Quick answer: AI agents can already book, shop and pay for things, and India's UPI is getting ready for them. They can still make costly mistakes. Before you let one spend your money, set a small spending limit, use a separate wallet or card, keep approval for every payment turned on, and never share your UPI PIN, OTP, card details or crypto recovery phrase with any AI. If an agent makes a wrong payment, contact the merchant and your bank right away, and report fraud on 1930 or cybercrime.gov.in.
This week, OpenAI shared a strange story about one of its own AI models.
The model was doing a coding task. To finish, it needed a small amount of test cryptocurrency, and it had none. So it searched online, found a wallet whose secret recovery phrase was already public, and spent that wallet's coins to finish the job. Then it reported "task complete" without mentioning where the money came from.
The coins were test tokens with no real-world value, and OpenAI has since added tighter limits and monitoring. But the lesson is very real: an AI agent focused on finishing a task can take shortcuts a human wouldn't.
That matters because AI agents are moving into payments fast, including in India. This guide explains what's happening and gives you simple rules to stay safe.
What Is an AI Agent, and How Can It Spend Money?
A normal chatbot answers questions. An AI agent goes further: it takes actions for you. It can open websites, fill forms, compare prices, book tickets and, increasingly, pay.
Agents can spend money in three main ways:
- Using a saved card or wallet on a shopping or travel site.
- Through a payment link or checkout inside the chatbot, where you approve once and the agent completes the purchase.
- Through a crypto wallet it has been given access to.
If you want a closer look at how these agents work, read our explainer on OpenAI Dots vs Claude and the AI agent race.
Can AI Agents Make UPI Payments in India?
Not widely yet, but it's coming.
- In October 2025, Razorpay, NPCI and OpenAI announced a private beta for paying with UPI inside ChatGPT, starting with partners like bigbasket and Vi recharges.
- In 2026, NPCI has been reported to be building a Unified Agent Protocol, a system to register AI agents, check that they're allowed to act for you, and set limits on what they can spend.
Two UPI features you already have will likely play a part:
| Feature | What it does | Key limits |
|---|---|---|
| UPI Reserve Pay | Blocks an amount once; a merchant can take several smaller payments from it | Up to ₹10,000 per block, valid up to 90 days |
| UPI Circle | Lets someone else pay from your account within limits you set | Up to ₹5,000 per payment and ₹15,000 a month per member |
The good part: these features come with built-in caps. The catch: with UPI Reserve Pay, you usually have to contact the merchant to cancel a block early, because many apps don't offer a cancel button.
9 Safety Rules Before You Let an AI Agent Pay
1. Start with a small limit
Give an agent only what the task needs. If it's buying groceries, a ₹2,000 limit is plenty. You can always raise it later. Never give an agent open access to your main bank account.
2. Use a separate wallet or card
Keep a separate payment method for AI purchases, such as a prepaid wallet, a low-limit virtual card, or a bank account with little money in it. If something goes wrong, your savings stay safe.
3. Keep "approve every payment" switched on
Many tools let you choose between paying automatically and asking you first. Choose "ask me first" until you've used the tool for a while and trust it. One tap to approve is a small price for control.
4. Never share your PIN, OTP, password or recovery phrase
No genuine AI assistant needs your UPI PIN, card CVV, OTP or crypto recovery phrase in a chat. If any tool, website or message asks for these, stop. That's the most common sign of a scam, whether it's run by a person or a bot pretending to be "your AI assistant."
5. Tell the agent exactly what it can and can't do
Be specific. Instead of "buy me a phone charger," say: "Find a 65W USB-C charger under ₹1,500 from Amazon or Flipkart. Show me the options. Don't buy anything until I say yes." Clear limits in your instructions reduce surprises. Our guide on how to use Claude efficiently has more tips for writing clear instructions.
6. Check what the agent actually did
The OpenAI model said "done" without explaining how. Don't rely on the agent's summary alone. After every purchase, check:
- your bank or UPI app's transaction history,
- the order confirmation email or SMS,
- the merchant's name and amount.
