A virtual payment address is a short handle tied to your bank account in India’s Unified Payments Interface (UPI) system, and it lets you send or receive money instantly without ever sharing your account number. Think of it as an email address for your bank account. You share the handle, the sender’s app routes the payment, and funds move between banks in seconds, any hour of the day. For most person-to-person transfers, the daily cap is ₹1 lakh (roughly $1,200 USD).
What a VPA Looks Like
Every VPA has two parts joined by an “@” symbol. The left side is a string you choose or that the app assigns. The right side identifies the bank or payment provider that routes your transactions. Someone named Priya Sharma banking through a provider with the handle “okbank” might have priyasharma@okbank. Some apps use your mobile number instead, so you might also see 9876543210@providerhandle.
The format mirrors an email address on purpose. It’s easy to remember, easy to share, and it hides the account number, branch code, and routing details you’d otherwise need to exchange.
What You Need Before You Register
A few things have to line up before you open a UPI app:
- An active account with a bank that participates in UPI. Most major Indian banks do.
- A mobile number that matches the one your bank has on file. The app verifies you by sending an SMS from your phone to the bank, and the numbers have to match for that handshake to work.
- A smartphone with a UPI-enabled app from an official app store. PhonePe, Google Pay, Paytm, and Amazon Pay are common choices.
- Your debit card. Most apps ask for the last six digits and expiration date during setup so they can authenticate you and let you set your UPI PIN.
Non-resident Indians can now link international mobile numbers to their NRO or NRE accounts and use UPI the same way domestic users do, for both merchant and person-to-person payments.
How to Register
Registration takes a few minutes. Open the app and let it detect your SIM. It sends an automated SMS to your bank to confirm the number matches. This device-binding step ties your specific phone to your account, so you can’t register from a borrowed device unless your SIM is in it.
Next, pick your bank from the list. The app pulls up accounts linked to your phone number. Go to the option to create or customize your VPA, type the handle you want, and the app checks availability. Confirm it, and it’s linked to the account you selected. During the same flow, you’ll set a UPI PIN using your debit card details. That PIN authorizes every future transaction.
You can usually create multiple VPAs across different apps, all pointing at the same account, or link different accounts to different apps. If you want to change your handle later, most apps let you do that in settings without affecting the underlying account.
Sending and Receiving Money
To send, enter the recipient’s VPA in the payment field. The system looks it up in real time and shows the name registered on the recipient’s bank account. NPCI requires apps to display only that official bank-registered name, which cuts down on impersonation. Confirm the name, enter the amount, and authorize with your UPI PIN. Funds arrive in seconds.
Receiving is simpler. Share your VPA, or show a QR code from your app that encodes it. The money lands in your linked bank account with no wallet or holding period in between.
Paying With QR Codes
QR codes are how most people use their VPA at shops and restaurants. Two types exist, and the difference matters.
A static QR code has the VPA baked permanently into the pattern. Once printed, it can’t be changed, and the customer types in the amount each time. Small merchants often tape one next to the register. A dynamic QR code is generated fresh for each transaction and can include a pre-filled amount. That’s what you see on online checkouts and larger retail terminals.
Static codes work as long as the VPA behind them is active. Dynamic codes depend on the system that generates the redirect link staying online. Both authorize through the same UPI infrastructure and settle at the same speed.
Limits and Fees
NPCI sets the standard daily UPI cap at ₹1 lakh (about $1,200 USD) for person-to-person payments. A higher ceiling of ₹5 lakh per day applies to specific categories: tax payments, hospital and educational institution payments, IPO applications, and capital market transactions. Individual banks and apps can set lower per-transaction limits within those maximums, so check your provider before a large transfer.
Person-to-person UPI transfers carry no fee for most users. Merchant transactions are also free under current NPCI guidelines. The core bank-to-bank transfer stays free.
Security and What to Do If You Send to the Wrong VPA
UPI layers several protections into every transaction. Device binding means your VPA can only authorize payments from the phone holding your registered SIM. Every payment needs your UPI PIN, which is encrypted and never shared with the recipient or the app itself. And the recipient-name check gives you a chance to catch mistakes before you hit confirm.
Sending money to the wrong VPA is still one of the most common problems. UPI transfers are instant and final. There is no automatic reversal. If it happens, use the app’s built-in complaint or dispute feature, usually available from the transaction history screen. That routes your claim through your bank and NPCI’s dispute process. If the bank can’t resolve it, you can escalate to the banking ombudsman.
Prevention beats disputes. Verify the recipient name the app displays before entering your PIN. When you’re paying a new VPA for the first time and the amount is large, send ₹1 first, confirm it arrived, then send the rest. That single habit prevents most wrong-transfer problems.
Mistakes to Avoid
Never share your UPI PIN with anyone, including someone claiming to be from your bank. Legitimate apps and banks won’t ask for it outside the payment authorization screen. Fraudsters call or message pretending to offer refunds or prizes and ask you to “confirm” your PIN or scan a QR code that actually initiates a payment rather than a receipt.
Don’t ignore the registered name during payment. Scammers create VPAs with handles that look almost identical to a real person’s or business’s, counting on the sender not checking. The name your app shows comes straight from the recipient’s bank records, so it’s the most reliable identifier you have. If it doesn’t match who you think you’re paying, stop and verify.
Keep your UPI app and phone’s operating system updated. Security patches close the holes that malicious software uses to intercept PINs or spoof a device during binding. Your UPI app has the same reach into your money as your banking app, so treat it the same way.