Introduction
India has built one of the world's most sophisticated Digital Public Infrastructure (DPI) ecosystems — a set of open, interoperable, shared digital rails that underpin financial inclusion, identity verification, and e-commerce at population scale. From Aadhaar's 1.44 billion enrolments to UPI's 21+ billion monthly transactions (January 2026), India's DPI has become a global model. The International Monetary Fund (IMF) recognised UPI as the world's largest retail fast-payment system by transaction volume in June 2025, accounting for approximately 49% of global real-time payment transactions. The G20 New Delhi Declaration (2023) explicitly endorsed DPI as a development tool, with India leading the initiative. This is a high-relevance topic for UPSC GS Paper III (Technology, Economic Development).
What is Digital Public Infrastructure (DPI)?
DPI refers to foundational digital systems built on open standards that:
- Are interoperable — multiple private/public actors can plug in
- Are inclusive — accessible to all citizens regardless of economic status
- Operate as shared rails — like roads, but for data and transactions
- Enable innovation at the edges — private actors build services on top
Three-layer DPI model (UN/World Bank framework):
- Identity — digital ID systems (e.g., Aadhaar)
- Payments — real-time retail payment systems (e.g., UPI)
- Data exchange — consent-based data sharing (e.g., Account Aggregator)
India Stack: The Four Layers
India Stack is the collection of open APIs and digital infrastructure built by the Government of India and NPCI that enables developers and institutions to build services at scale. The term was coined by iSPIRT (Indian Software Product Industry Round Table).
| Layer | Component | Purpose | Scale |
|---|---|---|---|
| Identity (Presence-less) | Aadhaar (UIDAI) | Digital identity; biometric authentication without physical documents | 1.4 billion+ enrolments |
| Cashless (Payments) | UPI, BBPS, AePS | Real-time interoperable digital payments | 228+ billion transactions in CY2025 |
| Paperless (Documents) | DigiLocker, eSign | Digital document storage and electronic signatures | 67.63 crore users (March 2026); 950+ crore documents |
| Consent (Data) | Account Aggregator (AA) | Controlled sharing of financial data with explicit user consent | 2.61 billion accounts enabled |
| Health | ABDM (Ayushman Bharat Digital Mission) | Digital health records, health IDs | Rolled out from 2021 |
Why India Stack Matters for UPSC
India Stack is a frequent topic in both Prelims (factual questions on Aadhaar, UPI, DigiLocker) and Mains (essays on digital governance, financial inclusion, DPI as a global model). As of February 2026, India has signed agreements with 23 countries to share its DPI model.
Aadhaar: The Identity Foundation
Administered by: Unique Identification Authority of India (UIDAI), established under the Aadhaar Act 2016
Key statistics (2025):
- Total enrolments: Over 1.44 billion (approximately 99% of India's adult population)
- Authentication transactions: 221 crore (2.21 billion) in August 2025 alone — a 10% increase over August 2024
- Registered enrolment stations: 2,39,413
How Aadhaar works:
- Stores biometric data (fingerprints, iris scans) and demographic data (name, address, date of birth)
- Issues a 12-digit unique number
- Authentication API: Any authorised entity can verify whether a person is who they claim to be
- e-KYC: Digital Know-Your-Customer using Aadhaar authentication — eliminates paper-based KYC
Policy debates:
- Privacy: Supreme Court in Justice K.S. Puttaswamy vs Union of India (2018) upheld Aadhaar's constitutional validity while restricting its use by private entities
- Exclusion errors: Biometric failures (elderly, manual labourers) have caused denial of welfare benefits
- Data security: Centralised biometric database — potential for mass surveillance
UPI: Unified Payments Interface
Operator: National Payments Corporation of India (NPCI) Launched: 11 April 2016
How UPI Works
UPI is a real-time payment system that allows Person-to-Person (P2P) and Person-to-Merchant (P2M) transactions 24x7x365 via:
- Virtual Payment Address (VPA / UPI ID: e.g., name@bank)
- Mobile number linked to bank account
- QR code scan
Multiple bank accounts can be linked to a single UPI app. Settlement happens in real-time through IMPS (Immediate Payment Service) infrastructure. As of 2024, UPI had approximately 491 million users and 65 million merchants.
