India / Banking

How to set, change or reset your UPI PIN

You set a UPI PIN inside your UPI app after linking your bank account, using the last 6 digits and expiry date of your debit card plus an OTP from your bank. If you have no debit card, NPCI also provides Aadhaar OTP and Aadhaar face authentication routes where your bank and app support them. A forgotten PIN is reset the same way, and a known PIN is changed by entering the old PIN and a new one.

Fee: No fee listed by NPCI; your mobile operator may charge for the verification SMS
Time: A few minutes
How: Online, inside your UPI app

Checked against official sources on 12 October 2026. See the 15 sources.

Not confirmed

These points could not be confirmed on an official page on 12 October 2026. Check them with the office or portal before you rely on them.

The exact screens for the Aadhaar OTP route (commonly described as entering the first six digits of Aadhaar and two OTPs) could not be opened on an NPCI page on 12 Oct 2026; the guide only says the route exists and that the Aadhaar and bank mobile numbers are involved
A single NPCI page stating the standard per day limit for ordinary person to person UPI transfers could not be opened (upi.npci.org.in FAQ rejected the request, old npci.org.in FAQ URLs return 404); the guide uses the government's 15 September 2026 statement that limits generally range from Rs 1 lakh to Rs 5 lakh
The BHIM FAQ gives the BHIM app's own limit as Rs 40,000 per transaction and per day, which is lower than the range in the government release; the page may be dated, and other apps and banks set their own limits
The BHIM FAQ contradicts itself on reversal of a failed transaction, saying T+2 working days in one answer and T+3 days in another
The number of wrong PIN attempts allowed before the 24 hour block is not stated on the pages opened
NPCI circular OC 235 (FY 2026-27) on turnaround time for fraud and wrong credit chargebacks was seen only as a title in the NPCI circular list; its contents were not opened

Quick answer

Set (first time): in your UPI app, link the bank account, choose to set the UPI PIN, enter the last 6 digits of your debit card and its expiry date, enter the OTP your bank sends, then type the PIN you want twice.
Reset (forgot PIN): open the bank account inside the app and choose the reset or forgot PIN option. It repeats the same debit card and OTP check. In the BHIM app the path is Bank Account, then Reset.
Change (you know the PIN): choose Change UPI PIN, enter the old PIN, then the new PIN.
No debit card: NPCI provides an Aadhaar OTP route and, since October 2025, Aadhaar face authentication. Both depend on your bank and app having enabled them.

The UPI PIN is a 4 or 6 digit number, depending on your bank. It is set for the bank account, so a PIN already set for that account in one app can be used in another. You enter it to authorise money going out of your account. You never need it to receive money.

Who can apply

According to NPCI and BHIM, you need:

A bank account with a bank that is live on UPI.
A mobile number registered with that bank for SMS alerts, with the SIM in the same phone. In a dual SIM phone, select the SIM whose number is linked to the account.
A debit card linked to that account (for the debit card route), or Aadhaar with a linked mobile number (for the Aadhaar routes).
A phone your app supports. NPCI says new users can onboard on Android API version 23 and above or iOS version 17 and above.

Some account types (minor, joint, dormant) may not be allowed on UPI by the bank's own policy. If the account does not show up for linking, ask your bank.

Documents you need

Nothing on paper. Keep these at hand:

Route	What you need
Debit card	Last 6 digits of the card number, the expiry date (month and year), and the phone with your bank registered SIM to receive the OTP
Aadhaar OTP	Your Aadhaar and the phone that receives the verification OTP
Aadhaar face authentication	Your Aadhaar and UIDAI's FaceRD app on the phone
Change PIN	Only your current UPI PIN

You do not need the full card number, the CVV or your ATM PIN. If any screen, caller or link asks for those to "set a UPI PIN", stop.

Steps

Set a UPI PIN for the first time

Install a UPI app from the Play Store or App Store only (BHIM, your bank's app, or another UPI app).
Let the app verify your mobile number. It sends an SMS from your phone, so mobile data must be on and the SIM needs enough balance for one SMS. Do not switch apps while this runs.
Create your profile and UPI ID, then use the option to add or link a bank account and pick your bank. The app fetches the accounts linked to your mobile number.
Select the account and choose the option to set the UPI PIN.
Enter the last 6 digits of the debit card and the expiry date.
Enter the OTP sent by your bank to your registered mobile number.
Type the UPI PIN you want and confirm it. The app shows a success or decline message.

If you already set a UPI PIN for this account in another app, you do not need a new one. BHIM offers a SYNC option on the PIN screen to use the PIN you set elsewhere, and NPCI says an existing UPI PIN can be reused.

