NPCI has ordered banks and payment service providers (PSPs) such as Google Pay, PhonePe and Paytm to control the 10 most widely used APIs by July 31, 2025. These new rules will be applicable from August 1, 2025 and affect the following services:

Limit to check the balance: Now users will be able to check the bank balance only 50 times a day on every UPI app (eg Phonpe, Google Pay). If you use two apps, you will be able to check the balance 50 times on each app.

Linked account check: You will be able to check the list of bank accounts connected to your mobile number 25 times a day, that too with the clear consent of the user.

Autope Mandet: Autope payments such as SIP, Netflix subscription will be only during non-non-time hours, i.e. before 10 am, 1 pm to 5 pm and 9:30 pm after 9:30 pm. There will be 1 attempt for each mandate and 3 again attempts.

Examination of the transaction status: Banks and apps will have to wait for at least 90 seconds after authentication to check the transaction status, and the situation can be investigated only 3 times in 2 hours.

Non-user API restrictions during peak hours: API requests launched by non-user will be banned during peak hours (from 10 am to 1 pm and 5 pm to 9:30 pm).

Why this change?

Along with the increasing popularity of UPI, the incidents of technical disturbances and misuse have also increased on the system. In particular, the balance checks and transaction status checks such as continuously put heavy loads on the API request system. The UPI system was disrupted due to excessive use of check transaction APIs in March and April 2025. NPCI aims to increase the stability and safety of the system through these new rules.

What will be its effect on users?

Limit of checking the remaining amount: If you check your remaining amount again and again, you may have to change your habit due to the limit of checking 50 times daily.

Changes in self-payment: Self-payment will be only during non-non-time hours, which can change your membership payment time.

Real time update: NPCI has clarified that despite these changes, users will continue to receive real -time balance updates.

Safety and stability: These rules will improve the stability and security of the system, which will reduce the chances of disruption.

Punishment for not following rules

NPCI has warned banks and PSPs that if they do not follow these rules, API ban, penalty or ban on inclusion of new customers can be taken. All PSPs will have to assure NPCI in writing by 31 August, 2025, that they have a system to queue up and fix the rate-limit.