Key UPI Statistics
| Metric | Figure |
|---|---|
| Monthly transactions (January 2026) | 21.7 billion (all-time high) |
| Monthly transactions (December 2025) | 21.63 billion |
| Full year 2025 volume | 228.3 billion transactions |
| Full year 2025 value | ₹299.7 lakh crore |
| Year-on-year volume growth (2024→2025) | 32.5% |
| Daily average transactions (Feb 2026) | 743 million per day |
UPI Transaction Data (Year-wise)
| Year | Volume (Billion Transactions) | Value (Lakh Crore Rs) |
|---|---|---|
| 2020 | 22.3 | 41.0 |
| 2021 | 38.7 | 71.5 |
| 2022 | 74.0 | 125.9 |
| 2023 | 117.6 | 182.8 |
| 2024 | 172.2 | 246.8 |
| 2025 | 228.3 | 299.7 |
UPI Market Share
PhonePe and Google Pay together dominate approximately 85% of UPI transactions, with Paytm, CRED, and other apps sharing the remaining market.
UPI Variants
| Variant | Feature | Target Segment |
|---|---|---|
| UPI 123PAY | IVR/feature phone-based UPI without internet | Rural/non-smartphone users |
| UPI Lite | On-device wallet for small offline transactions (up to ₹500 per transaction) | Low-value, high-frequency transactions |
| UPI One World | For foreign visitors — prepaid wallets without Indian bank account | Inbound tourism, G20 delegates |
| UPI Credit Line | Access credit lines (overdraft/credit cards) via UPI | Formal credit access |
International UPI
UPI has been extended to cross-border payments:
| Country | Integration Partner | Status |
|---|---|---|
| Singapore | PayNow | Live; 8,000+ merchants |
| UAE | NIOPAY | Live |
| France | — | First European country; live at Eiffel Tower, Galeries Lafayette (July 2024) |
| Sri Lanka | LankaPay, Dialog | Live at tourist zones |
| Bhutan | Royal Monetary Authority | Live |
| Nepal | Nepal Rastra Bank | Live |
| Mauritius | MauCAS | Live |
| Qatar | — | Live |
Cross-border UPI transaction volumes grew over 20 times — from 37,060 in FY24 to over 7,55,000 in FY25. Project Nexus (BIS): Links India's UPI with payment systems of Singapore, Malaysia, Philippines, Thailand.
Other Digital Payment Systems
RuPay
RuPay is India's indigenous card payment network launched by NPCI in 2012. It operates as a domestic alternative to Visa and Mastercard, with significantly lower merchant discount rates. RuPay cards are issued under the Pradhan Mantri Jan Dhan Yojana (PMJDY), making them the backbone of financial inclusion through debit cards.
BHIM (Bharat Interface for Money)
Launched in December 2016, BHIM is a UPI-based payment app developed by NPCI. It was designed to promote digital payments among first-time users, especially in rural and semi-urban areas. Note: BHIM is one app that uses UPI; UPI is the underlying protocol.
AePS (Aadhaar-enabled Payment System)
AePS allows Aadhaar-linked bank account holders to perform basic banking transactions — cash withdrawal, balance inquiry, fund transfer — through a micro-ATM using biometric authentication. It is especially significant for last-mile financial inclusion in areas without ATMs or bank branches.
NETC FASTag
The National Electronic Toll Collection (NETC) system enables automatic toll payments through FASTags. FASTag was made mandatory for all vehicles from 15 February 2021, significantly reducing waiting times at toll plazas and improving highway logistics.
BBPS (Bharat Bill Payment System)
An interoperable bill payment system operated by NPCI, allowing consumers to pay utility bills, insurance premiums, loan EMIs, and other recurring payments through a single platform.
