UPI's All-In Dominance Sparks Systemic Risk Concerns from Mastercard's Gautam Aggarwal

  minance-sparks-systemic-risk-concerns-from-mastercard-s-gautam-aggarwal.html
  Stocks and Investing on Tue, Nov 11th, 2025 by moneycontrol.com

UPI’s All‑In Dominance: Why Mastercard’s Gautam Aggarwal Warns of Systemic Risk

India’s digital‑payments ecosystem has reached a point of near‑unparalleled penetration, largely thanks to Unified Payments Interface (UPI). In a recent interview on Moneycontrol, Gautam Aggarwal, Managing Director of Mastercard India, cautioned that the country’s over‑reliance on a single payment rail could expose the economy to a host of systemic risks. Drawing on RBI’s regulatory framework, Aggarwal’s remarks underscore the need for a more diversified, resilient payments landscape.

The meteoric rise of UPI

When the Reserve Bank of India (RBI) launched UPI in 2016, it promised instant, real‑time settlement across bank accounts. Within a few years, the platform had become the preferred method for person‑to‑person transfers, utility bill payments, and even large‑value merchant transactions. According to RBI’s 2023 statistics, UPI facilitated over 3 billion transactions and handled a cumulative value exceeding ₹3.5 trillion in a single month—figures that dwarf the transaction volumes of other payment rails in the country.

The platform’s simplicity—users can send money using a mobile number or virtual payment address (VPA), without the need for bank account details—has made it the backbone of India’s “cashless” ambitions. The ubiquity of UPI also spurred the creation of a robust ecosystem of banks, payment banks, and fintech partners, all feeding into a single, interoperable network.

Why a single rail can be dangerous

Aggarwal’s warnings hinge on the concept of a single point of failure. Because UPI’s settlement is final and instant, a glitch or outage in the underlying infrastructure can ripple through the entire network. The platform’s architecture hinges on a handful of payment service providers (PSPs) and bank nodes. If a major PSP fails to process a batch of transactions, or if a bank’s connectivity to the central banking network goes down, the consequences can be felt by every customer using the service—often within seconds.

Cyber‑security and technical risks

Cyber‑attacks pose a clear threat. The “real‑time” nature of UPI means that a malicious actor could attempt to hijack the flow of funds, leading to large‑scale fraudulent transfers before the system can flag and reverse them. Aggarwal highlighted that while RBI’s guidelines for UPI include robust authentication and encryption standards, the sheer volume of daily transactions makes the platform a high‑profile target.

Liquidity and settlement stress

UPI’s instantaneous settlement eliminates the liquidity window that other payment rails (e.g., cards, net banking) rely on. If a bank’s reserves are insufficient at the time of settlement—whether due to an unexpected surge in withdrawals or a sudden liquidity crunch—the system can experience settlement failures. Aggarwal noted that because UPI settlements are final, a bank that cannot meet its obligations could force the RBI to intervene, potentially affecting the wider banking sector.

Concentration of traffic

With UPI capturing roughly 80 % of the digital‑payments share, the platform is not just a channel but a conduit for most financial flows. Aggarwal explained that in an event of a systemic outage, the entire payment ecosystem could grind to a halt. This scenario echoes the global financial crisis of 2008, where a lack of diversified settlement mechanisms amplified systemic risk.

RBI’s regulatory response

The RBI has issued a series of guidelines to address these concerns. The “UPI Guidelines for Payment Service Providers” (issued in 2021) stipulate mandatory risk‑management frameworks, including contingency planning, real‑time monitoring, and inter‑bank connectivity requirements. In addition, the RBI has introduced net settlement mechanisms for large‑value transactions, allowing banks to offset receivables against payables before settlement. This reduces the liquidity burden on individual banks and lessens the likelihood of settlement defaults.

Aggarwal praised RBI’s proactive stance but emphasized that guidelines alone are insufficient. “The regulators must enforce compliance, conduct regular stress tests, and monitor the concentration of traffic,” he said. He pointed to the RBI’s stress‑testing framework, which simulates network failures and evaluates banks’ resilience. Aggarwal called for public disclosure of stress‑test results, arguing that transparency would encourage all market participants to adopt best‑practice risk controls.

The case for a diversified payment ecosystem

Aggarwal’s call for diversification is not new. Mastercard has long championed a multi‑rail ecosystem that blends cards, wallets, UPI, and traditional bank transfers. A diversified framework ensures that if one channel is compromised, customers can still transact through alternative means, preventing systemic contagion.

Card payments as a safety net

Card networks—especially those with offline settlement capabilities—offer a buffer against real‑time settlement failures. If a UPI outage occurs, merchants and consumers can fall back on card payments, which are processed in batch settlements that provide a liquidity window. Moreover, card transactions are subject to inter‑bank settlement that is governed by a different set of risk parameters, further mitigating systemic risk.

Digital wallets and payment banks

Digital wallets, backed by payment banks, can operate as parallel rails that absorb transaction load. In practice, a wallet provider can temporarily route transactions that would otherwise go through UPI to its own infrastructure, thereby reducing network congestion. However, Aggarwal cautioned that wallets themselves must adhere to stringent risk‑management protocols, lest they become the next single point of failure.

Cross‑rail integration

A seamless inter‑rail architecture—where UPI, cards, wallets, and net banking can interoperate—would provide frictionless payment flows while distributing risk. Aggarwal cited the success of cross‑rail integration in Singapore’s payment ecosystem, where merchants can accept any digital method without being tied to a single provider. He urged India’s regulators to facilitate API‑based integration between banks and fintechs, ensuring that traffic can be rerouted in the event of a system glitch.

Recommendations from Mastercard

1. Enforce stricter compliance: RBI should require banks and PSPs to disclose their risk‑management frameworks and conduct third‑party audits.
2. Promote net settlement: Expand net‑settlement mechanisms for high‑value UPI transactions to reduce liquidity strain.
3. Encourage cross‑rail payments: Mandate API‑based interoperability so that merchants can switch between UPI, cards, and wallets effortlessly.
4. Publicly disclose stress‑test outcomes: Transparency will pressure banks to upgrade their resilience.
5. Educate consumers: Awareness campaigns should highlight the importance of diversifying payment methods.

Looking ahead

India’s ambition to become a fully cash‑less society is undeniably compelling. Yet, Gautam Aggarwal’s observations remind us that convenience should not come at the cost of stability. By maintaining a diversified payment architecture, strengthening regulatory oversight, and fostering industry‑wide risk‑management culture, India can enjoy the benefits of digital payments while safeguarding against systemic shocks.

In a world where financial transactions are increasingly digital, the resilience of payment rails will be as crucial as their speed. As the RBI continues to refine its guidelines and Mastercard pushes for a robust, multi‑rail ecosystem, the next milestone in India’s payments journey may well be a more balanced blend of speed, security, and diversification.