The National Payments Corporation of India (NPCI) has announced a sweeping overhaul of UPI (Unified Payments Interface) API usage rules, set to take effect from August 1, 2025. These changes are aimed at enhancing system stability, improving transaction security, and managing increasing network load, especially during peak hours.
The new policies will apply uniformly across all banks and third-party UPI apps like PhonePe, Paytm, Google Pay, and others. While the new framework will improve backend efficiency, users may face certain operational restrictions in day-to-day usage.
💳 Balance Check Limit: 50 Times Per App Per Day
Under the revised API guidelines, users will be allowed to check their account balance only 50 times per day per UPI app. Those using multiple apps (e.g., PhonePe and Paytm) can check balances up to 100 times in total (50 on each).
Additionally, NPCI has directed banks to provide updated balances after every successful transaction, minimizing the need for repeated manual balance checks.
📊 Transaction Status Enquiry Only After 90 Seconds
The rules further introduce delays and limits on checking payment status. UPI apps will now be required to wait at least 90 seconds after initiating a transaction before making the first API call to check its status.
For any single transaction, a maximum of three status checks will be allowed within a two-hour window. Specific error codes will mandate that the transaction be declared failed, eliminating the need for repeated server requests and reducing load on the system.
🧾 Bank Account Listing Restricted to 25 Requests Per Day
Another key change involves access to account listings linked to the user’s mobile number. Now, UPI users can only request this information 25 times per day per app.
The request must be explicitly approved by the user after choosing their bank. Any failed attempt will also require fresh user consent for the next try.
📋 Strict Enforcement, Audit Requirements for Banks and PSPs
NPCI has made it mandatory for all banks and payment service providers (PSPs) to closely monitor API usage. Any violation of the new rules could result in:
-
Monetary penalties
-
Temporary suspension of features
-
Restrictions on onboarding new users
All PSPs must submit a System Audit Undertaking by August 31, 2025. Additionally, acquiring banks will need to get a third-party audit conducted annually by firms listed under CERT-In, with the first audit report also due by August 31.
🔐 Focus on Making UPI More Stable and Secure
NPCI has stated that these reforms are essential to optimize load handling, especially as UPI usage grows exponentially. The goal is to ensure faster, more reliable digital payment experiences while preventing system slowdowns during high-traffic hours.
Though users—especially frequent balance checkers or Autopay service users—may experience minor inconveniences, the long-term benefits of improved security and system uptime are expected to outweigh the restrictions.
📌 Summary of Key UPI Changes Effective August 1, 2025
| Feature | New Limit / Rule |
|---|---|
| Balance Check | Max 50 times per app per day |
| Transaction Status API | First call after 90 seconds; Max 3 attempts in 2 hours |
| Account List Fetch Requests | Max 25 times per app per day |
| System Audit Requirement | PSPs & acquiring banks to file audit reports by Aug 31 |
| Penalties for Violation | Financial penalty, usage suspension, onboarding freeze |