DigiLocker: Paperless Documents
Launched: 2015 by Ministry of Electronics and Information Technology (MeitY)
Key statistics (2025–26):
- Registered users: Over 67.63 crore (March 2026)
- Documents issued: Over 950 crore documents
- Active issuers: 1,936+
What DigiLocker does:
- Stores government-issued documents (driving licence, vehicle registration, academic certificates, Aadhaar card, PAN card, insurance) in cloud
- Documents have the same legal validity as originals under the IT Act
- Used for DigiYatra (face-recognition airport boarding) and FASTag-linked vehicle verification
Integration with governance:
- Court cases where DigiLocker documents accepted as evidence
- School admissions, job applications, bank KYC — paperless processes enabled
Account Aggregator (AA) Framework
Regulator: Reserve Bank of India (RBI) — Master Direction issued 2016; operationalised from September 2021 Self-regulatory body: Sahamati (industry collective)
What it does: Account Aggregators (AAs) are a new class of NBFCs licensed by the RBI. They facilitate consent-based sharing of financial data between Financial Information Providers (FIPs — banks, insurance companies, mutual funds) and Financial Information Users (FIUs — lenders, wealth managers).
Key features:
- Consent-based: No data moves without explicit, informed, revocable consent of the customer
- Data blind: AAs cannot read, store, or use the data they transfer — they are merely a pipeline
- Interoperable: Any FIP can share data with any FIU through any AA
Key statistics (early 2026):
- Financial Information Providers (FIPs) and Users (FIUs) live: 126 institutions
- Financial accounts enabled for AA sharing: Over 2.61 billion
- Licensed Account Aggregators: 17 companies (e.g., OneMoney, CAMSfinserv, Perfios AA, Finvu)
- Individuals consented: Approximately 70 million, with ~10 million new consents monthly
Why it matters:
- Enables cash-flow-based lending to MSMEs and individuals who lack collateral
- Eliminates the need to share physical bank statements — reduces fraud
- Foundation for Open Credit Enablement Network (OCEN): GST invoice-based, AA-linked lending for small businesses
ONDC: Open Network for Digital Commerce
Full form: Open Network for Digital Commerce Nature: Section 8 (not-for-profit) company under the Department for Promotion of Industry and Internal Trade (DPIIT) Incorporated: December 2021 Protocol: Based on Beckn Protocol — open-sourced, platform-agnostic Pilot launch: 29 April 2022 (five cities: Delhi NCR, Bhopal, Bengaluru, Shillong, Coimbatore) Public beta: 30 September 2022 (Bangalore Urban) Founding members: Quality Council of India, Protean eGov Technologies Ltd
What Problem Does ONDC Solve?
Traditional e-commerce (Amazon, Flipkart) operates as closed platforms — sellers must list on each platform separately; platforms control discovery, pricing, and logistics. ONDC creates an open, interoperable network where any buyer app can discover any seller on any seller app — like how email works across Gmail and Yahoo.
ONDC vs Traditional Platforms
| Feature | Traditional Platforms | ONDC |
|---|---|---|
| Architecture | Closed, proprietary ecosystem | Open, interoperable network |
| Seller access | Must register on each platform separately | Register once, discoverable across all ONDC apps |
| Buyer apps | Platform-specific (Amazon app, Flipkart app) | Multiple buyer-side apps (Paytm, Magicpin, etc.) |
| Commission | High platform fees (15–40%) | Lower network charges |
| Data ownership | Platform owns customer data | Seller retains customer data |
Significance for inclusion: Small kirana stores and local artisans can sell online without listing on Amazon or Flipkart. Reduces platform dependency and commissions. Integrated with GSTN for tax compliance. Domains covered: retail (grocery, food), mobility (ride-hailing), logistics, hospitality, healthcare, and financial services.
CBDC: Central Bank Digital Currency (e-Rupee)
Issuer: Reserve Bank of India
A Central Bank Digital Currency (CBDC) is a digital form of fiat money issued by the central bank. Unlike cryptocurrency, a CBDC is legal tender, backed by the sovereign, and has the same value as physical currency.
