As UPI fraud worries rise, can the e-rupee be a safer way to pay?
April 20, 2026
With 10.64 lakh UPI fraud cases worth ₹805 crore reported in FY26 (till November), RBI is tightening instant payments. But can the e-rupee’s token model lower scam risks?
The Reserve Bank of India’s proposal to introduce a one-hour cooling-off period for new or high-value UPI payments above ₹10,000 is the latest step aimed at curbing such frauds.
At the same time, another digital payment option has quietly evolved in the background: the e-rupee, or India’s central bank digital currency (CBDC). After nearly three years of pilot runs, the question arises — could this form of digital cash offer a safer alternative to UPI? The answer lies in understanding how differently the two systems work.
UPI vs e-rupee
For most users, paying via UPI and paying with the e-rupee can look similar. Both involve scanning a QR code and approving a transaction on your phone, after which money moves from the sender to the receiver.
In a UPI transaction, money moves from one bank account to another through a network involving banks and settlement systems.
So while UPI moves money between bank accounts, the e-rupee transfers value stored as tokens in a wallet, similar to physical cash, said Ranadurjay Talukdar, partner and payments sector leader, EY India.
“E-rupee, fundamentally, is no different from you taking out ₹500 from your wallet and handing it over to a merchant who accepts cash. No bank comes in between when the transaction is carried out. The only difference is that it is digital cash in tokenised form,” he said.
The RBI’s Annual Report 2024–25 showed e-rupee circulation at ₹1,016.5 crore as of March 2025, with around 60 lakh users participating in the pilot. More recent data suggests steady expansion. In December 2025, RBI Deputy Governor T. Rabi Sankar said retail e-rupee transactions had crossed 120 million in volume, with total value exceeding ₹28,000 crore and the user base rising to over 80 lakh.
While these figures are modest compared with UPI’s scale, they indicate gradual traction as the central bank tests use cases and expands interoperability.
The fraud question
UPI’s scale and ease of use have also made it a target for social engineering fraud.
A social engineering fraud is a technique that uses manipulation to deceive individuals into divulging sensitive financial information, transferring funds or providing access to restricted systems. In UPI scams, users are often tricked into approving “collect requests”, sharing OTPs or authorizing payments under false pretences.
The RBI’s proposed cooling-off period targets this behaviour. By introducing a pause for person-to-person (P2P) UPI transactions above ₹10,000, users would get the option to cancel suspicious or mistaken transfers before final settlement.
The proposal exempts person-to-merchant (P2M) transactions and payments under e-mandates, meaning a large share of everyday transactions below ₹10,000 would remain unaffected. Still, the move reflects a broader regulatory concern: instant payments leave little room to reverse mistakes.
Token model, different risks
The e-rupee changes the mechanics of payment — and with it, the nature of fraud risk.
Instead of moving money through bank accounts, it transfers digital tokens from one wallet to another. This reduces reliance on mechanisms such as OTPs or remote approvals, which are frequently exploited in scams.
In many UPI fraud cases, users are tricked into approving a “collect request” or entering their PIN under the impression that they are receiving money, when in fact they are authorising a debit.
With the e-rupee, the flow differs. The user initiates the payment directly from their wallet, and digital tokens move from the sender’s wallet to the recipient’s wallet or account only after explicit confirmation through a PIN or biometric authentication.
There is no concept of a remote “collect request” that can be misused in the same way, reducing the scope for such scams.
However, this does not make the system immune. If someone gains access to your phone or wallet, the risk remains. The e-rupee alters the type of risk — it does not eliminate it.
“Once the funds are transferred via e-Rupee, then it is a final settlement, same as UPI. The money cannot be clawed back or the transaction stopped,” said Gandhi.
NPCI’s dispute resolution framework allows users to report and attempt recovery of funds in UPI fraud cases. However, the process can be cumbersome, making recovery difficult.
How to use the e-rupee
To use the e-rupee, a consumer must first download the CBDC wallet mobile application of their bank and complete basic KYC.
The wallet is loaded by transferring money from a bank account, similar to adding funds to a prepaid wallet. Once funded, payments can be made by scanning any UPI QR code.
A banking official, who did not wish to be named, informed Mint that the e-rupee wallet works seamlessly with the existing UPI ecosystem. Users can scan any standard UPI QR code or use a virtual payment address to send money, provided the merchant’s bank supports CBDC acceptance and the wallet supports interoperability.
Talukdar noted that CBDC has found stronger use cases in offline transactions — particularly in regions with patchy internet connectivity — and in programmable payments.
“In targeted payments, money can be programmed for specific uses, such as government subsidies,” he said.
UPI, despite vulnerabilities, remains more convenient and widely accepted. For now, regulators appear focused on making UPI safer rather than pushing for CBDC's adoption.
Shipra Singh
Shipra joined Mint’s personal finance team in September 2021, and writes on tax, credit cards, banking, estate planning and investments. She began her career in personal finance as an intern with Outlook Money magazine in 2017, and has since worked with The Economic Times and Entrepreneur India as a business journalist covering fintech and emerging financial services.Over the years, she has reported on key aspects of household finance, tracking regulatory changes, market trends and evolving consumer behaviour. Shipra’s main beats are tax and banking products, with a focus on compliance gaps and their real-world impact for readers navigating complex financial decisions. Her reporting on GST and personal tax, particularly foreign asset disclosures and NRI taxation, has contributed to wider policy discussions and subsequent changes.She also interviews market experts for the Mint Money podcast, covering topics ranging from stock market investing to how credit scores shape financial outcomes and access to credit.Shipra has a keen interest in data-driven analysis and writing human-centric features that explore how people’s habits around spending, investing and wealth creation are evolving. Her work focuses on helping readers make informed financial decisions in an increasingly complex economic landscape.Shipra holds a Bachelor’s degree (Honours) and a Master’s in English Literature from Delhi University.
