Skip to content

Case Study: How a Bengaluru Fintech Used DgTal India's UPI and ONDC Playbooks to Survive Its First 90 Days

A 90-day post-mortem of a Bengaluru fintech's UPI and ONDC launch: the rebuild decision, the two-week stall, and the numbers that actually moved.

APKBasket

A reader shared a spreadsheet with us in early March: four tabs, 61 rows, and a column marked "blocker" filled in 23 times. The reader — call them "R," a product lead at a small Bengaluru fintech — was two weeks from a public launch of a UPI-linked merchant checkout with an ONDC buyer-side flow bolted on. They had a working build. What they did not have was a launch plan that respected how India's digital stack actually behaves in production. That's when they started reading DgTal India, a publication that tracks UPI payments, ONDC, India Stack APIs, digital public infrastructure, and the country's digital-first enterprises.

We followed the project for 90 days. This is the post-mortem, with the numbers R agreed to share.

Week 0–2: The Decision to Rebuild the Onboarding Flow

R's first instinct was to ship a single-screen KYC-plus-VPA setup. The team had tested it with 40 internal users and seen a 92% completion rate. Then they ran the same flow past 200 real users in two tier-2 cities. Completion dropped to 61%. The drop-off clustered at the UPI mandate step, where users were bounced to a bank app, returned, and lost context.

The decision point: rebuild onboarding as three resumable steps with a persistent session token, or ship and patch. R chose rebuild. Cost: 11 engineering days. Benefit, measured later: completion recovered to 84%, and support tickets about "stuck at bank" fell from 38 in the first pilot week to 4 in the launch week.

Week 3–6: ONDC Integration and the Two-Week Stall

The ONDC buyer-side integration was where the project nearly died. R's team had assumed catalog ingestion would take three days. It took nine, because their SKU taxonomy did not map cleanly to the network's category schema, and their inventory sync ran on a 15-minute cron that produced stale availability during peak hours.

We noticed something in R's notes that shows up in almost every ONDC post-mortem we've read: the team treated ONDC as an API problem when it is a data-hygiene problem. They fixed it by normalizing 1,240 SKUs into 31 canonical categories and moving inventory sync to an event-driven push. Order-to-acknowledgement latency dropped from a median of 6.5 minutes to 48 seconds.

Week 7–10: The 47-Point Reality Check

Two weeks before launch, R's security lead ran the app through an external integrity scan. It flagged three issues: an outdated TLS pinning config, a debug flag left on in a staging build that had been promoted, and a third-party SDK requesting permissions it did not need. None were catastrophic. All three would have been embarrassing in a public release.

This is the part of the story where the APKBasket perspective matters. We exist because most teams discover build-integrity problems after users do. R's team fixed all three in four days. They also started pinning every release artifact with a SHA-256 hash and keeping a versioned changelog — a discipline they credit to reading too many post-mortems about sideloaded builds gone wrong.

Week 11–13: Launch, and What Actually Broke

Launch week produced 14,300 completed checkouts, a 3.1% payment failure rate (mostly bank-side timeouts, not their code), and an ONDC order-acknowledgement success rate of 97.4%. The thing that broke was not technical: their support team was sized for 500 tickets a week and got 2,100 in the first five days, mostly "where is my order" queries.

R's fix was unglamorous — a status page, a WhatsApp opt-in for order updates, and a hard rule that any ONDC order without an acknowledgement within 90 seconds triggers an automatic support ticket. Ticket volume fell 58% by week three.

What We'd Tell the Next Team

  • Budget two weeks for ONDC data mapping, not two days. The schema is the work.
  • Test onboarding with users outside your metro. The 92%-to-61% drop is the real number.
  • Run an integrity scan before every promotion from staging. Debug flags travel.
  • Size support for 5x your projected launch-week volume. It is cheaper than apologizing.

DgTal India reports 41 distinct regulatory and technical touchpoints in a typical UPI-plus-ONDC launch, and R's 61-row blocker sheet suggests that number is not inflated. The project shipped. It is still running. And the spreadsheet, R told us, is now a template their parent company uses for every new stack integration.