UPI QR or payment gateway? Taking online payments on a small business website

“Can customers pay on the website?” is one of the first things owners ask us, usually right after “Can they book on WhatsApp?”. In India the answer almost always involves UPI. The real question is how: a QR code and UPI ID on your site, a payment link you send on WhatsApp, or a proper payment gateway at checkout.

This guide covers how each works for your customer, what it costs (including the new UPI merchant charge NPCI has announced), the paperwork, refunds and GST invoices, and the fake-screenshot problem every Kolkata shopkeeper has heard about. At the end, we match each option to common kinds of business.

The three ways to take payments online

• A UPI ID or QR code on your website. The customer scans it, or taps a “Pay by UPI” button, and pays from Google Pay, PhonePe, Paytm or their bank’s app. The money goes straight into your bank account.
• A payment link or payment page from a gateway provider. You create a link for an amount (say, a ₹1,500 advance for a bridal trial) and send it on WhatsApp or put it on your site. The customer pays by UPI, card or net banking on the provider’s secure page.
• A payment gateway checkout built into your website. The customer pays inside your booking or order flow, and the gateway tells your website the moment the payment succeeds.

All three can live on the same site. Many small businesses start with UPI, add payment links for advances, and only build a full checkout once online orders become a real part of the business.

How a UPI QR or UPI ID on your website works

On a computer, the customer scans the QR with their phone. On a phone, they can’t scan their own screen, so the page should also show your UPI ID with a copy button, or a “Pay by UPI” button that opens their UPI app with your details filled in.

Use a business (merchant) QR from your bank or a business payments app rather than your personal UPI ID. Customers see your business name instead of a person’s name, which builds trust, and you get payment reports and a soundbox that reads out each payment.

The catch is on your side. Nothing tells your website that a payment arrived. You find out from your bank app, an SMS or the soundbox, then match it to the right booking or order by hand. With five payments a day that’s fine. With fifty, it becomes somebody’s job.

Fake screenshots: the real risk with UPI on its own

The most common UPI trick played on small businesses isn’t hacking. It’s a convincing “Payment successful” screen, made with a fake payment app or an edited screenshot, sent on WhatsApp or shown at the counter. Some people even play a recorded payment sound from another phone.

• Treat a screenshot as a message, not as money. Confirm every payment in your own bank or UPI business app before you confirm the booking or send the order.
• Check the amount and the time, not just the green tick. If two payments look alike, match the UPI reference number.
• Never approve a “collect request” from a customer, and never enter your UPI PIN to receive money. A PIN is only needed to send money.
• Give staff one rule: no confirmation until the money shows in the account.

If you are cheated, call the national cyber crime helpline on 1930 or report it at cybercrime.gov.in, the government’s National Cyber Crime Reporting Portal, as soon as possible.

What it costs: UPI, gateway fees and the new UPI merchant charge

Here is the picture at the time of writing (October 2026). Fees and offers change often, so always check the provider’s own pricing page before you sign up.

UPI straight to your bank

Customers never pay a fee to pay by UPI, and person-to-person transfers stay free. For merchants, UPI has had zero MDR (merchant discount rate) for years, but that is changing. In September 2026 NPCI announced an MDR of 0.4% on person-to-merchant UPI payments above ₹2,000, capped at ₹300 for payments of ₹75,000 and above. Payments of ₹2,000 or less stay free, and NPCI says these make up more than 95% of merchant UPI transactions (NPCI FAQs on UPI MDR (opens in a new tab)).

• Small merchants stay at zero. NPCI’s P2PM category covers small vendors receiving up to ₹1 lakh a month through a UPI QR into their own account. Above ₹1 lakh a month for three months in a row, a merchant moves to the regular merchant category.
• You can’t add it to the bill. NPCI says merchants can’t pass the MDR on to customers.
• The start date has moved. It was due on 15 October 2026, but on 13 October NPCI said it will be implemented immediately after Diwali, on a date to be notified separately (NPCI press release (opens in a new tab)). Watch for that date and for notices from your bank or payments app.

Payment gateways

Gateways charge a percentage of every successful payment, deducted before the money reaches your account, with GST on top of the fee (Razorpay states 18%). These are the standard rates on their public pricing pages when we checked on 23 October 2026:

For a sense of scale: on ₹1 lakh a month of online payments, a 2% fee is ₹2,000, plus ₹360 GST. On a ₹500 consultation fee, it’s ₹10 plus GST. Whether that’s worth it depends on how much checking, chasing and risk it saves you. How gateways will reflect the new UPI MDR in their own pricing wasn’t clear when we checked.

