Digital Vigilance: NPCI Rolls Out New UPI Safety Guidelines To Curb Fraud

The National Payments Corporation of India (NPCI) has issued a fresh set of guidelines aimed at enhancing the security of UPI and online transactions. With digital payments becoming ubiquitous, the move seeks to protect users from rising fraud risks and ensure a safer payment ecosystem.

Key Safety Measures Announced

- Always verify the recipient’s name before confirming a payment  
- Use only trusted and verified apps from official app stores; avoid third-party APKs or suspicious links  
- Never share your UPI PIN, OTP, or bank credentials with anyone, regardless of their claimed identity  
- Avoid rushing into payments, especially under pressure or urgency created by unknown callers  
- Enable SMS and app notifications for every transaction and review alerts regularly  

New Rules Effective From April 1, 2025

- UPI IDs linked to inactive or reassigned mobile numbers will be deactivated  
- Banks and payment apps must update mobile number records weekly using the Mobile Number Revocation List (MNRL)  
- Users must explicitly opt in for numeric UPI IDs; consent cannot be captured during transactions  
- The “Collect Payments” feature is now restricted to verified merchants, with a ₹2,000 cap for person-to-person requests  
- PSPs must report monthly on locally settled UPI numbers due to system delays  

Outlook

These measures reflect NPCI’s commitment to strengthening digital trust and reducing vulnerabilities in India’s fast-growing UPI ecosystem. Users are advised to keep their mobile numbers active and stay alert to avoid service disruptions or fraud.

Sources: Economic Times, ABP Live, Pune Pulse, Elets BFSI, NPCI Circulars, MyPunePulse, News18 Tech, BFSi Online, NPCI.org.in