A shop that accepts UPI badly loses money in ways the owner rarely sees: receipts mixed into a personal savings account, a monthly cap that quietly starts declining customers at the counter, a soundbox rental nobody has renegotiated in three years, and a till that cannot be matched to a bank statement. Setting up UPI for small business takes an afternoon. Setting it up so it survives both scale and an income-tax query takes a few deliberate decisions on that same afternoon.
This is for the owner of a kirana, salon, chemist, tiffin service or workshop taking payments on a personal QR today and suspecting that is not quite right. It is. Here is what to change, what it costs, and what to watch for at the counter.
Your savings account is not a till, and NPCI agrees
Most first-time merchants print the QR from their personal UPI app and tape it to the counter. That works until it doesn’t, and the wall you hit is a real rule. NPCI runs a middle category called P2PM — person-to-small-merchant — for exactly this situation. Its circular on maximum UPI inward credit limits for P2PM merchants caps cumulative monthly inward credit at Rs 1,00,000, and directs that anyone crossing that figure for three consecutive months be formally acquired into the proper P2M merchant category with a merchant category code. A busy tea stall crosses Rs 1 lakh a month without noticing, and then payments start failing during your best hours.
The tax side is the stronger argument. Once shop receipts and household money share one account, you cannot produce a clean statement of business turnover. You either under-declare and carry risk, or pay tax on gifts, family transfers and reimbursements that were never income. India’s presumptive-taxation route treats digitally received turnover more favourably than cash turnover, but that advantage is only claimable if you can show which receipts those were, and a separate current account is what makes it provable. This is general information; the sections, rates and thresholds that apply to your turnover are a matter for a chartered accountant, and it is among the cheapest professional fees a small business will ever pay.
The setup path we recommend, in order
- Register the business first. A proprietorship needs proof of existence before a bank opens a current account — GST registration, Udyam registration, a shops-and-establishments licence or a municipal trade licence. Udyam registration is free and takes minutes with Aadhaar and PAN.
- Open a current account, not a second savings account. Compare minimum average balance requirements across two or three banks first; that balance is the largest recurring cost here, and varies enormously between a public-sector branch and a private bank.
- Get a merchant UPI ID attached to that current account, through your bank or a merchant app. Either way, insist on being onboarded as a merchant with a merchant category code, not left on a personal handle.
- Print the QR large and laminate it, then photograph it, so you can later verify the QR on your counter is the one you put there.
- Add a confirmation device if your counter is noisy or you have staff. A soundbox is a fraud control before it is a convenience.
- Set up the accounting link on day one, while volumes are small enough to test it.
Where to get a merchant QR: the realistic options
One point of honesty first: the merchant apps do not publish device pricing. Rates are quoted by the field agent who signs you up and differ by city and by whatever retention offer is running, so anyone quoting a precise national soundbox rental is guessing.
| Route | What you get | Device and cost model | Settlement | Main limitation |
|---|---|---|---|---|
| Your own bank’s merchant QR | Merchant VPA and static QR paid straight into your current account, plus branch staff to escalate to | No device; QR free. Cost sits in the account’s minimum balance | Real time — money is already in your account | Thin software: weak dashboards, no soundbox, poor transaction search |
| Paytm for Business | Merchant QR plus a wide soundbox range — display, solar, NFC card models — and POS machines | Soundbox on monthly rental; plans quoted per merchant | Next-day is the common plan; confirm yours | Rental recurs and is rarely reviewed |
| PhonePe for Business | Merchant QR, SmartSpeaker, POS, and a store listing in the consumer app | Speaker on rental; the QR carries no charge for bank-account UPI | Next-day typical; confirm at onboarding | Support runs through the app, slow when a payment is disputed |
| BharatPe | Interoperable QR, soundbox, and lending built on your transaction history | Device rental; the commercial pitch is the credit line, not the QR | Next-day typical on the standard plan | Easy to drift into a loan you never shopped around for |
| Google Pay for Business | Merchant profile and QR, with a light business app | No hardware programme to match the soundbox players | Real time to the linked account | No audio confirmation device, so verification stays manual |
| Razorpay and other aggregators | Gateway plus UPI: payment links, subscriptions, AutoPay, refunds, reconciliation reports | 2% plus GST as a platform fee across modes, zero setup, no AMC | Standard cycle, with instant settlement priced as an add-on | You pay a platform fee even where network MDR is nil |
In short: if you take payments face to face, a bank current-account QR plus one soundbox covers you. If you sell online, take subscriptions or issue refunds often, an aggregator’s software earns its 2%.
