Fintech Deep Dive — Friday | October 23, 2026

Focus: Policy & Regulation

Coverage period: October 16, 08:30 to October 23, 08:30 IST (rolling seven days)

Executive summary

This week’s regulatory signal is less “new fintech rulebook” than a set of tests for accountability. The UPI merchant discount rate (MDR) missed its planned October 15 start after NPCI deferred it until after Diwali; there is still no final go-live date, and the Supreme Court is examining its legal basis.

The RBI also restricted Puducherry Co-operative Urban Bank, published the MPC’s reasoning for a repo rise to 5.50%, and the Enforcement Directorate (ED) disclosed a sixth arrest in a digital-arrest fraud investigation. These raise practical questions about payment costs, access to deposits, digital-credit funding and banks’ ability to trace fraud proceeds.

The National Payments Corporation of India (NPCI) had scheduled a new MDR framework for selected person-to-merchant (P2M) UPI payments to begin on October 15. Under the framework reported by The Hindu BusinessLine, the standard charge is 0.4% on eligible merchant transactions above ₹2,000, alongside a sector-wise rate structure. On October 13, NPCI’s UPI and Services Steering Committee said implementation would instead begin “immediately after Diwali”, on a date to be notified separately. BusinessLine updated its report on October 16, during this edition’s rolling window, as the original start date passed without the new schedule taking effect.

This is a postponement, not cancellation. It gives merchants festive-season breathing room but leaves providers unable to plan for a confirmed date or final category schedule. The consumer distinction matters too: MDR is charged to merchants, not as a separate UPI fee to payers, but businesses may still reflect costs in prices or acceptance choices. Clear checkout notices and a workable failed-payment dispute route remain essential; P2P transfers should not be confused with merchant acceptance.

BusinessLine reports that the Supreme Court declined to stay the rollout, asked NPCI, RBI and the Union government to explain its legal basis, and listed the matter for November 2. That is not a finding that the fee is unlawful. The Finance Ministry’s earlier clarification described the contemplated MDR as threshold-based, not blanket. The final circular should make categories and exemptions verifiable.

The Finance Ministry’s stated case for changing the framework is that payment infrastructure needs continuing investment in cybersecurity, fraud prevention and capacity. It reported UPI processed 2,366 crore transactions worth ₹29.9 lakh crore in July 2026. Those figures show the scale of the system, not that an MDR will necessarily fund those needs. The policy test is whether the fee’s incidence, collection and allocation are transparent, and whether the revenue improves resilience without pushing costs onto users or reducing acceptance. Official assurances that consumers and P2P transfers remain charge-free should be matched by monitoring and a clear route to report surcharges.

What to watch: NPCI’s post-Diwali date and final category schedule; whether the Supreme Court receives a full legal explanation; and whether merchant complaints about fees or customer surcharges can be independently tracked. Until then, “UPI is free” and “UPI now costs merchants” are both too broad to describe the actual framework.

2. Puducherry Co-operative Urban Bank: a safety net is not the same as access to money

On October 21, the RBI issued directions to Puducherry Co-operative Urban Bank Ltd under Sections 35A and 56 of the Banking Regulation Act. Citing the bank’s liquidity position and the absence of concrete action to address supervisory concerns, the central bank barred it from making new loans, accepting fresh deposits, incurring liabilities or making payments without prior written approval, subject to specified exceptions. Withdrawals from savings, current and other accounts were capped at ₹5,000 per depositor. Essential expenses such as employee salaries, rent and electricity could continue.

The directions last six months, subject to review, and do not by themselves cancel the bank’s licence. Eligible depositors may claim DICGC insurance up to ₹5 lakh in the same capacity and right, after submitting willingness and completing verification. The ₹5,000 withdrawal ceiling is an immediate liquidity constraint; insurance is a separate claim process, not instant access to the full balance.

