Why your UPI app may soon restrict balance and account info requests

The corporation that manages the Unified Payments Interface (UPI) has issued fresh operational guidelines for apps to prevent system overloads and improve the reliability of the popular digital finance system.
The guidelines of the National Payments Corporation of India (NPCI) will be effective from August 1, 2025, and are aimed at controlling the volume and frequency of certain high-load API (Application Programming Interface) calls.
What it means for UPI users
NPCI has identified several non-financial API calls, such as balance enquiries, account listings, and mandate checks, as contributing factors to system slowdowns. To manage these more effectively, NPCI has prescribed the following restrictions:
Balance enquiry: Limited to 50 requests per app per customer in a 24-hour rolling window. Issuer banks must also include available balance in every successful UPI transaction message to reduce separate enquiries.
List of linked accounts: Limited to 25 times per app per customer per day. Each retry must be customer-initiated in case of failure.
Autopay mandates: Execution must happen outside peak hours (10 am to 1 pm and 5 pm to 9.30 pm). Only one attempt and up to three retries per mandate are allowed.
List of public keys and verified merchants: Payment services providers (PSP) may only request these once per day, and only during non-peak hours.
Transaction Status Checks: Must follow a staggered approach as per earlier guidelines issued by NPCI.
Focus on system discipline
NPCI has directed all PSP and acquiring banks to monitor and queue both customer-initiated and system-generated API traffic. Systems must not act as direct pass-throughs for backend requests, which can strain UPI's infrastructure.
Peak hours are now officially defined as 10 am to 1 pm and 5 pm to 9:30 pm. All non-essential, non-customer-initiated API calls must be restricted during these times.
Compliance deadline and audits
All UPI members must implement these rules by July 31, 2025. Additionally, banks are required to conduct immediate audits of their systems via Cert-in empanelled auditors, and share the findings with NPCI by August 31, 2025.

Try Our AI Features

Explore what Daily8 AI can do for you:

Learn with AIFact CheckingText to SpeechAI Summary

Related Articles

Time of India

35 minutes ago

• Time of India

Cybersecurity boost: Banks, RBI move to launch Digital Fraud Detection Platform amid soaring crimes - All you need to know

This is an AI-generated image, used for representational purposes only. In a concerted push to tackle the rising wave of digital payment frauds, major public and private sector banks are collaborating with the Reserve Bank of India (RBI) to develop a Digital Payment Intelligence Platform (DPIP), a new Digital Public Infrastructure aimed at enhancing fraud risk management As per the news agency PTI, the proposed platform will enable real-time intelligence sharing and data analysis to detect and prevent fraudulent digital transactions. According to sources, the RBI-led initiative is a top priority and is expected to go live in the coming months. The Reserve Bank Innovation Hub (RBIH) has been tasked with building a prototype of DPIP in consultation with 5–10 banks. 'Fraud is a common monster,' a source said, underlining why both public and private banks are being roped in to co-develop the platform. A high-level meeting was recently held to finalise its institutional structure, with participation from senior bank executives and RBI officials. The platform comes in response to a sharp spike in fraud cases. As per the RBI's latest annual report, bank frauds jumped nearly threefold to Rs 36,014 crore in FY25, compared to Rs 12,230 crore a year ago. Public sector banks reported Rs 25,667 crore worth of frauds—up from Rs 9,254 crore in FY24. While card and internet payment frauds dominated in the private sector, public sector banks faced large-scale fraud in their loan portfolios. by Taboola by Taboola Sponsored Links Sponsored Links Promoted Links Promoted Links You May Like Aparat de sudură cu laser de 9000 W (4 în 1) – o revoluție în sudură! Află mai multe Undo A few weeks ago, Airtel approached over 40 banks, RBI and NPCI, proposing collaboration to create a repository of known fraudulent domains to enable proactive blocking of rogue sites. The telecom major also highlighted risks posed by OTT messaging platforms, calling them the weakest link in fraud prevention due to lack of regulatory oversight. Airtel Vice Chairman and MD Gopal Vittal, in a letter to NPCI MD & CEO Dilip Asbe, proposed 'closer collaboration to create a repository of known fraudulent financial domains,' and favoured joint public awareness campaigns and technical cooperation to counter online scams. 'The external threat landscape is evolving rapidly. Systems like are useful, but still reactive,' Vittal wrote to the RBI, stressing that fraud must be stopped at the first step—when a user attempts to access a malicious site. The telco's proposal received positive responses from banks and the NPCI, sources said. Airtel has also sought to join forces with Jio and Vodafone Idea to initiate a joint industry-level defence against telecom-based scams. In the first nine months of 2024 alone, India reported over 1.7 million cybercrime complaints, resulting in losses exceeding Rs 11,000 crore. These figures underscore the urgency of building a coordinated, tech-driven ecosystem like DPIP to shield consumers and financial systems from the growing digital threat. Stay informed with the latest business news, updates on bank holidays and public holidays . AI Masterclass for Students. Upskill Young Ones Today!– Join Now

Economic Times

9 hours ago

• Economic Times

Retail Direct: RBI enables auto-bidding facility using NACH mandate for investing in T-Bills; Know how it will work