Without a debit card (Aadhaar)

On the set PIN screen, choose the Aadhaar option if it is shown. It appears only when both your bank and your app support it.
For the Aadhaar OTP route, follow the on-screen OTP verification.
For Aadhaar face authentication, the app uses UIDAI's FaceRD app to match your face with Aadhaar, so no card details or OTP juggling is needed. NPCI launched this on 7 October 2025 for setting and resetting the PIN.

Reset a forgotten UPI PIN

Open the app and go to the linked bank account (in BHIM: Bank Account).
Choose Reset or Forgot UPI PIN under that account.
Enter the last 6 digits and expiry date of the debit card, then the bank OTP, or use the Aadhaar route.
Set and confirm the new PIN.

Change a UPI PIN you remember

Go to the linked bank account and choose Change UPI PIN.
Enter the old PIN, then the new PIN, and submit.

Fees

NPCI's pages list no charge for setting, changing or resetting a UPI PIN. BHIM states it does not charge for transactions and tells users to ask their bank about bank charges. Your telecom operator may charge for the SMS used to verify your number.

On payments, the Ministry of Finance stated on 15 September 2026 that UPI remains completely free for all person to person transfers whatever the amount, and that merchant charges (MDR) are never a charge on the customer.

Transaction limits

Limits are set by NPCI and then, within those, by each bank and app. That is why two people can see different limits.

Type	Limit stated on official pages
Daily limits in general	"Generally ranging from Rs 1 lakh to Rs 5 lakh depending on the transaction category" (Ministry of Finance, 15 September 2026)
Tax payments	Rs 5 lakh per transaction
Select verified merchant categories	Up to Rs 10 lakh a day, from 15 September 2025
UPI Lite (no PIN)	Rs 1,000 per transaction, Rs 5,000 wallet
UPI 123PAY (feature phones)	Rs 10,000 per transaction
BHIM app's own limit	Rs 40,000 per transaction and per day per bank account, 10 transactions a day, and Rs 5,000 in the first 24 hours for a new user

Check the limit screen in your own app or your bank's site for the number that applies to you.

How long it takes

Setting or resetting the PIN takes a few minutes and works at once. If you enter a wrong PIN too many times, BHIM says you must wait 24 hours before you can transact again.

How to check status

A PIN change shows a success or failure message immediately. For a payment, use Check Transaction Status in your app, or NPCI's MyUPI help portal at upihelp.npci.org.in with the mobile number linked to your account.

Common problems

OTP not received: tap Resend OTP, check network, and confirm that this SIM's number is the one registered with your bank.
"Wrong debit card details": only a debit card linked to that same account works. Re-check the last 6 digits and the expiry date. If it still fails, contact your bank.
Bank account not listed: the account type may not be allowed on UPI by your bank, or the mobile number is not linked to it.
Changed your mobile number: update the number at your bank first, then register again in the app.
New phone: install the app and register again on the new phone with the same bank registered SIM.

Sent money to the wrong person

Act the same day. A successful UPI transfer is instant and, in BHIM's words, cannot be reversed unless the receiver refunds it.
Raise it in the app against that transaction (Report Issue, or Raise Dispute), and complain to your own bank asking for a wrong credit chargeback. Keep the transaction ID.
You can also send the receiver a collect request and ask them to return it. There is no guarantee.
If the bank does not reply within 30 days, or you are not satisfied, file a free complaint with the RBI Ombudsman at cms.rbi.org.in. You have 90 days from then. RBI's contact centre is 14448.

Prevent it: when you enter a UPI ID and tap verify, the app shows the account holder's name from the bank's records. Read it before paying.

Fraud, or a payment you did not make

Tell your bank at once through its official app, site or the number printed on your card, and report it on the National Cyber Crime Reporting Portal (cybercrime.gov.in) or helpline 1930. NPCI says fraud complaints must go to your bank. Under RBI's rules, if you shared your PIN or OTP you bear the loss until the moment you report it, and the bank bears anything after that, so minutes matter. For transactions on or after 1 January 2027, RBI has added a small-value compensation: for a loss up to Rs 50,000, a genuine victim can get 85 per cent of the net loss, up to Rs 25,000, once in a lifetime, but only if it was reported to the bank and to the portal or 1930 within five calendar days.

Never share your UPI PIN or OTP with anyone, including people who say they are from the bank or NPCI. You never enter a PIN to receive money. Decline collect requests from strangers, and do not install screen sharing apps on someone's instruction.

FAQ

Is the UPI PIN 4 digits or 6 digits?

Either. It depends on your bank. NPCI describes it as a 4 to 6 digit PIN.

Can I set a UPI PIN without a debit card?

Yes, if your bank and app support Aadhaar OTP or Aadhaar face authentication. NPCI introduced the face authentication route on 7 October 2025 for people without easy access to cards.

Is the UPI PIN the same as my ATM PIN or app password?