This matters to fintech because UPI, automatic debits and app-linked balances depend on bank accounts and settlement access. A payment app can still open while mandates fail or customers cannot access funds. Providers should communicate bank-specific service disruptions and complaint routes, not imply normal service from a working app screen. The RBI’s direction summary gives the limits and insurance conditions. Depositors need clear information on withdrawals, loan set-offs and claim steps; supervisors face the harder task of identifying deterioration early enough to protect access.

3. RBI’s minutes move the lending outlook from “cut or hold” to “hold or hike”

The RBI published its October 5–7 MPC minutes on October 21. The decision itself was earlier: all six members supported a 25-basis-point repo-rate increase to 5.50%. Four backed “calibrated tightening”; two supported the increase but preferred a neutral stance. The RBI said near-term rate cuts were off the table, with future moves dependent on the outlook. It projected FY2026–27 inflation at 5.2%, including 6.0% in October–December, citing broadening price pressures and energy costs. Unanimity on the hike did not mean agreement on the path ahead.

For fintech, transmission is indirect. Banks’ funding benchmarks respond to monetary conditions, while NBFCs and digital lenders may face higher borrowing costs or tighter risk appetite. This can affect loan pricing, limits and approvals, but a 25-basis-point repo move does not automatically raise every app loan by the same amount; the result depends on lender funding, benchmarks and contract terms. The consumer risk is that tighter credit shows up as smaller limits or add-ons while the app still foregrounds a low monthly instalment. Regulated lenders remain responsible for clear annualised pricing and fees. The RBI minutes distinguish members’ views from the committee’s decision. The next meeting, December 2–4, is a review point, not a promise of another rise.

4. ED’s RTGS-agent arrest exposes the gap between payment rails and money-trail controls

The ED announced on October 19 that it had arrested a sixth person in a Goa-linked digital-arrest cyber-fraud investigation. Its press release says the original victim was allegedly coerced into transferring about ₹2.6 crore to accounts described as “Secret Supervision Accounts”. The agency alleges that the funds entered a network of companies used to receive bank transfers, convert them into cash and then foreign currency, and that the arrested suspect worked as an RTGS agent arranging credits through brokers for a commission.

The wider investigation spans more than 300 complaints and 160 FIRs across 20-plus States and Union Territories, with reported losses of about ₹417 crore. The Hindu, citing the ED, reported over ₹27,850 crore in banking transactions through interconnected entities and ₹2,904 crore in cash deposits. These are investigative figures, not findings that every transaction was criminal; the probe continues and allegations remain subject to due process.

RTGS is a legitimate settlement rail; its use alone is not evidence of wrongdoing. The alleged trail crosses bank credits, cash withdrawals, bulk cash machines, shell entities and foreign-exchange conversion. Controls need to connect unusual patterns across institutions without indiscriminately freezing ordinary customers’ accounts. The ED case also shows why reporting and recovery differ: victims should contact their bank promptly and report via 1930 or the National Cyber Crime Reporting Portal, but neither step guarantees recovery. The PTI report in The Hindu provides the broader investigative context.

Trend analysis: the regulated promise has to survive the failure case

The common gap is between a rule and the moment a customer needs it. MDR asks who finances acceptance; the Puducherry directions show how quickly bank access can tighten; the MPC minutes point to more expensive credit; the ED case shows how fast payment rails can move fraud proceeds across institutions and cash channels.

“Instant”, “free” and “insured” each describe only part of a product: a payment can be contested after settlement, merchant costs may affect prices, deposit insurance has limits and verification, and an app loan remains exposed to lender funding conditions.

Watchlist

  • UPI MDR: final post-Diwali date, merchant categories and dispute path; Supreme Court hearing scheduled for November 2.
  • Puducherry Co-operative Urban Bank: RBI review of the six-month directions and clear DICGC claim instructions for eligible depositors.
  • Digital credit: lender disclosures and repricing practices as the repo rate stands at 5.50% and the RBI signals no near-term rate cuts.
  • Fraud controls: whether banks and payment providers disclose service standards for freezing, tracing and escalating reported digital-arrest transfers.

Sources