The UPI daily limit in India is Rs 1 lakh for P2P and merchant payments, or 20 transactions in 24 hours. The ceilings, the caps and what to do when blocked.
The UPI daily transaction limit in India is Rs 1 lakh for person-to-person (P2P) and person-to-merchant (P2M) payments, or 20 transactions in a rolling 24-hour period, whichever is reached first. Capital markets, insurance, loan repayments, EMI and collection transactions carry a ceiling of Rs 2 lakh per transaction, and IPO applications carry a limit of Rs 5 lakh per transaction. New UPI users are restricted to Rs 5,000 for the first 24 hours as an anti-fraud measure.
Four ceilings, and they depend on the type of payment rather than on your bank. Person-to-person and person-to-merchant transfers are capped at Rs 1 lakh, or 20 transactions, calculated on a rolling 24-hour basis. Capital markets and merchant collect transactions, which include mutual funds, insurance, loan repayments, EMIs and collections, are allowed up to Rs 2 lakh per transaction. IPO applications through UPI are allowed up to Rs 5 lakh per transaction. And a customer who has just activated a new UPI handle is limited to Rs 5,000 for the first 24 hours, which exists because a large share of credential-theft fraud lands on accounts that were opened the same day. The important structural point is that these are network-level ceilings set by the National Payments Corporation of India, so your bank's own lower risk limit can only ever be stricter, never higher.
Four reasons, and the first is the one people miss most often. The Rs 1 lakh cap and the 20-transaction cap both apply on a rolling 24-hour window, not on a calendar day, so a payment made at 11pm and another at 9am the next morning are counted together. Second, your bank applies a risk limit that is often much lower than the network ceiling, and it is set per customer on the basis of risk profiling, so it can change without notice. Third, some banks enforce a lower per-transaction cap than the Rs 1 lakh headline, and a single large transfer can breach that even when the daily total is well under the ceiling. Fourth, a new-account or new-handle restriction can apply to a customer who has not used UPI for a while, and the 24-hour cooling-off rule is triggered by inactivity as well as by age. A failed UPI payment carries a specific error code in the app, and that code tells you which of the four you hit.
Usually you cannot, and any app or agent offering to do it is selling you a risk. The NPCI ceilings are network rules, and the note on every bank's UPI limit page says the limits are standardised by NPCI and cannot be increased by users. What a customer can do is split a large payment into several transactions across the rolling window, which is legitimate and is how the 20-transaction headroom is meant to be used. Beyond that, a business that regularly needs to move larger sums should use a current account with a channel-based confirmation for high-value payments, a cooling-off period on adding a new beneficiary, and a proper authorisation matrix, rather than trying to push a consumer UPI limit upwards. AAVETech reviews exactly this kind of payment-approval flow as part of a payment fraud readiness engagement, because the limit is the ceiling on one fraudulent payment and the approval rule is the control on the whole sequence.
They bound the damage, they do not prevent the fraud, and understanding that distinction matters. A daily limit of Rs 1 lakh means a compromised account cannot be emptied in one afternoon the way an unbounded limit allows, which is why the fraud cases that make the news are usually a sequence of transfers over several days rather than a single large one. The NCTAU's October 2026 advisory on deepfake welfare-scheme advertisements is the clearest example: the fraud works by coercing a customer into approving a collect request, and a low cap plus a cooling-off period on new payees would have limited each approval. Limits work as a blast-radius control, paired with alerts to a second registered contact, channel-based confirmation instead of a read-out OTP, and a callback rule for any beneficiary change. Limits alone stop a one-off; limits plus verification rules stop the pattern.
| Transaction type | Ceiling | Counted how |
|---|---|---|
| Person to person and person to merchant | Rs 1 lakh or 20 transactions | Rolling 24 hours |
| Capital markets, insurance, EMI, collections | Rs 2 lakh per transaction | Per transaction |
| IPO application through UPI | Rs 5 lakh per transaction | Per transaction |
| New UPI user, first 24 hours | Rs 5,000 | Rolling 24 hours |
| Card, loan and EMI repayments through UPI | Rs 2 lakh per transaction | Per transaction |
The UPI daily transaction limit in India is Rs 1 lakh for person-to-person and person-to-merchant payments, or 20 transactions in a rolling 24-hour period, whichever is reached first. Capital markets, insurance, loan repayments, EMI and collection transactions carry a ceiling of Rs 2 lakh per transaction, and IPO applications carry a limit of Rs 5 lakh per transaction. New UPI users are restricted to Rs 5,000 for the first 24 hours as an anti-fraud measure.
Both, and they apply to different transaction types. The Rs 1 lakh and 20-transaction caps for P2P and P2M are daily caps on a rolling 24-hour window. The Rs 2 lakh and Rs 5 lakh ceilings for capital markets, collections, EMI and IPO payments are per-transaction caps, so a single payment above them is declined even if nothing else has been sent that day.
Your bank applies a customer risk limit that sits below the network ceiling, set from your transaction profile. Banks lower it for new accounts, dormant accounts, newly added beneficiaries and customers with unusual patterns, and they can change it without notice. The cap you can actually use is the one shown in your own banking app, not the headline network figure.
Not directly. The UPI ceilings are standardised by NPCI and cannot be raised by a customer, and any agent or app offering to raise your UPI limit is a fraud. If you need to move larger sums regularly, use a current account with channel-based confirmation, a cooling-off period on new beneficiaries and a written authorisation matrix instead of pushing a consumer limit upwards.
No, it bounds it. A daily limit caps how much one compromised account can lose in one window, so fraud becomes a slower sequence of smaller transfers rather than a single large drain. It works properly as a blast-radius control alongside alerts to a second registered contact, channel-based confirmation instead of a read-out OTP, and a callback rule for any beneficiary change.
Call your bank's fraud helpline the same day, ask them to flag the beneficiary and request a reversal, and freeze new payees on the account. File on cybercrime.gov.in and call helpline 1930, because the report number is required for restitution. Under RBI's June 2026 instructions, effective 1 January 2027, a genuine individual victim with a gross loss up to Rs 50,000 may be compensated at 85% of net loss or Rs 25,000, whichever is less, provided the fraud is reported to the bank and to the NCRP or helpline 1930 within five calendar days.
Read the full guide on AAVETech: What is the UPI daily transaction limit in India?.
Send us your payment approval and refund flow and we will return a fixed-price payment fraud readiness review with a written policy set.
Talk to an analyst about this.