NPCI UPI Supervision Circular: API Rules and Deadlines
Why in the news
A root cause analysis of a UPI outage blamed excessive API calls, so NPCI issued a supervisory circular.
Key facts
| Item | Detail |
|---|---|
| Scope | 10 critical APIs (status check, balance enquiry, Autopay mandates, account verification) |
| Applies to | PSPs and acquiring banks |
| Implement by | 31 July 2025 |
| Audit | CERT-In empanelled auditor; submit by 31 August 2025; yearly |
| Peak hours | 10 AM-1 PM, 5:30-9:30 PM |
| Status-check API | After 45-60 seconds (earlier 90) |
- NPCI may impose rate limiters; some APIs run only in low-traffic windows.
- Non-compliance: API restrictions, penalties, onboarding suspension.
Exam angle
- Cause of outage: excess API calls.