NPCI Products — Set 3

Correct Answer: D. Companies Act, 1956

• **Companies Act, 1956** = NPCI was incorporated in December 2008 as a Section 25 company (not-for-profit entity) under the Companies Act, 1956; Section 25 allowed companies to be established for charitable or useful objectives without distributing profits to members — now re-designated as Section 8 under the Companies Act, 2013. • **December 2008, non-profit structure** — NPCI's non-profit status ensures all surplus revenue is reinvested into improving payment infrastructure rather than distributed as dividends; it was promoted by 10 banks led by SBI, and its mandate came from the Payment and Settlement Systems Act, 2007 (not the act of incorporation itself). • Although NPCI derives its operating authority from the Payment and Settlement Systems Act, 2007 (administered by RBI), it was legally constituted — i.e. brought into existence as a company — under the Companies Act, 1956. • 💡 **Banking Regulation Act, 1949** governs the licensing and regulation of banks and banking operations — it is not the legislation under which corporate entities like NPCI are incorporated. **Payment and Settlement Systems Act, 2007** gave NPCI its operational mandate to run payment systems, but NPCI was incorporated (i.e. registered as a company) under the Companies Act, not under PSS Act. **Reserve Bank of India Act, 1934** governs the establishment and functioning of the RBI itself — it is not used to incorporate payment companies or any other non-bank entity.

Correct Answer: D. National Financial Switch

• **National Financial Switch (NFS)** = NFS is NPCI's interbank ATM switching and clearing house — it routes ATM transaction requests between the acquiring bank (bank whose ATM is used) and the issuing bank (bank that issued the card), and then settles the inter-bank funds through multilateral netting. • **Taken over by NPCI in December 2009** — originally developed by IDRBT (Institute for Development and Research in Banking Technology), NFS was transferred to NPCI which expanded it into the largest shared ATM network, connecting over 2.5 lakh ATMs from 1,100+ member banks. • NFS settlement works on a multilateral netting basis — instead of settling each ATM transaction individually, it aggregates all transactions across bank pairs and settles the net position once a day, reducing the volume of inter-bank fund movements. • 💡 **National Automated Clearing House (NACH)** is a bulk clearing system for high-volume recurring transactions like salaries and EMIs — it clears ECS-type transactions, not ATM card transactions. **Bharat Bill Payment Central Unit** is the central governance layer of BBPS for bill payments — no ATM clearing function. **RuPay Clearing House** is not a separate named entity — RuPay card transaction clearing is done through NFS itself; there is no independently named "RuPay Clearing House."

Correct Answer: A. BharatQR

• **BharatQR** = an interoperable QR code payment standard jointly developed by NPCI, Visa, and Mastercard; a single BharatQR code displayed by a merchant can be scanned by customers using any UPI app, Mastercard app, or Visa app to complete a payment — regardless of which bank or card network the customer uses. • **World's first interoperable QR standard, 2017** — BharatQR was launched in February 2017 as the world's first common QR code standard across multiple payment networks; it links directly to the merchant's bank account, supports both debit and credit card payments, and does not require a separate PoS machine. • BharatQR eliminates the need for merchants to display separate QR codes for different networks (UPI QR, Visa QR, Mastercard QR), simplifying the checkout experience at small shops and street vendors. • 💡 **AePS** allows customers to perform cash transactions at micro-ATMs using Aadhaar biometrics — it is an identity-based cash access system, not a QR-based merchant payment tool. **NFS** (National Financial Switch) is the ATM network interconnecting bank ATMs for card-based withdrawals — it operates in the background and has no QR code functionality. **RuPay Pay** is not a distinct NPCI product; RuPay-branded UPI payments are made through standard UPI apps — there is no separately named "RuPay Pay" product in the NPCI product catalogue.

