Fintech Deep Dive — Sunday | July 05, 2026

This week in Indian fintech was dominated by three seismic developments: Meta’s audacious move to place an Indian fintech founder at the helm of WhatsApp, RBI’s draft framework for governing AI in finance, and UPI’s continued global march with its launch in Greece. Throw in a major banking acquisition and an infrastructure play that could reshape UPI issuance, and you have one of the most consequential weeks of the year.

Here are the five stories that mattered most.

1. Meta Puts Kunal Shah in Charge of WhatsApp — India’s Fintech DNA Goes Global

In a move that sent shockwaves through both Silicon Valley and Bengaluru, Meta announced that Kunal Shah — founder of CRED, India’s premium credit card payments platform — would become the global head of WhatsApp, replacing outgoing chief Will Cathcart. The appointment came alongside Meta’s $900 million (approximately ₹8,500 crore) investment in CRED for a minority stake, marking one of the largest strategic bets by a Big Tech company on an Indian fintech.

The implications are staggering. WhatsApp has over 500 million users in India — it is, for all practical purposes, the country’s default communications utility. Shah’s deep experience with India’s digital payments ecosystem (CRED processes billions in bill payments annually) suggests that Meta sees WhatsApp’s future not just as a messaging app but as a financial super-platform. Bloomberg Opinion called the mission “to turn WhatsApp from a messaging app into a financial powerhouse.” ¹

The timing is loaded. Within days of Shah’s appointment, the Ministry of Electronics and Information Technology (MeitY) served Meta a formal notice demanding that WhatsApp pause its planned “username” feature in India — a privacy-forward change that would let users interact via usernames instead of phone numbers. The government flagged fraud risks: usernames mimicking banks or government departments could supercharge the already devastating “digital arrest” scam ecosystem that has drained crores from Indian citizens. MeitY gave Meta three days to explain the feature’s safeguards or face potential restriction under the IT Act. ²

Shah inherits this regulator-platform tension as his opening crisis. A founder who built CRED on identity verification and creditworthiness now leads a platform accused of weakening identity verification. How he navigates this will set the tone for his tenure and could determine whether WhatsApp becomes India’s next financial infrastructure layer — or another regulated utility under siege.

2. RBI Drops Draft AI Model Risk Management Framework — India Gets Its First AI Governance Rulebook

On June 24, the Reserve Bank of India released its draft “Guidance on Regulatory Principles for Model Risk Management, 2026” — the most comprehensive regulatory framework for AI in Indian finance to date. The guidance applies to all AI/ML models used by regulated entities, whether built in-house, sourced from vendors, or developed jointly. ³

The framework is ambitious. Key requirements include:

• Board-level accountability: The Risk Management Committee must approve all high-risk models
• Model inventory: Unlisted active models are prohibited — every AI system must be catalogued
• Human-in-the-loop controls: Mandatory human override capabilities and an emergency “kill-switch” to take malfunctioning models offline
• Anti-automation bias: Explicit protections against blind reliance on AI outputs
• Customer rights: AI chatbots must disclose their automated nature and offer seamless escalation to human agents
• Third-party accountability: Banks cannot hide behind vendor safety certificates — they remain fully responsible for third-party AI tools

The RBI is also requiring active defences against AI hallucinations, data drift, operational bias, and adversarial cyberattacks. This last point is especially timely: the Economic Times reported separately that AI-driven cyberattacks now pose “the greatest immediate threat to India’s financial stability” according to the RBI’s own assessment. ⁴

The compliance cost question is already being debated. Business Standard reported that industry experts expect significant upfront investments — particularly for NBFCs and smaller fintech firms that lack the governance infrastructure of large banks. Shams Tabrej, CEO of Ezeepay, noted that costs for documentation, monitoring, audit trails and compliance talent could be “high, especially in the early years.” ⁵

But the framework could also spawn an entirely new services market around AI assurance — model audits, bias testing, explainability studies, and governance support. Competitive advantage may increasingly depend not on who adopts AI first, but on who governs it best.

