AI Agents Paying Your Bills: Is Your UPI Money Safe?

Pine Labs built a system where AI software can make UPI payments on your behalf without you approving each transaction. You set a limit once, and the AI pays within it. Sounds handy — but who is responsible if something goes wrong?

Here's what happened: Pine Labs launched P3P, a protocol that lets AI agents execute UPI payments autonomously within a pre-approved spending limit set by the user.. The system uses UPI mandates — standing instructions already allowed by NPCI — but extends them so software agents, not humans, trigger each payment.. RBI and NPCI have no specific regulation yet covering AI-initiated payments, leaving liability, privacy, and fraud recovery rules unclear for consumers..

What you should do: Before enabling any AI payment agent, check the exact rupee cap it can spend per day or per transaction — never set an open-ended limit.. Monitor your UPI mandate list in your bank app or BHIM monthly; revoke any mandate you no longer recognise or actively use.. If an AI agent makes an unauthorised or erroneous payment, raise a dispute immediately with your bank under RBI's Payment System Guidelines — delay weakens your case..

UPI mandates already exist for SIPs and OTT subscriptions — the key difference with AI agents is no human reviews each charge. Set the lowest limit that still works for your use case to cap your maximum possible loss.