled for the first "good enough" option rather than comparing, and some favoured businesses based on where they appeared in the results, not on merit.
- Manipulation worked. Fake credentials, fake reviews and prompt injections steered payments towards manipulative sellers. Most models tested could be tricked, though Gemini 2.5 Flash was generally more resistant.
That maps onto four practical risks for agentic UPI payments:
- Prompt injection. A product page or message can contain hidden instructions telling the agent to buy something else or pay someone else.
- Wrong but authorised purchases. If the agent buys the wrong item within your limits, the payment is technically valid. Dispute rules for this case are still being written.
- Over-broad mandates. A large limit that lasts months gives a compromised agent a lot of room.
- Privacy. An agent that shops for you learns a lot about you. Check what the agent provider stores and where.
How to use agentic payments safely
- Keep limits small and short. Approve the smallest amount and the shortest validity that does the job.
- Restrict merchants. Allow payments only to the specific merchants you expect.
- Read every notification. Treat agent payment alerts like OTPs, and revoke the mandate the moment something looks wrong.
- Never share your UPI PIN with an agent or a chat. Legitimate agentic payments are approved in your UPI app or bank flow, not by typing your PIN into a conversation.
- Prefer agents from regulated payment companies and banks, and check who is responsible if a payment goes wrong.
What this means for developers and businesses
If you build products for Indian users, agentic payments change three things:
- Your checkout needs to be machine-readable. Agents will prefer merchants whose catalogue, prices and stock they can read reliably.
- Design for mandates, not one-off payments. Handle partial debits, revocations and expired permissions cleanly, and make every payment request idempotent so a retry never charges twice.
- Budget your own agents too. The same principle applies to the AI calls your agents make: give each agent its own key and spending cap, so a runaway loop cannot burn your budget. Our guide to what AI agents really cost in India shows how quickly those costs add up.
Frequently asked questions
Can ChatGPT make UPI payments?
Yes, in a pilot. Since October 2025, NPCI, OpenAI and Razorpay have piloted UPI payments inside ChatGPT with BigBasket and Vi as merchants and Axis Bank and Airtel Payments Bank as banking partners. It is not a nationwide launch.
What is NPCI's Unified Agent Protocol?
The Unified Agent Protocol is a framework NPCI is preparing to let AI agents make UPI payments for users within rules and spending limits, without approving every transaction. Reuters reported in September 2026 that it had been prepared, but no launch date has been announced.
What is UPI Reserve Pay?
UPI Reserve Pay lets you block an amount in your bank account for a specific merchant, who can then debit it in parts later without your PIN each time. It is one of the building blocks for agentic payments.
Is it safe to let an AI agent pay with UPI?
It can be, with small limits, a short validity, restricted merchants and close attention to notifications. Research shows shopping agents can still be manipulated by fake reviews and prompt injection, so do not give agents large or long-lasting mandates yet.
Which agentic payment protocols work with UPI?
Pine Labs' P3P has been live on UPI since June 2026. NPCI's Unified Agent Protocol has been prepared but not launched. The ChatGPT pilot with Razorpay uses UPI Reserve Pay and UPI Circle.
How many UPI transactions happen in a month?
UPI processed 24.07 billion transactions worth ₹29.37 lakh crore in September 2026, an average of about 802 million a day and 23% more than a year earlier.
Who is responsible if an AI agent buys the wrong thing?
The rules are still being written. NPCI plans a liability framework for agent payments, but details have not been published. Today, a payment made within a mandate you approved is generally treated as one you authorised, so keep mandates tight.
Limits of this report
- Much of the news is reported, not official. The UAP details come from Business Standard and Reuters, citing sources. NPCI had not published a specification as of early November 2026.
- Pilots change quickly. Partners, limits and availability may have changed since the announcements we cite.
- The research is a simulation. Magentic Marketplace tested agents in a synthetic market, not real UPI payments.
Sources
- India pilots AI chatbot-led e-commerce with ChatGPT, Gemini and Claude in the mix (TechCrunch, 9 October 2025)
- Razorpay unveils agentic payments on ChatGPT with NPCI (Razorpay)
- Mastercard advances agentic AI commerce in India (Payments Journal, February 2026)
- Pine Labs launches P3P, an agentic payment protocol built on UPI (Pine Labs, 11 June 2026)
- India plans AI-powered UPI payments through Unified Agent Protocol (Outlook Business, July 2026)
- India prepares agentic AI payments on UPI (The Paypers, citing Reuters, September 2026)
- Mastercard Agent Pay vs Stripe ACP vs Visa Intelligent Commerce vs x402 (ATXP, March 2026)
- Microsoft: don't let AI agents near your credit card yet (The Register, 6 November 2025)
- UPI transactions in September 2026 (StartupTalky)