UPI, Data Sovereignty and the Geopolitics Of Digital Interoperability

What happens when scanning a QR code becomes an act of geopolitics? When does a payment network cease to be merely financial infrastructure and become strategic infrastructure? Should interoperability always be treated as progress, or can excessive connectivity create new vulnerabilities? If data is the new strategic resource, who should be permitted to travel on the digital highways through which that data moves? And can India internationalize UPI without internationalizing its vulnerabilities?

These questions have suddenly become less theoretical.

India has stalled a proposal to connect the Unified Payments Interface (UPI) with Alipay+, the cross-border payment platform operated by Singapore-headquartered Ant International. According to Reuters, the proposal was submitted in January 2026 and was intended initially to allow Indians travelling overseas to use UPI across Alipay+'s merchant network in Asian markets. A subsequent phase could have enabled international Alipay+ users to transact in India. Indian authorities, however, raised concerns involving customer data, cyberfraud, money laundering and the platform's Chinese links. Reuters reported that political and national-security considerations also entered the government's assessment.

At first sight, this looks like a fintech story. It is actually a foreign-policy story disguised as a payments story. India's decision illustrates an emerging reality of the digital age: the infrastructure through which money, information and identity travel is increasingly inseparable from national power.

From ‘Payment System’ to ‘National Infrastructure’

UPI began with a deceptively simple objective: make moving money between Indian bank accounts almost instantaneous.

Launched in 2016, it created an interoperable architecture connecting banks, payment applications, consumers and merchants. Instead of requiring customers of one digital wallet to remain inside that company's ecosystem, UPI allowed different applications and banks to communicate through common payment rails. That design choice proved revolutionary.

By August 2026, UPI was processing approximately 24.51 billion transactions worth Rs.29.82 trillion in a single month. India's achievement is even more striking in global terms. RBI Governor Sanjay Malhotra noted in 2025 that India accounted for approximately 48.5% of global real-time payment transactions by volume.

UPI is therefore no longer simply another payment product. It is population-scale economic infrastructure. And infrastructure at this scale inevitably acquires strategic characteristics.

Railways once moved armies as well as passengers. Ports facilitated commerce but also projected naval power. Telecommunications networks connected citizens while becoming critical national-security assets.

Digital payment rails are following the same historical trajectory. The road carried goods. The telegraph carried information. The payment rail carries value. And whoever shapes the architecture through which value moves acquires influence over the economic system built around it.

India's Quiet ‘Export of Digital Power’

India has consequently begun exporting not merely software products but digital architecture. UPI acceptance has expanded through partnerships in countries including the UAE, Singapore, Bhutan, Nepal, Mauritius, France and Sri Lanka.

The India-Singapore UPI-PayNow linkage provides an especially important example. Operationalized in February 2023, it allows participating customers in the two countries to make near-instant cross-border person-to-person remittances. The RBI currently permits transactions of up to Rs.60,000 per day through the linkage for specified purposes.

India is also participating in the much more ambitious Project Nexus. Developed initially through the Bank for International Settlements Innovation Hub, Nexus proposes something strategically important: instead of countries constructing separate bilateral payment connections with every partner, participating instant-payment systems can connect through a standardized multilateral architecture.

In 2025, the central banks of India, Indonesia, Malaysia, the Philippines, Singapore and Thailand incorporated Nexus Global Payments to move the project toward live implementation. This is where payment diplomacy begins to resemble technological statecraft. A successful domestic standard first becomes a regional standard. A regional standard can eventually become an international standard. And standards create influence. The country that helps design the protocol often helps define the rules.

The ‘Interoperability Paradox’

Yet internationalization creates a paradox. The more valuable UPI becomes internationally, the more India needs interoperability. But the more interoperable it becomes, the more carefully India must examine whom it interoperates with.

Every payment connection potentially creates several flows simultaneously: money flows, data flows, identity flows, compliance obligations, cybersecurity exposure, and institutional dependencies.