Pilot Timeline
| Segment | Name | Launch Date | Use Case |
|---|---|---|---|
| Wholesale (e₹-W) | Digital Rupee — Wholesale | 1 November 2022 | Settlement of secondary market transactions in government securities |
| Retail (e₹-R) | Digital Rupee — Retail | 1 December 2022 | Person-to-person and person-to-merchant payments |
Retail CBDC (e₹-R) Details
- Technology: Based on blockchain (distributed ledger technology)
- Form: Digital tokens in the same denominations as physical currency
- Pilot banks (Phase 1): SBI, ICICI Bank, Yes Bank, IDFC First Bank
- Pilot banks (Phase 2): Bank of Baroda, Union Bank of India, HDFC Bank, Kotak Mahindra Bank
- Initial cities: Mumbai, New Delhi, Bengaluru, Bhubaneswar, Chandigarh
- Milestone: RBI achieved 1 million daily transactions on retail CBDC on 27 December 2023
CBDC vs Cryptocurrency vs UPI
| Parameter | CBDC (e₹) | Cryptocurrency | UPI |
|---|---|---|---|
| Issuer | RBI (Central Bank) | Decentralized (no issuer) | NPCI (facilitator); banks settle |
| Legal tender | Yes | No (not legal tender in India) | Transfers existing legal tender |
| Backing | Sovereign guarantee | Market-determined value | Bank deposits |
| Volatility | None (1 e₹ = 1 Rs) | High | None |
| Technology | Blockchain-based | Blockchain-based | Centralised payment rails |
| Anonymity | Limited (managed by RBI) | Pseudo-anonymous | KYC-linked |
| Programmability | Yes (potentially) | Limited | Limited |
CBDC Use Cases Being Piloted
- Programmable payments (e.g., government subsidies that can only be spent on specific goods)
- Cross-border settlements (RBI-CBUAE linkage)
- Financial inclusion (offline CBDC for rural areas)
Open Credit Enablement Network (OCEN)
Purpose: Democratise credit access for MSMEs (63 million MSMEs in India — most lack collateral but have documented cash flows via GSTN)
Mechanism:
- Borrower shares GST invoice/Account Aggregator data with a lender
- Lender assesses creditworthiness based on cash flows (not collateral)
- Loan disbursed digitally; repayment monitored through AA
JAM Trinity — Jan Dhan, Aadhaar, Mobile
The JAM trinity is the convergence of three pillars that underpin India's financial inclusion and direct benefit transfer architecture:
| Pillar | Details | Scale (2024) |
|---|---|---|
| Jan Dhan | Pradhan Mantri Jan Dhan Yojana (PMJDY) — zero-balance bank accounts | 54+ crore accounts; Rs 2.39 lakh crore total deposits; 55.6% women account holders; 66.6% in rural/semi-urban areas |
| Aadhaar | 12-digit unique biometric identity | 141 crore+ enrolments |
| Mobile | Mobile phone connectivity | 119 crore+ subscribers (66.1 crore urban, 52.7 crore rural) |
Impact on Direct Benefit Transfers (DBT)
The JAM trinity powers the Direct Benefit Transfer (DBT) mechanism:
- Integrated 1,206 welfare schemes as of FY 2024-25
- Transferred Rs 6.7 lakh crore in FY 2024-25 alone
- Eliminated ghost beneficiaries and middlemen, with estimated cumulative savings of over Rs 3.48 lakh crore (government claim)
- ₹7+ lakh crore in DBT transfers between 2014 and 2024
How DBT Works:
- Beneficiary's Aadhaar is seeded with their Jan Dhan bank account
- Government transfers the benefit amount directly into the linked bank account
- Beneficiary receives SMS notification on mobile
- Cash can be withdrawn via AePS (micro-ATM) using biometric authentication
DPI is the technological superstructure built on the JAM foundation.
