UPI system changes: New NPCI rules kick in from August 1 - All you need to know

Starting August 1, 2025, UPI will see changes as the National Payments Corporation of India (NPCI) has rolled out new performance-centric guidelines for the UPI ecosystem.The changes are aimed at improving system efficiency, preventing outages, and ensuring better user consent mechanisms.Payment Service Providers (PSPs), UPI apps, and banks must implement the changes by July 31, as per NPCI’s compliance notice dated May 21.

Cap on balance enquiries to prevent system overload

A major change includes a cap on balance enquiry requests, now limited to 50 per app per customer in a rolling 24-hour period, as per ET.These requests must be user-initiated only, with no automatic prompts by apps or systems. UPI apps must also introduce the ability to reduce or halt such requests during peak load hours to minimise system strain.The guidelines also require issuer banks to include the available account balance in every successful UPI transaction message, streamlining user experience and reducing the need for separate balance checks.

Limit on bank account access via “list account” API

NPCI has also put in place access limits on the “list account” API, which lets users view bank accounts linked to their mobile number. This API will now be restricted to 25 requests per customer per app per day, and only after the user selects their bank in the app.

Any retries must be made with explicit customer consent, ensuring transparency and avoiding unnecessary API calls.

Restrictions on UPI autopay transactions during peak hours

To further address system congestion, NPCI has restricted UPI Autopay executions to non-peak hours only. Peak hours are defined as 10:00 to 13:00 and 17:00 to 21:30.Each autopay mandate will be allowed one initial attempt and a maximum of three retries, clearly capped at four total executions per mandate sequence.

Industry reaction welcomes move towards efficiency

Welcoming the new rules, Tarun Nazare, co-founder and managing director of Neokred was quoted as saying by ET that “These measures are prudent and forward-thinking, as they prioritise system efficiency and user security. By capping balance requests and optimising API usage—especially with clear restrictions during peak hours—the guidelines will effectively reduce server overloads and potential service outages.

”He also highlighted the value of “emphasis on customer consent and timely compliance” in enhancing system accountability.

Deadline set for compliance; penalties for violations

The NPCI has clearly warned that failure to comply with these directives by July 31, 2025, may result in UPI API restrictions, penalties, suspension of new customer onboarding, or any other appropriate action.NPCI has advised all member banks and UPI ecosystem participants to communicate these changes across their systems and partners ahead of the compliance deadline.