The transaction visible to the consumer may take two seconds. The governance architecture behind those two seconds can involve banks, payment-service providers, foreign platforms, currency conversion, fraud monitoring, sanctions screening, AML compliance, dispute resolution and data processing across jurisdictions.

This is why the Alipay+ proposal deserves attention far beyond its immediate commercial implications. Reuters reported that Indian law-enforcement agencies raised concerns involving possible data breaches, money laundering and cyberfraud. Authorities also scrutinized where transaction information would be processed and the implications of Ant International's Chinese connections. These concerns do not automatically establish that the proposed linkage would have been unsafe.

Security policy should be evidence-based rather than driven merely by the nationality of a company. But neither would it be sensible to evaluate strategically important payment infrastructure using ordinary commercial criteria alone. A payment network can be commercially attractive and strategically undesirable at the same time. That is the central dilemma.

Data Is Part of the Payment

Consider what accompanies a digital payment. A transaction can potentially generate information about location, merchant category, purchasing patterns, transaction frequency, travel, financial relationships and behavioral habits. One transaction reveals little. Millions of transactions can reveal patterns. Billions can reveal systems.

Aggregated payment information can illuminate consumption behavior, commercial geography, tourism flows and economic relationships with extraordinary granularity.

This is why debates about data sovereignty cannot be separated from debates about payment sovereignty.

The traditional geopolitical question was: Who controls the territory? The digital geopolitical question increasingly becomes: Who controls the infrastructure through which the territory's data moves? There is a profound difference between protecting data by building walls around it and protecting data by designing trustworthy rules for its movement.

India cannot become a global digital power by pursuing digital autarky. UPI's very success rests upon interoperability. The IMF has highlighted precisely this feature as one of the reasons India's payment transformation has been so consequential. The objective therefore cannot be zero connectivity. It must be trusted connectivity.

Not All Interoperability Is ‘Equal’

This distinction should guide India's emerging digital diplomacy. A UPI linkage with another country's regulated national fast-payment system is structurally different from integration with a large commercial platform possessing its own ecosystem, governance architecture and geopolitical associations.

The India-Singapore arrangement connects UPI with PayNow under cooperation between the RBI and Monetary Authority of Singapore. Project Nexus goes further by attempting to create common governance and technical standards among participating central banks and payment-system operators. The BIS describes its objective as enabling cross-border payments through standardized interconnection rather than requiring bespoke bilateral integrations. This model suggests a useful principle for India: interoperability should expand in proportion to institutional trust.

Countries and networks should not necessarily receive identical levels of access merely because technical connectivity is possible. India could instead develop tiers of payment interoperability based on criteria such as data localization, reciprocal market access, cybersecurity standards, regulatory transparency, beneficial ownership, AML cooperation, dispute-resolution mechanisms and geopolitical risk.

The future architecture of international digital payments may therefore resemble an airport more than an open highway. Everyone need not be prohibited from entering.

But everyone does not pass through the same gate with the same level of scrutiny.

The China Question is Really a ‘Sovereignty Question’

The Alipay+ controversy will inevitably be interpreted through the India-China relationship. That interpretation is understandable but incomplete. Reuters described the proposal as the first major financial-services initiative involving a China-linked entity since the deterioration of bilateral relations following the 2020 border clash. The decision comes even as some restrictions affecting Chinese companies have gradually eased.

Yet India's long-term policy should not become "China-specific digital sovereignty." It should become platform-neutral strategic sovereignty. The same scrutiny applied to a Chinese-linked payment platform should, where relevant, apply to American, European, Middle Eastern or any other foreign platform seeking deep integration with India's critical digital infrastructure. Otherwise digital sovereignty becomes geopolitically selective rather than institutionally coherent.

