Guides · Updated 16 July 2026

SIM, OTP & UPI: digital access your parents’ banks actually depend on

Indian banking is phone-shaped. Reset a netbanking password and the OTP lands on a SIM. Pay a hospital deposit and UPI asks for a device that may be at home with a parent who cannot unlock it. Adult children abroad often have photocopies of passbooks and zero clarity on which mobile number is still KYC-linked. Fix that map early.

The digital stack that quietly runs the household

You do not need every app password on day one. You need a dependency map: which SIM, which email, which UPI ID, and who can physically hold the phone.

  • Primary mobile number for bank / demat / income-tax OTPs.
  • Secondary number if parents use two SIMs (India + travel).
  • Email inboxes that receive KYC and CAS — and who knows the password.
  • UPI apps (GPay / PhonePe / bank app) and which VPA is printed on the chemist’s “usual.”
  • DigiLocker / Aadhaar-linked mobile if they use it.
  • Broadband / JioFiber / DTH account phones for “house still running” ops.

Failure modes NRI kids hit

  • OTP SIM is with a parent in ICU; nobody else can complete a transfer.
  • Number was ported; banks still send OTP to the old MSISDN.
  • UPI PIN known only to one parent; spouse never set it up.
  • Email for bank alerts is an old Yahoo account nobody opens.
  • Family shares passwords on WhatsApp — then a phone is stolen.

What to write in the Life Map

Prefer operational facts over secrets. Where a secret is required, use vault encryption and unlock rules — not a sibling group chat.

  • Label: “HDFC OTP → Mum’s Airtel ending 1234 (phone in bedside drawer).”
  • Label: “SBI UPI on Papa’s Android; backup is sibling X in India.”
  • Note device locations and screen-lock habits if relevant (“Face ID; sister knows passcode”).
  • Do not store full netbanking passwords in plain notes if you can avoid it.
  • Record recovery contacts at the bank (registered email / alternate number) if parents know them.

Security habits that match how HeirReady works

  • Enable authenticator 2FA on HeirReady so a stolen login is not enough.
  • Unusual device sign-in requires email confirmation.
  • Vault encryption keeps account refs and notes as ciphertext on the server.
  • Read /security for a plain-language split of what staff can and cannot see.

When incapacity or death starts

OTP and UPI access become part of a larger India execution path — death certificate, bank visits, nominee claims. Your digital map tells unlockers which phone to secure first so fraud and lockouts do not compound grief.

  • Secure the OTP handset physically when possible.
  • Use the vault checklist rather than inventing steps in a panic chat.
  • Involve counsel when accounts are contested or large — optional on HeirReady.

Map OTP phones on a free Life Map

Start free · See pricing

Not a will. Not a bank. Not a substitute for licensed legal advice.