No. The ATM PIN is for the card. The app passcode only opens the app. The UPI PIN authorises each payment from the bank account.

I use two UPI apps. Do I need two PINs?

No. BHIM lets you sync the PIN you set in another app for the same bank account, and NPCI says an existing UPI PIN can be reused.

What happens if I enter the wrong UPI PIN many times?

BHIM says that after you exceed the allowed attempts you have to wait 24 hours before you can transact again.

Can I pay without entering the PIN?

For small payments, yes, through UPI Lite (up to Rs 1,000 per payment). NPCI has also launched opt-in fingerprint or face unlock on your phone as an alternative to typing the PIN.

Does anyone need my PIN to send me money?

No. A PIN is asked only when money is leaving your account. A request that asks for your PIN to "receive" a refund or prize is a scam.

Can a wrong UPI payment be reversed?

Not automatically. Complain in the app and to your bank for a chargeback, and ask the receiver to return it. If the bank does not resolve it in 30 days, go to the RBI Ombudsman.

Official links

Sources

Every fee, time limit, form and address above was read on these official pages on 12 October 2026.

NPCI, About UPI (UPI Registration, Send Money and Non-Financial Transactions tabs) Supports Registration steps; generating a UPI PIN with bank OTP, last 6 digits of debit card and expiry date; changing a PIN with old PIN and new PIN; Set/Change PIN, Check Transaction Status and Raise Dispute are supported in every UPI app; mobile number must be registered with the bank; minimum Android API 23 and iOS 17 for new users
NPCI BHIM Services, BHIM app FAQs Supports UPI PIN is a four or six digit number; only a debit card linked to the account works; Bank Account then Reset to reset the PIN; 24 hour wait after too many wrong PIN attempts; BHIM app limits of Rs 40,000 per transaction and per day, 10 transactions a day and Rs 5,000 in the first 24 hours; name shown on verifying a UPI ID; a successful transfer cannot be reversed unless the receiver refunds; contact your bank for a chargeback; Report Issue option; BHIM toll free number 18001201740
NPCI press release, 7 October 2025, initiatives launched at GFF 2025 (PDF) Supports Until then a UPI PIN needed debit card details or Aadhaar OTP verification; Aadhaar based face authentication through UIDAI FaceRD app to set or reset UPI PIN; opt-in on-device biometric authentication as an alternative to entering the PIN
NPCI, UPI 123PAY Supports UPI PIN is 4 to 6 digits and must be entered for every transaction; an existing UPI PIN can be reused on UPI 123PAY
NPCI, UPI Lite Supports UPI Lite payments go through without a UPI PIN; the PIN is needed to enable and load UPI Lite
PIB, Ministry of Finance release of 15 September 2026 on the UPI framework Supports Person to person UPI stays free; customers do not pay MDR; daily limits set by banks and NPCI generally range from Rs 1 lakh to Rs 5 lakh by category
PIB, UPI feature, 17 September 2025 Supports From 15 September 2025 merchant payments up to Rs 10 lakh a day for select verified categories
PIB, factsheet on UPI Supports Rs 5 lakh per transaction for tax payments; UPI Lite wallet limit Rs 5,000 and Rs 1,000 per transaction; UPI 123PAY limit Rs 10,000 per transaction
NPCI, Register a complaint Supports UPI transaction queries are routed to the UPI help portal; complaints about fraudulent or unauthorised transactions must be raised with your own bank
NPCI, MyUPI (UPI Help) Supports Portal to check UPI transaction status and register complaints using the mobile number linked to the account
RBI, Commercial Banks Responsible Business Conduct Directions, 2025 (PDF, updated as on 1 October 2026) Supports Present customer liability rules (paragraphs 64 to 75); customer bears the loss until reporting if credentials were shared; bank bears losses after reporting; burden of proof on the bank
RBI, Responsible Business Conduct Third Amendment Directions, 2026 (24 June 2026) Supports Rules for transactions on or after 1 January 2027; sharing PIN or OTP and downloading malicious apps count as customer negligence; report to bank and to cybercrime portal or 1930; compensation of 85 per cent of net loss up to Rs 25,000 once in a lifetime for losses up to Rs 50,000 if reported within five calendar days
RBI, FAQs on the Reserve Bank Integrated Ombudsman Scheme, 2026 Supports Complain to the bank first; approach the RBI Ombudsman after 30 days or an unsatisfactory reply; 90 day window; cms.rbi.org.in; toll free 14448; no fee
RBI, Complaint Management System portal Supports Portal for complaints under the Reserve Bank Integrated Ombudsman Scheme, 2026; contact centre 14448
National Cyber Crime Reporting Portal Supports Official portal for reporting cyber and financial fraud

In the search archive

None of the searches this guide answers is in the archive for India yet.

Open India in the explorer or read its top searches year by year.