The appropriate question is not: "Is this platform Chinese?" The better questions are: Where does the data travel? Who can access it? Which laws govern it? Who controls the intermediary? What happens during a diplomatic crisis? Can India disconnect safely? Who bears liability for fraud? What reciprocal access does India receive? Those questions turn political suspicion into a repeatable governance framework.

Payments Are Becoming ‘Instruments of Statecraft’

There is another reason India should think strategically. The international payment system has never been politically neutral. For decades, financial power has been associated not merely with currencies but with correspondent banking networks, clearing infrastructure, card networks and access to financial messaging systems.

Digital public infrastructure creates an opportunity for emerging economies to participate in the next generation of that architecture. India possesses an unusual advantage because UPI combines enormous domestic scale with relatively open interoperability. Its international expansion can consequently generate several forms of strategic capital simultaneously. 

It can reduce friction for Indian tourists, lower remittance costs, help Indian businesses transact internationally, deepen financial relationships with partner countries, and give India greater influence over emerging global standards for instant payments.

The opportunity is particularly important because India remains the world's largest recipient of personal remittances. RBI cited World Bank estimates of approximately $130 billion flowing into India in 2024. Reducing the cost and friction of those flows has tangible economic consequences for millions of households.

The stakes extend far beyond remittances. Reuters estimates the Asia-Pacific cross-border payments market could reach approximately $23.8 trillion by 2032, almost twice its 2024 size. The countries that construct the rails beneath that enormous flow of money will possess more than profitable infrastructure. They will possess strategic infrastructure.

From ‘Digital Public Infrastructure’ to ‘Digital Strategic Infrastructure’

India's original DPI story was largely developmental. Aadhaar addressed identity.

UPI addressed payments. Digital platforms helped expand access to government and financial services. The next phase will be geopolitical.

Once domestic digital infrastructure crosses national borders, decisions about APIs, protocols, cybersecurity, data governance and interoperability become foreign-policy decisions. 

India therefore needs something resembling a Digital Infrastructure Doctrine. Such a doctrine should distinguish between domestic openness and international access. It should establish minimum standards for cross-border integration involving critical digital infrastructure. It should require reciprocity rather than one-way market access. It should build technical mechanisms allowing connections to be isolated if cybersecurity or geopolitical conditions deteriorate. And it should make multilateral, rules-based interoperability the preferred route where feasible.

Project Nexus may be especially important for precisely this reason. Instead of allowing global payments to become a collection of competing corporate ecosystems, it offers the possibility of interoperable public payment infrastructures operating through agreed governance arrangements. That could become one of the defining contests of twenty-first-century finance: Will global digital payments be organized primarily around private platforms, or around interoperable public digital infrastructure? India has an opportunity to influence the answer.

Final Thoughts

The stalled Alipay+ linkage should therefore not be interpreted merely as India saying "no." Its greater significance lies in the question India is being forced to answer: What kind of "yes" should digital sovereignty permit?

India should internationalize UPI aggressively. Retreating behind digital borders would squander one of the country's most successful technological achievements. But internationalization cannot mean indiscriminate integration. The strategic objective must be maximum trusted interoperability with minimum strategic dependency. That principle may eventually matter far beyond payments.

AI systems will require cross-border data. Digital identities will require authentication across jurisdictions. CBDCs may require interoperability. Autonomous economic agents may soon transact across borders without humans authorizing every individual purchase. India is already preparing UPI architecture capable of supporting forms of agentic payments.

The boundary between technology policy, financial policy and foreign policy is consequently disappearing. So, the questions become larger. Should a country protect only its borders, or also its APIs? Can a nation remain strategically autonomous if the infrastructure carrying its citizens' money and data depends upon platforms it cannot ultimately govern? Should interoperability be treated as an engineering achievement, or as a privilege earned through institutional trust? And as UPI expands across the world, will India merely become a participant in somebody else's digital financial order?

Or can it help write the rules of the next one?

The humble QR code may look like a square of black pixels. Increasingly, behind it lies a map of geopolitical power.