Is PhonePe safe and registered in India: NPCI status and app permissions

PhonePe is not a bank. For UPI it is a Third-Party App Provider authorised by NPCI, and it says RBI has authorised its wallet and payment aggregator businesses. Learn how it processes your money, what phone access it uses, and what happens when a payment fails.

By Qrates research desk · 2026-11-01

PhonePe is not a bank. For UPI, it works as a Third-Party App Provider authorised by NPCI. It also says RBI has authorised its wallet and payment aggregator businesses. You can see its store ratings, the phone access it uses and common complaints on the PhonePe Qrates page.

Quick answer: Is PhonePe safe and RBI registered?

PhonePe is not a bank, but parts of its business are authorised by RBI. PhonePe Limited says RBI has authorised it to issue prepaid wallets and to work as a payment aggregator. For UPI, it is a Third-Party App Provider (TPAP) authorised by the National Payments Corporation of India (NPCI). When you pay by UPI from a linked bank account, the money stays in your bank until the payment is approved. You usually approve it with your UPI PIN, or with phone biometrics if you opted in. You can also compare money apps side by side to see how it stacks up against other platforms.

Licence and registration

PhonePe Limited, formerly PhonePe Private Limited, says in its wallet terms that RBI has authorised it to issue prepaid payment instruments. Its business site calls it an RBI authorised payment aggregator. Neither of these is a banking licence. For UPI, it works through partner banks. If you are looking for other options, you can explore our list of payments and UPI apps.

NPCI approval for Third-Party App Providers

NPCI approves the banks and Third-Party App Providers that take part in UPI (NPCI UPI page). PhonePe's UPI terms say it is a TPAP authorised by NPCI. For context on how other major players operate, you can read about Is Google Pay safe and registered in India? Licences, permissions and complaints.

How partner banks process your money

A TPAP cannot move money on its own. PhonePe partners with Payment System Provider (PSP) banks to process your transactions. Its UPI terms name three sponsor banks: Yes Bank, Axis Bank and ICICI Bank. When you send money, these partner banks communicate with your bank to move the funds.

Regulator warnings and penalties

We cannot confirm that no warnings exist, so check for yourself. RBI's press release of September 12, 2025 says it fined PhonePe Limited ₹21 lakh by an order dated September 10, 2025. RBI said the end-of-day escrow balance was below the amount owed for wallets and merchant payments on certain days, and the shortfall was not reported at once. RBI also said this action is about regulatory compliance and does not rule on any customer transaction. This is the latest RBI penalty we found, so search RBI's press releases for others.

RBI requires at least two authentication factors for domestic digital payments unless a payment type is exempted. The rule comes from the RBI (Authentication mechanisms for digital payment transactions) Directions, 2025, dated September 25, 2025, with compliance due by April 1, 2026. Factors can include a PIN or a biometric.

What PhonePe can read on your phone

According to the Qrates page, PhonePe reads your SMS and your contacts. PhonePe's privacy policy says SMS access is used for things like registering you and your device for payments, login and payment OTPs, security, and bill reminders. Its UPI terms say registration may involve sending an SMS from your phone to verify and link your bank account. The policy lists contacts among the information it collects but gives no specific reason. It says location and microphone access are based on your explicit consent through app permissions. They are used when a product needs them or a regulation requires them, such as video KYC.

What users complain about

The Qrates page shows PhonePe at 4.4 on Google Play from about 1.43 crore ratings, and 4.7 on the App Store. The problems users raise most in store reviews are support that does not reply, failed payments where money was sometimes deducted, charges they say were not disclosed, auto-debits they say they did not choose, and app crashes. You can see how these issues compare to other services in our Google Pay vs PhonePe: UPI limits, recharge fees and phone permissions analysis.

How to check this yourself

You can verify a UPI app's official status directly with the network operator.

Go to NPCI's UPI page at npci.org.in/product/upi.
Look for the list of live UPI members. Menu names can change.
Read PhonePe's own UPI terms, which name its sponsor banks.
For its wallet and payment aggregator status, check the lists published on rbi.org.in.

FAQs

Is it safe to link a bank account to PhonePe?

PhonePe's UPI terms say it does not store the bank account number linked to your UPI ID, unless the law permits it. Your money remains with your bank until you authorize a payment, usually with your UPI PIN.

Can PhonePe deduct money without a UPI PIN?

A normal UPI payment from your bank account needs your UPI PIN, or phone biometrics if you opted in. UPI Lite is not the only exception. UPI Lite allows PIN-free payments up to ₹1,000 from a pre-loaded balance of up to ₹5,000 (RBI Framework for Facilitating Small Value Digital Payments in Offline Mode, as updated on December 4, 2024). RBI also exempts recurring e-mandate debits after the first one, and NPCI describes UPI Tap & Pay as PIN-less up to ₹5,000. These depend on what you set up, so check your active AutoPay mandates.

What happens if a PhonePe transaction fails but money is deducted?

It depends on the payment type (RBI Harmonisation of Turn Around Time circular, September 20, 2019). T is the day of the transaction. For a transfer to a person, the beneficiary bank must auto-reverse by T + 1 day. For a merchant payment, auto-reversal must happen within T + 5 days. If the reversal is later than this, compensation of ₹100 per day applies.

The short version

PhonePe is not a bank. It says RBI has authorised its wallet and payment aggregator businesses.
For UPI, it is an NPCI-authorised Third-Party App Provider.
Its UPI sponsor banks are Yes Bank, Axis Bank and ICICI Bank.
It reads SMS and contacts. Location and microphone access are based on your consent.
A failed UPI transfer must reverse by T + 1 day and a merchant payment by T + 5 days. After that, ₹100 per day compensation applies.
RBI fined PhonePe ₹21 lakh in September 2025 over wallet escrow balances.

Sources

Disclaimer

Qrates is an information directory. It takes no commission from any company listed and does not recommend products. Figures are taken from the sources named and dated, and they change; check the company's own page before you decide. This is not investment, credit, insurance or tax advice for your situation. A licence or a clean record today does not guarantee how a company behaves later. To complain, use the regulator's own portal (RBI CMS, SEBI SCORES or IRDAI Bima Bharosa).