Correct Answer: A. Person to Account

• **P2A = Person to Account** = one of IMPS's two transfer methods; in P2A, the sender initiates the transfer by entering the beneficiary's bank account number and the branch's IFSC (Indian Financial System Code) — no mobile number or MMID is required, making it suitable when the sender does not know the recipient's mobile number. • **Two IMPS modes: P2P and P2A** — P2P (Person to Person) uses the beneficiary's mobile number and MMID (Mobile Money Identifier); P2A uses account number + IFSC; both modes settle in real time and are available 24×7; P2A is also how IMPS is initiated via internet banking portals. • P2A was introduced to give IMPS broader usability — not everyone is registered for IMPS with a mobile number, so P2A allows transfers to any bank account holder as long as the account number and IFSC are known. • 💡 **Phone to Account** may seem logical (since IMPS is a mobile-initiated service) but "P2A" officially stands for "Person to Account" in NPCI documentation — "Phone" is not the correct expansion. **Payment to Agency** is a completely fabricated expansion with no basis in IMPS terminology — IMPS transfers go to individual or business bank accounts, not "agencies." **Private to Public** has no meaning in the context of IMPS transaction modes — it describes an ownership concept, not a payment routing method.

Correct Answer: D. CVV

• **CVV (Card Verification Value)** = a 3-digit security number printed on the back of a RuPay (or any payment card) near the signature panel; it serves as proof of physical possession of the card during card-not-present (CNP) transactions such as online shopping, where the card cannot be physically swiped. • **Not stored by merchants** — RBI guidelines mandate that merchants and payment aggregators must not store CVV numbers in their databases; this means even if a merchant's database is breached, the CVV cannot be stolen — a key protection against online fraud. • For Visa cards it is called CVV2, for Mastercard it is CVC2, for American Express it is a 4-digit CID on the front — all serve the same function but the term CVV is commonly used generically for all networks including RuPay. • 💡 **PAN (Permanent Account Number)** is a 16-digit card number on the front of the card, used to identify the card account — it is not the 3-digit security code. **PIN (Personal Identification Number)** is a 4 or 6-digit number entered at ATMs and PoS terminals — it is a separate authentication factor and is NOT printed on the card. **OTP (One-Time Password)** is a temporary code sent to the registered mobile number for additional verification — it is dynamically generated for each transaction and is not the static 3-digit code printed on the card.

Correct Answer: C. NPCI Bharat BillPay Limited

• **NPCI Bharat BillPay Limited (NBBL)** = a wholly-owned subsidiary of NPCI incorporated in 2021 that acts as the Bharat Bill Payment Central Unit (BBPSCU) — the apex body overseeing all operational, business, and technical functions of the Bharat Bill Payment System (BBPS) across India. • **Incorporated 2021, supersedes old BBPSCU** — before NBBL was formed, NPCI itself served as the BBPSCU; NBBL was created as a dedicated entity to allow BBPS to scale independently; it sets rules for biller onboarding, customer grievance redressal, and settlement standards for all BBPS participants. • NBBL is separate from NPCI's other payment systems — its sole mandate is BBPS governance and operations; BBPS Operational Units (BOU) are the banks and payment aggregators that handle the actual customer-facing bill payment transactions. • 💡 **Central Clearing House** is a generic term, not an official NPCI entity name — there is no NPCI subsidiary called "Central Clearing House." **NPCI International** (full name: NPCI International Payments Limited, NIPL) is a different NPCI subsidiary focused on deploying UPI and RuPay internationally — it has no role in domestic bill payment operations. **BBPS Operations Unit** is a term for the individual banks and payment service providers (Paytm, PhonePe, etc.) that are authorised to process bill payments under BBPS — they are not the managing entity; NBBL manages them.

Correct Answer: D. Two-factor authentication with device binding

• **Two-factor authentication with device binding** = UPI security is built on two layers: (1) device binding — the UPI app is linked to a specific mobile device during registration so that the UPI ID can only be accessed from that registered handset; (2) UPI PIN — a 4 or 6-digit secret known only to the user, required to authorise every transaction. • **Device + PIN = 2FA** — even if someone knows your UPI PIN, they cannot transact without the registered device; conversely, even if they have your phone, they cannot transact without the UPI PIN; this two-factor combination makes UPI far more secure than simple password-based systems. • NPCI also mandates SIM-binding — the UPI registration process sends an SMS from the registered SIM to verify the mobile number, ensuring the device and SIM are both verified before the UPI ID is activated. • 💡 **No PIN required for any amount** is factually incorrect — UPI mandates a PIN for every transaction, regardless of amount; removing PIN entirely would eliminate a critical authentication layer and expose users to fraud. **Sharing your password with neighbors** is a description of fraudulent/unsafe behavior, not a security feature — NPCI and all banks explicitly warn users NEVER to share their PIN, OTP, or password with anyone. **Auto-debit without user consent** violates the Reserve Bank of India's consent framework for recurring transactions — UPI Autopay requires explicit one-time mandate setup; unsanctioned auto-debit is a fraud, not a feature.

