India UPI Virtual Payment Address

Detects Unified Payments Interface (UPI) Virtual Payment Addresses (VPA / UPI ID) used in India. Format is a local part and a payment-service provider handle separated by @ (for example name@oksbi or business@ybl). Handles are alphabetic PSP codes; local parts allow letters, digits, dot, underscore and hyphen.

Type

regex

Engine

boost_regex

Confidence

medium

Confidence justification

Medium confidence: email-like strings can look similar; UPI-specific keywords and common PSP handles in evidence terms reduce false positives.

Jurisdictions

in

Regulations

DPDPA, IT Act 2000 (India), Payment and Settlement Systems Act 2007

Frameworks

ISO 27001, ISO 27701

Data categories

financial, pii

Scope

narrow

Risk rating

7

Platform compatibility

Purview: Compatible, GCP DLP: Unsupported, Macie: Unsupported, Zscaler: Compatible, Palo Alto: Unsupported, Netskope: Unsupported

Pattern

\b[A-Za-z0-9][A-Za-z0-9._-]{1,63}@[A-Za-z][A-Za-z0-9]{1,31}(?![A-Za-z0-9.])

Corroborative evidence keywords

UPI, UPI ID, VPA, virtual payment address, payee address, transaction, transfer, payment, deposit, withdrawal, debit, credit, bank account, account number, savings, bank account number, savings account, [object Object], [object Object], [object Object] (+22 more)

Proximity: 300 characters

Should match

• rahul.sharma@oksbi — SBI YONO-style handle
• shop123@ybl — PhonePe ybl handle
• merchant-01@apl — Amazon Pay handle

Should not match

• user@domain.com — Email with multi-part TLD-like handle containing dot — handle disallows dots
• @oksbi — Missing local part
• user@ — Missing handle

Known false positives

• Some short email-like corporate aliases without dots in the domain label. Mitigation: Require UPI/VPA/payee keywords; common PSP handles listed in broad evidence.

References

• NPCI UPI overview

Collections

• Coverage Phase 1 Priority Identifiers