Universal Payment Identification Code acts exactly like a US bank account number and protects sensitive banking information. The actual bank account number, including the bank's Routing Transit Number, are masked by the UPIC. Only credit transactions to an account can be initiated with a UPIC. All direct debits are blocked, which should mitigate unauthorized transactions to an account.