What UPI costs a merchant, and where the exceptions hide
NPCI is explicit that a merchant accepting a UPI payment funded from a customer’s bank account pays no fee. That zero-MDR position covers the vast majority of counter transactions. Three exceptions matter.
- Prepaid wallet balances on UPI. When a customer pays from a PPI wallet rather than a bank account, an interchange applies above Rs 2,000, capped at 1.1% and varying by merchant category. It is collected in the network rather than billed to you, but it exists.
- RuPay credit card on UPI. NPCI’s October 2022 circular set nil MDR — no interchange, no PSP or app-provider charge — for small merchants on transactions of Rs 2,000 and below, with small merchants defined by an annual turnover threshold. Above Rs 2,000, normal credit-card interchange applies. If your average ticket is Rs 3,000, your cost of acceptance is no longer zero.
- Aggregator platform fees. Separate from MDR and charged by the gateway for its software. Zero MDR governs the network layer, not the gateway.
Pointing the other way, the Union Cabinet’s incentive scheme for low-value BHIM-UPI P2M transactions carried a Rs 1,500 crore outlay and paid 0.15% of transaction value on small-merchant transactions up to Rs 2,000. It was framed year by year, so check its current status; the benefit flows through acquiring banks and is not claimed directly by you.
Limits you will hit, and the ones you never will
The baseline UPI limit is Rs 1 lakh per transaction, with higher ceilings carved out for specific categories. From 15 September 2025, NPCI raised person-to-merchant limits for selected verified categories to Rs 5 lakh per transaction and a cumulative Rs 10 lakh a day, leaving person-to-person transfers at Rs 1 lakh. Two caveats stop this helping most shops: it applies to verified categories only, and your customer’s own bank and app set caps below the NPCI ceiling. For genuinely large tickets, ask for RTGS or NEFT.
Soundbox, UPI Lite and AutoPay: which add-ons pay for themselves
A soundbox announces the amount received out loud. Its real value is removing the phone-screen step where fraud lives: you are not squinting at a customer’s handset, you are hearing your own device confirm your own credit. Rent one for the busiest counter, not one per counter — the rental is monthly and forever.
UPI Lite is an on-device wallet for low-value payments that clears without a UPI PIN. Nothing is required of you as a merchant; it makes very small payments faster and less likely to fail at busy hours. Its ceilings have been revised upward more than once, so quote customers no figure rather than a stale one.
UPI AutoPay is the mandate rail, and the one growth lever here. If you sell anything recurring — a gym membership, a tiffin subscription, an annual maintenance contract — AutoPay collects it without chasing anyone. RBI’s framework relaxes the additional factor of authentication for e-mandates up to Rs 15,000 per transaction, raised to Rs 1,00,000 in December 2023 for mutual fund subscriptions, insurance premiums and credit-card bills. For a normal small business, Rs 15,000 per collection is the number that applies. AutoPay needs an aggregator, which is often the best reason to have one.
The scams aimed squarely at shopkeepers
Consumer UPI fraud gets the coverage. Merchant fraud is a different set of tricks, all exploiting one weakness: a busy counter where the shopkeeper trusts something other than his own credit confirmation. Each has a habit that defeats it.
The screenshot that never was
The customer shows a payment-success screen and walks out. It is edited, recycled from an old transaction, or generated by a look-alike app built for the purpose. The habit: never accept a customer’s screen as proof — only your soundbox announcement or your own bank’s SMS, app or balance. If you are looking at their phone, you are already doing it wrong.