ET Online Retail Direct: RBI enables auto-bidding facility using NPCI NACH mandate for investing in T-Bills; Know how it will work The Reserve Bank of India (RBI) has enabled an auto-bidding facility for investing in treasury bills (T-bills) via both the RBI retail direct website and the app. This auto-bidding facility requires a valid NACH (National Automated Clearing House) mandate for executing the T-Bills order. With this additional facility, you can invest in T-bills by placing a conditional order that matches your requirements. It's similar to wanting to buy a stock at Rs 120 when the current market price is Rs 125. You would then put a conditional order saying that as soon as this stock's price drops to Rs 120, you will go ahead and buy it. The RBI said: 'This facility complements the existing manual bidding option, and allows you to set investment preferences, viz., T-bill tenor, bid amount, bidding frequency and validity period, by creating Auto-bid Rules that are executed automatically once the bidding window of the respective T-bill auction becomes active on the RD portal/App.' What are the key features of the auto-bidding facility? The RBI said that you should start by adding a bank account and setting up a NACH mandate. This way, when your conditional order (auto-bidding) is activated, the funds can be withdrawn from your bank account to complete the to the RBI, key features of the facility are: Auto-bidding is available only for T-bills and requires a valid NACH mandate. Types of Rules: 1. General Rule: Set the intended T-bill tenor, bid amount, bidding frequency, and period of rule validity. Bids will be auto-placed when the conditions are met. 2. Calendar Rule: Select specific T-bill auction/s from the Quarterly Calendar for Auction of T-bills and specify the bid amount. The rule is to be set before the commencement of bidding of the respective auction on the RD portal/App. The rules can be amended, paused or cancelled anytime. Auto-bid is funded through NACH mandate linked to your registered bank account in the Retail Direct. Sufficient balance in the registered bank account is needed for funding the Auto-bid. Email and SMS alerts are sent for Auto-bid Rule creation, amendment, cancellation, expiry, bid placement, etc. For T-bills investors, this auto-bidding feature means that they don't have to manually submit bids for T-Bills auctions. This can really cut down the time it takes to invest in T-Bills investment if the conditions of the conditional order are satisfied. Also read: Faster salary credit, SIP debit, EMI payment and more under new NACH 3.0 system by NPCI from July 2025, know more What are treasury bills? Treasury Bills (T-Bills) are money market instruments or short term debt instruments issued by the Government of India. At present, they are issued in three tenors -- 91 days, 182 days and 364 days. The Treasury Bills are zero coupon securities and pay no interest. Instead they are issued at a discount and redeemed at face value on example: a 91 day Treasury bill of Rs 100 (face value) may be issued at say Rs 98.2, that is, at a discount of Rs 1.9 and would be redeemed at the face value of Rs 100. The return to the investors is the difference between the maturity value or the face value (that is Rs 100) and the issue price). What are the day count conventions used in calculating bond yields? According to the RBI website, the day count convention is the method used to determine the holding period (in days) of a bond for calculating the accrued interest. Since using different day count conventions can lead to varying amounts of accrued interest, it is important for everyone in the market to follow a standard day count convention .For example, the conventions followed in the Indian market are as follows:Bond market: The day count convention followed is 30/360, which means that irrespective of the actual number of days in a month, the number of days in a month is taken as 30 and the number of days in a year is taken as market: The day count convention followed is actual/365, which means that the actual number of days in a month is taken for number of days (numerator) whereas the number of days in a year is taken as 365 days. Hence, in the case of T-Bills, which are essentially money market instruments, money market convention is followed.

Time of India

13 hours ago

• Time of India

KSRTC's Davanagere division records uptick in digital payments

Davanagere: The Karnataka State Road Transport Corporation ( KSRTC ) achieved notable success in digital payments, collecting Rs 10 crore in eight months through its Davanagere division. This achievement follows KSRTC's intensified promotion of UPI payments since Nov 2024. The organisation aims to collect Rs 1 crore daily through digital means, targeting 50% of all transactions. Passengers embraced the QR code payment system for bus fares, despite initial technical difficulties. The digital payment implementation resolved issues related to small change, enhancing the travel experience and reducing conflicts between passengers and conductors. The Davanagere division also introduced UPI payments via smart electronic ticket machines (ETMs) in Nov. Travellers now complete transactions using applications like PhonePe and Google Pay. Digital payments are more prevalent on long-distance routes with reliable network coverage. Inter-district and interstate services show higher digital transaction rates when compared to urban and rural routes. City passengers display less inclination towards UPI payments for smaller fares. by Taboola by Taboola Sponsored Links Sponsored Links Promoted Links Promoted Links You May Like Sanitize & Smooth Clothes Fast with Philips Steamer Philips Garment Steamers Shop Now Undo Premium service users typically book tickets online in advance. From Nov 2024 to June 15, 2025, the division collected Rs 11 crore via UPI across its three depots: Davanagere Depot-1, Davanagere Depot-2, and Harihar Depot. Monthly collections increased steadily: November (Rs 29.2 lakh), December 2024 (Rs 1 crore), January 2025 (Rs 1.3 crore), February (Rs 1.5 crore), March (Rs 1.6 crore), April (Rs 1.8 crore), May (Rs 1.9 crore), and June (Rs 1.9 crore). The division manages 404 buses with 490 ETMs, including backup units. Occasional technical issues led to payment deductions without ticket issuance, causing disputes. The refund system improved, with reimbursements now processed within 48 hours, reduced from one week previously. Passengers are showing a preference for digital payments, and if a ticket is not printed, the amount is credited to their account within 24 hours. We solved some technical issues, and we are expecting more digital payments in our division, said Kiran Kumar Basapur, KSRTC divisional controller, Davanagere.