UPI cash withdrawal turns a retailer's counter into a cash point for any customer with a UPI app and a bank account. The customer doesn't need a debit card, as at a Micro ATM, or a fingerprint match, as with AePS. That convenience moves the risk: the customer approves the payment on their own phone, out of the retailer's sight, so the platform has to prove the payment happened before a single note leaves the drawer.
What NPCI enabled in October 2025
NPCI circular NPCI/UPI/OC-225/2025-26, dated 7 October 2025, enables cash withdrawal using UPI at business correspondent touchpoints such as Micro ATMs. The points below follow published summaries by Complinity and TeamLease RegTech, so read them as reported:
| Point | As reported |
|---|---|
| QR type | A dynamic QR, generated for each withdrawal |
| Limits | ₹5,000 per transaction, ₹10,000 per day, ₹50,000 per month |
| Authentication | Two-factor authentication on every transaction |
| Charges | On the same structure as card-and-PIN withdrawals at Micro ATMs |
| Onboarding | The acquiring bank onboards the business correspondents |
| Accounts | Complinity reports that UPI Lite and credit accounts can't be used; the two summaries word this point differently |
Read the circular on npci.org.in and confirm each point with your acquiring bank before you build limits or eligibility rules around it. Your bank's implementation is what your platform has to match.
How the money moves
The retailer starts a withdrawal
The retailer enters the amount the customer asks for, and the platform checks it against the per-transaction limit.
A dynamic QR is issued
The acquiring side, through its API or SDK, issues a QR for this one withdrawal, carrying the amount and a unique reference.
The customer approves
The customer scans the QR and approves with their UPI PIN, and their bank debits their account.
The acquirer records the payment
The acquiring side records the payment against the business correspondent.
The platform verifies
The platform checks the result through the acquirer's status API, not only a callback or the customer's screen.
Cash changes hands
On a verified success, the retailer's wallet is credited and the retailer hands over the cash.
Look at the direction of value. The customer's digital money flows to the business correspondent's side, and the retailer's physical cash flows to the customer. If the platform credits a withdrawal that never settled, the retailer, or whoever funds the retailer's wallet, has paid out cash for nothing.
How it compares with AePS and Micro ATM
| UPI cash withdrawal | AePS | Micro ATM | |
|---|---|---|---|
| How the customer authenticates | UPI PIN on their own phone | Aadhaar biometrics on the retailer's RD device | Debit card and PIN on a card reader |
| What the retailer needs | The app and a screen to show the QR | A registered RD device | A certified Bluetooth card reader |
| Limits | As reported for OC-225 above | NPCI circular 087 recommends ₹50,000 over a rolling 30 days, plus bank limits | Set by the card-issuing bank |
| Where it goes wrong | Late approval, an expired QR, a fake screenshot | Biometric mismatch, bank declines | Card declined, device pairing |
Many counters offer all three, so a customer without a card, or with worn fingerprints, still has an option. A platform that already onboards AePS merchants can often reuse that onboarding for UPI cash withdrawal, depending on the acquiring bank.
What your platform must build
Short-lived QR codes
A QR per withdrawal with a short expiry, so a QR shown earlier can't be paid later when the retailer isn't expecting it.
Verification before credit
A callback only starts a status check. The wallet is credited only after the acquirer's status API confirms the payment.
Limits per customer
Per-transaction checks before the QR, and daily and monthly caps tracked per customer as your acquiring bank identifies them.
Blackout windows
Configurable hours when withdrawals are switched off, matched to your acquiring bank's requirements.
Merchant eligibility
Only onboarded, KYC-complete merchants can start a withdrawal, with regular re-checks of each merchant's status.
Idempotent credit
A unique reference on every wallet credit, so a repeated callback or a second status check can't credit the same withdrawal twice.
Add reconciliation against your acquiring partner's reports every day. A withdrawal that your platform credited but the acquirer doesn't show is an exception to investigate the same day.
Counter rules to train every retailer on
- Cash only after the app shows success. Not after the customer says "done", and not after a screenshot.
- Never reuse a QR. If a QR expires, start a new withdrawal.
- Pending means wait. Don't hand over cash, and don't start a second withdrawal for the same request.
- Don't split to dodge limits. Tell a customer near a daily or monthly cap about the limit; don't serve them in pieces.
- Keep the reference. For any dispute, support and the bank will ask for the withdrawal reference, the amount and the time.
Fake payment screenshots are a common fraud at UPI cash counters. Only the verified status in the retailer's own app is proof of payment.
How the Payonclick module handles it
UPI cash withdrawal is live for Payonclick retailers, and the same module is part of our white-label and custom builds. It isn't offered as a partner API. In the platform today:
- Two flows. A provider SDK flow inside the Android app, and a server-to-server flow in which the platform renders the dynamic QR itself. A rendered QR expires in about 60 seconds.
- Limits. ₹100 to ₹5,000 per transaction in steps of ₹100, with ₹10,000 per day and ₹50,000 per month per customer.
- Blackout hours. No withdrawals from 11:30 PM to 5:00 AM by default, and admins can change the window.
- Verified results. A provider callback never credits the wallet directly. Every result is re-verified through the status API first.
- Idempotent credit. A verified success credits the retailer's AEPS wallet under a unique reference.
- Merchant checks. The module reuses the merchant's AEPS onboarding and eKYC, and a daily job re-checks merchant eligibility.
The UPI cash withdrawal module page covers the delivery options, and retailers can read the counter guide on payonclick.in.