Google Pay (India)

Is Google Pay India safe?

Yes, for UPI payments it is among the safer choices, with the same limits as every UPI app. Your money stays in your bank until you pay, each payment needs your UPI PIN or your phone's biometrics, and the app warns about payments that look like scams. What holds the score back is how much data Google uses for ads and offers, the scale of UPI fraud, and a competition ruling against Google over the app. We score it 62/100, above PhonePe (59) and super.money (56), and below Google Wallet (70).

This page covers Google Pay in India, the UPI app listed as "Google Pay: UPI, Cards, Loans" on the App Store. It has more than a billion installs on Google Play. Google's tap-to-pay card app is a different product, scored on its own page.

How Google Pay India works

Google Pay in India is run by Google India Digital Services Private Limited, and it began life as Tez. Its terms describe it as a third-party app provider authorised by NPCI to process UPI payments through four sponsor banks: HDFC Bank, Axis Bank, ICICI Bank and State Bank of India. Your linked account stays with your own bank and keeps that bank's protections.

Payments need a UPI PIN set with your bank. You can also approve them with the fingerprint or face unlock already stored on your phone; the terms say biometric data is checked on the device and never reaches Google, the bank or NPCI. Beyond payments, the app shows credit cards, loans and digital gold from partners, each under the partner's own contract.

UPI Lite, the small on-device balance for quick payments, has a trap. The terms say a UPI Lite balance cannot be moved to a new phone. If you lose your phone or switch without disabling UPI Lite first, getting the money back depends on your bank's "best efforts".

What does Google Pay do with your data?

The labels disagree. Apple's App Store label shows no data used to track you across other companies' apps, but it lists purchases, financial information, location, identifiers and usage data as linked to you and used for third-party advertising, plus contacts and search history for personalisation. The Google Play data safety form says Google Pay shares nothing with third parties, yet lists payment information, purchase history, device IDs and app activity as collected for "advertising or marketing". SMS access is optional and, under the terms, used to read bank OTPs.

The India terms add a narrower promise. Your UPI transaction data "will not be used for any monetisation purpose (eg. for advertisements) by any entity other than" Google India Digital Services, and it is not shared with Google Ads to personalise ads. Some ads in the app do come through Google Ads. Everything else falls under the general Google Privacy Policy, which ties Google Pay to your wider Google Account. The global Google Payments Privacy Notice explicitly does not apply to Google Pay in India.

You can delete UPI transaction data and loan application data from your Google Account settings, though Google keeps what the law requires.

The CCI case over Google Pay

In October 2022 the Competition Commission of India fined Google ₹936.44 crore over its Play Store billing rules and ordered it to change course. Part of the finding concerned Google Pay: the CCI found that Google integrated its own UPI app with a smoother "intent flow" while rival UPI apps got a "collect flow", and ordered Google not to discriminate against them. Google told the CCI in August 2022 that it expected to move all UPI apps on Google Play to the intent flow within weeks.

On 28 March 2025 the National Company Law Appellate Tribunal upheld the finding that Google used its dominance in Android and app distribution to promote Google Pay, but threw out other parts of the order and cut the penalty to ₹216.69 crore. Google, the CCI and the Alliance of Digital India Foundation have all appealed to the Supreme Court, and we found no ruling yet.

The users harmed here were rival payment apps and app developers, not Google Pay users, so under our rules the case counts at half weight.

UPI scams on Google Pay

India recorded 12.64 lakh UPI fraud incidents worth ₹981 crore in 2024-25, and ₹805 crore in the first eight months of 2025-26, the Finance Ministry told Parliament. Google said in June 2025 that Google Pay had shown 4.1 crore warnings on payments it suspected were scams. Since 1 October 2025, NPCI has barred person-to-person "collect" requests, removing a classic trick in which a fake buyer asked you to enter your PIN to "receive" money.

What remains is social engineering that no warning fully stops: QR codes sent as "refunds", fake customer-care numbers that ask you to install screen-sharing apps, and edited payment screenshots shown to shopkeepers. UPI payments are instant and final.

How to use Google Pay safely

1. Never enter your UPI PIN to receive money, and never share it or an OTP.
2. Take scam warnings seriously; stop and call the person on a known number.
3. Disable UPI Lite before you change or reset your phone.
4. Keep a strong screen lock, since biometric approval relies on it.
5. Review ad personalisation and activity settings in your Google Account.
6. Report fraud at once on 1930 and to your bank.

How we scored it

Security (72) is Google Pay's strongest factor, for PIN and on-device biometric approval, four large sponsor banks and active scam warnings. Privacy (52) and scams (52) are the weakest: Google links financial and location data to you for ads, and UPI fraud is widespread. Regulatory record (70) reflects the CCI finding at half weight while appeals are pending.