Confirm the receiving identity
Make sure the UPI ID belongs to an account you control and is appropriate for your business use. Scan a test QR and inspect the receiver name shown in the paying app. If the name surprises you, stop and check the account configuration before sharing a checkout with customers.
Prepare transaction visibility
Keep transaction history and any bank or merchant alerts accessible to the person responsible for reconciliation. Notification delivery can be delayed or fail, so treat an email or screenshot as supporting evidence rather than an infallible ledger. Protect any connection credentials using the method documented by the gateway.
Maintain a change log
Record who connected the account, when the receiving UPI ID changed, and which gateway orders were open at the time. When you rotate credentials or replace a merchant source, run a small end-to-end test. Avoid changing the receiving account mid-transaction without checking the impact on already-issued payment links.