Zero-Sum by Design: 10 Years of Uber’s Payments Platform

Summary

Uber’s Payments Platform, internally called Gulfstream, grew from a small 2016 microservices effort into infrastructure supporting $217 billion in annualized gross bookings, nearly twice that amount in total money movement, and ledger balances for more than 1.2 billion entities. It is built around immutable Money Orders, zero-sum double-entry accounting, strongly consistent ledger balances, and three core models: money orders, ledgers, and entity changelogs. Independent stateless services communicate primarily through Apache Kafka, while generic abstractions for lines of business and payment instruments let new products and methods plug into the platform; synchronous in-session flows use Cadence. As scale and audit requirements increased, Uber introduced Entity Fares, addressed hot ledger entities, and built LedgerStore for auditability and tamper-evident record-keeping, while also extending the ledger as a multi-tenant service.

Takeaways

1. 1

   Immutable Money Orders preserve an auditable record; adjustments are represented by additional money orders rather than modifying an existing order.

2. 2

   The ledger stores each entity’s sub-ledger accounts together in a DynamoDB row, prunes zero-balance accounts to control row size, and records balance updates in an entity changelog.

3. 3

   Generic line-of-business and payment-instrument abstractions allowed products such as Uber Freight and payment methods including PayPal, UPI, and Apple Pay to use the core platform with little to no core changes.