BHIM App launches biometric payments; Pay up to ₹5,000 via fingerprint or face ID

New Delhi: NPCI BHIM Services Limited (NBSL) has officially launched biometric authentication for UPI transactions on the BHIM Payments App. Users can now approve payments up to ₹5,000 using just their smartphone’s fingerprint sensor or facial recognition, effectively removing the need to enter a UPI PIN for everyday small-value purchases.

The update, announced on Tuesday, aims to tackle two major pain points for Indian digital users: payment failures due to incorrectly entered PINs and the inconvenience of recalling complex codes during quick checkout scenarios.

How the new BHIM biometric feature works

The new feature allows for a "one-touch" payment experience across various scenarios, including scanning merchant QR codes, sending money to contacts, and completing online checkouts.

• Transaction Limit: Biometric approval is capped at ₹5,000 per transaction.
• Higher Values: For any payment exceeding ₹5,000, the app will still require the traditional 6-digit UPI PIN to ensure maximum security for high-value transfers.
• Device Compatibility: The feature is live for both Android and iOS devices that possess built-in biometric hardware (Fingerprint scanners, Face ID, or Touch ID).

Lalitha Nataraj, MD and CEO of NBSL, highlighted that the move is designed to simplify the digital journey for millions of Indians. "By enabling users to confirm transactions through their fingerprint or face unlock, we are reducing reliance on PIN entry while keeping payments closely tied to the user," she stated during the launch.

While the convenience of "PIN-less" payments is a major draw, NPCI has emphasised that security remains the priority. Unlike a PIN, which can be shared or stolen, biometric data is unique to the individual.

Crucially, the biometric data used for these transactions remains stored locally on the user's device and is not shared with the BHIM app or NPCI servers. This local encryption significantly reduces the risk of data breaches and ensures that users retain full control over their sensitive information.