Our Product
Comprehensive view of the M2P UPI Platform — functional capabilities, technical architecture, multi-GTM coverage, and competitive differentiation.
All GTM Models
8 GTM models from a single codebase — PSP, TPAP, Issuer (CBS, PPI, CC, CLoU), Acquiring, Collections
99.99% Uptime
Less than 0.01% technical decline — completely homegrown, no third-party middleware
50-70% Lower TCO
Shared tenancy model delivers significantly lower total cost of ownership
4–6 Week Go-Live
New tenants on shared infrastructure vs. 3–6 months industry standard
Complete Product Stack
M2P's UPI offering is an integrated product ecosystem where each component can be deployed independently or as a bundle:
| # | Product / Module | Description | Deployment |
|---|---|---|---|
| 1 | UPI Core Switch | Reactive NPCI gateway — XML/HTTPS protocol interactions | Always required |
| 2 | Transaction Engine | Pay, Collect, Balance, Status, Disputes, Sync | Always required |
| 3 | Profile & VPA Engine | Registration, VPA management, account linking, credentials | Required for PSP/TPAP |
| 4 | Mandate Engine | AutoPay / recurring payments with lien management | For AutoPay use cases |
| 5 | Bank Integration Layer | Multi-bank CBS adapter framework — 7+ adapter types | For Issuer Host |
| 6 | API Gateway (Wrapper) | 150+ REST endpoints, OAuth 2.0, rate limiting, encryption | Always required |
| 7 | M2P Prepaid Stack | Full PPI issuance — ledger, KYC, card management | Optional (PPI GTM) |
| 8 | M2P CCMS | RuPay credit card management — issuance, lifecycle | Optional (RuPay CC GTM) |
| 9 | MMS (Merchant Mgmt) | Onboarding, QR engine, settlement, FSE app | Optional (Acquiring GTM) |
| 10 | Recon & Settlement | Automated transaction matching, settlement, regulatory reports | Included |
| 11 | Metrics & Monitoring | Real-time TPS, success rates, latency, health checks | Included |
| 12 | Admin Portal | Maker-Checker workflows, business configuration, compliance | Included |
| 13 | Support Portal | Transaction inquiry, dispute resolution, customer support | Included |
| 14 | UAM Portal | Role-based access control, user management, audit trails | Included |
| 15 | Android SDK (PSP/TPAP) | Native UPI SDK with NPCI Common Library, biometric, multi-language | For PSP/TPAP |
| 16 | iOS SDK (PSP/TPAP) | Native iOS SDK with Face ID, jailbreak detection, SSL pinning | For PSP/TPAP |
| 17 | Android SDK (PPI) | Native SDK for wallet operations + UPI interop | For PPI |
| 18 | iOS SDK (PPI) | Native iOS SDK for wallet operations + UPI interop | For PPI |
| 19 | Headless SDK | No-UI SDK for deep integration — full UI customization | Custom integrations |
Stack Composition per GTM
- UPI Core Switch
- Transaction Engine
- Bank Integration Layer (CBS adapter)
- Recon & Settlement
- Admin Portal + Support Portal + UAM
- Metrics & Monitoring
- Everything in CBS +
- M2P Prepaid Stack (ledger, KYC, card management)
- PPI-specific adapters
- TPAP Interoperability module
- UPI Core Switch
- Transaction Engine + Profile Engine + Mandate Engine
- API Gateway (full 150+ APIs)
- Android + iOS SDKs (PSP/TPAP)
- Headless SDK option
- Admin + Support + UAM Portals
- Everything in TPAP +
- PSP bank registration & handle management
- Full NPCI integration (PSP mode)
- Bank-branded app support
- UPI Core Switch (Acquirer mode)
- MMS (Merchant Management System)
- Merchant Onboarding (KYC, maker-checker)
- QR Engine (static, dynamic, Bharat QR)
- Settlement Engine (T+1, T+2)
- MDR & Fee Configuration
- FSE Mobile App
- Recon & Settlement
Functional Capabilities
Payment Transactions
All NPCI pay modes are supported:
| Pay Mode | Description |
|---|---|
| VPA Pay | Enter beneficiary VPA → validate → PIN → payment processed |
| QR Scan & Pay | Scan QR (static/dynamic) → pre-fill details → PIN |
| Account + IFSC | Enter account number + IFSC → validate → PIN → transfer |
| Intent Pay | Deep-link from merchant app → auto-fill → PIN |
| Inline Pay | Payment within merchant checkout via SDK |
Key capabilities: Real-time settlement, configurable per-transaction limits (₹1 to ₹1,00,000), multi-currency for international UPI, pre-approved flows for credit line transactions.