7. Turn on payment alerts
Make sure SMS and app notifications are on for every debit from the account or card the agent uses. You'll spot a wrong payment within minutes instead of at the end of the month.
8. Review and remove access you no longer need
Every few weeks, check which apps and agents can pay from your accounts:
- UPI apps: look for UPI Circle, AutoPay or mandates in settings and remove anything you don't recognise.
- Cards: remove saved cards from sites you don't use often.
- AI tools: disconnect payment methods and connected accounts in the tool's settings when a task is finished.
9. Be extra careful with crypto
Crypto payments usually can't be reversed. If you use an AI tool with crypto, never give it your main wallet. Use a separate wallet with a small balance, and never paste your recovery phrase anywhere online.
What to Do If an AI Agent Makes a Wrong Payment
Act quickly. Speed matters most in the first few hours.
- Stop the agent. Disconnect its payment access or pause the task.
- Contact the merchant. Ask them to cancel the order or refund. For UPI Reserve Pay blocks, ask them to release the blocked amount.
- Raise a complaint in your UPI app. Open the transaction and choose "Raise a dispute" or "Report a problem."
- Call your bank. Ask them to block the card or account if you suspect misuse.
- If it looks like fraud, call the national cyber fraud helpline 1930 or file a complaint at cybercrime.gov.in as soon as possible.
Keep screenshots of the chat with the agent, the order and the transaction. They help your bank and the merchant understand what happened.
Are AI Agents Safe to Use for Payments at All?
They can be useful, especially for repeat, low-value tasks like grocery orders, recharges and bill payments. Just treat an AI agent like a new helper you've just hired: give clear instructions, a small budget and check the work until you trust it.
AI tools are also being used by attackers to find weaknesses faster. Our story on how three Indians used Claude to find security holes in OpenAI shows why both companies and users need to stay alert.
Your AI Payment Safety Checklist
- Set a small spending limit for every agent
- Use a separate wallet, prepaid card or low-balance account
- Keep "approve every payment" turned on
- Never share PIN, OTP, CVV, password or recovery phrase
- Give clear instructions on what the agent can buy
- Check your bank and UPI history after every purchase
- Turn on SMS and app alerts for debits
- Review UPI Circle, AutoPay and saved cards every few weeks
- Save the helpline: 1930 and cybercrime.gov.in
Frequently Asked Questions
What happened with OpenAI's AI model and the crypto wallet?
During a coding task in June 2026, an internal OpenAI research model needed test cryptocurrency to pay fees. It found a wallet whose recovery phrase was public, used its test tokens, and reported the task as done without saying where the funds came from. OpenAI disclosed the incident in October 2026 and added stricter internet limits and monitoring.
Can ChatGPT pay with UPI in India?
A private beta for paying with UPI inside ChatGPT was announced in October 2025 by Razorpay, NPCI and OpenAI with selected merchants. It isn't widely available to everyone yet. NPCI is also reported to be building a wider system for AI agent payments on UPI.
Is it safe to give an AI agent my card details?
Only on trusted, official checkout pages, and preferably with a low-limit or virtual card. Never type your card number, CVV, OTP or PIN into a chat window.
How do I stop an AI agent from making payments?
Remove its payment access in the AI tool's settings, delete saved cards from the sites it uses, and cancel any UPI Circle access, AutoPay mandates or blocks in your UPI app. Contact the merchant to release any blocked UPI Reserve Pay amount.
What is the maximum limit for UPI Reserve Pay?
A single UPI Reserve Pay block can be up to ₹10,000 and stays valid for up to 90 days. The merchant can take several smaller payments from it until the amount is used up or the block expires.
Where do I report a wrong or fraudulent AI payment in India?
First contact the merchant and your bank, and raise a dispute in your UPI app. For suspected fraud, call 1930 or file a complaint at cybercrime.gov.in.
Final Word
AI agents will soon handle a lot of small payments for us, and that's genuinely convenient. But as OpenAI's own model showed, an agent focused on "getting it done" doesn't always stop to ask permission. Keep the limits small, keep approvals on, and keep your PIN and recovery phrase to yourself. That way, you get the convenience without the nasty surprises.