At the same time, another digital payment option has quietly evolved in the background: the e-rupee, or India’s central bank digital currency (CBDC). After nearly three years of pilot runs, the question arises — could this form of digital cash offer a safer alternative to UPI? The answer lies in understanding how differently the two systems work.
UPI vs e-rupee
For most users, paying via UPI and paying with the e-rupee can look similar. Both involve scanning a QR code and approving a transaction on your phone, after which money moves from the sender to the receiver.
In a UPI transaction, money moves from one bank account to another through a network involving banks and settlement systems.
So while UPI moves money between bank accounts, the e-rupee transfers value stored as tokens in a wallet, similar to physical cash, said Ranadurjay Talukdar, partner and payments sector leader, EY India.
“E-rupee, fundamentally, is no different from you taking out ₹500 from your wallet and handing it over to a merchant who accepts cash. No bank comes in between when the transaction is carried out. The only difference is that it is digital cash in tokenised form,” he said.
The RBI’s Annual Report 2024–25 showed e-rupee circulation at ₹1,016.5 crore as of March 2025, with around 60 lakh users participating in the pilot. More recent data suggests steady expansion. In December 2025, RBI Deputy Governor T. Rabi Sankar said retail e-rupee transactions had crossed 120 million in volume, with total value exceeding ₹28,000 crore and the user base rising to over 80 lakh.
While these figures are modest compared with UPI’s scale, they indicate gradual traction as the central bank tests use cases and expands interoperability.
The fraud question
UPI’s scale and ease of use have also made it a target for social engineering fraud.
A social engineering fraud is a technique that uses manipulation to deceive individuals into divulging sensitive financial information, transferring funds or providing access to restricted systems. In UPI scams, users are often tricked into approving “collect requests”, sharing OTPs or authorizing payments under false pretences.
The RBI’s proposed cooling-off period targets this behaviour. By introducing a pause for person-to-person (P2P) UPI transactions above ₹10,000, users would get the option to cancel suspicious or mistaken transfers before final settlement.
The proposal exempts person-to-merchant (P2M) transactions and payments under e-mandates, meaning a large share of everyday transactions below ₹10,000 would remain unaffected. Still, the move reflects a broader regulatory concern: instant payments leave little room to reverse mistakes.
Token model, different risks
The e-rupee changes the mechanics of payment — and with it, the nature of fraud risk.
Instead of moving money through bank accounts, it transfers digital tokens from one wallet to another. This reduces reliance on mechanisms such as OTPs or remote approvals, which are frequently exploited in scams.
In many UPI fraud cases, users are tricked into approving a “collect request” or entering their PIN under the impression that they are receiving money, when in fact they are authorising a debit.
With the e-rupee, the flow differs. The user initiates the payment directly from their wallet, and digital tokens move from the sender’s wallet to the recipient’s wallet or account only after explicit confirmation through a PIN or biometric authentication.
There is no concept of a remote “collect request” that can be misused in the same way, reducing the scope for such scams.
However, this does not make the system immune. If someone gains access to your phone or wallet, the risk remains. The e-rupee alters the type of risk — it does not eliminate it.
“Once the funds are transferred via e-Rupee, then it is a final settlement, same as UPI. The money cannot be clawed back or the transaction stopped,” said Gandhi.
NPCI’s dispute resolution framework allows users to report and attempt recovery of funds in UPI fraud cases. However, the process can be cumbersome, making recovery difficult.
How to use the e-rupee
To use the e-rupee, a consumer must first download the CBDC wallet mobile application of their bank and complete basic KYC.
The wallet is loaded by transferring money from a bank account, similar to adding funds to a prepaid wallet. Once funded, payments can be made by scanning any UPI QR code.
A banking official, who did not wish to be named, informed Mint that the e-rupee wallet works seamlessly with the existing UPI ecosystem. Users can scan any standard UPI QR code or use a virtual payment address to send money, provided the merchant’s bank supports CBDC acceptance and the wallet supports interoperability.
Talukdar noted that CBDC has found stronger use cases in offline transactions — particularly in regions with patchy internet connectivity — and in programmable payments.
“In targeted payments, money can be programmed for specific uses, such as government subsidies,” he said.
UPI, despite vulnerabilities, remains more convenient and widely accepted. For now, regulators appear focused on making UPI safer rather than pushing for CBDC's adoption.
Shipra Singh
Shipra joined Mint’s personal finance team in September 2021, and writes on tax, credit cards, banking, estate planning and investments. She began her career in personal finance as an intern with Outlook Money magazine in 2017, and has since worked with The Economic Times and Entrepreneur India as a business journalist covering fintech and emerging financial services.Over the years, she has reported on key aspects of household finance, tracking regulatory changes, market trends and evolving consumer behaviour. Shipra’s main beats are tax and banking products, with a focus on compliance gaps and their real-world impact for readers navigating complex financial decisions. Her reporting on GST and personal tax, particularly foreign asset disclosures and NRI taxation, has contributed to wider policy discussions and subsequent changes.She also interviews market experts for the Mint Money podcast, covering topics ranging from stock market investing to how credit scores shape financial outcomes and access to credit.Shipra has a keen interest in data-driven analysis and writing human-centric features that explore how people’s habits around spending, investing and wealth creation are evolving. Her work focuses on helping readers make informed financial decisions in an increasingly complex economic landscape.Shipra holds a Bachelor’s degree (Honours) and a Master’s in English Literature from Delhi University.