NPCI Collect Sunset
Effective February 28, 2026 — App-based and Mobile-Web merchants must move to Intent-based UPI payments. Collect-based UPI payments discontinued for Android devices. Exemptions apply for IPO, Mandates, e-Rupi, PACB Merchants, and iOS.
| Collect Type | Description |
|---|---|
| VPA Collect | Send collect to customer VPA → approve with PIN |
| QR Collect | Customer scans QR → auto-collect → approve |
| Invoice Collect | Collect linked to invoice/order ID |
Capabilities: Configurable expiry (15 min default), spam blocking, blocked user management, pending request tracking.
Balance Enquiry:
- Real-time balance from issuing bank/PPI/credit card
- Multiple account support
- No balance caching — all queries real-time
Transaction Status:
- Query by RRN, Transaction ID, Customer Reference, date range
- Real-time status updates from NPCI
- Historical search with pagination
Full NPCI UDIR compliance with 45-day resolution window.
Merchant (P2M) Dispute Types:
| Code | Reason |
|---|---|
| U008 | Goods/services not provided for approved transaction |
| U021 | Credit not processed for cancelled/returned goods |
| U022 | Account debited but confirmation not received at merchant |
| U023 | Paid by alternate means / duplicate payment |
| U009 | Account not credited back for declined transaction |
P2P Dispute: U010 — Beneficiary account not credited for successful pay transaction.
Rules: Disputes can be raised after 5 minutes of completion. Real-time status check required before initiating.
Profile & VPA Management
SIM Binding
Device-SIM binding for secure 2FA → NPCI verification
VPA Creation
User chooses VPA format → check availability → register with NPCI
Account Discovery
Fetch all eligible accounts from bank → display masked accounts
Account Linking
Select account → generate reference → store in profile
Set PIN
First-time PIN setup via HSM → card details + OTP → PIN set
Ready to Transact
User can now pay, receive, check balance, set mandates
VPA Types: Alphanumeric (john.doe@psphandle), Mobile number (9876543210@psphandle), UPI Number (12-digit@npci)
Account Types Supported: Savings, Current, Overdraft, PPI Wallet, RuPay Credit Card, Credit Line, NRE, NRO
Mandate & AutoPay
| Mandate Type | Use Cases | Frequency Options |
|---|---|---|
| Recurring | Subscriptions, EMI, insurance, SIP, utilities | Daily, Weekly, Fortnightly, Monthly, Quarterly, Half-yearly, Yearly, As-presented |
| One-Time | E-commerce pre-auth, hotel booking, IPO applications | Single execution |
Capabilities: Fixed or variable amount with max cap, 24-hour pre-debit notification, lien management, cross-PSP interoperability (V1.5), limits up to ₹5,00,000 depending on category.
Advanced UPI Features
Third-party payment authorization enabling one user to pay on behalf of another:
Features: Consent-based, time-bound (up to 45 days), revocable, dual authorization, NPCI Delegate Payments v1.9 compliant.
- Wallet-to-bank transfers via UPI
- Bank-to-wallet loading via UPI
- Wallet-to-wallet transfers (interoperable)
- Merchant payments using wallet balance
- TPAP Interoperability for PPI accounts
RuPay Credit Card: Link as additional account, MCC restrictions, real-time limit validation, Phase 2 TSD v3.4 compliant.
Credit Line (CLoU): CREDITLINE account type detection, pre-approved flows, credit line statistics, NBFC-ready. EMI on mandates — data model ready.
PIN-less small-value transactions for faster checkouts:
- Per-transaction and balance limits per latest NPCI guidelines
- No UPI PIN required — instant approval
- SDK + backend integration
- UPI Lite X (offline mode) — protocol ready
Cross-border payments with auto-reporting:
| Country | Currency | Use Cases |
|---|---|---|
| Singapore | SGD | Tourism, remittances |
| UAE | AED | Remittances, tourism |
| Bhutan | BTN | Cross-border trade |
| Nepal | NPR | Remittances |
Auto-reporting: LRS and FETERS automated.
