Guides · Updated 16 July 2026
SIM, OTP & UPI: digital access your parents’ banks actually depend on
Indian banking is phone-shaped. Reset a netbanking password and the OTP lands on a SIM. Pay a hospital deposit and UPI asks for a device that may be at home with a parent who cannot unlock it. Adult children abroad often have photocopies of passbooks and zero clarity on which mobile number is still KYC-linked. Fix that map early.
The digital stack that quietly runs the household
You do not need every app password on day one. You need a dependency map: which SIM, which email, which UPI ID, and who can physically hold the phone.
- Primary mobile number for bank / demat / income-tax OTPs.
- Secondary number if parents use two SIMs (India + travel).
- Email inboxes that receive KYC and CAS — and who knows the password.
- UPI apps (GPay / PhonePe / bank app) and which VPA is printed on the chemist’s “usual.”
- DigiLocker / Aadhaar-linked mobile if they use it.
- Broadband / JioFiber / DTH account phones for “house still running” ops.
Failure modes NRI kids hit
- OTP SIM is with a parent in ICU; nobody else can complete a transfer.
- Number was ported; banks still send OTP to the old MSISDN.
- UPI PIN known only to one parent; spouse never set it up.
- Email for bank alerts is an old Yahoo account nobody opens.
- Family shares passwords on WhatsApp — then a phone is stolen.
What to write in the Life Map
Prefer operational facts over secrets. Where a secret is required, use vault encryption and unlock rules — not a sibling group chat.
- Label: “HDFC OTP → Mum’s Airtel ending 1234 (phone in bedside drawer).”
- Label: “SBI UPI on Papa’s Android; backup is sibling X in India.”
- Note device locations and screen-lock habits if relevant (“Face ID; sister knows passcode”).
- Do not store full netbanking passwords in plain notes if you can avoid it.
- Record recovery contacts at the bank (registered email / alternate number) if parents know them.
Security habits that match how HeirReady works
- Enable authenticator 2FA on HeirReady so a stolen login is not enough.
- Unusual device sign-in requires email confirmation.
- Vault encryption keeps account refs and notes as ciphertext on the server.
- Read /security for a plain-language split of what staff can and cannot see.
When incapacity or death starts
OTP and UPI access become part of a larger India execution path — death certificate, bank visits, nominee claims. Your digital map tells unlockers which phone to secure first so fraud and lockouts do not compound grief.
- Secure the OTP handset physically when possible.
- Use the vault checklist rather than inventing steps in a panic chat.
- Involve counsel when accounts are contested or large — optional on HeirReady.
Map OTP phones on a free Life Map
Not a will. Not a bank. Not a substitute for licensed legal advice.