3. UPI Launches in Greece — Digital Public Infrastructure Hits 10 Countries

On June 30, during Commerce Minister Piyush Goyal’s official visit to Athens, UPI was formally launched in Greece through a partnership between Eurobank and NPCI International Payments Limited (NIPL). This marks UPI’s expansion into its 10th international market, with Indian travellers now able to make seamless QR-based payments at merchants across Greece. ⁶

The launch is significant on multiple fronts. It represents the deepening of India’s Digital Public Infrastructure diplomacy — UPI has become a diplomatic export product, demonstrating India’s technical capability to the world. The Eurobank partnership enables cross-border remittances from Greece to India, reducing costs compared to conventional wire transfers. The Times of India reported that transaction costs are expected to “fall significantly compared with conventional transfer methods.” ⁷

This comes against the backdrop of UPI’s domestic performance. NPCI reported that UPI processed 757 million transactions daily on average in June — the highest-ever daily average since UPI’s launch. The total transaction value moderated slightly from May’s record ₹29.9 lakh crore to ₹28.9 lakh crore, but still registered a 20% year-on-year growth. Volume rose 23% to over 22 billion transactions in June. ⁸

The UPI market share question also continues to simmer. PhonePe and Google Pay still command over 80% of the market. NPCI’s long-delayed plan to cap any single app’s market share at 30% is set to take effect on December 31, 2026, unless deferred again. The question of whether new entrants can build viable commercial models to challenge the duopoly remains open.

4. Kotak Mahindra Bank Acquires Deutsche Bank’s India Retail Business for ₹282 Crore

On June 30, Kotak Mahindra Bank announced a definitive agreement to acquire Deutsche Bank’s retail banking, affluent private banking, and wealth management operations in India for ₹281.7 crore. The deal covers approximately ₹29,000 crore in loans, ₹16,000 crore in customer deposits, and managed assets worth ₹10,700 crore. Around 1.5 lakh customers and nearly 1,000 employees are expected to transition to Kotak. ⁹

The acquisition underscores a broader consolidation trend in Indian banking. Foreign banks — squeezed by regulatory complexity, capital allocation pressures, and the sheer scale of Indian incumbents — are increasingly opting to exit or pare down their retail franchises. Deutsche Bank’s decision aligns with its “Global Hausbank” strategy of simplifying operations and focusing on ultra-high-net-worth clients outside India.

For Kotak, this is a strategic masterstroke. At ₹282 crore for ₹29,000 crore in advances, the valuation is striking. The deal instantly deepens Kotak’s presence in the affluent and SME segments — precisely where it already has competitive strength. The transaction is expected to close by September 2027, giving Kotak time to integrate the portfolio and customer base.

The fintech angle: as large banks consolidate, the pressure on fintech lenders and neo-banks intensifies. A bigger, better-capitalised Kotak will be a more formidable competitor in digital lending, wealth management, and payments — the very segments where fintechs compete most directly.

5. CARD91 Goes Live with UPI Issuance Infrastructure

Bengaluru-based fintech infrastructure company CARD91 announced on June 26 that its UPI Issuance platform is now live and production-ready. The platform provides end-to-end UPI infrastructure for banks, payment service providers (PSPs), fintechs, prepaid payment instruments (PPIs), and enterprise platforms to build and scale UPI-led payment experiences. ¹⁰

While UPI’s consumer-facing growth has been extraordinary, the plumbing that makes it possible remains fragmented. CARD91’s platform addresses what it describes as “a critical gap in India’s payment ecosystem” — the technical complexity and operational risk of UPI integration. By providing a full-stack, production-grade infrastructure layer, CARD91 aims to lower the barrier for newer entrants to participate in the UPI ecosystem.

This matters because India’s payment infrastructure is entering its next phase of complexity. As UPI expands internationally, as new payment use cases emerge (credit on UPI, account aggregator-linked lending, cross-border remittances), the demand for reliable infrastructure middleware will only grow. Companies that own this layer — like CARD91, Razorpay’s payment gateway, and others — will hold strategic positions in the fintech stack.

The Week Ahead

The coming week will be worth watching on several fronts. The RBI’s AI governance draft is open for public comment — expect significant industry pushback and refinement before it becomes binding. MeitY’s three-day deadline for WhatsApp’s response on the username feature could produce the first real test of Kunal Shah’s approach to Indian regulation. And as UPI’s international expansion accelerates, the question of interoperability standards with other real-time payment systems (like Singapore’s PayNow, the EU’s SEPA Instant, and Brazil’s Pix) will move closer to centre stage.