India's G20 DPI Framework (2023)
During India's G20 Presidency (2023), the G20 Framework for Systems of DPI was adopted:
- Endorsed by all G20 nations in New Delhi Declaration (September 2023)
- Estimates: DPI could create $1.25 trillion in economic value across Low and Middle Income Countries (LMICs) by 2030
- India shared its DPI (Aadhaar, UPI, DigiLocker) as open-source models — "India Stack" offered globally
- Modular Open Source Identity Platform (MOSIP): India's open-source identity platform deployed in 12+ countries
- India has signed agreements with 23 countries to share its DPI model (as of February 2026)
Countries adopting India-style DPI elements:
- UPI-like systems: Singapore (PayNow), Brazil (PIX), Ghana (GhIPSS), Nigeria (eNaira)
- Digital ID: Philippines, Ethiopia (MOSIP-based), Bangladesh (Aadhaar-inspired)
- G2P payment rails: Togo, Morocco
Cryptocurrency Regulation in India
Timeline of Key Developments
| Year | Event |
|---|---|
| 2013 | RBI issues first caution against virtual currencies |
| 2018 | RBI circular prohibits regulated entities from dealing with crypto exchanges |
| 2020 | Internet and Mobile Association of India v. RBI — Supreme Court quashes the RBI ban, holding the absolute prohibition was a "disproportionate measure" |
| 2022 | Union Budget 2022-23 introduces: 30% flat tax on Virtual Digital Assets (VDAs) under Section 115BBH; 1% TDS on transfers under Section 194S; no set-off of losses against other income |
| 2023 | Crypto exchanges and service providers brought under PMLA; must register with FIU-IND and comply with AML/KYC norms |
| 2026 | No comprehensive crypto regulation bill enacted; crypto remains "taxed but unregulated" |
India's Position at G20
During India's G20 presidency (2023), India pushed for a coordinated global framework for crypto regulation. The G20 New Delhi Leaders' Declaration endorsed the IMF-FSB Synthesis Paper, recommending a comprehensive regulatory approach rather than an outright ban.
RBI Digital Lending Guidelines (2022)
On 2 September 2022, the RBI issued comprehensive guidelines to regulate the digital lending ecosystem, based on the recommendations of a Working Group on Digital Lending (November 2021).
| Area | Requirement |
|---|---|
| Disbursement | All loan amounts must be disbursed directly into the borrower's bank account — no pass-through or pool accounts of Lending Service Providers (LSPs) |
| Key Fact Statement (KFS) | Borrowers must receive a standardized KFS before signing, containing APR, all fees, recovery mechanism, and cooling-off period |
| Data privacy | LSPs cannot access mobile phone data beyond what is essential; only three categories of data permitted — name, contact details, and KYC information |
| Grievance redressal | Regulated Entities (REs) and LSPs must appoint a nodal grievance redressal officer |
| Credit reporting | All digital loans must be reported to credit bureaus |
| First Loss Default Guarantee (FLDG) | Capped at 5% of the loan portfolio |
| Cooling-off period | Borrowers have a look-up period to exit the loan without penalty |
These guidelines brought the unregulated fintech lending space under RBI oversight, addressing concerns about predatory lending, usurious interest rates, coercive recovery practices, and misuse of personal data.
Data Privacy and Regulatory Framework
Digital Personal Data Protection Act (DPDP Act), 2023
The DPDP Act received Presidential assent on 11 August 2023. It establishes a comprehensive framework for digital personal data protection in India.
| Feature | Provision |
|---|---|
| Applicability | All digital personal data processed within India; also applies to processing outside India if related to offering goods/services to individuals in India |
| Consent | Personal data may be processed only for a lawful purpose upon consent; consent may not be required for "legitimate uses" (voluntary sharing, State services) |
| Data Fiduciary obligations | Maintain accuracy, keep data secure, delete data once purpose is met |
| Significant Data Fiduciaries | Must appoint a Data Protection Officer and an independent data auditor |
| Rights of Data Principals | Right to information, correction, erasure, and grievance redressal |
| Children's data | Verifiable parental/guardian consent required; behavioral monitoring and targeted advertising directed at children are banned |
| Penalties | Up to Rs 250 crore for non-compliance; up to Rs 200 crore for failure to notify breaches or breach of child-related obligations |
| Data Protection Board | Established under Section 18 to adjudicate complaints and disputes |
Tension with Aadhaar: Aadhaar's centralised biometric database raises concerns under DPDP Act — ongoing regulatory dialogue.