Correct Answer: A. BBPS

• **BBPS (Bharat Bill Payment System)** = the integrated, interoperable bill payment platform operated by NPCI (through its subsidiary NBBL) that consolidates payments for multiple biller categories — including electricity, telecom, gas, water, insurance, school/college fees, and loan EMIs — under a single, standardised window with assured delivery confirmation. • **Covers education and insurance since 2021** — BBPS was expanded to include school fees and insurance premium payments in 2021; the customer can walk into any BBPS-authorised agent, bank branch, or use any BBPS-enabled app to pay fees for schools registered on the BBPS platform, receiving immediate digital receipts. • BBPS offers channel-agnostic payment — whether a customer pays via internet banking, mobile app, bank branch, or cash at an agent, the experience, settlement, and receipt format are standardised across all channels. • 💡 **RuPay** is a card payment network for debit and credit transactions at PoS and ATMs — it is not a bill aggregation system and cannot consolidate multiple biller categories under one window. **AePS** (Aadhaar Enabled Payment System) enables individual cash withdrawals and deposits using biometric authentication at micro-ATMs — it is not designed for recurring bill payment collection or biller integration. **IMPS** is a real-time fund transfer service for person-to-person or person-to-account money movement — while you can technically push money to a biller account via IMPS, it is not an integrated bill payment system with biller management, standardised receipts, or grievance redressal.

Correct Answer: B. UPI QR

• **UPI QR** = a standardised QR code generated using the UPI protocol (governed by NPCI) that encodes a merchant's Virtual Payment Address (VPA); any customer can scan this single code with any UPI-enabled app — Google Pay, PhonePe, BHIM, Paytm, or any bank's UPI app — to make a payment to that merchant. • **Truly interoperable across all UPI apps** — unlike proprietary QR codes (e.g. a PayTm QR that works only with Paytm wallet), the UPI QR is network-agnostic; a shopkeeper with one UPI QR displayed at the counter can accept payments from all 300+ UPI-enabled apps and participating banks. • UPI QR has driven mass adoption of digital payments at small merchants — street vendors, auto-rickshaw drivers, and kirana stores can accept payments without any hardware, internet beyond basic data, or technical knowledge. • 💡 **Bank QR** is not a standardised NPCI product — individual banks may generate QR codes for their own apps, but a "Bank QR" is not the official interoperable standard for all UPI apps. **Global QR** is not an NPCI product name — BharatQR is the multi-network standard involving Visa/Mastercard as well, while UPI QR specifically operates on the UPI protocol; "Global QR" does not exist as an official NPCI product. **Pay QR** is a fictional product name with no basis in NPCI's product catalogue or any RBI circular.

Correct Answer: A. RuPay Clearing and Settlement System

• **RuPay Clearing and Settlement System** = NPCI operates a dedicated, proprietary clearing and settlement infrastructure specifically for RuPay debit and credit card transactions — processing authorisation requests, clearing of transaction data between acquiring banks and issuing banks, and final fund settlement on a net basis. • **Domestically processed, lower cost** — because RuPay clearing happens entirely within India (unlike Visa/Mastercard which route Indian card data through foreign servers), it is significantly cheaper for Indian banks, which is why RuPay cards carry lower MDR (Merchant Discount Rate) charges compared to Visa and Mastercard. • RuPay's clearing system was a key policy goal of RBI and NPCI — keeping sensitive Indian payment data and settlement within national jurisdiction, reducing dependency on foreign networks and associated foreign exchange outflows. • 💡 **NACH Platform** is the National Automated Clearing House — it handles bulk recurring electronic transactions like salary and EMI payments, not card-based PoS/ATM/e-commerce transaction clearing. **NFS Switch** routes interbank ATM withdrawal transactions between banks' ATMs — it handles the switching layer, not the card scheme's own clearing and settlement layer that settles data between card issuing and acquiring banks. **IMPS Settlement Unit** is not an official NPCI product name; IMPS settles individual real-time fund transfers, not the clearing of card scheme transactions — it operates on a completely different payment rail from RuPay card processing.