India held back the protocol that lets an AI agent pay on UPI, and its fintechs shipped agent payments anyway

The Unified Agent Protocol was to be India’s national standard for letting an AI agent pay on UPI without a person approving each transaction, and it was expected at Global Fintech Fest in Mumbai during the week of 8 September 2026 [2]. It did not arrive. NPCI told the industry late on the Wednesday night that it was holding the protocol back pending Reserve Bank of India clearance, India Fintech Diaries reported on 15 September 2026 [1].

NPCI had already drawn the line in public. Ajay Kumar Choudhary, its non-executive chairman and independent director, told the same event that “Decision making and execution must remain separate”, with AI free to recommend while authentication and final settlement follow deterministic auditable rules, MediaNama reported on 10 September 2026 [3].

Liability is what is holding it up. UPI’s whole dispute-resolution machinery was built around a human tapping approve on every transaction, and India Fintech Diaries quoted an industry source putting the gap as two questions, “how do you control a machine going rogue, and how does everyone involved get the information they need when something goes wrong” [1]. The delegation ceilings UPI already runs show how small the sanctioned blast radius is as things stand. UPI Circle caps full delegation at Rs 15,000 a month, and UPI Reserve Pay blocks up to Rs 10,000 for as long as 90 days [2].

The products shipped without the standard

Nobody on the show floor waited. Amazon Pay launched a Smart Wallet that lets AI agents make UPI payments for a user, with biometric authentication and offline tap-to-pay. Razorpay launched Vulcan, which it describes as India’s first transformer-based AI foundation model for payments, reading 3,000 signals per transaction for routing, fraud detection and personalisation. Pine Labs put an agent that books flights inside user-defined spending limits into its PLANET app, and BharatPe shipped a merchant assistant built on Google Gemini Enterprise that reaches more than 60 internal systems. NPCI itself released AiNxt, an open-source agentic platform, and AtOM, which writes signed machine-readable audit trails for UPI onboarding. MediaNama listed all of them on 11 September 2026 [4].

The same boundary turns up in a product built a long way from Mumbai. Sokin connected its licensed payment infrastructure to ChatGPT, Claude, Gemini and Perplexity through a Model Context Protocol connector on 14 September 2026 [5] [6]. A finance team can pull live balances, FX quotes and payment status, and prepare beneficiaries, conversions and payments, across licences held in 36 countries and settlement to more than 170 destinations [5]. In testing it handled ten multi-currency invoices and treasury moves in under ten minutes [5]. Sokin still presents every instruction to the customer for confirmation, and its existing approval rules still run before settlement [5]. Pete Daunton, Sokin’s chief strategy officer, put the pitch plainly: “The ability to give an agent real work is what is going to save our customers a lot of time” [5].

Read that list again and every product on it keeps a person in the approval step. The protocol that would have removed the person is the one that went back to the regulator.