Skip to content

NPCI UPI Supervision Circular: API Rules and Deadlines

23 May 20251 min read
BANKING & FINANCENPCI UPISupervisionCircular: API Rulesand Deadlines23 May 2025safalsetu.com

Why in the news

A root cause analysis of a UPI outage blamed excessive API calls, so NPCI issued a supervisory circular.

Key facts

ItemDetail
Scope10 critical APIs (status check, balance enquiry, Autopay mandates, account verification)
Applies toPSPs and acquiring banks
Implement by31 July 2025
AuditCERT-In empanelled auditor; submit by 31 August 2025; yearly
Peak hours10 AM-1 PM, 5:30-9:30 PM
Status-check APIAfter 45-60 seconds (earlier 90)
  • NPCI may impose rate limiters; some APIs run only in low-traffic windows.
  • Non-compliance: API restrictions, penalties, onboarding suspension.

Exam angle

  • Cause of outage: excess API calls.

Test yourself

1. What did NPCI's root cause analysis find to be behind the recent UPI core network stress?

Excessive API calls by banks stressed the core network.

2. By which date must PSPs and acquiring banks implement NPCI's new UPI API guidelines?

Implementation is due July 31, 2025; audits are due August 31.

3. Which type of auditor must conduct the annual UPI system audits under NPCI's circular?

Audits must be by a CERT-In empanelled auditor.