The collect request dressed as a payment
A collect request is a demand for money, but the notification looks close enough to an incoming payment that people approve it. Fraudsters send one framed as a refund, an advance or an overpayment adjustment. The habit: you never enter a UPI PIN to receive money. Not for a refund, not for verification. If a screen asks for your PIN, money is leaving.
The QR that was swapped overnight
Your laminated QR is quietly replaced with the fraudster’s, often on an outside wall, and a day’s takings go elsewhere. The habit: scan your own QR with your own phone each morning and check the name that appears is yours, against the photo you took at setup. Fix it physically so it cannot be peeled and reapplied in seconds.
The soundbox that lied
An accomplice plays a recorded or app-generated payment announcement from a phone in their pocket while the customer walks out. The habit: keep the soundbox where you, not the customer, control it, and spot-check announced amounts against the app’s transaction list each shift. Any mismatch means the announcement was not yours.
The overpayment refund
Someone pays Rs 5,000 instead of Rs 500, apologises, and asks for the difference back immediately. The original payment is later reversed or was never credited; your refund was real. The habit: refund only against a confirmed credit in your own statement, never in the same minute, and always to the VPA that paid you.
If it goes wrong, the first hour is the whole game
Report financial cyber fraud on the National Cyber Crime Reporting Portal at cybercrime.gov.in, or call 1930, the toll-free national cyber crime helpline running 24×7. Behind it sits the Citizen Financial Cyber Fraud Reporting and Management System, which alerts the banks in the money’s path so funds can be held before withdrawal. Speed is the whole mechanism: once the money leaves the chain there is nothing to freeze. Call 1930 first, file the portal complaint immediately after, tell your bank in parallel, and keep the acknowledgement number.
Reconciliation habits that survive tax season
- One account, one purpose. Business receipts go to the current account, and a fixed monthly amount moves to your personal account as drawings. Never pay a household bill from the current account.
- Close the day against the statement, not the app. The bank statement is what the tax department sees. Match the day’s total to the credits and note any difference the same day.
- Export monthly, not annually. Download the current-account statement and the merchant app’s transaction report every month. Dashboards do not keep history forever, and the settlement report is what explains a batched credit matching no single sale.
- Tag the non-sales credits. A supplier refund, a loan disbursal or a personal transfer that landed in the wrong account is not turnover. Label them at the time; reconstructing it in June is guesswork.
If you use an aggregator, settlement is net of charges — one credit covers many sales minus fees. Your sales register will never match bank credits line for line, and that is fine, provided the settlement report reconciles the two.
Questions shopkeepers ask us
Can I keep using my personal UPI QR if I am small?
Up to a point, under the P2PM category — but NPCI caps cumulative monthly inward credit there at Rs 1,00,000 and requires formal merchant acquisition beyond it. Given the tax clarity a current account buys, move before the rule forces you to.
Is UPI genuinely free for me as a merchant?
For payments funded from a customer’s bank account, yes — NPCI confirms no merchant charge. Costs appear with prepaid wallet balances above Rs 2,000, with RuPay credit card on UPI above Rs 2,000, and with an aggregator’s platform fee, which is separate from MDR.
How fast will the money reach my account?
A QR linked directly to your bank current account credits in real time. Through a merchant app or aggregator, settlement is a cycle, commonly next-day, with faster settlement sold as a paid add-on. Confirm your own cycle in the dashboard.
A customer showed me a payment screenshot. Is that ever acceptable?
No. A screenshot proves nothing. Only a credit visible in your own bank account, app or soundbox is proof. This one rule prevents the most common merchant fraud in India.
Do I need GST registration just because I accept UPI?
Accepting UPI does not by itself trigger GST registration; turnover, the nature of your supply and your state determine that. What UPI does is create an auditable record of turnover, which is why the answer belongs with a chartered accountant who has seen your numbers.
Sources and how we check this
Rules here come from NPCI’s UPI circulars and product pages at npci.org.in, RBI’s e-mandate notification at rbi.org.in, and cybercrime.gov.in. Fees, rentals and settlement cycles are set by individual banks and PSPs and change without notice — verify yours in writing. See our about page and editorial standards.