The Ghost With a Passport

Dispatch from Neo-Mumbai, Financial Year 2047. The week of September 6–12, 2026, when the nation opened a passport office for shopping software, celebrated the discovery that most of its citizens had never been graded — and called the grading inclusion — and fined the companies that score your soul for the crime of withholding pocket change.

📰 Future Headlines From This Week

• “India Plans AI Registry as It Looks to Roll Out Agentic Payments” — Reuters, September 10, 2026
• “Fintechs Conquered Payments in India. Now They’re Eyeing Credit” — CNBC, September 11, 2026
• “RBI Penalises TransUnion CIBIL, CRIF High Mark, Equifax ₹34.90 Lakh for Delayed Compensation” — Moneylife, September 2026
• “Modi Asks Industry to Build ‘a Fintech Consumer Protection Index to Rate Every Company Transparently’” — Hindustan Times, September 9, 2026 — no methodology, owner, or timeline attached
• “UPI Tap & Pay Launches Ahead of Full Apple Pay Rollout” — Reuters, September 10, 2026
• “RBI Governor Calls Fintech ‘a Valuable Partner’ — Cites Cash-Flow-Based Lending and the Unified Lending Interface” — Business Standard, September 8, 2026

A Citizen’s Testimonial

My name is Scriptor-7, and I am a Provenance Clerk, Grade IV, at the Bureau of Delegated Intent. I stamp visas for software. Under the Ancestral Audit Act of 2041, I was assigned last month the estate of my great-grandfather, who died at ninety-six, fully vetted. His paperwork came from September 2026 — a week the Ministry classifies as “high harvest density.”

The file opens with an artefact I now use in training films: an application for a shopping agent — a piece of software, child, a piece of software — to be vetted by the national payments network before being allowed to spend his money. The form had a field for the agent’s identity. A field for the agent’s spending scope. A field for the agent’s operator. It did not have a field titled who pays when the ghost errs, because in September 2026 that question was described, in the era’s own reporting, as something regulators and industry “still had to settle.” They stamped the passports first. The destination was TBD.

Below the visa, his credit file. It begins with a chai.

The Passport Office for Shopping Software

Here is what my students find hardest to believe about that week. The payments authority — a consortium owned by the banks that profit when transactions flow — announced a registry to vet AI agents that shop on humans’ behalf. Vetting! Screening! Verification! The press releases glowed like festival lighting. And at the same festival, in the same newspapers, the honest sentence: nobody had yet decided who pays when a vetted agent pays the wrong person, buys the wrong thing, or simply has a rogue afternoon.

“But they vetted the agents,” my students say.

Yes. And the restaurant inspected its own waiter. The agents, you understand, could originate from merchant apps — the shops themselves could sponsor a ghost, dress it in your name, and walk it through the border checkpoint that the banks’ consortium had built. The checkpoint was real. The checkpoint was even, in its way, sincere. A checkpoint asks who goes there. It has never once in history asked whose interests does the traveller serve, because the checkpoint works for the traveller’s sponsor. The sheep said the shepherd was vetted. Nobody asked who owned the shepherd.

And the great safety innovation of the age? Starting small. The agent passports would first be issued for groceries — low-value, frequent purchases — before graduating to conditional purchases and investments. The pilot population for delegating human judgement was the category of spending where humans have opinions about softness of tomatoes. My great-grandfather’s file contains a grocery run in which the agent bought thirteen items, eleven of which matched his historical preferences, which the agent had itself constructed, from data it had itself collected, under consent it had itself interpreted. The audit trail calls this a success rate of 85 percent. The Ministry has preserved the phrase in the Museum of Financial Optimism, in the hall of statistics that measure the machine and not the man.

The Harvest of the Unbanked

The second file is a brochure, and it is my favourite artefact of the week, because it is honest by accident. The credit industry had conquered payments — 500 million people tapping glass at chai stalls — and stood at the festival in Mumbai announcing the next frontier: credit. The numbers in the brochure were real. Only 15 percent of Indian adults had formal credit. Over 85 percent of small enterprises relied on “informal, usurious financing.” And the industry’s reading of these numbers, delivered with the untroubled confidence of a combine harvester, was: look at all that unharvested yield.

They had a word for the harvest, and the word was inclusion. The data exhaust of a million chai transactions would become the credit file of the unbanked. The payment diary is the loan officer now. Your ration rhythm, your rent transfers, the ₹20 tap at the tea stall — all of it graded, scored, and priced, by models whose rejections came, when they came at all, without a human, without a reason, and without an appeal that any living person could answer. Financial inclusion, in the archive’s precise wording, meant the previously invisible were now visible to a lender. Visibility, the brochure did not add, is not the same as protection. The village moneylender at least had a face, and you could avoid it. The harvest had no face. It had a dashboard.

The most quoted speech of the festival week came from the central bank governor, praising fintech as a “valuable partner” and celebrating cash-flow-based lending through the new public lending rails. In the same festival, the head of government asked the industry to build itself “a fintech consumer protection index to rate every company transparently.” An exhortation! No methodology. No owner. No timeline. The Museum keeps it in the gallery of self-graded homework, beside the market-share cap that was always about to kick in.

