A known UPI PIN can be changed, while a forgotten PIN needs a reset.
Supported apps may offer Aadhaar Face Authentication as an additional reset option.
Never share a UPI PIN, OTP, or debit card details with strangers or callers.
A forgotten UPI PIN can stop a payment at the worst possible moment. A fresh PIN can also add protection when an old code may no longer feel safe. NPCI supports the familiar debit-card method and newer Aadhaar-based face authentication, while some UPI apps may show different menus based on bank support.
A UPI PIN is a 4-6 digit passcode that authorizes bank transactions through UPI. NPCI states that a UPI PIN differs from a bank-issued MPIN. NPCI also warns that customer support staff will never ask for the UPI PIN.
A wrong PIN makes a transaction fail. Several wrong attempts can also cause a temporary block on UPI payments, with the exact rule set by the bank. A PIN reset suits a forgotten code, while a PIN change suits a case where the current code remains known but needs replacement. A PIN change also helps after a suspected disclosure, while a reset restores access after a forgotten code. Both routes require careful checks before any new code reaches a payment account.
The exact screen name can vary by UPI app, yet the core path stays simple. Open the official UPI app and select the bank account linked to UPI. Look for ‘Change UPI PIN’ under the bank account section. Enter the current UPI PIN when the app asks for the code, then create a new 4-6 digit code. Enter the new code again for confirmation. NPCI’s June 2026 BHIM UPI guidelines show separate ‘Change UPI PIN’ and ‘Reset UPI PIN’ options.
A strong new PIN should not match a simple pattern, date, or number that others can guess. NPCI says the UPI app does not store or read the UPI PIN, and bank support does not ask for the code.
Also Read - UPI MDR Rule from October 15: 0.4% Fee on Payments Above Rs. 2,000 Explained
A forgotten PIN needs a reset rather than a normal change. NPCI’s current BHIM UPI guidance shows a reset path under the bank account section. The standard flow asks for debit card details, such as the last six digits and expiry date, followed by an OTP. After verification, the app allows entry of a new UPI PIN.
The exact reset route can differ across apps and banks. A debit card may not remain the only route. NPCI introduced UIDAI Face Authentication as an extra option for UPI PIN set and reset. The feature can appear in apps that support the option.
NPCI’s face authentication flow starts with the UPI app’s ‘Set/reset UPI PIN’ option. An eligible app can show ‘Aadhaar-based Face Authentication’ as a choice. Aadhaar must be linked to the bank account for this route. The app then directs the account holder to the UIDAI Face RD app for a face scan. A bank OTP on the registered mobile number follows the face check. The account holder then enters a new UPI PIN and confirms the code.
This option does not replace every older method. NPCI describes face authentication as an additional choice, so bank and app support matters. NPCI also introduced on-device biometric authentication as an optional alternative to UPI PIN entry for transactions.
A UPI PIN should never reach another person. No bank employee, UPI support agent, caller, or remote-help operator needs the code. Debit card details should go only into the trusted UPI or bank app, never into a form sent through an unknown link.
A UPI PIN authorizes a payment. A request for a PIN to receive money signals serious risk. Payment details also need a careful check before final approval, with special attention to the recipient name and amount. NPCI’s safety guidance states that UPI PIN entry belongs only on the UPI PIN page and links PIN use with money sent from an account.
A suspected PIN leak calls for a prompt PIN change or reset through the official app. A lost phone needs quick action with the bank and mobile operator, since NPCI advises account holders to contact bank support after phone loss.
NPCI also provides a complaint route for UPI transaction issues. The UPI app or member bank can provide complaint support for a transaction dispute.
Why this MattersA UPI PIN protects access to bank transactions, so a forgotten, exposed, or weak PIN can create serious payment risks. Clear knowledge of safe change and reset methods helps prevent fraud, protects account details, and ensures access to UPI payments without sharing sensitive information with strangers.
The newer face-authentication route gives supported users another way to recover access without the older card-only path. Still, the safest habit remains simple: use the official app, verify every payment, protect OTP details, and never disclose the UPI PIN.
1. Can a forgotten UPI PIN be reset?
Yes, a forgotten UPI PIN can be reset through the UPI app using an available authentication method.
2. Is a debit card required for every UPI PIN reset?
No. Supported apps may offer Aadhaar-based Face Authentication as an additional reset method.
3. Can a UPI PIN be changed without forgetting it?
Yes. The ‘Change UPI PIN’ option allows a known PIN to be replaced with a new one.
4. Should a UPI PIN ever be shared with bank support?
No. Bank or UPI support staff should never ask for the UPI PIN.
5. What should happen after a suspected PIN leak?
A PIN change or reset through the official UPI app should happen promptly, followed by a review of recent transactions.