FATF and Virtual Digital Assets
India is a FATF member; amended PMLA (Prevention of Money Laundering Act) in 2023 to bring Virtual Digital Assets (VDAs — crypto assets) and exchanges under anti-money laundering regulations. VDA exchanges must register with FIU-IND and follow KYC/AML norms.
Fintech Ecosystem Overview
India's fintech ecosystem spans multiple verticals:
| Vertical | Key Players/Platforms | Regulatory Framework |
|---|---|---|
| Payments | PhonePe, Google Pay, Paytm, CRED | RBI; NPCI |
| Digital lending | KreditBee, MoneyTap, Navi | RBI Digital Lending Guidelines 2022 |
| Insurance (Insurtech) | Digit, Acko, PolicyBazaar | IRDAI |
| Wealth management | Zerodha, Groww, Kuvera | SEBI |
| Neo-banking | Fi, Jupiter, Niyo | RBI (through partner banks) |
| Embedded finance | BaaS (Banking-as-a-Service) providers | RBI |
Challenges to India's DPI
| Challenge | Detail |
|---|---|
| Digital divide | 700+ million internet users but ~900 million mobile connections — rural-urban gap; gender gap (women's internet access 40% lower than men) |
| Data privacy | DPDP Act 2023 — rules still being framed; Aadhaar biometric data centralisation risks |
| Cybersecurity | UPI fraud, phishing, SIM-swap attacks growing — RBI reported 6.94 lakh cyber fraud cases in FY24 |
| Interoperability gaps | ONDC still early-stage; UPI merchant adoption uneven in rural areas |
| Algorithmic exclusion | AA credit scoring may perpetuate existing inequalities |
| CBDC adoption | Low retail uptake of e-Rupee — behavioural barriers, limited merchant acceptance |
| Predatory lending | Fintech lending apps — addressed partly by RBI Digital Lending Guidelines 2022 |
Exam Strategy
High-frequency UPSC themes from this chapter:
- India Stack layers — Prelims MCQs test which component belongs to which layer (Identity/Payments/Data/Health)
- UPI statistics — 21+ billion monthly transactions, 228.3 billion for full year 2025
- CBDC launch dates — Wholesale (1 November 2022) vs Retail (1 December 2022) distinction; 1 million daily transaction milestone (27 December 2023)
- Account Aggregator — RBI-regulated NBFC; 2.61 billion accounts enabled; data blind (AA cannot read the data)
- ONDC — distinguish from UPI; it is an e-commerce network, not a payments network; based on Beckn Protocol
- G20 DPI Framework — India's global contribution; $1.25 trillion opportunity estimate; 23 countries signed agreements
- JAM Trinity — Jan Dhan + Aadhaar + Mobile; 1,206 schemes; Rs 6.7 lakh crore DBT in FY25
- DPDP Act 2023 — penalties up to Rs 250 crore; Data Protection Board; children's data protections
For Mains (GS3 answer writing):
- Structure: DPI concept → India Stack → specific component → impact → challenges → way forward
- Link DPI to financial inclusion (JAM Trinity), MSME credit (OCEN), and governance (DBT via Aadhaar-seeded accounts)
- Use the phrase "consent-based data economy" — it captures AA's distinctive architecture
- Common Mains questions:
- "India's Digital Public Infrastructure has become a model for the Global South." Discuss with reference to India Stack and UPI.
- Critically examine the regulatory challenges posed by cryptocurrencies in India.
- How has the JAM trinity transformed the delivery of government welfare schemes?
- Evaluate the impact of the DPDP Act, 2023 on the fintech ecosystem in India.
Common mistakes to avoid:
- UPI is not the same as BHIM — BHIM is one app that uses UPI; UPI is the underlying protocol
- NPCI ≠ RBI — NPCI operates UPI; RBI issues CBDC
- ONDC is not a government app — it is a network protocol standard (like HTTP for the internet)
- CBDC is not cryptocurrency — CBDC is sovereign-issued legal tender; crypto is decentralised and not legal tender in India
BharatNotes