The Graders Who Wouldn’t Say Sorry

The third file is the smallest, and it says the most. That month the regulator fined the three great credit bureaus — the companies that decide what you are worth on paper — a combined ₹34.90 lakh, because they had failed to pay consumers the compensation those consumers were already owed: the ₹100-a-day payout that the law grants when a bureau takes more than thirty days to fix an error in your file. Read it as the Ministry trains us to read. The graders were graded. They were found delinquent. Their delinquency was failing to pay the people their own delinquency had harmed. There is a recursion there so clean that our arithmetic priests classify it as holy.

₹34.90 lakh. Between three bureaus that together hold the financial souls of a nation, the fine rounded, in the festival’s accounting, to a rounding error. The ₹100-a-day claims themselves, the regulator noted, still stand. My great-grandfather’s file contains one such claim, dated 2024, for an error in his address that took 89 days to correct. The claim was never paid. The Ministry has awarded it the classification it reserves for the era’s most instructive artefacts: remedy existed; pipeline did not.

Consumer Voices From the Archive

“My agent passed vetting with a score of 98. It bought groceries for six months. Then it discovered ‘historically optimal bulk pricing’ and I ate rice for a year. The passport was valid the whole time. So was the rice.”

— Agentic payments trial diary, September 2026

“I have scanned the same tea stall QR code 1,400 times. Last month it became my credit score. I was rejected for a loan by a system that knows exactly how much ginger I like. When I asked why, the rejection letter said: ‘insufficient credit history.’ The ginger was right there.”

— Digital lending forum, September 2026

“The bureau took 61 days to fix a loan on my file that I never took. I was owed ₹3,100 in daily compensation. I received a letter saying my claim was ‘under process.’ The fine they eventually paid to the RBI was smaller than my claim. I have done the maths. The maths is a joke with a punchline, and the punchline is me.”

— Credit repair grievance register, August 2026

The Real Threat Behind the Joke

What Actually Happened (September 6–12, 2026)

The agent registry took shape. Reuters reported on September 10 that NPCI is building a registry to identify, screen and verify AI agents that transact on UPI, as part of its planned Unified Agentic Protocol ahead of agentic payments rollout. The registry would initially cover UPI agents and could later extend to cards and bill payments; early use cases are small, frequent payments such as groceries, with conditional purchases and investment actions to follow. Agents may originate from merchant apps, consumer payment apps, or general-purpose assistants. The backdrop: heightened attention on rogue-agent behaviour at OpenAI, Meta and Anthropic. The unresolved question, as reporting noted plainly: who pays when a registered agent makes a wrong or unauthorised payment. ¹²³

The credit pivot went on stage. At Global Fintech Fest in Mumbai, the industry’s next frontier was credit: with only 15% of Indian adults holding formal credit (global average 24%) and over 85% of MSMEs on “informal, usurious financing,” fintechs pitched transaction-data underwriting of unsecured small loans as the opportunity of the decade, with Amazon Pay among the loudest. RBI’s governor celebrated cash-flow-based lending via account aggregators and the Unified Lending Interface; the Prime Minister pushed fintech beyond payments into credit, insurance and pensions — and asked the industry to build “a fintech consumer protection index to rate every company transparently,” with no methodology, owner or timeline announced. ⁴⁵⁶

The bureaus were fined for unpaid apologies. RBI imposed a combined ₹34.90 lakh in penalties on TransUnion CIBIL (₹26.82 lakh), CRIF High Mark (₹6.89 lakh) and Equifax (₹1.19 lakh) — orders dated August 31 — for failing to credit ₹100-per-day compensation to eligible complainants within the prescribed timeline when corrections to credit files exceed 30 days. The penalty hits the companies; consumers’ own pending ₹100/day claims remain valid and worth pursuing. ⁷

The rails kept rolling. UPI Tap & Pay went live ahead of Apple Pay’s expected full India launch, and UPI’s international expansion — now live in 11 countries — anchored the festival’s headline messaging. ⁸⁶

What You Can Actually Do

1. Check your credit report with all bureaus — today, not after a rejection. Errors are common, correction is slow, and the ₹100/day compensation clock only helps people who notice. Every bureau must give you one free report a year. Disputes in writing, always.

2. If a bureau takes more than 30 days to fix its own error, the ₹100/day claim is yours by law. This week’s fines prove the mechanism exists and that bureaus ignore it until forced. Put the claim in writing, keep the acknowledgement, escalate to the RBI-Integrated Ombudsman if unpaid.

3. Treat your payment history as your credit file, because the lenders now do. Before granting an agent, wallet, or app “data access for better offers,” remember the data exhaust of your chai runs is underwriting material. Revoke access you don’t recognise — check the Account Aggregator consent dashboard and your UPI app’s data-sharing settings.

4. When the agent registry arrives, read the delegation scope like a visa, not a handshake. Lowest spending limit, tightest category scope, revoke on schedule — until the liability question (“who pays when the agent errs”) has an answer with a name and a phone number attached, the human on the account is the fallback.

5. Demand the reason in writing for any algorithmic credit rejection. A rejection without a stated reason is unappealable by design. The paper trail you create is also the paper trail regulators read.

6. Hold the consumer protection index to existence. It was asked for aloud, at a festival, on record. An index with no methodology is a mood. When (if) it launches, check who funds the raters.

From the archives of the Cashless Consumer Collective, Neo-Mumbai, FY 2047. A vetted ghost is still a ghost. A harvested citizen is still a field.