UPI vs. Cards: What Should Merchants Prioritise?
Peneu Editorial Team · 12 May 2026 · Updated 26 September 2026 · 7 min read

Ask a small Indian business which payment method matters most and the answer is usually UPI. Ask a hotel, an electronics retailer or a software company and cards come up quickly. Both answers are right, because UPI and cards solve different problems. The useful question isn't which is better, but which your customers use for what you sell, and what each asks of your business.
How they differ for a merchant
The differences that matter to a business are less about technology and more about who the customer is, how the payment is authenticated, what happens when something goes wrong, and whether it can repeat.
| UPI | Cards | |
|---|---|---|
| Customer needs | An Indian bank account linked to a UPI app | A debit, credit or prepaid card |
| Authentication | The customer's UPI PIN in their app | OTP or PIN; contactless in-store up to ₹5,000 without the extra factor |
| Recurring payments | UPI e-mandates | Card e-mandates, and saved cards through tokens |
| When something goes wrong | Raised through the customer's bank and app | Card disputes and chargebacks under network rules |
| Customers abroad | Mostly customers with Indian bank accounts | International cards, where your provider enables them |
| Larger purchases | Subject to the customer's bank and app limits | Credit limits and card EMI offered by issuers |
Authentication, and the contactless exception
Almost every digital payment in India needs two factors of authentication. For UPI that's the customer's phone and UPI PIN. For card payments online it's usually an OTP. At a physical counter, RBI allows contactless card payments up to ₹5,000 per transaction without the additional factor, a limit in place since 1 January 2021; above that, the customer enters a PIN.
RBI's 2025 Authentication Directions also list tap-and-pay UPI on NFC-enabled point-of-sale machines among the exemptions, so tapping a phone on a terminal can work without a PIN within the rules for that facility. Whether your terminals and customers' apps support it depends on your provider.
Recurring payments
Subscriptions, instalments and memberships need a payment that repeats without the customer checking out every time. Both UPI and cards support this through e-mandates under RBI's framework: the customer registers a mandate with authentication, is notified before each debit, and can cancel it. For bank accounts, NACH mandates do the same job and suit larger amounts.
If recurring revenue is central to your business, check which mandate types your provider supports before you choose, not after.
When things go wrong
Card payments come with a formal dispute process: a cardholder can dispute a payment through their issuer, and you're asked for evidence under the card network's rules. UPI complaints are raised by customers through their bank and UPI app. Either way, the evidence that helps is the same: order details, delivery proof and your published refund policy.
Refunds work best when they go back through the original method, tied to the original payment, so both you and the customer can see what happened.
Cost
What each method costs you depends on your agreement with your provider, the payment type and your business. Government rules have set zero merchant charges for some payment types; ask your provider which apply to you now, and compare offers on your real mix of payments rather than a headline rate.
A practical way to decide
Start with your customers, not the rails.
Most businesses end up offering both. The work is in presenting them in the right order, measuring success rates by method, and reconciling them together.
- Mostly individual customers in India, small to mid-sized purchases: make UPI easy (an intent flow on mobile, a dynamic QR on desktop or at the counter) and keep cards available.
- Larger purchases or customers who want EMI: cards matter more, and so does a checkout that handles authentication smoothly.
- Customers abroad: international cards, through a provider that supports them for your business.
- Subscriptions: whichever mandate types your customers will actually set up, usually both UPI and cards, with NACH for larger amounts.
- Offline counters: a dynamic QR and a card terminal, and staff who know what to do when a payment times out.
Go deeper
Official sources
- RBI — Card transactions in contactless mode: relaxation in requirement of additional factor of authentication (4 Dec 2020)₹5,000 per transaction from 1 January 2021.
- RBI — Authentication mechanisms for digital payment transactions Directions, 2025Two-factor requirement and listed exemptions, including tap-and-pay UPI on NFC POS.
- RBI — Digital Payments – E-mandate Framework, 2026Registration, pre-debit notices and limits for recurring card, UPI and PPI payments.
Last reviewed . Examples, amounts and screens marked illustrative are not Peneu figures.
Questions about your own payment setup?
Talk to PeneuRelated reading

A Founder's Checklist for Choosing a Payment Gateway
Methods, money flow, reliability, integration, reporting, support and cost: the questions to ask any payment gateway or aggregator before you sign, and how to compare the answers.

RBI's Payment Aggregator Regulations, Explained for Merchants
RBI's Master Direction on payment aggregators (15 September 2025) sets how the businesses that collect and settle your money must work. Here's what it means for merchants, in plain language.