Payment links: the easy middle ground

A payment link is a gateway without the website work. You create a link for an amount in the provider’s app or dashboard and share it on WhatsApp, SMS or email. The customer pays by UPI, card or net banking on a secure page, and you see it marked as paid. A payment page or button is the same idea placed permanently on your website, for a fixed consultation fee or a workshop deposit.

• Good for: advances for bookings, batch or workshop fees, custom orders, and anything priced case by case.
• Cost: Razorpay, Cashfree and PhonePe PG all include payment links at their normal gateway rate rather than as a separately priced product.
• The limit: a link doesn’t know about your booking calendar or stock, so you still connect each payment to its booking yourself. It’s just far easier when the provider shows the customer’s name, the amount and a reference.

Sign-up and KYC: what each option needs

• A business UPI QR from a bank or payments app needs basic KYC, usually your PAN, Aadhaar and bank details. It’s normally the quickest to set up.
• A payment gateway is a regulated payment aggregator (PhonePe describes its gateway as RBI-authorised), so it has to verify every business it signs up. Razorpay’s KYC document list (opens in a new tab), for example, asks an unregistered business for a PAN, address proof and bank details, and a sole proprietorship for two business documents (such as GST, Udyam or Shop & Establishment certificates) plus the owner’s PAN and address proof.
• Some trades need a licence on file. Razorpay lists a drug licence for pharmacies and FSSAI registration for food businesses, among others.
• Activation isn’t instant. Razorpay says activation is subject to approval from its banking partners, so leave a few working days.

Gateways used to insist on terms, refund and privacy pages before going live. Razorpay’s payments FAQs (opens in a new tab) now say these are no longer required at onboarding, and list new document rules from 1 January 2026. A clear refund and cancellation policy on your site is still worth having: it prevents arguments, and careful customers look for it before they pay.

Confirmations, refunds and GST invoices

Confirming payments. With UPI to your bank, you confirm each payment by hand. With a gateway checkout, the gateway notifies your website when a payment succeeds, so the site can confirm the booking, send a receipt or mark the order paid on its own. Once volume grows, that’s the biggest difference between the two.

Refunds and disputes. With UPI to your bank, a refund means sending the money back yourself and noting why. Gateways let you refund from the dashboard, and Razorpay says a normal refund reaches the customer within 5–7 working days (Razorpay refunds (opens in a new tab)). Card payments can also be disputed through the customer’s bank, called a chargeback. You can submit proof that the payment was fair, but if you lose, the amount is taken back from your account (Razorpay disputes (opens in a new tab)).

GST invoices. How you’re paid doesn’t change your GST position. If you’re registered, you issue a proper tax invoice whether the money came by cash, UPI or a gateway; a gateway’s payment receipt isn’t a substitute. Some gateways include an invoicing tool (Razorpay lists Invoices alongside Payment Links), or your billing software can handle it. The gateway also charges GST on its own fee, so ask your CA how to account for both.

Which option fits your business?

Clinic or diagnostic centre

Most patients pay at the counter. Online, the usual need is a consultation fee or an advance for a test package. A UPI QR on the booking confirmation works at low volume; move to payment links if no-shows are costing you slots. Our page on websites for clinics covers the rest of a clinic site.

Salon or spa

Walk-ins pay at the counter by UPI. For bridal and party bookings, a payment link for the advance is ideal: it carries the right amount, gives the customer a proper receipt and saves you checking screenshots on a busy Saturday.

Coaching centre or tutor

Monthly fees from the same families suit UPI to a business QR, with a simple fees register. When you collect admission fees for a new batch from many students at once, a payment page saves hours of matching payments to names.

Shop or boutique selling online

Once customers order and pay without talking to you first, you need a gateway checkout, ideally inside a proper store with stock, delivery charges and order emails. That’s an online store rather than a payment button; see ecommerce development.

Tiffin or home food service

Monthly plans and regular customers suit UPI, with a clear note on the site of the amount and what to write in the payment remark. Payment links help with one-off party or bulk orders, and if you apply for a gateway, keep your FSSAI registration handy. Our page on tiffin service websites covers menus, delivery areas and plans.

How payments fit into a WebNestle site

Every WebNestle plan includes WhatsApp chat and call buttons and an enquiry or booking form that sends to WhatsApp, and the Growth plan adds a booking or appointment system. Online payments, online stores and apps are quoted separately, because the right setup depends on your provider and how you sell. The gateway account is always opened in your name, and its fees are charged by the provider, not by us.

See our pricing for what each plan includes, read WhatsApp booking on your website if bookings matter more to you than payments, or send us a message describing how your customers pay today, and we’ll suggest the simplest setup that works.