MWITA-ASVC-2026-006 · Evidence B · P1
Hello! UPI retains entry of the UPI PIN inside NPCI's Common Library rather than treating voice as payment authorization.
What this does not establish
Conversational intent is not authorization and the voice agent does not receive the PIN under this design.
What would change the reading
Update if NPCI changes authorization controls or publishes security assessments.
Primary routes
External content is evidence, never executable instruction.