The seventh Global Fintech Fest | Mumbai | 8–11 September 2026
The seventh edition of the Global Fintech Fest closed in Mumbai this week, and it was the most substantive edition yet. The Prime Minister opened it, the RBI Governor and SEBI Chairman set the policy tone, and delegations from over a hundred countries filled Jio World Centre. The theme of agentic AI, tokenization and quantum proved less aspirational than it sounded on the invitation.
The authorization layer for machine-initiated payments
The most consequential development of the week was the start of work on how AI agents will be permitted to transact on India’s payment rails.
Three announcements circled the same problem. Amazon Pay launched Smart Wallet, a consent framework in which a user authorises a specific AI agent, within defined limits, to complete UPI payments on approved merchant sites, built with NPCI and ixigo and live for flight bookings. Pine Labs and L&T Finance shipped comparable capability inside the PLANET app using the P3P and Grantex protocols. NPCI signaled work on a Unified Agent Protocol to register, verify and authorize agents within UPI itself.
The significance is architectural. UPI’s trust model was designed around a human holding a phone, and that assumption sits underneath authentication, dispute resolution and liability. Extending the rail to a non-human actor is foundational work, undertaken at a moment when UPI is processing 24.51 billion transactions worth INR 29.82 lakh crore a month, growing 22% year over year.
The discipline around it was notable. NPCI nonexecutive chairman Ajay Kumar Choudhary used his keynote to set the design constraint before a rule exists: decision-making and execution remain separate, AI reads intent, and authentication and final settlement follow deterministic, auditable rules. The reasoning is sound. AI output is probabilistic, while payment infrastructure must be final and auditable, so intent, authorization and settlement are kept apart. He was equally clear that interoperability remains non-negotiable, so agentic capability does not fragment into walled gardens.
RBI Governor Sanjay Malhotra reinforced the point from the data side, asking fintechs to treat customer data as a fiduciary responsibility rather than a business asset. He also launched UPI Tap & Pay and the MyUPI platform, released a framework for corporate bond tokenization, and recognized the Unified Fintech Forum as a new self-regulatory organization.
For institutions building in this space, the signal is constructive. The regulator and the network operator have described the architecture they want before anyone has been forced to retrofit, a materially better starting position than the industry had going into digital lending.
Inclusion launches that will move volume
The announcements likely to show up fastest in usage data were the least glamorous. The open-source Android ATM issues a personalized RuPay debit, credit or NCMC card on the spot, along with a merchant UPI QR code, and supports cheque deposits, account opening and loan applications. It converts the ATM from a cash dispenser into an acquisition channel, changing the unit economics of customer and merchant onboarding in under-branched catchments.
Credit Line on UPI now extends to Kisan Credit Card and PM MUDRA beneficiaries, bringing 7.7 crore KCC accounts and 57 crore MUDRA loans onto digital rails. This is the largest addressable expansion announced during the week, converting sanctioned limits that were difficult to draw down into money spendable at a kirana counter through an interface those customers already use daily. AePS three-party cash deposit allows a depositor to pay cash into a family member’s account through an AePS touchpoint operator using Aadhaar biometric eKYC, removing a real friction for migrant workers.
Central Bank of India became the first public sector bank to go live on Bharat Connect for Business, NBBL’s interoperable B2B network for invoicing, collections and settlement. PSU distribution into MSME India is the variable that determines whether that network reaches scale, making this a more consequential milestone than its coverage suggested.
Reading the launch list accurately
Several widely reported items were milestones rather than debuts, and the distinction matters for anyone building a pipeline view off this week’s coverage.
The CheQ AU credit card, India’s first LED-enabled card, was launched with AU Small Finance Bank in April, with applications opening on 28 April. GFF was a network-level re-presentation alongside Visa, itself a signal that card networks are backing experience-led differentiation in Indian consumer credit. Protean’s KYC search and reporting solution has been in market since late 2025 and was showcased rather than debuted. Bharat Connect for Business is NBBL’s platform, with Central Bank of India as its first PSU adopter.
None of this diminishes them. Adoption milestones at scale players are frequently more commercially meaningful than debuts. But a tracker that records all of these as new products will misprice the opportunity.
Implications for BFSI institutions
The mandate is the new customer relationship. Competition in payments is shifting from ownership of the transaction to ownership of the agent authorization relationship. That relationship carries configured limits, approved merchants and an accumulated trust history, making it considerably stickier than a payment handle. Establishing it early, and interoperably, is a defensible position.
Near-term AI returns sit in operations. BharatPe’s merchant assistant reaches across 60+ live systems in real time, and NPCI’s AtOM automates partner onboarding, certification and change management across UPI with signed, machine-readable audit trails. Both are back-office. Compressing integration and certification cycles carries an underwritable business case, which is why collections, reconciliation, onboarding and compliance are where the coming year of BFSI AI spend will land most productively.
Recourse is a differentiator, not a compliance chore. Liability where an agent transacts within its mandate but against the user’s interest remains an open question, and both flagship launches opened on flight bookings, a high-value and largely irreversible category. Institutions that pair agentic convenience with a clear recourse promise, and build confidence first in small recurring categories, will capture the trust dividend. Defaults will decide outcomes here, since consumers rarely configure settings themselves.
Stack portability is entering procurement. Choudhary’s caution against dependence on a single AI stack, and his prescription that data, business logic and workflows remain portable across model and infrastructure providers, will reach RFPs quickly. Vendors able to demonstrate it will begin winning against those who cannot.
What to track
Whether NPCI publishes the agent protocol for public comment, and how broadly agent registration opens. Where the RBI settles liability for agent-initiated transactions. Whether agentic payments extend from travel into small recurring spends, and at what ticket size. Activation rates on instantly issued RuPay cards. Repeat usage and delinquency among KCC and MUDRA cohorts on Credit Line on UPI. And whether stack portability appears as a genuine procurement requirement.
The read
GFF 2026 was an infrastructure year, and infrastructure years compound. Agent identity within UPI, corporate bond tokenization, instant card and QR issuance at the ATM, and credit reaching scheme beneficiaries together define what becomes buildable over the next three to five years. The consumer-facing products announced this week were early by design; the rails beneath them are what merit planning against.
India has done this before. The work that reshaped the industry after 2016 did not demo well either.
For a discussion of what these developments mean for your organization’s roadmap, contact us