UPI Testing

Any installed UPI app

GN-009 Needs your identifiers

Any installed UPI app — Documented initiation metadata

No mode and orgid and sign set, so this is the same payload as the plain control.
Why
Profile P09 is defined by mode and orgid and sign, and neither your UPI profile nor this run supplies one — so comparing P09 against P01 would be comparing a method against itself and reading the noise as a finding. Set mode and orgid and sign on the profile first, or run P01 and know what you measured.
pa — A payment needs a payee address. Nothing can be launched without pa.
Missing orgid — values a bank, PSP or acquirer issues and the lab must never invent.
What would unblock it
Needs an orgid your PSP issued you, and — to be a genuine signed intent — a sign they generated. The lab will not create either. Until you supply them this method cannot run, because sending a made-up orgid tests nothing that exists.
Test GN-009

Scan with the phone you want to test.

Advanced details
upi://pay?pa=&tr=LABP5REYX9CGQG8&am=2.00&cu=INR
Launch
generic chooser
Scheme
upi://pay
Profile
P09 — P01 + mode + orgid (+ sign when supplied)
Platform
Android + iOS
Browser
Any browser that follows upi:// links.
Docs
NPCI UPI Linking Specification — upi:// deep link. (npci spec)
Reference
LABP5REYX9CGQG8
Registry
1.0.0

How an app treats a payload that declares an initiation mode and a signing organisation. Only meaningful with real values.

Expected

The OS offers the installed UPI apps; the one you pick opens on its payment screen. How an app treats a payload that declares an initiation mode and a signing organisation. Only meaningful with real values.

Limitations

  • This group is the ONLY one that is meaningfully runnable on an iPhone, and even there it depends on an installed app claiming the upi:// scheme.
  • Attribution is to whichever app the operator selected, which must be recorded with the result.

Prerequisites

  • A saved UPI profile.
  • Needs an orgid your PSP issued you, and — to be a genuine signed intent — a sign they generated. The lab will not create either. Until you supply them this method cannot run, because sending a made-up orgid tests nothing that exists.

How the lab runs it

An anchor whose href is upi://pay?… built from P09.