Technical Architecture
Architecture Principles
| Principle | Implementation |
|---|---|
| Reactive & Non-Blocking | Spring WebFlux / Project Reactor for maximum throughput |
| Domain-Driven Design | Services aligned with UPI business domains |
| API-First | All capabilities via RESTful APIs with OpenAPI 3.0 |
| Event-Driven | Kafka-based event bus for async operations |
| Security by Design | End-to-end encryption, HSM, KMaaS, JWT |
| Multi-Tenant | Shared infrastructure with per-tenant isolation |
High-Level Architecture
Technology Stack
| Layer | Technology | Notes |
|---|---|---|
| Runtime | Java 11/21 | Migrating to Java 21 |
| Framework | Spring Boot 2.7.x / 3.3.x | Spring Boot 3.x for latest services |
| Reactive | Spring WebFlux, Project Reactor | UPI Switch — fully reactive |
| Database | MongoDB 4.4+ | Primary datastore, replica sets |
| Cache | Redis | Session, config, reactive in switch |
| Messaging | Apache Kafka 3.9.1 | Event streaming, notifications |
| HSM | nCipher PKCS11 | PIN generation/verification |
| Build | Gradle 8.5 | All backend services |
| Frontend | React 17/18, Material-UI v5 | Portals |
| Mobile | Kotlin (Android), Swift 5.0+ (iOS) | Native SDKs |
| Monitoring | Prometheus + Grafana + Micrometer | Real-time dashboards |
| CI/CD | Jenkins, GitHub Actions | Automated build/deploy |
| Container | Docker, Kubernetes | Production orchestration |
Bank Adapter Framework
Factory pattern for pluggable CBS adapters:
| Adapter | Systems Served | Use Case |
|---|---|---|
M2PAdapterImpl | M2P-powered banks (Finacle based) | Standard issuer host |
FinacleAdapterImpl | Banks running Infosys Finacle CBS | Direct CBS integration |
M2PCreditAdapterImpl | RuPay credit card issuers | Credit on UPI |
TuringCBSAdapterImpl | BSG/Turing CBS powered banks | Co-operative bank segment |
ExternalAdapterImpl | Third-party/custom CBS systems | Flexible integration |
M2PConnectAdapterImpl | M2P Connect ecosystem | M2P platform services |
Adding a new bank/CBS: Implement the BankAggregatorAdapter interface (16 methods) and register in the factory. Typical effort: 2–4 weeks.
Multi-GTM Feature Matrix
| Feature | Issuer CBS | Issuer PPI | Issuer CC | CLoU | TPAP | PSP | MMS |
|---|---|---|---|---|---|---|---|
| P2P Pay | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | — |
| P2M Pay | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
| Balance Enquiry | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | — |
| Disputes (UDIR) | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
| VPA Management | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | — |
| Mandate/AutoPay | ✅ | ✅ | ✅ | ⚠️ | ✅ | ✅ | ✅ |
| UPI Delegate | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | — |
| UPI Lite | ✅ | ✅ | — | — | ✅ | ✅ | — |
| International UPI | ✅ | ✅ | — | — | ✅ | ✅ | — |
| Credit Card on UPI | — | — | ✅ | — | — | — | ✅ |
| Android SDK | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | — |
| iOS SDK | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | — |
| Biometric Auth | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | — |
| Admin Portal | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
Performance & Reliability
| Metric | Value |
|---|---|
| Throughput | 10,000+ TPS with auto-scaling |
| P99 Latency | <200ms |
| NPCI Roundtrip | <500ms average |
| Technical Decline | <0.01% |
| Uptime SLA | 99.99% |
| Data Archival | 4M+ records/day |
Reliability Patterns
| Pattern | Purpose |
|---|---|
| Circuit Breaker (Resilience4j) | Prevents cascade failures per-tenant |
| Auto-Scaling (K8s HPA) | Independent service scaling |
| Distributed Cache (Redis) | No single point of failure |
| Event Sourcing (Kafka) | Complete audit trail, replay capability |
| Database Replication (MongoDB) | Read scalability + high availability |
| Graceful Degradation | Non-critical features disabled without affecting core payments |
Mobile SDKs
| SDK | Platform | Key Features |
|---|---|---|
| PSP/TPAP Android | Android 7.0+ (Kotlin) | Full UPI, NPCI CL, biometric, root detection |
| PSP/TPAP iOS | iOS 13.0+ (Swift) | Full UPI, Face ID, jailbreak detection, SSL pinning |
| PPI Android | Android 7.0+ | Wallet operations, UPI interop, QR handling |
| PPI iOS | iOS 13.0+ | Wallet operations, UPI interop |
| Headless SDK | Both platforms | No-UI for full customization |
Integration Effort
| Scenario | Timeline |
|---|---|
| SDK integration in existing app | 2–3 weeks |
| M2P integrates in partner app | 1–2 weeks |
| White-labeling (branding + config) | 1 week |
| Full TPAP white-label delivery | 4–6 weeks |
Operations & Support
Admin Portal
Maker-Checker workflows, tenant management, user administration, heartbeat monitoring, regulatory reports (LRS, FETERS), circuit breaker management.
Support Portal
Transaction search (by RRN, TxnID, VPA, date range), real-time monitoring, dispute resolution, customer profile lookup, refund processing.
UAM Portal
Fine-grained RBAC, user lifecycle management, SSO integration (Keycloak/OAuth 2.0), audit trails, session management.