Risk that the consumers run while making payment through UPI applications such as G-Pay, PayTm or PAyU–[1] Details such as names and sometimes mobile numbers can become visible to merchants [2] Of course, in most cases this is intended to facilitate transactions [3] However, in some cases, however, it also facilitiates unsolicited calls– [4] DPDP Act, 2023 attempts to address precisely such situations — it says personal data belongs to the Individual and not to merchants or to payment intermediaries–Courtesy article by Mr M Muneer –Courtesy BL