Inside a UPI Payment: The Seven Parties Behind India's Green Tick

A UPI payment feels like a single tap, but the two or three seconds between scanning a code and seeing the confirmation route through a chain of seven separate organisations, each verifying one thing before passing the instruction along. India’s system now clears more than 2,272 crore transactions a month, making it the busiest real-time payment network in the world. The app you hold — PhonePe, Google Pay, or a rival — is only the first link: classified as a Third-Party Application Provider, it captures your intent and PIN through a secure pad it cannot read, but holds no banking licence, touches no money, and cannot reach the network on its own.

To connect, each app stands behind a sponsor bank (a Payment Service Provider), which issues your UPI address and links your phone to your account. Tellingly, the suffix after the @ names the sponsor bank, not the app — PhonePe handles run on Yes Bank, Axis, and ICICI. Big apps now spread across several sponsors for resilience and to skip the central directory’s resolution fee when payer and payee share a bank. Everything converges on NPCI’s single central switch, which enforces a strict order: your bank — the only party that can decrypt your PIN — debits you first and confirms before the payee’s bank is asked to credit. Money always leaves before it arrives.

The most revealing pattern sits at the bank layer. The busiest paying banks (led by State Bank of India) don’t match the busiest receiving banks, where Yes Bank sits far in front with a share that has roughly doubled in two years. The reason traces to the shift from person-to-person toward person-to-merchant payments, which crossed over in 2022: Yes Bank sponsors the QR codes for most large merchant apps, so shop payments land there first before being paid out from pooled accounts. The piece closes on how meticulously UPI logs its failures, filing every declined payment under a defined reason code.