As AI threat loomed, UPI players flagged rising security costs, Pg15

Key Highlights:

• Companies operating Unified Payments Interface (UPI) platforms have informed the government about a sharp increase in security costs.
• This rise is primarily attributed to emerging Artificial Intelligence (AI) systems, specifically citing threats from Anthropic's Mythos Preview.
• Industry estimates suggest security-related expenses already constitute over 20% of annual UPI platform spending.
• The increased security investment is being used as an argument by companies for the reintroduction of a Merchant Discount Rate (MDR) on UPI transactions.
• Finance Minister Nirmala Sitharaman previously held a high-level meeting to assess the risks posed by Mythos Preview to India's banking sector.

Detailed Insights:

• Anthropic's Mythos Preview is a restricted-access frontier AI model known for its advanced cybersecurity capabilities, including the ability to discover unknown software vulnerabilities and chain them into complex attacks.
• This AI model could significantly lower the cost and expertise required to mount sophisticated cyberattacks, posing a new layer of risk for digital payment systems.
• The Payments Council of India, a lobby group for UPI providers, has emphasized the need for sustained investment in security, resilience, innovation, and fraud prevention as transaction volumes grow.
• Merchant Discount Rate (MDR) is a fee paid by merchants to banks or payment providers for processing digital transactions, which has been zero for UPI since 2020 to encourage adoption.
• The reintroduction of MDR is being sought to ensure the sustainability and profitability of UPI infrastructure, allowing for necessary investments in advanced security measures.
• Security infrastructure costs for UPI are estimated at 10-20 paisa per transaction, with many cutting-edge security software and cloud services requiring payment in dollars.
• The government has indicated that if MDR is reintroduced, it would be nominal, threshold-based, and would not apply to all transactions, with person-to-person payments remaining free.
• The Indian Computer Emergency Response Team (CERT-In), the national nodal agency for cybersecurity incidents, plays a crucial role in enhancing the security of India's IT infrastructure, including the financial sector.

Key Concepts Involved:

• Unified Payments Interface (UPI): A real-time payment system developed by National Payments Corporation of India (NPCI), allowing instant fund transfers between bank accounts.
• Merchant Discount Rate (MDR): A fee charged to merchants by banks for processing digital transactions made through debit cards, credit cards, or UPI.
• Artificial Intelligence (AI): The simulation of human intelligence processes by machines, especially computer systems, for tasks like learning, problem-solving, and pattern recognition.
• Cybersecurity: The practice of protecting systems, networks, and programs from digital attacks, unauthorized access, damage, or data theft.
• Anthropic's Mythos Preview: A specific advanced AI model developed by Anthropic with demonstrated capabilities in identifying and exploiting software vulnerabilities.