Banky team Reviewed editorial answerAccording to the official FAQ, InstaPay does not store your account balance or sensitive account data in a way that would allow it to execute transactions on its own; access and execution are handled through the banking infrastructure and with customer authentication.
Key points
In practice: Use only the official app, and never share your IPN, PIN, OTP, or card details with anyone.
If you notice any unfamiliar activity, immediately notify the bank associated with your account instead of simply deleting the app.
The figures, fees and limits in this answer vary by bank and change over time — confirm them with your bank or the official source before acting.