Indian fintech platform CRED has launched biometric authentication as an alternative to PINs for Unified Payments Interface (UPI) transactions, allowing users to authorize payments up to Rs 5,000 using Face ID or fingerprint scanning.
The feature, developed in collaboration with the National Payments Corporation of India (NPCI), is available on both iOS and Android devices. CRED said it adds a stronger layer of protection against fraud through PIN exposure and reduces failed transactions caused by mistyped PINs.
The Reserve Bank of India mandates that all digital payments must be authenticated by at least two distinct factors. In UPI’s case, at least one factor must be dynamically created or proven, which opens the door for device-level biometric verification to qualify as a valid authentication method under the existing regulatory framework. The biometric check is performed on-device, meaning biometric data never leaves the user’s phone and is never transmitted to CRED or NPCI servers.
The rollout follows similar moves by PhonePe and NPCI’s BHIM app, which have already implemented biometric authentication for UPI users. Global card networks Mastercard and Visa are also introducing passkeys that allow users to authenticate payments with face scans or fingerprints, eliminating the need for one-time passwords. The convergence across competing platforms signals that knowledge-based authentication is giving way to device-bound biometrics across the broader payments industry.
Biometric authentication addresses several vulnerabilities in PIN-based systems, including forgotten PINs, repeated or weak patterns, and exposure to screen-mirroring malware attacks. CRED noted that the biometric option is particularly valuable in reducing transaction failure rates, a persistent friction point in digital payments adoption. Because the biometric check replaces the PIN entry step rather than adding to it, the user experience is faster as well as more secure.
India’s digital payments ecosystem processed more than 16 billion UPI transactions in February 2026 alone. At that volume, even marginal improvements in authentication reliability translate to meaningful gains for consumers, merchants, and the payment rails that connect them. India’s biometric identity infrastructure and its AI-ready digital identity stack have positioned the country as one of the more advanced markets for integrating biometrics into everyday financial services, and CRED’s launch reflects how deeply that infrastructure has matured at the consumer layer.
Sources: Business Standard, Economic Times
–
By Cass Kennedy
